www.justice.ge.ch

- République et canton de Genève -

Issued by WISeKey CertifyID SSL GB CA 2

About this certificate

This digital certificate with serial number 6b:34:87:72:6f:3b:6d:ef:ef:cd:5d:11:dc:bd:5c:e6:cb:d5:db:64 was issued on by WISeKey.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

République et canton de Genève

Organization: République et canton de Genève
State / Province: Geneve
Country: CH

WISeKey

Organization: WISeKey
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 6b:34:87:72:6f:3b:6d:ef:ef:cd:5d:11:dc:bd:5c:e6:cb:d5:db:64
Serial Number (int): 612033450327117920955760423639264498524406274916
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 6c:d8:49:7d:2d:15:41:57:5e:48:0c:fe:dc:d4:0c:8c:84:ee:04:f7
AuthorityKeyId: 5f:1b:c5:0a:7b:38:7d:3e:c3:b7:31:bf:a4:fb:14:23:52:e1:8d:1b

Fingerprint (sha1): 34:fb:2d:45:5b:3f:04:43:32:5f:47:9a:38:c1:89:65:c1:82:84:cd
Fingerprint (sha256): 33:af:23:a3:03:a3:82:41:2a:9a:c6:ef:bd:f4:9d:fd:9b:05:bb:eb:39:64:51:2d:1e:24:88:e8:fe:d0:6a:40

Issuing Certificate URL: http://public.wisekey.com/crt/wcidsslgbca2.cer

Revocation information

OCSP Server: http://ocsp.wisekey.com
CRL Distribution Point: http://public.wisekey.com/crl/wcidsslgbca2.crl

Check the revocation status for certificate www.justice.ge.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.justice.ge.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.justice.ge.ch

Other certificates including the domain name ge.ch

(limited to 100 certificates)
impuserlabo000-ms.ceti.etat-ge.ch
gc.ge.ch
contacts.ge.ch
testeaspolb2b.ge.ch
ge.ch
vcscgv2-1.ceti.etat-ge.ch
pol.b2b.ge.ch
cucmuser000-ms.ceti.etat-ge.ch
vcscnhp-1.ceti.etat-ge.ch
justice.ge.ch
test.b2b.ge.ch
testmobilepol.ge.ch
portailadmin.ge.ch
portail.ge.ch
survey.cdc.ge.ch
*.ge.ch
testservices.b2b.ge.ch
vpntest.ge.ch
www.etat.ge.ch
REPUBLIQUE ET CANTON DE GENEVE
epi.ge.ch
testservices.b2b.ge.ch
test.b2b.ge.ch
mobilepol.ge.ch
securebox.epi.ge.ch
imap.gc.ge.ch
appconpol02.ge.ch
ge.ch
pexip.ge.ch
recensement.app.ge.ch
vcsclabo-2.ceti.etat-ge.ch
jabberguest.ge.ch
vcselabo-1.ge.ch
epi.ge.ch
impuser000-ms.ceti.etat-ge.ch
padbleu.ge.ch
idp.ge.ch
dgsiemmensrec.ge.ch
cucmuserlabo000-ms.ceti.etat-ge.ch
padpolice.ge.ch
ssl829352.cloudflaressl.com
testeasadmb2b.ge.ch
ge.ch
pexipedge.ge.ch
vcsenhp-1.ge.ch
pol.b2b.ge.ch
jabberguest.ge.ch
ge.ch
test.b2b.ge.ch
justice-doc-ext.ge.ch
eas.gc.ge.ch
pjdeploy01.ceti.etat-ge.ch
vcselabo-2.ge.ch
webmail.gc.ge.ch
test.b2b.ge.ch
jabbergexpe002.ge.ch
testeasadmb2b.ge.ch
vcscnhp-1.ceti.etat-ge.ch
polmi.b2b.ge.ch
epi.ge.ch
appconsae01.ge.ch
epi.ge.ch
vcselabo-2.ge.ch
www.etat.ge.ch
easpolb2b.ge.ch
padjustice.ge.ch
sni.cloudflaressl.com
www.ge.ch
ssl829350.cloudflaressl.com
securebox.epi.ge.ch
annuaire.ge.ch
epi.ge.ch
*.ge.ch
epi.ge.ch
cucmuserlabo000-ms.ceti.etat-ge.ch
cucmuser000-ms.ceti.etat-ge.ch
survey.cdc.ge.ch
*.ge.ch
portailwifiedu.ge.ch
pocdme.etat.ge.ch
amendes.ge.ch
vcsclabo-2.ceti.etat-ge.ch
videogw.ge.ch
amendes.ge.ch
vpn.ge.ch
test.b2b.ge.ch
portail.ge.ch
vcselabo-1.ge.ch
*.app4.ge.ch
etoile.ge.ch
outlook.ge.ch
amendes-rec.ge.ch
testpolmi.b2b.ge.ch
mdmacore01.ge.ch
ge.ch
ldapedu.ge.ch
testmobilepol.ge.ch
*.epi.ge.ch
participer-rec.ge.ch
*.ge.ch

Certificate

The complete raw certificate details for www.justice.ge.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1u2zNLSVLtiTvIny3Pmh
/41THc0bj715yvTmQKgpweSfVwjFd+EptCphv1jvaR9/7eNsbAA4g9PcaAYAFQK+
jnYSqORAKQdOOdaoK13VqqJibpK7vZ0+4ITedNVuga0IylSZTikqRLIeKqJ31FyO
2f+K+T0omNVDNUnIKVTrePEECnZdSx9RxWWWCu03KuQkTRDgJTN7zYl8BEoVaYsS
OJSXrTAU7ebqfv3/NzTpzORyryT/JcRKaiP0tH7d6i4Ah7AgNlR7zPb1vpHy/wVD
2TLczASk4yf30swo7/792oHolG4fmZbbZSQTmdJxF4P/ly3UuijxMz1bclyPwraw
IdW1ZBAa4uqZJQtFcccsqUrzsPys9BONWo2i+xrX9Bobml+AdHHCngnrDfxcj62D
TPfYsgXgVgIgKJTPijXE30tSZLxldKVeEZpbOS66h569Bi/LTNgJL6BL0DJhWXlW
dyZDnvqHdMjaItMnbVtWbvRiGOOY/mlBOqITHpoStL2b/hzi629UQvCYi4gZePcz
8JK8wGU31Dh7ZS09CY20bm3Bhx4HKbljggcSCMzM0JdX5/D9KkMZHzGT4S9BvRIg
paZ4irIfhFEgJxiR2cuzYDa7PEPcDEf6r+6048Z+THU+QMGXgEd/CLkjfxFpAYJK
dCMyKOyijoEv1Bu7yagtsecCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 612033450327117920955760423639264498524406274916
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WISeKey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WISeKey CertifyID SSL GB CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-24 10:10:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-24 10:10:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Geneve'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'République et canton de Genève'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.justice.ge.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 876831844183964451189351471321511366460486338364101619036293008837299970580413608027712314582424623092663938164471597757366199932040434301300412605845638357799780754601304257743321132887897028566017609189365133486797430337460622419549193375475307292023600790483292576269326154890625725674683307155938461671812994823473421387437052970719099618701796516015878377510063975230061461189882576699844997385901408754765089606944939538423598390404475471319491753168484484341171841326094442012196321035350476514831060260958107062925022874015384385256167132411469638891076291196170299127446723759002962558095231518658130519445587106433170146398272231750365497198642055338160505669174023718447603874811678358182685706991131685111130869022057650358271864707057668555831384130267437783346606239919849365600646919264190192319413420326271391365457627942384619883726542759913266743431945694280791559793011708186849350963601665805363022636930694144284824060214701151606255341128958404899064224364159232861595039065570756808010469757041812305018049417956192476206175372236606734616882092184118614960730606511841498826858007936155934565835612417738295567784051455844993578887519039527635234331383557033238261346535405022887852012766703605115371490488807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f1bc50a7b387d3ec3b731bfa4fb142352e18d1b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://public.wisekey.com/crt/wcidsslgbca2.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.wisekey.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justice.ge.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.wisekey.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://public.wisekey.com/crl/wcidsslgbca2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6cd8497d2d1541575e480cfedcd40c8c84ee04f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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