ukb00ncs104-e.ukb.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 27:cc:da:08:71:e4:8b:30:55:35:3b:37:04:1d:54:56:c1:55:df:8f was issued on by SwissSign AG.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ukb00ncs104-e.ukb.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 27:cc:da:08:71:e4:8b:30:55:35:3b:37:04:1d:54:56:c1:55:df:8f
Serial Number (int): 227218985434611477958941290620886008163221233551
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 02:f5:a8:18:bb:89:26:48:b8:1b:78:a0:01:28:58:92:a3:57:d3:f5
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 89:7c:d7:4a:0c:b9:a8:c2:5b:a8:a5:9c:5f:88:92:40:e6:fd:2b:58
Fingerprint (sha256): 63:26:cd:ac:20:1f:3e:71:28:c9:d8:80:a8:39:aa:98:d2:d2:b8:11:58:bf:ff:75:ab:c2:e1:12:c1:b0:ee:ca

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate ukb00ncs104-e.ukb.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ukb00ncs104-e.ukb.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ukb00ncs104-e.ukb.ch

Other certificates including the domain name ukb.ch

(limited to 100 certificates)
www.ukb.ch
fintest-wwwsec.ukb.ch
gast.ukb.ch
fintest-dev-wwwsec.ukb.ch
www.privasphere.com
twint-test.ukb.ch
www.ukb.ch
fintest-e-banking.ukb.ch
ukb00ncs104-e.ukb.ch
satellite-test.ukb.ch
identifikation-test.ukb.ch
gast.ukb.ch
twint-test.ukb.ch
fintest-e-banking.ukb.ch
dialog.sbb.ch
www.privasphere.com
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ot.ukb.ch
ssl.ukb.ch
ot.ukb.ch
ukb00ucc114.ukb.ch
securemail.ukb.ch
eroeffnung-test.ukb.ch
satellite.ukb.ch
www.privasphere.com
ukb00ncs106-e.ukb.ch
securemail.ukb.ch
www.privasphere.com
gast.ukb.ch
www.ukb.ch
autodiscover.ukb.ch
ot.ukb.ch
autodiscover.ukb.ch
eroeffnung-test.ukb.ch
dialog.sbb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-e-banking.ukb.ch
www.privasphere.com
www.ukb.ch
wwwsec.ukb.ch
www.ukb.ch
ssl.ukb.ch
ukb00ncs104-e.ukb.ch
gast.ukb.ch
wwwsec.ukb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
eroeffnung.ukb.ch
wwwsec.ukb.ch
wwwsec.urkb.ch
ukb00ucc114.ukb.ch
twint.ukb.ch
www.privasphere.com
www.ukb.ch
identifikation-test.ukb.ch
twint-test.ukb.ch
www.privasphere.com
dialog.sbb.ch
gast.ukb.ch
dialog.sbb.ch
ukbhb01mx01-e.urkb.ch
ukb00ucc114.ukb.ch
fintest-dev-wwwsec.ukb.ch
ssl.ukb.ch
identifikation.ukb.ch
satellite-test.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-wwwsec.ukb.ch
wwwsec.ukb.ch
www.privasphere.com
ssl.ukb.ch
autodiscover.ukb.ch
www.ukb.ch
gast.ukb.ch
www.privasphere.com
ukbhb01mx01-e.urkb.ch
identifikation-test.ukb.ch
autodiscover.ukb.ch
fintest-e-banking.ukb.ch
twint.ukb.ch
wwwsec.ukb.ch
ukbhb01mx01-e.urkb.ch
zukunftsbild.ukb.ch
zukunftsbild.ukb.ch
eroeffnung.ukb.ch
www.ukb.ch
fintest-wwwsec.ukb.ch
ukb00ucc114.ukb.ch
identifikation-test.ukb.ch
ssl.ukb.ch
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ukb00ncs106-e.ukb.ch
ukb00ucc114.ukb.ch
ukb00ncs106-e.ukb.ch
www.privasphere.com
satellite.ukb.ch

Certificate

The complete raw certificate details for ukb00ncs104-e.ukb.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjBcebflj7EHRWzS/64O
ahY2/sABQoKGDj6rqcvqqoBK/PYYqHwKLuHVv5ASLE2t09D2GHg9mcB+NMyP1nCU
yb5UgkoUnVGNK+B+St+D1x24tk79RfwUyNkzP61GXuw+uzaGUxdbtA4o7TRBcfVY
cSelBbcdnGEH8S+A65Qd8Cexp8zXAwJx2EHI6lQBqCbpenNb9oDOngxPKLEaYz0Y
ehTjZ+GQNWgVyN4BcmGgeexsh2xidDP2flGSd/YpHD/oOaGxvRafuK8mhK42wllg
aRG7KAHQS6u/IoKn8KPtFmgeynvGUo960MVEzNt0nql1PRYItqBzNO/3vej+beyY
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 227218985434611477958941290620886008163221233551
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-25 12:26:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-25 12:26:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ukb00ncs104-e.ukb.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24514078975870108086759428374909933207641614637358448455262904908261888179420954219956646506212580949238033834303723996773027881826864631463935891156540529944303210081572723679840289260443381479231805751716354026505793075640164214744459583817771979227200523455274482565129736201462518484631836536883301796419497188546112750146572858407120633745509064309500671166266891743865560082719663242404553832349657036222078881394004080767865372414978743430844516560290497076104286714710136076194808110722252219208101044770726060944021818380428447790781146004346353180511733868244614889671363178971422120435232895685840635467899
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukb00ncs104-e.ukb.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02f5a818bb892648b81b78a001285892a357d3f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							01e20077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018852dff45400000403004830460221009444a150d77935525b507ce2a3eec170ada080106a39da467866d23590f0c1da022100d4db9f04f60a56e4d7cd71760a1530a1b497de5db8b9427ba2cf08960e1748a2007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018852dff7bb0000040300473045022023f8975ce94ee890d1dfbbab7131430a2fe99754c3551576667ca00a9fc659ad022100dba5ec5339283055dc5a7217f60b9ae413906f78368f4bf0f92e0a485ed2158d007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018852dffafd000004030047304502203e7795c64d7f56bb523e51aec05e5a8bb635d6ceb81239242bc6c564d16fda06022100e58e7f35cb1fbe8e5d1c7fd3a43435019210fb609b80e023b16063bd817f9238007700874fb50dc029d9931de573e9f2899e8e4533b392d38b0a462574bf0feeb2fc1e0000018852e0014b000004030048304602210085b928ae7183d45eef69b48ee865cd8ab24e283937b49b92d871d5eb6ad85c25022100b9d3fa78b3d1b015a5443de2130201a2359b37f3935394a99ba3a4a6536f5feb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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