eroeffnung-test.ukb.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 4c:62:65:22:cf:a5:e8:7e:62:bd:ef:8d:dc:d4:ec:10:9f:87:c5:13 was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=eroeffnung-test.ukb.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 4c:62:65:22:cf:a5:e8:7e:62:bd:ef:8d:dc:d4:ec:10:9f:87:c5:13
Serial Number (int): 436077581798559027647880007311484860114972165395
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 5b:60:12:de:0f:f3:24:7a:73:de:14:17:bf:84:b6:c7:91:2a:e3:cc
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 16:0a:38:f2:38:f3:53:f9:89:f8:b0:91:80:36:4d:a7:d0:83:11:32
Fingerprint (sha256): 36:f0:f6:2a:11:4b:c9:a2:94:1b:66:19:a1:13:8d:b4:75:5e:23:ca:d7:05:e7:a6:c9:3b:cf:7f:cd:e8:68:a4

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate eroeffnung-test.ukb.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eroeffnung-test.ukb.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eroeffnung-test.ukb.ch

Other certificates including the domain name ukb.ch

(limited to 100 certificates)
www.ukb.ch
fintest-wwwsec.ukb.ch
gast.ukb.ch
fintest-dev-wwwsec.ukb.ch
www.privasphere.com
twint-test.ukb.ch
www.ukb.ch
fintest-e-banking.ukb.ch
ukb00ncs104-e.ukb.ch
satellite-test.ukb.ch
gast.ukb.ch
twint-test.ukb.ch
fintest-e-banking.ukb.ch
dialog.sbb.ch
www.privasphere.com
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ot.ukb.ch
ssl.ukb.ch
ot.ukb.ch
ukb00ucc114.ukb.ch
securemail.ukb.ch
eroeffnung-test.ukb.ch
satellite.ukb.ch
www.privasphere.com
ukb00ncs106-e.ukb.ch
securemail.ukb.ch
www.privasphere.com
gast.ukb.ch
www.ukb.ch
autodiscover.ukb.ch
ot.ukb.ch
autodiscover.ukb.ch
eroeffnung-test.ukb.ch
dialog.sbb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-e-banking.ukb.ch
www.privasphere.com
www.ukb.ch
wwwsec.ukb.ch
www.ukb.ch
ssl.ukb.ch
ukb00ncs104-e.ukb.ch
gast.ukb.ch
wwwsec.ukb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
eroeffnung.ukb.ch
wwwsec.ukb.ch
wwwsec.urkb.ch
ukb00ucc114.ukb.ch
twint.ukb.ch
www.privasphere.com
www.ukb.ch
identifikation-test.ukb.ch
twint-test.ukb.ch
www.privasphere.com
dialog.sbb.ch
gast.ukb.ch
dialog.sbb.ch
ukbhb01mx01-e.urkb.ch
ukb00ucc114.ukb.ch
fintest-dev-wwwsec.ukb.ch
ssl.ukb.ch
satellite-test.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-wwwsec.ukb.ch
wwwsec.ukb.ch
www.privasphere.com
ssl.ukb.ch
autodiscover.ukb.ch
www.ukb.ch
gast.ukb.ch
ukbhb01mx01-e.urkb.ch
identifikation-test.ukb.ch
autodiscover.ukb.ch
fintest-e-banking.ukb.ch
twint.ukb.ch
wwwsec.ukb.ch
ukbhb01mx01-e.urkb.ch
zukunftsbild.ukb.ch
zukunftsbild.ukb.ch
eroeffnung.ukb.ch
www.ukb.ch
fintest-wwwsec.ukb.ch
ukb00ucc114.ukb.ch
ssl.ukb.ch
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ukb00ncs106-e.ukb.ch
ukb00ucc114.ukb.ch
ukb00ncs106-e.ukb.ch
www.privasphere.com
satellite.ukb.ch
ukb00ncs104-e.ukb.ch
ukbhb01mx01-e.urkb.ch
fintest-wwwsec.ukb.ch
www.ukb.ch

Certificate

The complete raw certificate details for eroeffnung-test.ukb.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxBDrXLJFCb1nRkh5a9l
5gb+JurBTOniUAiKXx2tTsDABUBdjE+X++7i21c2cfvWNTgTubZAqPeyCcFTIoFk
mIm204Cnjtx/F/ozqvR7lBb4XPZdjhAE/LjQKzF0bmweLuzMCUgBJpHdPQmfrMGj
w7VRxX01+QrmiqwvOs3LV1+SG06iF0ax0ZPyKW6PfP/tImu/GEl9LzkzP8pYucS+
r5FPP80/PxVnIfZw4qk9B03UvcFlhmBjOFR0aWqG1hw7MBpmmkI1m7r2LTAxFbSQ
wxc7gfIrl4AJZ1j7E1AIo/I34FLM69RF1Yi0jCdLuVm1KxaOpkTJI7GeRXv3TgEp
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 436077581798559027647880007311484860114972165395
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 09:58:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-08 09:58:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eroeffnung-test.ukb.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23109630066267945442665826644439298276925027383760376585312703822505244794545868936047460564012378903961677404367141689964459106296926783909319738737277441227155003856545080597254600164264787648198662450139684485317163521873041465382662584198282969547111376830956598897261053059389480896128194610523895516844952449976088805619470214643892393307201208269353600557570765124307202584936998431145401219491994464394163682836758335895099066755280799941473613815275585375013202500525571544853019054986952996528797505617415311635543683905229768301181206628041693192280789374432272305755535955991683065799273308312884595468591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eroeffnung-test.ukb.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b6012de0ff3247a73de1417bf84b6c7912ae3cc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00480809f8803e00a796502a2911850dd604949321e9604c56bd2870c1e4a460c3c3c434f827fc93582ec1d7935ba8fbca70d89246a963d8781628320026fbd47e744fc582f02b2b6198654c7a7576b93ac17e71b06217b046503977325e3295831e8118e8aff7794e07145401925980cd2901281b513eed38cdab428c9aeb8840e6f4cf38240c511be07d4f2657a9b6d41f2e559ebbb85594a548cd7cbca3d019b09e658e6a7e56bfff70aa1bac7d9bb27c0ea19328dc2ad40f6defdfe88c35a085a22a64cb67e36e24549ebbb3f5c9c3a887ac1ee831fc163ac58aac12fc2f0faeaee74383d0fcdfddc623294400414ec05bd5e30f961c9052c69093506e0954573f516988e6b67a85c9b20f30ae6d2b376145546d55548852c2fbda7afb1416e414e76a788ddc74de520e01f3e07835772a93d039b00e696f172b4efbd57199de561ba8e9339f9e2a65e3a4c077b7668988636ac087666afcc7e6639166aff8ba58cd00b3524c0e6cbf6c6df39fb9da1170ef8968cbcf6c19f5f3630ef9b42d58174f356c61184f5e15013093121c01fcfd79d9e39cba03bb91272237bda26aa4143dc4990a5df3e8215570d3116a2e9f2dcc16c3edf3b3eab0fec2ed90be684e92ec955df76331f7c570c47bf57435f15fbd98c41d1322bb893e4f4bc28f60f86fb4da8c9014afb4d1911839a77cf17e5e30dbfe060f9d4ccdc4adf401b1dd