ras-betest1.snb.ch

- Schweizerische Nationalbank -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 74:7a:59:c8:15:2e:8e:57:e3:60:f0:f6:6e:28:9b:d4:20:47:eb:f8 was issued on by SwissSign AG.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Schweizerische Nationalbank

Organization: Schweizerische Nationalbank
State / Province: ZH
Locality: Zurich
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 74:7a:59:c8:15:2e:8e:57:e3:60:f0:f6:6e:28:9b:d4:20:47:eb:f8
Serial Number (int): 664971441407862952316316274357817008918249335800
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 12:63:15:d0:44:dc:1f:ac:e0:3d:7f:ff:cd:ae:fb:bf:8c:64:23:de
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): 36:88:da:5a:a5:4e:fb:a6:0c:f1:f4:8c:ca:f8:5c:a0:68:1d:12:ba
Fingerprint (sha256): 6b:31:87:4e:b5:1e:b9:2d:e6:14:37:a4:98:63:d4:81:fb:a5:03:3d:c7:66:04:0c:e9:a6:37:9e:90:70:aa:f6

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate ras-betest1.snb.ch

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ras-betest1.snb.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ras-betest1.snb.ch
access.snb.ch
backend.snb.ch
request.snb.ch

Other certificates including the domain name snb.ch

(limited to 100 certificates)
remotemail.snb.ch
bbuem.snb.ch
mailb.snb.ch
ras.snb.ch
rastest.snb.ch
rastest.snb.ch
ras.snb.ch
ras.snb.ch
ras.snb.ch
surveys.snb.ch
rastest.snb.ch
rastest.snb.ch
sip3.snb.ch
mailz.snb.ch
bbuem.snb.ch
sip.snb.ch
mailz.snb.ch
rastest.snb.ch
ras.snb.ch
meet.snb.ch
datasharedev.snb.ch
vcse.snb.ch
ras.snb.ch
data.snb.ch
recruiting.snb.ch
ras-betest.snb.ch
rastest.snb.ch
ras.snb.ch
sip3.snb.ch
surveys.snb.ch
sip.snb.ch
ras.snb.ch
sip.snb.ch
ras.snb.ch
testgold.snb.ch
remotemail.snb.ch
testgold.snb.ch
sip3.snb.ch
vcse.snb.ch
ras2.snb.ch
wlanportal1.snb.ch
data.test.snb.ch
sip.snb.ch
vcse.snb.ch
testswiss.snb.ch
testgold.snb.ch
bbuem.snb.ch
data.snb.ch
surveys-usertest.snb.ch
wlanportal1.snb.ch
secmail.snb.ch
ras.snb.ch
surveys.snb.ch
wlanportal1.snb.ch
mailb.snb.ch
snb.ch
surveys.snb.ch
datashare.snb.ch
ras.snb.ch
alert.snb.ch
ras.snb.ch
data.snb.ch
secmail.snb.ch
sip2.snb.ch
rastest.snb.ch
secmail.snb.ch
rastest.snb.ch
sip3.snb.ch
remotez.snb.ch
snb.ch
testgold.snb.ch
testgold.snb.ch
datasharedev.snb.ch
vcse.snb.ch
bbuem.snb.ch
secmail.snb.ch
mailz.snb.ch
rastest.snb.ch
ras.snb.ch
ras.snb.ch
sip3.snb.ch
remote.snb.ch
vcse.snb.ch
securemail.snb.ch
ras.snb.ch
surveys.snb.ch
rastest.snb.ch
ras.snb.ch
testgold.snb.ch
webstats.snb.ch
securemail.snb.ch
surveys-usertest.snb.ch
snb.ch
careers.snb.ch
ras2.snb.ch
datasharedev.snb.ch
testgold.snb.ch
datasharedev.snb.ch
alert.snb.ch
snb.ch

Certificate

The complete raw certificate details for ras-betest1.snb.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszxAspcI/mAJuUgvIpPi
JC2S1MshbHMT3s+Gjb4pwf8FIHXGUeKs9QLoap1RQ1Xo5lwWS7Ggicxjf/eC9KsG
Ca20mSrhMbbP77987hZ3PvBbcG0V+lmYo+HAljssUxDmPIWZ+ITolVltNH3Synr0
+j3/pX95V5dk7gyk/5AIAB+KMZMWk/ChEhAQrJrNAR7lbra+DNw37Zy8xg8fYQUu
fip48FUgwLCILRnHeKhIJ8CJffUNofUUNhT9XVKvf1q4Q4HTRqmn9acu/P47tFwh
15J7+uRyL6abvdCLkl9bWt0i6in0S38XMdoq7qoDGB/DkUFx7Cl/xp2mB138word
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 664971441407862952316316274357817008918249335800
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 09:42:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-15 09:42:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ZH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Schweizerische Nationalbank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ras-betest1.snb.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22626368315026153166599841875113956165476425166670237677257780923183128352685373700749103098061769085373689084265993940082017540022575152370760436463224821387586315142016044208204948542130173588057536793827004528824376919259879466380754908284768831755651252502331935046953933791284486447951885507749965988628835780819630474477888140144654479213577473624024241951848613856891555359173206483840598444170897207229681928637320351645732621937791606046778115157767248035708091405257038849990587763206864071393725906305828200968505477615363680372873035000334739344581621198854054339665288385142924399274967803271216563412373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-betest1.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'request.snb.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							126315d044dc1face03d7fffcdaefbbf8c6423de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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