extranet.ge8.ch

- NSNW AG -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 58:e8:c3:18:41:1c:1c:cc:04:24:d6:34:a1:5a:f7:b7:fa:c7:cc:bd was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NSNW AG

Organization: NSNW AG
Organization unit: BSA-IKT
State / Province: BL
Locality: Sissach
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 58:e8:c3:18:41:1c:1c:cc:04:24:d6:34:a1:5a:f7:b7:fa:c7:cc:bd
Serial Number (int): 507581955867636270161327197661989743148839455933
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: ed:c2:5e:be:ea:2f:e7:ac:d5:0c:29:9a:64:82:8e:d0:f6:5a:13:e1
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): 46:99:94:f3:ac:f6:d8:22:22:8f:b5:f2:fc:ae:b2:30:66:ab:51:4d
Fingerprint (sha256): 65:f6:78:d3:f9:da:af:01:29:65:d5:51:c6:3d:ea:3a:b3:80:fc:2e:b4:bc:c2:ce:7d:00:ec:db:27:a9:32:6d

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate extranet.ge8.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for extranet.ge8.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

extranet.ge8.ch
www.extranet.ge8.ch

Other certificates including the domain name ge8.ch

(limited to 100 certificates)
extranet.ge8.ch
extranet.ge8.ch
extranet.ge8.ch
extranet.ge8.ch

Certificate

The complete raw certificate details for extranet.ge8.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWhdNVhg2S73P86Q6pkU
C1ALD+EpTM2R1Ixsq6lL68dpSgFW+zs4AOeqMU2/doFjH76pHqJ6g4JuCffHvcmj
tfPyxQ0zPmHqIbelrgg/0dQ8gXz+7Qrgb4wzQW4OCB9Q4hPj5pQZ7GE1a3e1sZND
EM1MpECBZetrF1ZOWazVHrSnE40QGRxefoPFYC2RBBX8aJ9OK7F2Jk9QCH1W4yAH
+qtt52Px0x2E2/uo/EwWpEOWktUf+OPwECvLFYm4yAqM7lmA+K1H5o93r4PQuuw8
aE6neuSFiUBM81+Gd3BbPsK7TT8LCGHrPupBex3s6L824Py5RVuMbF9OH549+Ili
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 507581955867636270161327197661989743148839455933
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-03 15:23:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-03 15:23:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sissach'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NSNW AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BSA-IKT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'extranet.ge8.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22395643832436138818237222004684109440759721210781491568867903334252069708518689223773736642151122083531045941329839035599633060033448360927251101907628591659486466600439899550025470898057379115700707507175832679790946695709126873647934389115263362227027077712087662815198544400500708531117520215743268947299778904277825681844314856131917370879567920763545908861714108892094286108722402294854797788675832250476038815884244469340365769464603571204344032513948870620552773318631745164992853469710007762207995210464557766938975286253359272154210651418894220697731304509339625336338368334464757087806030318211557229159081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.ge8.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extranet.ge8.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							edc25ebeea2fe7acd50c299a64828ed0f65a13e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (847 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (843 bytes)
							03490076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000017e2089b1790000040300473045022100d58e081f763a8479af60d900906535dc2a1511cdcd4ac86c3854b05c88b9ae20022058a18a4996f716a22ccbb382249227f7a7f48b44e2850123d1fa52f1d1c63a400077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017e2089b0620000040300483046022100adb8567c057c27f985a04776c61718d9bd6ded20f482b15e1378282e981e0da70221008200a4149a6f65412b31a294d4b66de61c7815acedfbcc8d99b1acf571ef48eb0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000017e2089b0c80000040300473045022011012b5dc7fd51df54f4f96632ab18b04eab4e812cdaa5e738316a1808125817022100feee55f5e23dfc8872d24c6aa573a95319d7a1c8548dcf0eb512985992cc6097007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000017e2089b08c00000403004730450221008cfc69fe1a1b27a208b5facadb94fbe7ed6956a6d781aada050b62aa06dfbb730220188c73c3d8bd14bf3429f13f817886163cc83d3fc3cfd99d038634d6ea382854007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000017e2089b17e000004030046304402201a50c3f44915dc27733f97d0dc19c7db48e276f7fb52af8b66b6ae3100fb06f6022053171005db27d1714cca04096619e38eb3239dae8417a85ba94ff713130d5527007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000017e2089b2380000040300483046022100976e8adad899fdeaf9c1757260b4153d64c1d751b090e5712edb363ac2c3f45102210086d175b25362d3228051e13ca2108724c3ff83237ff94ad6d42bfd980b4e9112007600e87ea7660bc26cf6002ef5725d3fe0e331b9393bb92fbf58eb3b9049daf5435a0000017e2089b49d0000040300473045022027490ca5351e7caa98422f5425ef99555e71bb2c6a441a926495037ec57f370e022100c50da763c5b684c3728af497943e2ffbc753b929e9ac149fe74f82ecdc86faa5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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