asset.ebs.swiss

Issued by SwissSign RSA TLS DV ICA 2021 - 1

About this certificate

This digital certificate with serial number 2a:de:b0:56:d6:71:79:d5:9c:ab:63:64:23:92:0f:6d:72:bc:1e:be was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=asset.ebs.swiss

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 2a:de:b0:56:d6:71:79:d5:9c:ab:63:64:23:92:0f:6d:72:bc:1e:be
Serial Number (int): 244743739120326595097964582903238937951143206590
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: a6:b1:6c:96:86:ab:26:62:83:8e:22:65:88:0c:78:e1:9a:50:ea:78
AuthorityKeyId: 3c:9e:52:79:03:63:6f:4f:9c:81:1b:d3:28:70:0c:24:5a:ea:a5:87

Fingerprint (sha1): 38:a7:24:75:73:c2:a0:b5:1f:bf:cc:4c:a5:73:dd:92:5b:29:33:cd
Fingerprint (sha256): 6a:2e:5b:01:25:b9:c4:db:d3:32:f3:df:7a:f4:3a:c8:80:2e:0a:09:75:06:f4:45:32:f5:9c:de:c5:a1:36:a6

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587

Revocation information

OCSP Server: http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate asset.ebs.swiss

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for asset.ebs.swiss

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

asset.ebs.swiss
www.asset.ebs.swiss

Other certificates including the domain name ebs.swiss

(limited to 100 certificates)
connector.ebs.swiss
stecker.ebs.swiss
sso.ebs.swiss
hybridex.ebs.swiss
testsalary.ebs.swiss
www.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
*.ebs.swiss
sso.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
www.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
ebs.swiss
geoportal.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
geoportal.ebs.swiss
geoportal.ebs.swiss
sftp.ebs.swiss
salary.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
hybridex.ebs.swiss
mdm.ebs.swiss
www.ebs.swiss
ebs.swiss
ebs.swiss
lora.ebs.swiss
asset.ebs.swiss
connector.ebs.swiss
ebs.swiss
testsalary.ebs.swiss
www.ebs.swiss
salary.ebs.swiss
connector.ebs.swiss
www.ebs.swiss
*.ebs.swiss
lora.ebs.swiss
geoportal.ebs.swiss
lora.ebs.swiss
www.ebs.swiss
my.ebs.swiss
stecker.ebs.swiss
asset.ebs.swiss
lora.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
*.ebs.swiss
ebs.swiss
ebs.swiss
my.ebs.swiss
www.ebs.swiss
infoscreen.ebs.swiss
ebs.swiss
sftp.ebs.swiss
energieportal.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
mydata.ebs.swiss
ebs.swiss
mdm.ebs.swiss
infoscreen.ebs.swiss
qm.ebs.swiss
geoportal.ebs.swiss
sftp.ebs.swiss
energieportal.ebs.swiss
ebs.swiss
connector.ebs.swiss
sftp.ebs.swiss
mydata.ebs.swiss
qm.ebs.swiss

Certificate

The complete raw certificate details for asset.ebs.swiss in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 244743739120326595097964582903238937951143206590
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-18 10:30:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-18 10:30:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'asset.ebs.swiss'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 772301701829410545317974681859269972490526348956907607173772740465966718022448640030902027688041422054699857106221575293530048904193351442532605234957516721935944573763017938307845528711927058953843769575197159649423458550005165141356145753205969652217453352720795466694489363677711339701028897446179126579490030949161704488192437351053518396279739972837577204661205454451257399925043578767383145499107381617831405817260560526234216679280894278238352606104028690737335549022143753876305350066088256970645014242062292776911805459994948288108402225478685572187852661933763709002189023817744713725680383350678174556419013110400303169873215879448780224184552080018950051147022117373346159231188688221166142319586558626007842310296108953531652542651971046570180311940481793113415913123418117925555022444983759603226422615915032755943271227294341708144970073503760105604636531448462681769319955927016208132391610367224859150539920573616817441025827792106841457590580851930123569590871879539595257120610323395804428195811512119822504678556164658681330596736951546633845851164373947254510665740395645634862476393875960463816814590700763800763284131413697097518984333038390273904671890022649630243641448395783146579406612532274604330556848709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asset.ebs.swiss'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asset.ebs.swiss'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a6b16c9686ab2662838e2265880c78e19a50ea78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3c9e527903636f4f9c811bd328700c245aeaa587
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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