kabaapp.ebs.swiss

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 53:f0:fd:b4:f1:c5:87:40:24:79:2b:9d:1a:ad:5c:c5:8f:36:34:45 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kabaapp.ebs.swiss

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 53:f0:fd:b4:f1:c5:87:40:24:79:2b:9d:1a:ad:5c:c5:8f:36:34:45
Serial Number (int): 479220513806562383849127460135295988883374093381
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: ee:6b:71:a5:e5:df:a5:11:9e:84:93:9f:8b:ec:9e:86:11:96:0c:fc
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 71:b8:e0:c0:4f:42:a0:c1:5e:dd:85:9a:67:67:01:7c:f2:5e:54:b5
Fingerprint (sha256): 47:c4:3c:2a:e0:4c:d8:73:2f:52:96:b5:62:9a:e6:68:c0:60:58:e7:32:11:24:09:c4:df:24:71:81:42:e3:92

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate kabaapp.ebs.swiss

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kabaapp.ebs.swiss

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kabaapp.ebs.swiss
www.kabaapp.ebs.swiss

Other certificates including the domain name ebs.swiss

(limited to 100 certificates)
connector.ebs.swiss
stecker.ebs.swiss
sso.ebs.swiss
hybridex.ebs.swiss
testsalary.ebs.swiss
www.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
*.ebs.swiss
sso.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
www.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
ebs.swiss
abacus.ebs.swiss
geoportal.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
elektroform.ebs.swiss
geoportal.ebs.swiss
geoportal.ebs.swiss
kabaapp.ebs.swiss
sftp.ebs.swiss
salary.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
hybridex.ebs.swiss
mdm.ebs.swiss
www.ebs.swiss
abacustest.ebs.swiss
ebs.swiss
ebs.swiss
lora.ebs.swiss
asset.ebs.swiss
connector.ebs.swiss
qmtest.ebs.swiss
ebs.swiss
testsalary.ebs.swiss
testsalary.ebs.swiss
kaba.ebs.swiss
www.ebs.swiss
salary.ebs.swiss
connector.ebs.swiss
www.ebs.swiss
*.ebs.swiss
lora.ebs.swiss
qmtest.ebs.swiss
geoportal.ebs.swiss
lora.ebs.swiss
www.ebs.swiss
my.ebs.swiss
stecker.ebs.swiss
asset.ebs.swiss
lora.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
salary.ebs.swiss
*.ebs.swiss
ebs.swiss
ebs.swiss
my.ebs.swiss
abacustest.ebs.swiss
www.ebs.swiss
asset.ebs.swiss
infoscreen.ebs.swiss
infoscreen.ebs.swiss
salary.ebs.swiss
ebs.swiss
sftp.ebs.swiss
sftp.ebs.swiss
energieportal.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
mydata.ebs.swiss
ebs.swiss
mdm.ebs.swiss
sftp.ebs.swiss
infoscreen.ebs.swiss
qm.ebs.swiss
geoportal.ebs.swiss
abacus.ebs.swiss
kabaapp.ebs.swiss
sftp.ebs.swiss
betrieb.ebs.swiss
betrieb.ebs.swiss
energieportal.ebs.swiss
ebs.swiss
infoscreen.ebs.swiss
testsalary.ebs.swiss

Certificate

The complete raw certificate details for kabaapp.ebs.swiss in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1PM1MMV044m1e28nSj2J
T29JySBjepabxxFNzvsL+050eOFssLvvTNFvVLhM0bubTCLjuXx0XKu/oId0vkat
buwoMMAigh3b4z/CJGdHHy9ZEEiiJDWRUH5OWnKV0ks9tHywItbogd6ThO15PfuX
ARFCvlzgPWNpnap2kJN/YT7kYuyCuHSfvHThiiDBI9+ynr99+VLq+CzrKzGS4Qh2
Py3pTdniBV1jdLv1LbPxBBQdmF0LSeK6wZMy5+uOgsIarNnHHAY/uV+P9mVBhcbw
Nb44Hs6acx+J7UdogAQ5PmV1SwiifMaPvNEoDqVbuBuaNUEvutDox3mu7nTWrIvU
8FEk2t43X3dQLbGsSzhSU7wVKRVkbX5CL2tLNA4vcZne+gFs3Ud8uYYUUXrFMsB9
w0CAjboZQJgCn3hKgdIdsltWQFVI5q8yCFrc6HO74i1yOmduR2QRAgooSkVUe4cR
dYm46QnKCp0OJGMt6uFLz4WfSGNvfGRVz2jibsKO5+ATiq99FlR0jReOS4Xxr8yM
Kyts/4a4n+jtnoQqAEe1xIWq8T07cgCwzDnhyQr7ktay7SNV3tQ/FTyeTMhCyup9
hgoaZwEk5oneMt3Vda9gSsGaanD6OjXWjSd5uwQ0wgYb8oxY7FUg/jgOGUqt+Tkq
jFNsIPyPaTgTaZxQ136nCIUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 479220513806562383849127460135295988883374093381
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 13:20:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-15 13:20:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kabaapp.ebs.swiss'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 868760328195169593057902404880485737069714231970026589372170928931632795836735646376364112728733500514279283661687517315213275249276671965509215365582058097405139762425991441972231846343022037473342992461677992271399339281889440968088123057670526209862034465412540724970194029742984302870756542421719600266129206593507441890348018996575535503608434097206794856480855656505539583852098763809441549295356531377428404144003220386792873104335351878104767494015342288790771857750683367138498807934289326009496584409098979507559541579979955931097007002066578913356456676159227391804796661801262280040476256869494934812447187680171908194460200306367392713208662222666045950662071700357834925070294521660786757703180664418977338556738812993334680854905280326373937225173938386456738003244858085202762184424748466140443994809723913444825230545243162357414201202952652292179694133201812243783948420365619112372635824832159722582140022861880084942489895465118852071192094747236223140495313990139288174086199017902635196710131919377157503987522104855628903679418845128601461594518367055263212110340681084835170980885822281250777612903122299263646808703307734740505240351203724128556694386034476715010979528727701420915812240665543398549625440389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kabaapp.ebs.swiss'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kabaapp.ebs.swiss'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ee6b71a5e5dfa5119e84939f8bec9e8611960cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (609 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0028858e1beee4af91a71c45627facb313565522ae3a931a5834bcc4bb0f4b9d799c0b7bc2a01d52986ec0820c24a6972ff5bc759250d8ac12679f0708906e18702eb34dff27b04eb1a1714b05dba8cf0b59116d664e7c576688a1fb16ac8a9cd8afddcc23ced8d370a36e2e3aed875c77ebdab808bf58574db048bf47331d8272b4d73f2ed6764f68899d4273e23713edeff7ec9e783bc42166a85748ef09e86d33cc4b8e97b4ff7e7830f186dbf751622bbb4aa4ef5f86046ac265756cf780dbb6336427c5594f32e80743b3077ff6d12fe410222f1c10cb0ce1008e876fd7a1e07873f5013604d62c2300d64b288814f13d0f62fb44431de18016de848001f48d18c36216118da8965188a7da229d150bc8bdf0bdbe00c7e8c0f591af8f7fb123df660c92e59b104cb71a0b37a2a7ea1a26786e24695872741d422e769e7f0ffdceada54e090331871eb9159ede25bd399dd92eb0f3aa1b43b10c5e280bb4ebff986ae2bd2914f217d7f68f0cf0a16889f0307ff76a0a89bdf6f5dad12fa71af3ab23e9a74ec74b563d449dcedee484332c26f853adb321249f51cc1e16b14f44d00d76eeda4cc423306d676f26711165d32c0f5f765a5beea1dfe1a202c80e6a26cafc1553374af4b861eb683b95f86104e24ba6336e65c61314c949dffb469aef0dc47b7369aebbf031aa9da6988437b6e1c798839747bfbc49a23bb9d11b