geoportal.ebs.swiss

Issued by SwissSign Server Silver CA 2014 - G22

About this certificate

This digital certificate with serial number 5c:62:41:e2:16:3c:4c:d8:8e:a7:5e:5e:6a:88:cf:ca:50:1e:fa:98 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=geoportal.ebs.swiss

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:62:41:e2:16:3c:4c:d8:8e:a7:5e:5e:6a:88:cf:ca:50:1e:fa:98
Serial Number (int): 527418363177205838184786937544534008660733393560
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 00:85:f2:41:2a:af:8b:4f:c8:6f:a5:95:b5:00:3d:e6:db:c9:8b:e9
AuthorityKeyId: db:bc:bf:82:18:59:dc:69:fa:f8:ab:aa:83:4d:77:1d:0b:b0:8b:d8

Fingerprint (sha1): 97:06:f2:0b:ab:8b:5c:06:ed:29:cf:f0:fd:a2:84:5b:3a:80:c1:f7
Fingerprint (sha256): 33:ac:36:c9:64:f4:d0:ac:52:cd:f8:21:0b:ec:e4:10:eb:83:c4:91:4a:ce:74:1d:6f:c6:2f:4f:66:df:9c:0d

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8

Revocation information

OCSP Server: http://silver-server-g2.ocsp.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8
CRL Distribution Point: http://crl.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8
CRL Distribution Point: ldap://directory.swisssign.net/CN=DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate geoportal.ebs.swiss

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for geoportal.ebs.swiss

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

geoportal.ebs.swiss
www.geoportal.ebs.swiss

Other certificates including the domain name ebs.swiss

(limited to 100 certificates)

Certificate

The complete raw certificate details for geoportal.ebs.swiss in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/g6lEXNoqg2Ut7nE2Ug
x1Cbc7k/zdRznuN9inK4n2qKkewCeHSRaaG98ppwGmrAdfeMyrBU/XkhbQziVgPJ
c26Sz/8xtRpKxt3kvCARiwsDVXeht/ibJvrKQF6oVlYzn+/A+WzXfTFoIUKUs1MT
fUU6JH/ikzaRBXujQXlm4qLRGZALEJ3v/HVk4/nH9yIXWqpmTEDZo1v0oaqFygaE
Nyreaa6Xl3JJiXkvjGYIRJmwDmWyO7zudd+gQ41lmKfOO/z+joTm3fTAp/B+2VPu
mxEs/UuAPxIDibW4TL4yqtYgSNnJxLMksIHLgepuOneIXxdU5ebNfZBvwNpo+UO4
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 527418363177205838184786937544534008660733393560
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Silver CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-02 14:22:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-02 14:22:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'geoportal.ebs.swiss'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25748782103839748242154108714828842616644181380440133030426224549574716994711588835713145393933667679018978329666397185848496924893253411559884229908186620760992097049563674564916779512709442448475272013810364436174446841457373973184042286258850528958325066544696952218468539955080105961331155085360622148025347373296410698329830174291071387569161777163854841920511241409615457395495732371538066703701143412991832122420862461107898990636183969739508909985318977620595322059027489103186822397584252593154868882997166674414117773352038797088860956674845376743972583086590771016544153812875842684676514057948682439080021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geoportal.ebs.swiss'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geoportal.ebs.swiss'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0085f2412aaf8b4fc86fa595b5003de6dbc98be9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dbbcbf821859dc69faf8abaa834d771d0bb08bd8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.3.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Silver-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (202 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://silver-server-g2.ocsp.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002820279a2a2129a7fc6aaac153156bcacb4054a53ce8cc70ba6999cc68d7ce34580da607ce70757f8e40ed100387be52325dc4f1709dd37ab6b7902aa100ed77e826880832dd08f001a71e63b5b858bc63b716c70093b16b6c66c8d8d7e52123681bd02c632835738faf6f0fcfc2afa340ef351c8526e28c759dbcd2b3c4611a07f0664193d9d6a9dd6eb77fb5e87146e2995a1fe8cc3ff6bb6086173b30d7c59ec67e5fc1d186b8f9ec45f2da2e328c3d57eff690616164a0731f80569793cae1ebdd6fe8011c892576fab549e58e59b0811729b1697e46a1d66f0cd3218bcb2ab3af138d401a8dd43dd7a9204266afb81c852fe6a5aef1cf5a54f9ce8511af