data.test.snb.ch

- Swiss National Bank -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 4d:dd:b6:37:a7:85:d6:6d:5e:02:28:28:f9:e0:f4:67:e7:bd:0b:6b was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Swiss National Bank

Organization: Swiss National Bank
State / Province: ZH
Locality: Zurich
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 4d:dd:b6:37:a7:85:d6:6d:5e:02:28:28:f9:e0:f4:67:e7:bd:0b:6b
Serial Number (int): 444536627416556671975621825151206920567140453227
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: d4:40:26:91:fa:e1:d5:96:db:f0:7d:fa:97:5b:cf:13:7b:16:d4:4c
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): 76:cc:c4:20:48:2a:e3:69:e2:4e:c7:88:00:58:65:46:84:a6:17:b4
Fingerprint (sha256): 84:b0:72:57:05:e8:4a:7e:f1:8f:f3:40:e8:f2:b0:1b:a8:ea:28:8b:dc:c3:16:6e:e3:ba:0a:4f:56:d9:21:43

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate data.test.snb.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for data.test.snb.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

data.test.snb.ch
www.data.test.snb.ch

Other certificates including the domain name snb.ch

(limited to 100 certificates)
remotemail.snb.ch
bbuem.snb.ch
mailb.snb.ch
ras.snb.ch
ras.snb.ch
ras.snb.ch
surveys.snb.ch
mailz.snb.ch
sip.snb.ch
mailz.snb.ch
rastest.snb.ch
ras.snb.ch
meet.snb.ch
datasharedev.snb.ch
vcse.snb.ch
ras.snb.ch
data.snb.ch
recruiting.snb.ch
rastest.snb.ch
ras.snb.ch
surveys.snb.ch
sip.snb.ch
ras.snb.ch
sip.snb.ch
ras.snb.ch
testgold.snb.ch
remotemail.snb.ch
testgold.snb.ch
ras2.snb.ch
wlanportal1.snb.ch
data.test.snb.ch
sip.snb.ch
testswiss.snb.ch
testgold.snb.ch
surveys-usertest.snb.ch
secmail.snb.ch
surveys.snb.ch
wlanportal1.snb.ch
mailb.snb.ch
snb.ch
surveys.snb.ch
datashare.snb.ch
alert.snb.ch
data.snb.ch
secmail.snb.ch
rastest.snb.ch
secmail.snb.ch
sip3.snb.ch
remotez.snb.ch
snb.ch
testgold.snb.ch
testgold.snb.ch
datasharedev.snb.ch
vcse.snb.ch
bbuem.snb.ch
secmail.snb.ch
ras.snb.ch
ras.snb.ch
sip3.snb.ch
remote.snb.ch
vcse.snb.ch
securemail.snb.ch
ras.snb.ch
surveys.snb.ch
testgold.snb.ch
webstats.snb.ch
securemail.snb.ch
surveys-usertest.snb.ch
snb.ch
careers.snb.ch
ras2.snb.ch
datasharedev.snb.ch
testgold.snb.ch
datasharedev.snb.ch
alert.snb.ch
snb.ch
remotez.snb.ch
data.snb.ch
surveys.snb.ch
datashare.snb.ch
data.snb.ch
testserver.snb.ch
ras-betest1.snb.ch
remoteb.snb.ch
datashare.snb.ch
rastest.snb.ch
rastest.snb.ch
testswiss.snb.ch
securemail.snb.ch
snb.ch
sip.snb.ch
mailb.snb.ch
testgold.snb.ch
bbuem.snb.ch
alert.snb.ch
bbuem.snb.ch
ras.snb.ch
data.test.snb.ch
bbuem.snb.ch
snb.ch

Certificate

The complete raw certificate details for data.test.snb.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhK0XNDwrKp981sISLaM
u13ABfgmJpCrA7sHSGwuUQ5VICHYF9OWc1AaqRChvu6nLqVlREA+ny2VcYX9LK91
wMFbbcwQy3eljicLIVnewOmYqVtiJmJV/mdpUjwGMbi7NzCRP7mwHQc0vMHWEmcJ
Tqy6cqHU9++BpseuKt95BeUSdGFR6JQW7eZ5hHyG/H3DYI6FvnRW8WE7cPF4mtjh
f7nCZa5VDNbmTVtlRLmEappeEpmxqke7u/PxUNE5H6bFReEaIvurdSwf7gnihO9c
/xo7mln9nS7XnF2pLYm/e1IS/A3eM9qGAufQYP83sA6wGrHEH34vdV8cooKL5QQs
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 444536627416556671975621825151206920567140453227
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-26 11:34:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-26 11:34:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swiss National Bank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'data.test.snb.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19954875737700280309682257398145708076143833887723660155684436040056260906088653761556138637152451100953377912703452730036054056575285401310780688476934355932372789066780896138542679213947902315711981081299117393759466609880029541920414378512949190969038961040533483332568109478892658844398072153254779626864112026073461146148493807673181362092262887172981991731859036970502426924013216569323937705147751320231420050843824527953329897571035718338879149689574751806583019350537573188068775876002553140472392330312551406297623359287627780196327217660257515472697474984617906720274088966299902502310401241235184200985697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.test.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.data.test.snb.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d4402691fae1d596dbf07dfa975bcf137b16d44c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (846 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (842 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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