siapoc-prd.azure.css.ch

- CSS Holding AG -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 52:29:69:1d:eb:cc:3b:e8:35:55:06:bb:eb:7c:b1:64:79:20:84:cd was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

CSS Holding AG

Organization: CSS Holding AG
State / Province: LU
Locality: Luzern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 52:29:69:1d:eb:cc:3b:e8:35:55:06:bb:eb:7c:b1:64:79:20:84:cd
Serial Number (int): 469060730732335094697236248118327787678085448909
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: cc:36:d1:a3:8c:77:58:c1:db:df:21:21:01:de:e0:bf:d8:b3:39:f6
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): 02:1f:d5:2d:02:45:f1:5b:54:04:c5:09:74:33:f8:fd:2b:2a:5a:34
Fingerprint (sha256): 9a:67:0f:ce:5b:d6:0e:55:56:45:60:39:5f:08:b5:7a:54:1b:33:c6:c6:12:c6:82:2f:77:69:5c:f8:ac:e6:66

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate siapoc-prd.azure.css.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for siapoc-prd.azure.css.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

siapoc-prd.azure.css.ch

Other certificates including the domain name css.ch

(limited to 100 certificates)
tc901b0ee158de.css.ch
TC901B0E917DD7.css.ch
test.css.ch
TC901B0EBAEA9A.css.ch
TC901B0EBAEB56.css.ch
vrops.css.ch
TC901B0EBAEB34.css.ch
cv8ai1.css.ch
manual-int.css.ch
lnx51951.css.ch
cp1gw3.css.ch
lnx92091.css.ch
lnx51997.css.ch
pcs52064.css.ch
scrmi1.css.ch
lnx51952.css.ch
test010420221.css.ch
rstudio-connect.css.ch
TC901B0E924476.css.ch
tc901b0ed651c2.css.ch
TC901B0EBAEADF.css.ch
TC901B0E9242BE.css.ch
ccp05-02.css.ch
xmsd.css.ch
rm1-iseadm.css.ch
TC901B0E92452B.css.ch
PCS51027.css.ch
sysops.css.ch
lnx93096.css.ch
lnx55195.css.ch
f5lbdmz-intern.vpr.css.ch
nas97005.css.ch
qlikview124.css.ch
TC901B0ECBE829.css.ch
TC901B0E9242C4.css.ch
TC901B0EBAEB83.css.ch
waf-vpr.mgt.css.ch
lb-kobil-int.css.ch
TC901B0E9241A2.css.ch
pcs53054.css.ch
edh2-server.css.ch
qlikviewvpr.css.ch
www-tst.css.ch
TC901B0E92421A.css.ch
pcs53087.css.ch
TC901B0E924327.css.ch
lnx51196.css.ch
pcs92030.css.ch
pcs53098.css.ch
travel-dev.css.ch
crmi1.css.ch
pcs53104.css.ch
prometheus.k8s-dev.css.ch
*.k8s-dev.css.ch
TC901B0EBAEAC6.css.ch
findev11.css.ch
pcs92310.css.ch
confluence-d-int.css.ch
report2016.css.ch
TC901B0E924259.css.ch
jsa.css.ch
ppvap23.css.ch
ccp06-static.css.ch
TC901B0EBAEB09.css.ch
TC901B0ECBE7FD.css.ch
ts1-f5lbdmz-extern.vpr.css.ch
sbcint-ldaps.css.ch
smartfix-vpr.css.ch
siapoc-dev.azure.css.ch
k8s-alertmanager.css.ch
p10262-acme-test.css.ch
www-int.css.ch
TC901B0E917E59.css.ch
ccv01-01.css.ch
tc901b0ebaeb00.css.ch
pki-dev.css.ch
siebel-tst2.css.ch
aagm-dev.css.ch
TC901B0E9241D8.css.ch
cev13.css.ch
lnx92090.css.ch
pki.css.ch
ccd06-02.css.ch
rm1-iserad.css.ch
ccv01-01.css.ch
pcs92929.css.ch
cev13.css.ch
TC901B0EBAEB58.css.ch
pcs92936.css.ch
pcs92794.css.ch
aut-www-tst.css.ch
TC901B0EC09952.css.ch
p10262-acme-test.css.ch
www.css.ch
st2ext3.css.ch
TC901B0EBAEB1A.css.ch
myguide.css.ch
alertmanager.k8s-tst.css.ch
st1ext11.css.ch
cev23.css.ch

Certificate

The complete raw certificate details for siapoc-prd.azure.css.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xAdeFEjhlinqHynuw4k
mWz8t2eSOPLdXExqaJIjGA4cILe737bxkHgZ9xPfU0yEcybMxo1gE+375RcecLpN
r5/lDknktKwSa2P/8SrZvJmcURCh5w/5QjJZkT8yVvmoqkV7r5Xqbl5rmd0Gr+as
FDvBbrCVSU3x0SkF1LEcf8d6aE7zaDrw0EyKroPW97RAnM33gzV+LjFNpl9RIPg8
mdCspvycJMV4KfjK8qUk1Wxy+hBKHvV6fdTF01FW3I7skgpKFXIUZfg3VyHoRIBE
+3egtnNsmSVYODj4y3d/V1CYkKlExvIkyTj5SHkuQamt1cKCCFkARRmSl+oABBqn
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 469060730732335094697236248118327787678085448909
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 15:08:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-14 15:08:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Luzern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CSS Holding AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'siapoc-prd.azure.css.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26644229008276654882793362124163029346520272247687554705051647260824951907633806260236993541654637705358218700186180312172661756819418544080443060041937810765550105906456733919957927913211502510663135198510613314423014038581583825121309557217925651182275151318677773649471093264552773468718263014002726940237037851890466900340708609954279793478930922619681575674702345202321572300194996932588335311257225088406902561314633633285138733583783163468825334038616539333374194081530600035952546939189650506675997395112269818502629008189667456483036459471601095573015223954923733645774877083429320544466248636021379790710741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siapoc-prd.azure.css.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc36d1a38c7758c1dbdf212101dee0bfd8b339f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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