fw.kellerfahnen.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 71:54:cf:70:95:3b:f8:14:7b:a9:a3:ce:21:5e:c6:c5:f3:c6:d7:25 was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fw.kellerfahnen.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 71:54:cf:70:95:3b:f8:14:7b:a9:a3:ce:21:5e:c6:c5:f3:c6:d7:25
Serial Number (int): 647007290252949756645420731583240643209572308773
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: c6:08:85:ba:88:d1:e2:cc:16:07:e5:91:be:9b:87:7a:ad:d7:cf:fb
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): f7:f2:a0:42:dc:44:35:1d:8d:85:eb:34:b6:5e:d2:5b:e2:e1:f4:53
Fingerprint (sha256): 9b:8b:c3:d9:30:2a:4f:15:86:c8:48:7b:bc:37:30:35:c5:8b:fc:ad:5d:dc:9f:ca:b4:8c:5a:b1:7c:21:81:c7

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate fw.kellerfahnen.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fw.kellerfahnen.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fw.kellerfahnen.ch

Other certificates including the domain name kellerfahnen.ch

(limited to 100 certificates)
kellerfahnen.ch
kellerfahnen.ch
fw.kellerfahnen.ch
test.kellerfahnen.ch
webmail.kellerfahnen.ch
test.kellerfahnen.ch
www.kellerfahnen.ch
kellerfahnen.ch
www.kellerfahnen.ch
kellerfahnen.ch
fw.kellerfahnen.ch
test.hach.ch
kellerfahnen.ch
fw.kellerfahnen.ch
test.kellerfahnen.ch
kellerfahnen.ch
kellerfahnen.ch
fw.kellerfahnen.ch
test.kellerfahnen.ch
www.kellerfahnen.ch
kellerfahnen.ch
kellerfahnen.ch
kellerfahnen.ch
test.kellerfahnen.ch
kellerfahnen.ch
kellerfahnen.ch
kellerfahnen.ch
www.kellerfahnen.ch
www.kellerfahnen.ch
fw.kellerfahnen.ch
test.kellerfahnen.ch
www.kellerfahnen.ch
www.kellerfahnen.ch
www.kellerfahnen.ch
kellerfahnen.ch
kellerfahnen.ch
kellerfahnen.ch
test.kellerfahnen.ch
kellerfahnen.ch
fw.kellerfahnen.ch
kellerfahnen.ch

Certificate

The complete raw certificate details for fw.kellerfahnen.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHHLCsqEflpA8alHmV/h
abhal1Fg+Hra3706PPgZkJRf+8ZP/ZPeYpDJShBYyhFxsiwHHVeJZysPzR1d7VVb
pfcnK71SYGeWSypOGTyzmR1vn89tUo9wShyiXupG24KTrpQA1A69brR7uktOZ3dl
3gDYCoD7fx6Fro0/8UCAwGb8z6cXKPW1CUhE00LU/Ro9mcJbwP1J3V8EoN5PmJui
BdR6MMzMhKwRe4CYNA88y75H7PgZ72hbGHPnNJRv7GJjI/74ikSqN7MI2dU/jlVG
XX1nQX5FvDQm9JeBfRn53S725WIaB9Y5w4CQlZGOs892bVNW/mbrh0Xp8efLsMhK
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 647007290252949756645420731583240643209572308773
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-27 08:53:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-27 08:53:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fw.kellerfahnen.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24293868038945416659871126146594353411311207925995327902257419393297819933233298529097426459957075843382531448313958117620683918895404674703038082672870198300747285177322130054679930706252178922464869238362438696680832778171582567486990397213611202563813908513409617081616419241264141250658001883521393418786799775277934722117720098109095969241852700592941132441158132545769341905059602853512491980185911263262354083763671667317325514012039245292006259411090394845023881000029339943691317348206583585136559291202957740732081497966055798391562450384899081779666710254413284705198053222364922851454392347741931774167661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fw.kellerfahnen.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c60885ba88d1e2cc1607e591be9b877aadd7cffb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0041f24dc916674a29713fc2e7b9c64a890bcdd05947ce340c67ba61bca906dbcf610a78854a3ffd30f2ac1d6172998c9d86904916509dfa69c905f5cb739926f746413b616b89eaf473e8eb4bfa39f2426567773558a55995c3d9ee11a9021fdb54c7e5cd9f4f89a344900efb23c3aa788731539cb0f1713f80a0bdc47116c1cf2afe1469ec2ff727ddd54262e458338251422f3482414904fd2d44d42046eeb8c4a826a5bf6cb5002353bafc488010ec12bb6204ed89412e9e7727cebd3fe1206aa7f30287f93eacce59bcfe94e9d13e8484fb4884649ad878118a9a52c57f84714ca78f7c6b133b17d3aaae43584a4aeb548413824832e5b389dd723f8fe22b8b54ef2e177e170e905d7e4dbbbef8a6cc479627c53301f517105ad7c1607091c6106577f4390f4e845108e83b473a5cc8080f897a5b73739a844fce375b90f09f765a3987c1a2838c665aa37083a4e18fb4159128f1436d31287d75ca80906504f1e94e88d725a3da0f99b850d98ae6ae421af3971959c295d4fcc3298ae3ef1cd3e2d9850df7c84933d9ac5e629e193a443661c5c04fce2b112c47feb72698247d713d4a73f7c869c7443cc420445f4f15747871b3b499f796903b1f376c960412a38c635d62ea782a24cc0e843d0e576e932d4a30ade08facbb16d61a2fec58d617d37683c5b9e8536a225152d1b881225a353f61529dd370fda4ce9fda1b