*.prd.sctv.ch

- Swisscom (Schweiz) AG -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 65:77:e1:5f:30:05:43:f4:05:b0:d4:54:e3:95:01:0c:48:80:09:1b was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Swisscom (Schweiz) AG

Organization: Swisscom (Schweiz) AG
State / Province: BE
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 65:77:e1:5f:30:05:43:f4:05:b0:d4:54:e3:95:01:0c:48:80:09:1b
Serial Number (int): 579281489186822723182884734410937920055630891291
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: b9:c0:0e:0c:18:6d:b9:da:be:5b:a3:82:7e:c6:3e:5a:52:14:8b:58
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): 03:4f:13:ee:81:b3:7d:f7:0e:a0:6c:a5:8d:0e:c3:a8:68:66:fb:76
Fingerprint (sha256): 36:2d:27:1e:54:e0:74:1f:26:4a:36:08:12:7b:ea:94:b0:60:fd:4c:b2:86:9c:00:8b:9e:94:8a:b8:e5:4f:ba

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate *.prd.sctv.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.prd.sctv.ch

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.prd.sctv.ch

Other certificates including the domain name sctv.ch

(limited to 100 certificates)
services.test01.etvt01.sctv.ch
krp.wingo.sctv.ch
services.sg105.prd.sctv.ch
services.sg104.prd.sctv.ch
services.sg102.prd.sctv.ch
services-ev.sta.sctv.ch
*.sta.sctv.ch
wls.vcas.prd.sctv.ch
services.dev02.etvt01.sctv.ch
services.sg107.prd.sctv.ch
services.sg1.int02.etvt01.sctv.ch
services.dev02.etvt01.sctv.ch
bluewin.dev.sctv.ch
services.sg109.prd.sctv.ch
services.test01.etvt01.sctv.ch
*.vcas.dev.sctv.ch
tvhd-cdn.sctv.ch
services.sg101.sta.sctv.ch
services.dev02.etvt01.sctv.ch
*.etvp01.sctv.ch
*.int01.etvt01.sctv.ch
services.sg102.sta.sctv.ch
test5-may-artur.sctv.ch
topic-search-dev.sctv.ch
tvhd-cdn.sctv.ch
services.dev02.etvt01.sctv.ch
*.vcas.prd.sctv.ch
*.vcas.sta.sctv.ch
*.int01.etvt01.sctv.ch
services.sg109.prd.sctv.ch
staging.lansec.sctv.ch
monitoring.sctv.ch
services.sg105.prd.sctv.ch
testartur4.dev.sctv.ch
notification.sctv.ch
ad.dev.sctv.ch
services.sg107.prd.sctv.ch
bitmovin.sctv.ch
tournament.sta.sctv.ch
test6.sctv.ch
bluewin.dev.sctv.ch
doc-tv-api-b2b.prd.sctv.ch
test6.sctv.ch
notification.wingo.sctv.ch
*.npvr.sta.sctv.ch
services.sg104.prd.sctv.ch
*.sctv.ch
lansec.sctv.ch
tvop-pcdn101.sctv.ch
voicesearch.etvs01.sctv.ch
staging.lansec.sctv.ch
ras.sctv.ch
services.sg102.sta.sctv.ch
bluewin.dev.sctv.ch
radio-api-b2b.sctv.ch
services.sg102.prd.sctv.ch
bluewin.dev.sctv.ch
voicesearch02.dev02.etvt01.sctv.ch
tvairlocal.dev.sctv.ch
lansec.sctv.ch
tv-cdn.sctv.ch
*.sctv.ch
gvab.sta.sctv.ch
services.sg1.dev02.etvt01.sctv.ch
fast.sctv.ch
*.wingo.winp01.sctv.ch
services.dev02.etvt01.sctv.ch
services.sg107.prd.sctv.ch
services.sg110.prd.sctv.ch
*.dev.sctv.ch
epg-b2b.prd.sctv.ch
bluewin.dev.sctv.ch
services.sg1.int02.etvt01.sctv.ch
services.etvp01.sctv.ch
tvos-pcdn101.sctv.ch
services.sg109.prd.sctv.ch
*.wingo.winp01.sctv.ch
services.sg1.etvs01.sctv.ch
services.sg110.prd.sctv.ch
services.int03.etvt01.sctv.ch
staging.lansec.sctv.ch
ad.dev.sctv.ch
*.sctv.ch
documentation.sctv.ch
services.sg108.prd.sctv.ch
mediacloud.sctv.ch
services.sg104.prd.sctv.ch
services.dev02.etvt01.sctv.ch
bluewin.dev.sctv.ch
awf-proxy-b2b.sta.sctv.ch
*.sctv.ch
services.sg107.prd.sctv.ch
staging.lansec.sctv.ch
services-ev.prd.sctv.ch
sn-jeannie-int.sctv.ch
bluewin.dev.sctv.ch
notification.wingoint01.sctv.ch
witbe.dev.sctv.ch
services.sg105.prd.sctv.ch
services.etvp01.sctv.ch

Certificate

The complete raw certificate details for *.prd.sctv.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 579281489186822723182884734410937920055630891291
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 15:02:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-14 15:02:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Swisscom (Schweiz) AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.prd.sctv.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5094376450515719078481225812807186817404668705266632808549465927536672456261822652665624194297507666819776448642062521083923362937564866131220825759059356321145432017339667210963016793803323155986647511546887421411836655571393717197223678755019256094856621521027980294154452729692335182674458494280274968634238642706885133511351244376310609378258774757424167636062245175364060053063832625528321849638746339703657037342785563732801646046543298862521437224368432322641711586432623107123118177020251434773767172850379986885523980453063003112181759598239491908946489551676320776172949621273643796447711907490933760140361641218772640326007826171854176180812067385532000785949419727662487680018037680980046898134594810498820325199033552754371615900001269433274752997737262947582187024350538443180724345440082361697762606256746912570483901016142767149657211239963478201340550107837070029169633795471280291980656162273000255215839677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prd.sctv.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9c00e0c186db9dabe5ba3827ec63e5a52148b58
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (600 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER asn1: structure error: integer not minimally-encoded
<nil>
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 84081675872555863464593399381444969527341723184484387122700089608732087075062
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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