*.netcetera-payment.ch

Issued by SwissSign Server Silver CA 2014 - G22

About this certificate

This digital certificate with serial number 5b:4a:2f:62:2b:be:6c:cb:ae:31:e6:96:72:fa:ae:d6:2b:1f:fe:05 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.netcetera-payment.ch,OU=Domain Validated Only

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 5b:4a:2f:62:2b:be:6c:cb:ae:31:e6:96:72:fa:ae:d6:2b:1f:fe:05
Serial Number (int): 521172542972916960660589449319794127992210324997
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: a0:51:46:03:d9:25:68:8d:51:83:75:ce:f5:00:38:d0:35:38:64:06
AuthorityKeyId: db:bc:bf:82:18:59:dc:69:fa:f8:ab:aa:83:4d:77:1d:0b:b0:8b:d8

Fingerprint (sha1): 6b:06:be:a2:24:af:7a:94:95:d3:00:cc:6e:a4:ef:d3:bb:6a:93:a0
Fingerprint (sha256): 75:ca:74:ad:b3:e0:df:83:94:fc:52:e9:57:76:da:5b:3d:34:fe:e7:53:83:ff:f6:9f:79:1b:91:ac:33:dc:22

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8

Revocation information

OCSP Server: http://silver-server-g2.ocsp.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8
CRL Distribution Point: http://crl.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8
CRL Distribution Point: ldap://directory.swisssign.net/CN=DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate *.netcetera-payment.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.netcetera-payment.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.netcetera-payment.ch
netcetera-payment.ch

Other certificates including the domain name netcetera-payment.ch

(limited to 100 certificates)
tpet-mc-callin.netcetera-payment.ch
*.test.netcetera-payment.ch
*.prev.netcetera-payment.ch
*.test.netcetera-payment.ch
ps4visa-ds.netcetera-payment.ch
*.netcetera-payment.ch
riskadm.netcetera-payment.ch
*.test.netcetera-payment.ch
*.netcetera-payment.ch
*.netcetera-payment.ch
*.prev.netcetera-payment.ch
*.test.netcetera-payment.ch
ps4visa-ds.netcetera-payment.ch
*.prev.netcetera-payment.ch
*.netcetera-payment.ch
*.prev.netcetera-payment.ch
*.test.netcetera-payment.ch
*.test.netcetera-payment.ch
riskadm.netcetera-payment.ch
tpet-mc-callin.netcetera-payment.ch
*.prev.netcetera-payment.ch
*.prev.netcetera-payment.ch
*.netcetera-payment.ch
riskadm.netcetera-payment.ch
*.prev.netcetera-payment.ch
*.test.netcetera-payment.ch
*.netcetera-payment.ch

Certificate

The complete raw certificate details for *.netcetera-payment.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAibHcYdwJDbShIAIGrok5
ODdwjfBFf2/n24u0Ue1ckzA+MYcdntSSsBAndmx3X/QA1vItPQ1EM0XkAiHfSUmT
21mYkG+IRHLVxtVJd8mwTjeFZ0zjqs39qiGxT22kzlNLwHpvb9uTPYEFGr3KJu9j
CnZm9Ng+llLaebEVRQEfrMPt2cI6qqUlVw9zPlxkhO9ia9AoAGglWi0QGuIf0lS1
SNGtYGi5WAAeoadAoxRHZftg/NS6/IpKRNbPvA67VKDJzk5Gd0ocH5l7YcKeDEwb
NBCmH2SPLFBNfmIm2pxlanaEJKOZcwyFa4la5cBv3U37He/l13RSgPSSEgaTDJ6A
zWTRccZUWvIMYnfAYUB2IJUZtzm4BvIhXydtxqmpNIjSr00TslGtp+79j0q+EzJI
bwRHlQxaU3TsdQlMJo4vVMRtCBB63botewJ44X7S131yS8TAqzaLmweNUJG3qqal
2v7vkwm+LUzqVD3QM+h2liUnJu7yVuMwrsf6xEeDFZb23UkxYtlY2gxUeXjdddy5
WlPGIw82jHN8s8MEC/TXlILJPqpBKWUV5aZ5srlGXrb8Z/D/zD93weBLMn4IDwQ6
YocsMh7GlYTaLtlipsiy1VAn0T8GHJQlVk09FT2DQRlretDJAcTwQW5UYjaVceKw
MRpkm+y4BJzt+UIvZxAv/MsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 521172542972916960660589449319794127992210324997
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Silver CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-05 08:19:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-05 08:19:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated Only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.netcetera-payment.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 561745647615464905046589070166109397459052643188327444415645406276786719973706059080494899246558476117803451703439770864391653632405699287241732832656809586907664380874592283985109667079568714345390097348850280523027611235965173028107516935242985502955820858116254565409895702674681182910716704621578041548127960950475864385611223916956014112871232291830000836019103116328563075787453293600383196694051770471027940277221973151330289815724930173286271605343534898107430642084622712093037865416913262997243794202861289056814955346410335266076271164119727458630285053909231208254124495958241292282091837412351624622832055907956903517047810183120626184537527504102109594475513609811966524413606366168815387313573760690758954776069169278836586320005731387228530341791945912925195740396400891304112349588657064873266755512875920206801342023810828847271401757272396548128516564306523619675074725601918505525526008980560378451636839512682993882573230800167700846446616399770537071495853041032663477616970477559623750360722507418510097457773717641650683347541453035106144380759275784959920989784657046437094579402488468449133110932412949467938471653886002320539469247920772921208167496593447924169346106503770634618961058620914035841435696331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netcetera-payment.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netcetera-payment.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a0514603d925688d518375cef50038d035386406
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dbbcbf821859dc69faf8abaa834d771d0bb08bd8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.3.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Silver-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (202 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://silver-server-g2.ocsp.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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