amendes.ge.ch

- République et canton de Genève -

Issued by WISeKey CertifyID SSL GB CA 2

About this certificate

This digital certificate with serial number 09:e5:af:32:cf:45:de:d7:2d:b0:17:44:af:3b:e9:ce:29:aa:27:7b was issued on by WISeKey.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

République et canton de Genève

Organization: République et canton de Genève
State / Province: Geneve
Country: CH

WISeKey

Organization: WISeKey
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 09:e5:af:32:cf:45:de:d7:2d:b0:17:44:af:3b:e9:ce:29:aa:27:7b
Serial Number (int): 56503049527547455861439453038532328018802255739
Serial Number lenght: 156 bits, 20 octets

SubjectKeyId: e7:be:48:5d:e8:92:a9:96:6a:9c:40:31:a0:4d:80:a8:de:b3:67:a0
AuthorityKeyId: 5f:1b:c5:0a:7b:38:7d:3e:c3:b7:31:bf:a4:fb:14:23:52:e1:8d:1b

Fingerprint (sha1): 3f:ed:f8:a6:07:44:b5:88:59:7a:29:8c:bd:93:63:4f:db:fc:3d:46
Fingerprint (sha256): 27:e6:a5:91:b7:98:98:ac:c9:1c:4e:39:2b:dd:33:2d:9f:df:c8:84:ce:1f:a2:8b:70:6e:07:22:7b:83:bb:26

Issuing Certificate URL: http://public.wisekey.com/crt/wcidsslgbca2.cer

Revocation information

OCSP Server: http://ocsp.wisekey.com
CRL Distribution Point: http://public.wisekey.com/crl/wcidsslgbca2.crl

Check the revocation status for certificate amendes.ge.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for amendes.ge.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amendes.ge.ch

Other certificates including the domain name ge.ch

(limited to 100 certificates)
impuserlabo000-ms.ceti.etat-ge.ch
gc.ge.ch
contacts.ge.ch
testeaspolb2b.ge.ch
ge.ch
vcscgv2-1.ceti.etat-ge.ch
pol.b2b.ge.ch
cucmuser000-ms.ceti.etat-ge.ch
vcscnhp-1.ceti.etat-ge.ch
justice.ge.ch
test.b2b.ge.ch
testmobilepol.ge.ch
portailadmin.ge.ch
portail.ge.ch
survey.cdc.ge.ch
*.ge.ch
testservices.b2b.ge.ch
vpntest.ge.ch
www.etat.ge.ch
REPUBLIQUE ET CANTON DE GENEVE
epi.ge.ch
testservices.b2b.ge.ch
test.b2b.ge.ch
mobilepol.ge.ch
securebox.epi.ge.ch
imap.gc.ge.ch
appconpol02.ge.ch
ge.ch
pexip.ge.ch
recensement.app.ge.ch
vcsclabo-2.ceti.etat-ge.ch
jabberguest.ge.ch
vcselabo-1.ge.ch
epi.ge.ch
impuser000-ms.ceti.etat-ge.ch
padbleu.ge.ch
idp.ge.ch
dgsiemmensrec.ge.ch
cucmuserlabo000-ms.ceti.etat-ge.ch
padpolice.ge.ch
ssl829352.cloudflaressl.com
testeasadmb2b.ge.ch
ge.ch
pexipedge.ge.ch
vcsenhp-1.ge.ch
pol.b2b.ge.ch
jabberguest.ge.ch
ge.ch
test.b2b.ge.ch
justice-doc-ext.ge.ch
eas.gc.ge.ch
pjdeploy01.ceti.etat-ge.ch
vcselabo-2.ge.ch
webmail.gc.ge.ch
test.b2b.ge.ch
jabbergexpe002.ge.ch
testeasadmb2b.ge.ch
vcscnhp-1.ceti.etat-ge.ch
polmi.b2b.ge.ch
epi.ge.ch
appconsae01.ge.ch
epi.ge.ch
vcselabo-2.ge.ch
www.etat.ge.ch
easpolb2b.ge.ch
padjustice.ge.ch
sni.cloudflaressl.com
www.ge.ch
ssl829350.cloudflaressl.com
securebox.epi.ge.ch
annuaire.ge.ch
epi.ge.ch
*.ge.ch
epi.ge.ch
cucmuserlabo000-ms.ceti.etat-ge.ch
cucmuser000-ms.ceti.etat-ge.ch
survey.cdc.ge.ch
*.ge.ch
portailwifiedu.ge.ch
pocdme.etat.ge.ch
amendes.ge.ch
vcsclabo-2.ceti.etat-ge.ch
videogw.ge.ch
amendes.ge.ch
vpn.ge.ch
test.b2b.ge.ch
portail.ge.ch
vcselabo-1.ge.ch
*.app4.ge.ch
etoile.ge.ch
outlook.ge.ch
amendes-rec.ge.ch
testpolmi.b2b.ge.ch
mdmacore01.ge.ch
ge.ch
ldapedu.ge.ch
testmobilepol.ge.ch
*.epi.ge.ch
participer-rec.ge.ch
*.ge.ch

Certificate

The complete raw certificate details for amendes.ge.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 56503049527547455861439453038532328018802255739
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WISeKey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WISeKey CertifyID SSL GB CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 15:35:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-01 15:35:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Geneve'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'République et canton de Genève'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'amendes.ge.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 731531245092562790686462064759219581074574275102895577619421023820867445711676431100584811436017042334742773979498573933637825237706887304332498183117543552723127404259055423375561349050800131101589071184686485340081443513744086346720681527114379391761513794038220262041726360175648131980940045142905927390967535225018459309282528105157362036711922875611833917711752259198581021492332305177956902534580900506913772734996403399683341665906117986883050044970326834862864091076301080539920599081659381753572981588088905371688935260764621367737996936322271450150034627651372779584139243840258952919520376959075707824155062260109995246639598391862064575650856479040200239360784593233497943252815055367661215776348625197664715196368767757922966351120279049434370825488691354904506942128430086306324932487432574545561897927487103857399787195148776234971893322861009544251733618003190292199487035637826703623278651103462291637112036757088248024699408076419391482590843503284135497374084572105816790446113426223086353857880612315065292959751149358763301832793301883265926841561244537682410999068122064877308097249837074241646331843616207274333347270623006916205586510996846176739738813263707996672943286132781489229213235394393614701003225943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f1bc50a7b387d3ec3b731bfa4fb142352e18d1b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://public.wisekey.com/crt/wcidsslgbca2.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.wisekey.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amendes.ge.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.wisekey.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://public.wisekey.com/crl/wcidsslgbca2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7be485de892a9966a9c4031a04d80a8deb367a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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