*.ext.ehpp.schwarz

- Schwarz IT KG -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 46:8c:29:58:68:4b:7a:79:df:e7:b6:21:98:b0:37:ef:b6:58:fc:88 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Schwarz IT KG

Organization: Schwarz IT KG
State / Province: BW
Locality: Neckarsulm
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 46:8c:29:58:68:4b:7a:79:df:e7:b6:21:98:b0:37:ef:b6:58:fc:88
Serial Number (int): 402755059972666163084728320089722480275268107400
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 3c:63:af:28:09:04:a9:59:93:20:17:09:6a:00:5b:f9:b9:74:26:50
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): 2f:5a:15:85:76:dd:0b:de:8b:92:30:1f:24:e8:d6:20:ef:c5:3f:28
Fingerprint (sha256): 6e:38:c1:10:ef:0d:2f:6d:ce:29:52:89:db:3d:ca:f5:33:05:08:bc:f8:76:49:6f:d2:1b:0b:db:13:8c:7e:5b

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate *.ext.ehpp.schwarz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ext.ehpp.schwarz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ext.ehpp.schwarz
ext.ehpp.schwarz

Other certificates including the domain name ehpp.schwarz

(limited to 100 certificates)
*.ehpp.schwarz
*.ehpp.schwarz
*.ehpp.schwarz
*.ext.ehpp.schwarz
*.test.ehpp.schwarz
*.dev.ehpp.schwarz
*.ext.ehpp.schwarz
*.dev.ehpp.schwarz
*.ehpp.schwarz
*.test.ehpp.schwarz
*.test.ehpp.schwarz
*.ext.ehpp.schwarz
*.ext.ehpp.schwarz
*.test.ehpp.schwarz
*.dev.ehpp.schwarz
*.dev.ehpp.schwarz

Certificate

The complete raw certificate details for *.ext.ehpp.schwarz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiWM2rFJAE36X4y7frO8
DaXHCBqiZCoIW4WU+QVltFLVeDf+9ClQAy7+P8QVQXVvDndPHtfcxAbtthTd1ZXY
CrhVIAPeBjOKua4Wj5hk5E4twDZ3nFGSePSS6DmgkJ8j3Wj7y82c9hRry4nBezMP
d9inNZt6X3vaePnMnyYunFyj0rlx3FKtJo2KonBSoJyPeSex5+AItR0s5wU1UVme
GGyHP+h6kX4b0HFRHcEqInAeVb8DTGTe+azNbD/pbxduuSnrB2Zj7f0iiZbLd7TQ
qXPcFwsYb/KKvu9KlgXRMzEqXghf9K8G9BkPnfM7t8EPDgfvZqUejsv8xoCnMceD
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402755059972666163084728320089722480275268107400
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-28 08:56:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 08:56:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Neckarsulm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schwarz IT KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ext.ehpp.schwarz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16934449565107536941952988009413859355440816959649114255781126373452633581257312078418782543408364591322509869575801124143122911266232946831443048767210435455909555237755886466970662432528608700147787081275468028778858214877180604686235882960993198164627850698897222555465082463250899230984319912118290971908625879958661690989241107621331061657524029488503548503501649719519888138880639081786537463806495463247833877841738765154454531503308428736205179880037102344166023320265220889322073892070471587063348396194615634927850390696175107129944235090161597801975335481209023157906012468824829971906825632800655475704713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ext.ehpp.schwarz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ext.ehpp.schwarz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c63af280904a959932017096a005bf9b9742650
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (726 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (722 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0059477ec66a75774609b66f38615835d8a2de6735bd2a477f9b01ac22bf219b71b9ccb0f7a5b19e482deebe46177d96fc1abfe19abca3d8c86842bca1349114088cb1bfc6d2e816b34cb8d80b456d4aba1e0666402d70028edbfec281a80239f57ed7f3bc8695bebc029a1a51426b6b225d82dd8b4f298cde019614689e881dca54d0560538eefb512ab8cab80a36cc9bce620e21b8a78bdb1d6113aadb2f8809b21634960d0965b915771a1220184a5cb3202c3bb2246ff68a6267173cd8cc7b6f5f6ae0e060154dd18f8d531bcf416c9858e19cfe92184657108e2e94c829e43d9894b48e4867665183a3a96f198a8a578481c17f6f9f0ec2e3d2fd49fac3ff7f43a2d517f40cbad9291f1a56e23aa0af874d02c752e45b7a4b6cdd8dcc1dbbc7a35f0910257664bfccd93c3ede6dc04093bcf5dcf617bfce4f8f3b44ac6f28c5efe0cca20cbbffb5915fe0fb3fa4fb4b400a1dc26f86c8ea553b51fc66bb13a69aa7bda341197a12556c517e819da67031f1b0db7c3bd054e4a0aa262d7d6e625626180dd944e4fc0d7068b7b67e54ffa4d63ae7ad8d960ecae724060011ede41df246dac7ffb4e6260fbae6a2e69fb34c20594cba21ed8cdfe95ea91a08a65c0d5c00441e724b0641fd41e2880ccc57a691ef5f92ac8dca5d6901113c51d074af8c9a94e1f13368f4d663500ced30f203e4b7d5e1c3602eb9f4080b3a945c