events.empa.ch

Issued by SwissSign RSA TLS DV ICA 2021 - 1

About this certificate

This digital certificate with serial number 78:7b:3c:20:09:3e:1a:5d:c8:6f:7d:f7:3b:65:af:ef:5e:b9:c7:2a was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=events.empa.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 78:7b:3c:20:09:3e:1a:5d:c8:6f:7d:f7:3b:65:af:ef:5e:b9:c7:2a
Serial Number (int): 687827121796757165779409785471050979807086626602
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: f7:97:d5:38:aa:3e:11:f5:f5:9d:0f:98:8b:b7:66:e2:72:ec:c4:09
AuthorityKeyId: 3c:9e:52:79:03:63:6f:4f:9c:81:1b:d3:28:70:0c:24:5a:ea:a5:87

Fingerprint (sha1): 87:fb:58:c8:36:de:f1:24:10:a7:f6:87:b1:87:19:3a:39:4e:21:2f
Fingerprint (sha256): 39:1b:7c:26:33:54:7a:46:de:20:40:82:02:7c:d0:ea:bd:85:1d:8e:67:bb:70:c5:2a:c9:8d:f3:35:9a:9d:ce

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587

Revocation information

OCSP Server: http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate events.empa.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for events.empa.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

events.empa.ch
www.events.empa.ch

Other certificates including the domain name empa.ch

(limited to 100 certificates)
certest-win.empa.ch
sonrail.empa.ch
certest-win.empa.ch
events.empa.ch
events.empa.ch
sonroad18.empa.ch
sontram.empa.ch
sonrail.empa.ch
sip.empa.ch
sonroad18.empa.ch
sbc.empa.ch
*.empa.ch
sonrail.empa.ch
events.empa.ch
sonroad18.empa.ch
test2.empa.ch
events.empa.ch
events.empa.ch
*.empa.ch
sonrail.empa.ch
*.empa.ch
*.empa.ch
*.empa.ch
certest-win.empa.ch
sonroad18.empa.ch
*.empa.ch
sontram.empa.ch
certest-win.empa.ch
*.empa.ch
sip.empa.ch
*.empa.ch
sontram.empa.ch
sip.empa.ch
events.empa.ch
adobesync.empa.ch
*.empa.ch
*.empa.ch
certest-win.empa.ch
sonroad18.empa.ch
events.empa.ch
test.empa.ch
*.empa.ch
sontram.empa.ch
test2.empa.ch
sip.empa.ch
certest-win.empa.ch
*.empa.ch
adobesync.empa.ch
sontram.empa.ch
sbc.empa.ch
sonrail.empa.ch
*.empa.ch
*.empa.ch
sonroad18.empa.ch
test.empa.ch
sonrail.empa.ch
sontram.empa.ch
sonroad18.empa.ch

Certificate

The complete raw certificate details for events.empa.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5S3nOjpYUnauFjhVXSWQ
VojsIcJuFwyNRGQhP/SRNn803uumO99+1rAUqTExjIuzmz0CYYPjT/5uICbIpu4a
D9K/td2HnKxsOUWLaOuIXthilI61pg0/im9lh2/IwsGSYtObqnXHIEOTrCF5FDOv
f86M//y82uEzsKQqZIUmbDbUadiuN0Hk3TrtjnAVz9uSLqVAnA10htOz1tkB5E1b
wuTMLQtwxcigIduRjhXbGjn9NlUj1Sw9j5Ae9fY836Vy7E507TF8eAFiHi7iW/XY
N3pvQBYwXAxsHUwb/jfCvsZR1nTcagcSqh40f/iNSXPNYgl/bzhtMoGnTS/6p9yV
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 687827121796757165779409785471050979807086626602
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-08 10:44:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 10:44:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'events.empa.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28931207564688801856590034946952113223909405717589903560125175569658862290313521306072798214449111333696716924782259848417109012772775146653399143635050671444390582463701678779030911104281310980104233720797486553392469781856147416710868930905192055383706851378359529416142013314726946015167109609397347668563117959179840984999448599805797880509223426674179852613896224168791834884909372232927490606548926931386156810375717326890684159927682020923367906474676552903224226639825166069849415584956788801614882330721573242580178396235776756338420090241110208669085530840641496821283612037499016050632352213059455638345021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.empa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.events.empa.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f797d538aa3e11f5f59d0f988bb766e272ecc409
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3c9e527903636f4f9c811bd328700c245aeaa587
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (608 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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