geoportal.ebs.swiss

Issued by SwissSign RSA TLS DV ICA 2021 - 1

About this certificate

This digital certificate with serial number 3e:72:3b:33:97:0a:44:dd:9e:27:00:a8:0e:1f:7f:09:77:0a:b3:65 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=geoportal.ebs.swiss

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 3e:72:3b:33:97:0a:44:dd:9e:27:00:a8:0e:1f:7f:09:77:0a:b3:65
Serial Number (int): 356504869923747975457334171558308110632743514981
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: e7:50:7f:68:ee:b2:e6:6e:33:62:56:da:8c:02:e0:77:32:17:f0:3e
AuthorityKeyId: 3c:9e:52:79:03:63:6f:4f:9c:81:1b:d3:28:70:0c:24:5a:ea:a5:87

Fingerprint (sha1): 2c:47:e5:64:5d:00:a4:e4:9b:e6:98:b5:81:e1:b2:5b:ec:22:7a:67
Fingerprint (sha256): 43:ae:c7:c1:62:1e:cc:a8:fb:3c:d7:bf:c2:64:06:b2:b5:55:79:d3:0b:b9:21:ee:f5:e2:d5:eb:06:1a:9b:34

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587

Revocation information

OCSP Server: http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate geoportal.ebs.swiss

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for geoportal.ebs.swiss

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

geoportal.ebs.swiss
www.geoportal.ebs.swiss

Other certificates including the domain name ebs.swiss

(limited to 100 certificates)
connector.ebs.swiss
stecker.ebs.swiss
sso.ebs.swiss
hybridex.ebs.swiss
testsalary.ebs.swiss
www.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
*.ebs.swiss
sso.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
www.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
ebs.swiss
geoportal.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
geoportal.ebs.swiss
geoportal.ebs.swiss
sftp.ebs.swiss
salary.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
hybridex.ebs.swiss
mdm.ebs.swiss
www.ebs.swiss
ebs.swiss
ebs.swiss
lora.ebs.swiss
asset.ebs.swiss
connector.ebs.swiss
ebs.swiss
testsalary.ebs.swiss
www.ebs.swiss
salary.ebs.swiss
connector.ebs.swiss
www.ebs.swiss
*.ebs.swiss
lora.ebs.swiss
geoportal.ebs.swiss
lora.ebs.swiss
www.ebs.swiss
my.ebs.swiss
stecker.ebs.swiss
asset.ebs.swiss
lora.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
*.ebs.swiss
ebs.swiss
ebs.swiss
my.ebs.swiss
www.ebs.swiss
infoscreen.ebs.swiss
ebs.swiss
sftp.ebs.swiss
energieportal.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
mydata.ebs.swiss
ebs.swiss
mdm.ebs.swiss
infoscreen.ebs.swiss
qm.ebs.swiss
geoportal.ebs.swiss
sftp.ebs.swiss
energieportal.ebs.swiss
ebs.swiss
connector.ebs.swiss
sftp.ebs.swiss
mydata.ebs.swiss
qm.ebs.swiss

Certificate

The complete raw certificate details for geoportal.ebs.swiss in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356504869923747975457334171558308110632743514981
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-25 07:13:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-25 07:13:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'geoportal.ebs.swiss'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 932708282943340750650075815671760441938620080583096748933674217214494448193824515348757408717643311046959414620133601326581072671339538273118533788304480558250176590878004850008042775350642902391593691872428025794381811136827496124488942895238123463951021940006864178893111565882078092221138369301625475325772743760120803539788646581779481338959311008908138352582762540125672827460903789498465647871923537510994026935478834992719028541109995394825357680318382196905070141993718301164835743783504637713669187675292581025237449345865204332327977490238163530488284314916124435977361970027571743063690198871772764885515252750316867094429989071782503719416334289613033595522172355184443347216134780671761595960158321443799955246178068806517706503874041819409620929755378686711307559410318073269525053297903921824279398529588418270817436752858324178011579348599855469807127944232426165531057852044118343586058822674619418166447027092572028414335321750502362265290007616724725705051756980931950912167319194126007499322445088578811356504110019412103731292852570813276827647296871308110881489791175181851320620897844593173532769240708628827572263052909510429210734770067653244869757548038261632167833180785802849889689620117384924720231406277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geoportal.ebs.swiss'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geoportal.ebs.swiss'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7507f68eeb2e66e336256da8c02e0773217f03e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3c9e527903636f4f9c811bd328700c245aeaa587
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (849 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (845 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		006d6415db9056b2b20e0aa87f8aa04737e60b5acc3c2463f5319eee909fe81d5225101dbdb8605faf7be27734804c95b608947e20310fe80d5bbf97aa64c6758f0acd3e516cc8b197afc9069ae08ce4add90ce977321255e8185752734a880db6a643c3b92e3061d845be3229d0a7728036696f84d1b1cf1ec6d8a8fe098fb59053c5d2b2dc00e3649f6702f9a0f3ea00daea39cc85b5ac24d02a036d9e599a43e4c4afd106992d04636e58787f9fa693cb2a65804c017b07da1d33e2676cb1cf08a946452069ba0b9f1164d9acac0911bf5d58b0eaf415e30d0b592efa5467ba2516582d2a0b5df2b294a7b9f8e52a91bf0160751a0892ff47e13cd848aeaba6f201879f8d3321f47e65d8bc7c8d45863317794595e74c643b54e93a406c6e76c1bb75024be4d32be7deca1ca7489a722884739a8f394867b5cc9f0f769304eea0962120e5c0430e8e135e8a342f7254e0e964134072874af11c789bda103db51d01974594ba5f351b2ec1f210a28c78c690471a0573c5d0c3be66fc011e58210252a12b6e2058730d3a7e741d677ef755e5d935520087a679f5ff35bb43f00dafb6d2a51271ef6bf02372dc8e2a75666145f64b138c794a101f91a2fc89c957719fb8742cb3c4a7ce6312dc1e07722351e2024e4583da3155fd512d9e75e6ac84d11dfc672ab702ec525ef412b87697367b7266781952a070a9c9b82ea8d0c3