ge.ch

- Republique et Canton de Geneve -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 1f:fe:84:7c:fc:01:fd:1b:63:6b:59:8b:1b:58:3d:f5:c9:d1:1c:17 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Republique et Canton de Geneve

Organization: Republique et Canton de Geneve
State / Province: GE
Locality: Geneve
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:fe:84:7c:fc:01:fd:1b:63:6b:59:8b:1b:58:3d:f5:c9:d1:1c:17
Serial Number (int): 182654644527698074932320596915014741684212800535
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 8f:6b:13:5e:3d:47:c0:a7:b9:c0:cc:96:fb:3a:0c:82:b1:36:66:d6
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): e8:71:fe:c6:0d:f4:72:f7:29:76:aa:16:42:d0:03:22:d3:4b:27:e4
Fingerprint (sha256): 30:21:16:49:b8:e5:23:34:22:96:f6:bb:67:b4:d9:12:ff:90:4d:c1:d5:d2:c9:41:64:40:1e:48:d0:28:a6:70

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate ge.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ge.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ge.ch
www.ge.ch

Other certificates including the domain name ge.ch

(limited to 100 certificates)
impuserlabo000-ms.ceti.etat-ge.ch
gc.ge.ch
contacts.ge.ch
testeaspolb2b.ge.ch
ge.ch
vcscgv2-1.ceti.etat-ge.ch
pol.b2b.ge.ch
cucmuser000-ms.ceti.etat-ge.ch
vcscnhp-1.ceti.etat-ge.ch
justice.ge.ch
test.b2b.ge.ch
testmobilepol.ge.ch
portailadmin.ge.ch
portail.ge.ch
survey.cdc.ge.ch
*.ge.ch
testservices.b2b.ge.ch
vpntest.ge.ch
www.etat.ge.ch
REPUBLIQUE ET CANTON DE GENEVE
epi.ge.ch
testservices.b2b.ge.ch
test.b2b.ge.ch
mobilepol.ge.ch
securebox.epi.ge.ch
imap.gc.ge.ch
appconpol02.ge.ch
ge.ch
pexip.ge.ch
recensement.app.ge.ch
vcsclabo-2.ceti.etat-ge.ch
jabberguest.ge.ch
vcselabo-1.ge.ch
epi.ge.ch
impuser000-ms.ceti.etat-ge.ch
padbleu.ge.ch
idp.ge.ch
dgsiemmensrec.ge.ch
cucmuserlabo000-ms.ceti.etat-ge.ch
padpolice.ge.ch
ssl829352.cloudflaressl.com
testeasadmb2b.ge.ch
ge.ch
pexipedge.ge.ch
vcsenhp-1.ge.ch
pol.b2b.ge.ch
jabberguest.ge.ch
ge.ch
test.b2b.ge.ch
justice-doc-ext.ge.ch
eas.gc.ge.ch
pjdeploy01.ceti.etat-ge.ch
vcselabo-2.ge.ch
webmail.gc.ge.ch
test.b2b.ge.ch
jabbergexpe002.ge.ch
testeasadmb2b.ge.ch
vcscnhp-1.ceti.etat-ge.ch
polmi.b2b.ge.ch
epi.ge.ch
appconsae01.ge.ch
epi.ge.ch
vcselabo-2.ge.ch
www.etat.ge.ch
easpolb2b.ge.ch
padjustice.ge.ch
sni.cloudflaressl.com
www.ge.ch
ssl829350.cloudflaressl.com
securebox.epi.ge.ch
annuaire.ge.ch
epi.ge.ch
*.ge.ch
epi.ge.ch
cucmuserlabo000-ms.ceti.etat-ge.ch
cucmuser000-ms.ceti.etat-ge.ch
survey.cdc.ge.ch
*.ge.ch
portailwifiedu.ge.ch
pocdme.etat.ge.ch
amendes.ge.ch
vcsclabo-2.ceti.etat-ge.ch
videogw.ge.ch
amendes.ge.ch
vpn.ge.ch
test.b2b.ge.ch
portail.ge.ch
vcselabo-1.ge.ch
*.app4.ge.ch
etoile.ge.ch
outlook.ge.ch
amendes-rec.ge.ch
testpolmi.b2b.ge.ch
mdmacore01.ge.ch
ge.ch
ldapedu.ge.ch
testmobilepol.ge.ch
*.epi.ge.ch
participer-rec.ge.ch
*.ge.ch

Certificate

The complete raw certificate details for ge.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 182654644527698074932320596915014741684212800535
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-16 13:10:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-16 13:10:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Geneve'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Republique et Canton de Geneve'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ge.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796129245159586291000630467648030493161925133924382610509976863954623812041160165821141809368831761627837668124126970802632645691089519934136497434693122974252456966538370257053848020594937009502104414812804174334970810556515164412727266828739505190697207504523025896229619675489838231629129187299920004427963171275396940143552301395772126391757956037829012002066213570694829739458063643022239791917573635789135340224647746005476173032306170956909397440342332160954411851050110387892723655169212274907217461063955305111212410791334614530775508351230990350127939516460008400290141963797752285379036214171659750911980539650445134833801411356201726681909160308771298834882943311728636688430502509335828504855705558663272001854260168165137492208704047403714154828324809034011528294709416357143405568950013199385102312553310823367457429803082272577242621684010363362640920225692125678790027023961893923984282143578525199412061259516450955874229479840645216345402726428041958187995607150529014740364403095231605880649272380051079076251961057137407752876626052334394614599509694596229019219760143902465490460814420050981156094896043631332643863358793583377867285030157368222052832748505421948673765934373966872352962821135884852748061711351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f6b135e3d47c0a7b9c0cc96fb3a0c82b13666d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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