*.netcetera-payment.ch

Issued by SwissSign Server Silver CA 2014 - G22

About this certificate

This digital certificate with serial number 2d:d2:b2:b0:f6:65:fa:aa:cb:c9:7e:a7:64:45:2c:9a:7b:e5:c0:3a was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.netcetera-payment.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 2d:d2:b2:b0:f6:65:fa:aa:cb:c9:7e:a7:64:45:2c:9a:7b:e5:c0:3a
Serial Number (int): 261603307382876233939345555803053055462963789882
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: a5:66:68:45:57:8d:75:d3:82:ba:0f:7a:83:a5:94:b9:20:73:ff:64
AuthorityKeyId: db:bc:bf:82:18:59:dc:69:fa:f8:ab:aa:83:4d:77:1d:0b:b0:8b:d8

Fingerprint (sha1): 67:7c:1b:56:57:85:ac:f7:32:9c:b7:01:bd:22:72:17:62:6c:97:bb
Fingerprint (sha256): 4d:e8:54:7a:5a:30:92:48:73:90:9c:20:16:2f:30:0a:28:48:14:61:a3:8a:f9:84:b9:3c:99:fe:27:f6:8e:ff

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8

Revocation information

OCSP Server: http://silver-server-g2.ocsp.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8
CRL Distribution Point: http://crl.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8
CRL Distribution Point: ldap://directory.swisssign.net/CN=DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate *.netcetera-payment.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.netcetera-payment.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.netcetera-payment.ch
netcetera-payment.ch

Other certificates including the domain name netcetera-payment.ch

(limited to 100 certificates)
tpet-mc-callin.netcetera-payment.ch
*.test.netcetera-payment.ch
*.prev.netcetera-payment.ch
*.test.netcetera-payment.ch
ps4visa-ds.netcetera-payment.ch
*.netcetera-payment.ch
riskadm.netcetera-payment.ch
*.test.netcetera-payment.ch
*.netcetera-payment.ch
*.netcetera-payment.ch
*.prev.netcetera-payment.ch
*.test.netcetera-payment.ch
ps4visa-ds.netcetera-payment.ch
*.prev.netcetera-payment.ch
*.netcetera-payment.ch
*.prev.netcetera-payment.ch
*.test.netcetera-payment.ch
*.test.netcetera-payment.ch
riskadm.netcetera-payment.ch
tpet-mc-callin.netcetera-payment.ch
*.prev.netcetera-payment.ch
*.prev.netcetera-payment.ch
*.netcetera-payment.ch
riskadm.netcetera-payment.ch
*.prev.netcetera-payment.ch
*.test.netcetera-payment.ch
*.netcetera-payment.ch

Certificate

The complete raw certificate details for *.netcetera-payment.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261603307382876233939345555803053055462963789882
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Silver CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-05 07:14:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-05 07:14:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.netcetera-payment.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 866497438232044108817754429693073225760752204024801902189435668348412695791408908911596469658839203546281458280693269979171540841586468621409073704090212978727144835192687687892340618925476115962284598642706430126991973577714929030330552164991128654804682647276798349949020534013057292154152562776727339971850066258413230317924423598962604800550958076063120936785464441766279671707877911760095398804042852832804160675548378254138594027532328450618203334473804399825534567035844239092932473922027833024986360928286373397352650907601778509468692839299430789291121127274642271014598194325467623765366193998111734965160342150881419782731006061888941182795793411887402506041077423504076447563319549650780585814478285538805017668441251372716004518946241703041338041585726082570237608712468839361017513907655336226015106472827383112645140263331770253688121168212642701108291850291336666424342501707604499041579110842925504369585351718752644422759703646175435703398619618942786946761809624794514804507270633511480480182863637592820028284384846375346133927655611422798781617413274163757879591846995612876412009311885070471143415059372779442391031046807656036409394942326977995217562656026764038354341791593798484039887423533184597612551762143
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netcetera-payment.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netcetera-payment.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a5666845578d75d382ba0f7a83a594b92073ff64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dbbcbf821859dc69faf8abaa834d771d0bb08bd8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.3.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Silver-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (202 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://silver-server-g2.ocsp.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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