eas.gc.ge.ch

- République et canton de Genève -

Issued by WISeKey CertifyID SSL GB CA 2

About this certificate

This digital certificate with serial number 3b:22:a0:92:28:21:0e:47:4b:45:21:7a:d9:97:7e:2a:10:fe:f5:6c was issued on by WISeKey.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

République et canton de Genève

Organization: République et canton de Genève
State / Province: Geneve
Country: CH

WISeKey

Organization: WISeKey
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 3b:22:a0:92:28:21:0e:47:4b:45:21:7a:d9:97:7e:2a:10:fe:f5:6c
Serial Number (int): 337602668515671980443004052274441820539971368300
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: a8:e3:54:2c:14:52:ad:73:99:3e:90:14:21:b4:eb:5d:09:ab:43:d6
AuthorityKeyId: 5f:1b:c5:0a:7b:38:7d:3e:c3:b7:31:bf:a4:fb:14:23:52:e1:8d:1b

Fingerprint (sha1): 96:04:1e:9b:12:5d:b3:fd:8b:c9:7e:8c:5c:d4:2c:22:67:37:6f:42
Fingerprint (sha256): 33:c0:91:38:a7:cf:8d:f9:0b:98:84:23:1a:dd:93:d5:00:e9:9a:47:e5:64:e2:25:2d:d3:4a:10:dc:b9:a4:90

Issuing Certificate URL: http://public.wisekey.com/crt/wcidsslgbca2.cer

Revocation information

OCSP Server: http://ocsp.wisekey.com
CRL Distribution Point: http://public.wisekey.com/crl/wcidsslgbca2.crl

Check the revocation status for certificate eas.gc.ge.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eas.gc.ge.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eas.gc.ge.ch

Other certificates including the domain name ge.ch

(limited to 100 certificates)
impuserlabo000-ms.ceti.etat-ge.ch
gc.ge.ch
contacts.ge.ch
testeaspolb2b.ge.ch
ge.ch
vcscgv2-1.ceti.etat-ge.ch
pol.b2b.ge.ch
cucmuser000-ms.ceti.etat-ge.ch
vcscnhp-1.ceti.etat-ge.ch
justice.ge.ch
test.b2b.ge.ch
testmobilepol.ge.ch
portailadmin.ge.ch
portail.ge.ch
survey.cdc.ge.ch
*.ge.ch
testservices.b2b.ge.ch
vpntest.ge.ch
www.etat.ge.ch
REPUBLIQUE ET CANTON DE GENEVE
epi.ge.ch
testservices.b2b.ge.ch
test.b2b.ge.ch
mobilepol.ge.ch
securebox.epi.ge.ch
imap.gc.ge.ch
appconpol02.ge.ch
ge.ch
pexip.ge.ch
recensement.app.ge.ch
vcsclabo-2.ceti.etat-ge.ch
jabberguest.ge.ch
vcselabo-1.ge.ch
epi.ge.ch
impuser000-ms.ceti.etat-ge.ch
padbleu.ge.ch
idp.ge.ch
dgsiemmensrec.ge.ch
cucmuserlabo000-ms.ceti.etat-ge.ch
padpolice.ge.ch
ssl829352.cloudflaressl.com
testeasadmb2b.ge.ch
ge.ch
pexipedge.ge.ch
vcsenhp-1.ge.ch
pol.b2b.ge.ch
jabberguest.ge.ch
ge.ch
test.b2b.ge.ch
justice-doc-ext.ge.ch
eas.gc.ge.ch
pjdeploy01.ceti.etat-ge.ch
vcselabo-2.ge.ch
webmail.gc.ge.ch
test.b2b.ge.ch
jabbergexpe002.ge.ch
testeasadmb2b.ge.ch
vcscnhp-1.ceti.etat-ge.ch
polmi.b2b.ge.ch
epi.ge.ch
appconsae01.ge.ch
epi.ge.ch
vcselabo-2.ge.ch
www.etat.ge.ch
easpolb2b.ge.ch
padjustice.ge.ch
sni.cloudflaressl.com
www.ge.ch
ssl829350.cloudflaressl.com
securebox.epi.ge.ch
annuaire.ge.ch
epi.ge.ch
*.ge.ch
epi.ge.ch
cucmuserlabo000-ms.ceti.etat-ge.ch
cucmuser000-ms.ceti.etat-ge.ch
survey.cdc.ge.ch
*.ge.ch
portailwifiedu.ge.ch
pocdme.etat.ge.ch
amendes.ge.ch
vcsclabo-2.ceti.etat-ge.ch
videogw.ge.ch
amendes.ge.ch
vpn.ge.ch
test.b2b.ge.ch
portail.ge.ch
vcselabo-1.ge.ch
*.app4.ge.ch
etoile.ge.ch
outlook.ge.ch
amendes-rec.ge.ch
testpolmi.b2b.ge.ch
mdmacore01.ge.ch
ge.ch
ldapedu.ge.ch
testmobilepol.ge.ch
*.epi.ge.ch
participer-rec.ge.ch
*.ge.ch

Certificate

The complete raw certificate details for eas.gc.ge.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337602668515671980443004052274441820539971368300
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WISeKey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WISeKey CertifyID SSL GB CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 08:50:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-15 08:50:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Geneve'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'République et canton de Genève'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'eas.gc.ge.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 736542969642599223593062550300437995354365829524851547794100385209026120960587395868738965496158794637551663355521807742288695694434339112270745686876959356238448178030542803638003779016298441941127302340459791713322564095669202606958746418424684111323768025049765670050822058534342802643262126720187849099653919333634967265053055874070212088958806489709823909388726202375086027926649852537624450713666550958568747148115317662757149447252521332235094409317425737133290452224347285545487893077240513401448431760563041964105143192130549260023332956940630012861920850532767848154256917427941879996411799280991836313433590022596291483080116730317123680781565393139239270473994417285187917398156536379835115689196662664579622263609670266304942199010800495103231376683877340412496425188138469333390052196863476521708019599957084316109230089483149892205455160653462491832497352006708288310965526554271242008467491268176676117074664091564531729945241566699593468928362746838089932782362501207434418430150322713048589509036626964993819155848707666262496223119599911130051434055368065308540697134945606937893735967265188817702867614674843579888778006913451793148534385892056619864116558582621916045569504788468246252766422656164714654769094243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f1bc50a7b387d3ec3b731bfa4fb142352e18d1b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://public.wisekey.com/crt/wcidsslgbca2.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.wisekey.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eas.gc.ge.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.wisekey.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://public.wisekey.com/crl/wcidsslgbca2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8e3542c1452ad73993e901421b4eb5d09ab43d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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