vcse.snb.ch

- Schweizerische Nationalbank -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 67:21:12:b1:f5:ba:cc:4b:48:3c:60:f3:e1:e9:95:32:f5:5b:25:ac was issued on by SwissSign AG.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Schweizerische Nationalbank

Organization: Schweizerische Nationalbank
State / Province: ZH
Locality: Zurich
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 67:21:12:b1:f5:ba:cc:4b:48:3c:60:f3:e1:e9:95:32:f5:5b:25:ac
Serial Number (int): 588763602564163468009251284776950754441491588524
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 5c:84:77:52:2f:27:3e:76:52:36:19:7e:9b:6b:a4:ce:bd:f8:47:2d
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): 4e:4c:e2:07:4b:d3:40:05:fa:8c:22:8e:60:62:7b:27:f0:24:7e:9d
Fingerprint (sha256): 28:6f:11:b5:da:cd:d3:b9:7f:17:14:4c:14:5d:aa:6b:c8:45:c0:2a:66:38:cb:e3:8d:50:2a:cb:ef:12:36:31

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate vcse.snb.ch

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vcse.snb.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vcse.snb.ch
vcsexpress-be2.snb.ch
vcse-2.swissnationalbank.ch

Other certificates including the domain name snb.ch

(limited to 100 certificates)
remotemail.snb.ch
bbuem.snb.ch
mailb.snb.ch
ras.snb.ch
rastest.snb.ch
rastest.snb.ch
ras.snb.ch
ras.snb.ch
ras.snb.ch
surveys.snb.ch
rastest.snb.ch
rastest.snb.ch
sip3.snb.ch
mailz.snb.ch
bbuem.snb.ch
sip.snb.ch
mailz.snb.ch
rastest.snb.ch
ras.snb.ch
meet.snb.ch
datasharedev.snb.ch
vcse.snb.ch
ras.snb.ch
data.snb.ch
recruiting.snb.ch
ras-betest.snb.ch
rastest.snb.ch
ras.snb.ch
sip3.snb.ch
surveys.snb.ch
sip.snb.ch
ras.snb.ch
sip.snb.ch
ras.snb.ch
testgold.snb.ch
remotemail.snb.ch
testgold.snb.ch
sip3.snb.ch
vcse.snb.ch
ras2.snb.ch
wlanportal1.snb.ch
data.test.snb.ch
sip.snb.ch
vcse.snb.ch
testswiss.snb.ch
testgold.snb.ch
bbuem.snb.ch
data.snb.ch
surveys-usertest.snb.ch
wlanportal1.snb.ch
secmail.snb.ch
ras.snb.ch
surveys.snb.ch
wlanportal1.snb.ch
mailb.snb.ch
snb.ch
surveys.snb.ch
datashare.snb.ch
ras.snb.ch
alert.snb.ch
ras.snb.ch
data.snb.ch
secmail.snb.ch
sip2.snb.ch
rastest.snb.ch
secmail.snb.ch
rastest.snb.ch
sip3.snb.ch
remotez.snb.ch
snb.ch
testgold.snb.ch
testgold.snb.ch
datasharedev.snb.ch
vcse.snb.ch
bbuem.snb.ch
secmail.snb.ch
mailz.snb.ch
rastest.snb.ch
ras.snb.ch
ras.snb.ch
sip3.snb.ch
remote.snb.ch
vcse.snb.ch
securemail.snb.ch
ras.snb.ch
surveys.snb.ch
rastest.snb.ch
ras.snb.ch
testgold.snb.ch
webstats.snb.ch
securemail.snb.ch
surveys-usertest.snb.ch
snb.ch
careers.snb.ch
ras2.snb.ch
datasharedev.snb.ch
testgold.snb.ch
datasharedev.snb.ch
alert.snb.ch
snb.ch

Certificate

The complete raw certificate details for vcse.snb.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAscXa0MKCmGDrJ5p3AWba
uFJFy0dYYIMvxYOKqM/n7IgLH9A+75BQi+uWOpK1kwpw4+K4VS18sFeFCAIWTDhb
4YDOYVvnVZInfnD2p5Nk/hoSfZpyMn6ZU4JJW22Bctja2n3KmWbfDwHDA3/oaU1Q
FTdL6Tt3CKxAAiQzWmfsJFThzy221e3b8GoehkBWNSyOx5vzZQQtcv7H/jVByrxr
PZs86HxC+izjgzQIvm/EOJBl2Brqs/MuteL9au0GaFBhVevl/FbCRui8BUEikBrY
E8tKd4ioFOB31DYp83oUqI8ehMwSFdwEsLQMs8jvMyu0zIbylujHo+ShlKrKftTP
vFl/SJwUF+3NgPlE4k8cTTBC7D8lFHzsOUWUy4trH3QfLxk4IpQPtjDYvdOl0as8
rbsV7VpNgxoVlAJtbTOUQrfoL7mUX57qE3xdYK6M5L6eZtN+u+ZHUJxN8qAb7E4b
6DzGsOwOKM/FoftZAfYPdhoILiURW5GRLNqkBic/nhlBFTPq/qcQ3j4ItCqovaYT
inD5KBVDYOkcT97d6OabGoTJE7zGxYnQK7A7OT5Wgz446YI1kCZcingnHMplAzST
r/76Rh2px8yOf8OEPBhG248kz8rGgZcWvRVy/nYYK2wfX+t5kwlRBtxOW5jpyZfo
Xc8V+03k6mNe6BsewS64aPkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 588763602564163468009251284776950754441491588524
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-06 10:39:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-06 10:39:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ZH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Schweizerische Nationalbank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vcse.snb.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 725250034995378577469510556852637042230296457705103635573536787748529596059484977548761580430845609672883645019972732405691902983486141852272914608592308172104430871969018094221134077849964882704868510163216029960885240977468976441997982601687071815221141067549618628507892426340174314789583013726339373100613936392641229473539721670055988147678812573803183982051522860891224892599186644357041751922656725008580579557933777830656511602136468117923656002997305030999440849235370623787720726799510938974161180638295385238269132067614736153678956416266885929991310230474073283840639870882620624095297571418452723299260741192474462403944888293604125884309451555615360946733617072169756555141035507636226689565390653139876349401910544096761675482880183090643725058351846993172537483206547182978662178842118060705487751403585041727437820435723703827064642479951771976154480439289082436049842999945610318899689043249239091162646286313235013955285983333318238570126361354802884217771062094880883744001636718414868373488642010644376943987309497418475537202722029512553750969393093243920848743396019825288589018625394033609553942636391675154781699548000815820783624671602927477350323717665005494251497055140524285323494788397032467679346714873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcse.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcsexpress-be2.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcse-2.swissnationalbank.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c8477522f273e765236197e9b6ba4cebdf8472d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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