www.ebf.com

- EBF-EDV Beratung Föllmer GmbH -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 22:54:9b:80:78:8a:67:f0:3b:c5:e7:08:26:93:89:42:41:4e:28:5e was issued on by SwissSign AG.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

EBF-EDV Beratung Föllmer GmbH

Organization: EBF-EDV Beratung Föllmer GmbH
State / Province: NW
Locality: Köln
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 22:54:9b:80:78:8a:67:f0:3b:c5:e7:08:26:93:89:42:41:4e:28:5e
Serial Number (int): 195992494925375509468284197686029842280595990622
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: df:2c:ab:47:2f:5c:46:d9:a3:5b:81:7a:9d:74:bb:9c:87:e9:b4:09
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): ee:1d:8a:cb:7f:e0:ad:41:31:1a:bd:d0:8f:3c:df:39:33:eb:ee:68
Fingerprint (sha256): 37:01:e2:d3:e1:ab:13:56:b6:ab:c2:e7:b6:fe:96:77:a9:45:e5:13:73:05:d4:34:9e:ff:55:56:81:b6:5c:64

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate www.ebf.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ebf.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ebf.de
ebf.de
ebf.com
www.ebf.us
www.ebf.com
ebf.us

Other certificates including the domain name ebf.com

(limited to 100 certificates)
*.ebf.com
support.ebf.com
adfs.cloud.ebf.com
emm-cloud-sentry.ebf.com
emm-cloud-sentry.ebf.com
www.ebf.com
adfs.cloud.ebf.com
www.ebf.com
ebf.com
support.ebf.com
*.test4.ebf.com
m.ebf.com
support.ebf.com
*.vodafone.ebf.com
www.ebf.com
*.cdn.ebf.com
www.ebf.com
zm.ebf.com
*.unite-staging.ebf.com
*.unite-staging.ebf.com
www.ebf.com
support.ebf.com
www.partner.ebf.com
ebf.com
www.ebf.com
support.ebf.com
*.vodafone.ebf.com
www.ebf.com
www.ebf.com

Certificate

The complete raw certificate details for www.ebf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 195992494925375509468284197686029842280595990622
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 08:30:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-19 08:30:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Köln'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'EBF-EDV Beratung Föllmer GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ebf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798091831770268777039895309331953572274996829948560125678986309085946005125408597816289926114693735325004305036137648382837171837546284832926912519071971611526467460401992588368843936190266355331028209826947142981516803485656294128408423561520446912491976842523363754000747407029089037074176758444129694946637546546808871179777110382065040331360880002573601618267139774277400786985434311236919757523706222363606753654231077570287904275284582777556676037594046389188558631467053087128549568276924306266377042631124778411699509460179438343916712281301643504194642343011276494734278117591661697327616419768373884501324069989482553647050939223675394297556843178488998736470071110305669887573223882978250736087307762434188988269495098265984829825046751710432668976327399272841412325604139982709209548842964463746349520732722052955715737287310482880416836827533717039832995242671121064945848160361728036283122004879215950265913120915254108470367619607873583462950168101192315436139987420101060560214428564270423190809468852364172949267722264657496327602114048664074210903759809881020446134422223909381071268662621463667455121001561721784899629381659368490443827707765494165810460653302666643746099065860727997591070535767392064255108209247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebf.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df2cab472f5c46d9a35b817a9d74bb9c87e9b409
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		009583a2efdab4db631fe8b28e919769c75b7324b1fa319a056aeb64ee07eb2f3ddf8147019706ec401e7f5a50b65bdc6b17b3c2162ab9007ef655ef5d0ac3365b13bb1385dcdc299260e5115351430de48a42110bdda985887743b619607f66e2201498c8c3a4a95848b780e9f763330f82636854628b0e20ba617d0439376b0c092e525f9dcd111928f868824421b0550d9c752cbd0884fff9337b634ff6d35aaff392d322884e89b57c43d363d0432b4f6850f5d56613d7666a8566f685198cf36d3f2e2bed7fe39b030b62c661fd4cac4da6d396e46ac792a8f51958a94eec2608aee4d40b11d9937478d0111e9b399a074524e4d68f87b663ad1fc31650e35a9b1add7160954bd167f3797f73ef0125e06f41527058217bf3532600847a391227d14fc891f3117f888780d1d30f5a7363b6d3b8cf3a062849fd7e2f361ee51ac97f6dfded0e3ceb429a292a92bbcb42006cea16ae56b344fc1d081f720e3fca2b33cfa99f07ca300338fa1131ef4f32b3497c27423500fa113171ebdc316466545466d9e279795c52fdbe6b037ef639acbe9e4a77bbaf1a0b660c94677f0de41d44c84c5833fc6e3ce3fe15d4bc00e83bddb630ecf112980f53ab817174a1b39aaca3e24efe6667b551e82ce93f3f362fe1cbb1f86bf35bec1b7741625d4272cd84feb7300dd4400c5ed23f7c28b6323e6732d4ecfd11c55ba75813f53ca9