asset.ebs.swiss

Issued by SwissSign RSA TLS DV ICA 2021 - 1

About this certificate

This digital certificate with serial number 2a:de:b0:56:d6:71:79:d5:9c:ab:63:64:23:92:0f:6d:72:bc:1e:be was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=asset.ebs.swiss

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 2a:de:b0:56:d6:71:79:d5:9c:ab:63:64:23:92:0f:6d:72:bc:1e:be
Serial Number (int): 244743739120326595097964582903238937951143206590
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: a6:b1:6c:96:86:ab:26:62:83:8e:22:65:88:0c:78:e1:9a:50:ea:78
AuthorityKeyId: 3c:9e:52:79:03:63:6f:4f:9c:81:1b:d3:28:70:0c:24:5a:ea:a5:87

Fingerprint (sha1): 59:fe:5a:45:3e:2e:1d:d7:44:26:ab:3a:d6:ac:cb:c8:aa:3b:a6:42
Fingerprint (sha256): 9a:cd:c5:a6:ad:a2:7d:a9:1b:21:c0:07:f0:e4:db:72:5d:2c:93:a5:4f:8d:28:e4:f0:09:7f:fe:a9:8e:3a:83

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587

Revocation information

OCSP Server: http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate asset.ebs.swiss

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for asset.ebs.swiss

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

asset.ebs.swiss
www.asset.ebs.swiss

Other certificates including the domain name ebs.swiss

(limited to 100 certificates)

Certificate

The complete raw certificate details for asset.ebs.swiss in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvU5fr1EAfUXbB+HdRqR1
bd/ljgRb9wLEVN8p1oj1XAjZTCGzM2s3BabQMQkmmN6hX+RhoGm3KjqjHIMV54j8
dzBHSC5+sF0PndmFKcpSW0oQbpktuqtVAoqH/cTsgqkO/GxkK/b/K0fU3y3OV9iI
5cVSkMHCpyVFRfqDI1bas4fNGSalasFPm6JTQWWq4OHgMUvc1Cggb3e0sGonow+l
iUZo/5/2xLEmfuuzksCIslgdzgM9x62bmkS0KI0wMr5os8baf3v4G5RzVAeIaRcV
uIEnCNZ+1hdZfIPlXuMRkmSu1oWxiSbJO7RTX6v828xMMyd0YYrjKPcfGlpnkcGc
OZtNTVjwIgVE+CoJGuK7ZnSUIwq5nGYzt9T4eBXRZXiohU9mge5L+4ZfamWwNOVK
seY5MZX27KJp+YqPxx+kJfe+7Qe7uNrmaJoFCnHjhWNlcuy3DDVy2CUfYC4g0D9f
7+g+YgPWZ944WgD2AYxi7wsR+YzvpOmg2Nn+QuG5gE7XU8xowWfm8/lcWe3+yAHo
PWovnqyekeFUW2xGEYMETcANxHBFKQqt+Ps0M5i9GczENuOfn5zAbRnc3xRsqG8j
AfTu0GoDnyMwIk2ZitlHf66T2WYLJHux0xv2giLTk9jtv7fZPtzyj6N6xF5iu8Nu
7zmpWiFfC2bvq6RxC6jv+kUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 244743739120326595097964582903238937951143206590
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-18 10:30:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-18 10:30:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'asset.ebs.swiss'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 772301701829410545317974681859269972490526348956907607173772740465966718022448640030902027688041422054699857106221575293530048904193351442532605234957516721935944573763017938307845528711927058953843769575197159649423458550005165141356145753205969652217453352720795466694489363677711339701028897446179126579490030949161704488192437351053518396279739972837577204661205454451257399925043578767383145499107381617831405817260560526234216679280894278238352606104028690737335549022143753876305350066088256970645014242062292776911805459994948288108402225478685572187852661933763709002189023817744713725680383350678174556419013110400303169873215879448780224184552080018950051147022117373346159231188688221166142319586558626007842310296108953531652542651971046570180311940481793113415913123418117925555022444983759603226422615915032755943271227294341708144970073503760105604636531448462681769319955927016208132391610367224859150539920573616817441025827792106841457590580851930123569590871879539595257120610323395804428195811512119822504678556164658681330596736951546633845851164373947254510665740395645634862476393875960463816814590700763800763284131413697097518984333038390273904671890022649630243641448395783146579406612532274604330556848709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asset.ebs.swiss'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asset.ebs.swiss'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a6b16c9686ab2662838e2265880c78e19a50ea78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3c9e527903636f4f9c811bd328700c245aeaa587
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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