ukb00ncs106-e.ukb.ch

Issued by SwissSign RSA TLS DV ICA 2021 - 1

About this certificate

This digital certificate with serial number 31:71:0c:55:25:1d:92:98:bb:a2:b8:d2:99:2e:77:c2:78:d8:51:80 was issued on by SwissSign AG.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ukb00ncs106-e.ukb.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 31:71:0c:55:25:1d:92:98:bb:a2:b8:d2:99:2e:77:c2:78:d8:51:80
Serial Number (int): 282261606298569452290639388280931522500154118528
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: d3:87:98:68:f2:20:25:00:aa:67:d9:79:51:10:1f:c1:c8:12:ea:69
AuthorityKeyId: 3c:9e:52:79:03:63:6f:4f:9c:81:1b:d3:28:70:0c:24:5a:ea:a5:87

Fingerprint (sha1): fc:2a:50:bf:f4:fb:e7:d9:7a:73:26:95:c3:d1:e7:2a:01:b8:86:c2
Fingerprint (sha256): 3e:31:81:81:7c:96:1b:f7:0a:15:df:5a:e7:d2:55:0c:87:9e:25:29:40:51:8f:55:15:80:3e:2b:ce:e9:c2:e3

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587

Revocation information

OCSP Server: http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate ukb00ncs106-e.ukb.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ukb00ncs106-e.ukb.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ukb00ncs106-e.ukb.ch

Other certificates including the domain name ukb.ch

(limited to 100 certificates)
www.ukb.ch
fintest-wwwsec.ukb.ch
gast.ukb.ch
fintest-dev-wwwsec.ukb.ch
www.privasphere.com
twint-test.ukb.ch
www.ukb.ch
fintest-e-banking.ukb.ch
ukb00ncs104-e.ukb.ch
satellite-test.ukb.ch
gast.ukb.ch
twint-test.ukb.ch
fintest-e-banking.ukb.ch
dialog.sbb.ch
www.privasphere.com
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ot.ukb.ch
ssl.ukb.ch
ot.ukb.ch
ukb00ucc114.ukb.ch
securemail.ukb.ch
eroeffnung-test.ukb.ch
satellite.ukb.ch
www.privasphere.com
ukb00ncs106-e.ukb.ch
securemail.ukb.ch
www.privasphere.com
gast.ukb.ch
www.ukb.ch
autodiscover.ukb.ch
ot.ukb.ch
autodiscover.ukb.ch
eroeffnung-test.ukb.ch
dialog.sbb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-e-banking.ukb.ch
www.privasphere.com
www.ukb.ch
wwwsec.ukb.ch
www.ukb.ch
ssl.ukb.ch
ukb00ncs104-e.ukb.ch
gast.ukb.ch
wwwsec.ukb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
eroeffnung.ukb.ch
wwwsec.ukb.ch
wwwsec.urkb.ch
ukb00ucc114.ukb.ch
twint.ukb.ch
www.privasphere.com
www.ukb.ch
identifikation-test.ukb.ch
twint-test.ukb.ch
www.privasphere.com
dialog.sbb.ch
gast.ukb.ch
dialog.sbb.ch
ukbhb01mx01-e.urkb.ch
ukb00ucc114.ukb.ch
fintest-dev-wwwsec.ukb.ch
ssl.ukb.ch
satellite-test.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-wwwsec.ukb.ch
wwwsec.ukb.ch
www.privasphere.com
ssl.ukb.ch
autodiscover.ukb.ch
www.ukb.ch
gast.ukb.ch
ukbhb01mx01-e.urkb.ch
identifikation-test.ukb.ch
autodiscover.ukb.ch
fintest-e-banking.ukb.ch
twint.ukb.ch
wwwsec.ukb.ch
ukbhb01mx01-e.urkb.ch
zukunftsbild.ukb.ch
zukunftsbild.ukb.ch
eroeffnung.ukb.ch
www.ukb.ch
fintest-wwwsec.ukb.ch
ukb00ucc114.ukb.ch
ssl.ukb.ch
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ukb00ncs106-e.ukb.ch
ukb00ucc114.ukb.ch
ukb00ncs106-e.ukb.ch
www.privasphere.com
satellite.ukb.ch
ukb00ncs104-e.ukb.ch
ukbhb01mx01-e.urkb.ch
fintest-wwwsec.ukb.ch
www.ukb.ch

Certificate

The complete raw certificate details for ukb00ncs106-e.ukb.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKdgjRjtTK1igYDYwZ4X
gkKc3SQkNmGVjtGV+jn/Ao6TcJgAQNlQ5GF1l+4Utej6HIYo1oJlLdJ8do0zrTdS
H9+wFF31J+VgaTwf9LY8DvV2n41B/ZBlmrAaCrX3P5NUBGtYIUg1SFrGgZUinNDw
xRT6ZKHkL4fuI6j15Da8vQWvj9etn0kpYSz2EKssiiC3e7lS48l1NJ+iOVSQGOdc
86s+b1KuhSiLnakzjUsGpvZdeNniTYYFeF9SAm0NB9SefyeQ5Ac4yn4wDlMlJy4I
4Pdgno/9/TlZ5RCqEVH9wBqegKCxNh85F0EKtfq3zjafL2epYy8FPtAnOQliEl7Q
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282261606298569452290639388280931522500154118528
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-14 13:47:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-14 13:47:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ukb00ncs106-e.ukb.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22300478424345111295544618584272236994220991862373934619609798338864991266720192874404292419898544908509932915285113590478976345521273858886941513207777379124276155399817081537429593916921744167523450880623252717555242165500416262002449054736272221798539257830805166416951494715342602380103108655605153984793156275901046579136908707310814756794718802454835754815009741138361066260247869795037422272486031849115921465647101793334768072282554150379929367263116400599913432912900604659282654680017187870352198817422565911160381742735222880546701939228434379456986523166901577246680202824688373804295602308294810783371463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukb00ncs106-e.ukb.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d3879868f2202500aa67d97951101fc1c812ea69
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3c9e527903636f4f9c811bd328700c245aeaa587
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (726 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (722 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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