sontram.empa.ch

Issued by SwissSign RSA TLS DV ICA 2021 - 1

About this certificate

This digital certificate with serial number 68:e4:76:cf:a1:58:2a:d5:86:75:2f:e8:03:aa:30:49:b4:8f:61:2a was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sontram.empa.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 68:e4:76:cf:a1:58:2a:d5:86:75:2f:e8:03:aa:30:49:b4:8f:61:2a
Serial Number (int): 598829959973597691163220496741212721398036783402
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: f8:f5:b0:dd:28:a6:91:45:03:c5:3f:98:e7:29:64:dc:43:d2:b0:e2
AuthorityKeyId: 3c:9e:52:79:03:63:6f:4f:9c:81:1b:d3:28:70:0c:24:5a:ea:a5:87

Fingerprint (sha1): c0:3c:85:a2:b9:42:de:08:ae:13:a1:50:d1:c8:55:b3:98:73:84:7f
Fingerprint (sha256): 61:b1:16:d6:16:cf:80:1b:4c:fb:75:4c:0b:d4:13:48:48:dd:15:bd:31:d6:62:f7:b4:b9:f2:4d:5f:a9:d8:d6

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587

Revocation information

OCSP Server: http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate sontram.empa.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sontram.empa.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sontram.empa.ch
www.sontram.empa.ch

Other certificates including the domain name empa.ch

(limited to 100 certificates)
certest-win.empa.ch
sonrail.empa.ch
certest-win.empa.ch
events.empa.ch
events.empa.ch
sonroad18.empa.ch
sontram.empa.ch
sonrail.empa.ch
sip.empa.ch
sonroad18.empa.ch
sbc.empa.ch
sonrail.empa.ch
events.empa.ch
sonroad18.empa.ch
test2.empa.ch
*.empa.ch
sonrail.empa.ch
*.empa.ch
*.empa.ch
*.empa.ch
certest-win.empa.ch
sonroad18.empa.ch
sontram.empa.ch
certest-win.empa.ch
*.empa.ch
sip.empa.ch
*.empa.ch
sontram.empa.ch
sip.empa.ch
events.empa.ch
adobesync.empa.ch
*.empa.ch
*.empa.ch
certest-win.empa.ch
sonroad18.empa.ch
events.empa.ch
test.empa.ch
*.empa.ch
sontram.empa.ch
test2.empa.ch
sip.empa.ch
certest-win.empa.ch
*.empa.ch
adobesync.empa.ch
sontram.empa.ch
sbc.empa.ch
sonrail.empa.ch
*.empa.ch
*.empa.ch
sonroad18.empa.ch
test.empa.ch
sonrail.empa.ch
sontram.empa.ch
sonroad18.empa.ch

Certificate

The complete raw certificate details for sontram.empa.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLn/uGkpwE8qJKT1B8MA
KMCTyVID8MHGxEwsm5odeitHAOlB5ZwZ2l2j+r0R0MGvnP2aYxm/pYlHoSAU/jhs
LgCilegVz4Bvk5CI7VG77JnZaJ42Kb++Yf657QZLu0B6URBI4mhwQtISSE7mQ5k9
Vrq+YGfZDrCREqak5NcfiFQYWEtY5QG1h0As0lNwQ2ewV3IQSl1M1DSUgTmBtmri
l5Yrs7SdnemNNz7SYAJRuLY/aL8HyZvMFasIu9nKaVfMqQkxbMP7HMVVu4tUHNEg
unYAUQXMCALU5lTsFjj89J1F/XmCPvAZRgl3ovy5Xl6Xdd2gGlE4kc7uXRTgmkeo
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 598829959973597691163220496741212721398036783402
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-28 06:51:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 06:51:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sontram.empa.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21804707933948922523595317032577226324346902006148805196403676251967708956962833969518031908804292178089117564332428847275422409714840782176365898871126150303010279319343616046000579736895905875067221307619034054203468886815585691453891485721693076809037015308215202960445077436401861630809566507821827882352470171260709674635083032752994151890791456574339987801068716157392488530441165729344162780791997733268502484156879822965537346788140790498899236332214391258852916979276530820977902574317870177883420576164222868595876529694108004092315085978176853317209175157173283597288074408469228849526251397507689656854589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sontram.empa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sontram.empa.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8f5b0dd28a6914503c53f98e72964dc43d2b0e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3c9e527903636f4f9c811bd328700c245aeaa587
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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