*.hesge.ch

Issued by SwissSign Server Silver CA 2008 - G2

About this certificate

This digital certificate with serial number 35:de:f4:bf:55:ae:76:75:61:26:49:21:89:c6:9e was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Certificate Subject

CN=*.hesge.ch,OU=Domain Validated Only

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 35:de:f4:bf:55:ae:76:75:61:26:49:21:89:c6:9e
Serial Number (int): 279713819321229463130660712951170718
Serial Number lenght: 118 bits, 15 octets

SubjectKeyId: 54:e2:11:13:45:ac:84:78:a8:ac:cd:15:9c:7f:91:54:3e:97:91:b6
AuthorityKeyId: d3:44:6f:d9:fe:7a:fc:de:ac:1c:7a:a2:21:0d:64:fa:65:b0:d7:82

Fingerprint (sha1): c9:99:05:14:8a:f5:d0:28:21:aa:61:64:2e:4f:0c:b1:17:c4:ed:e8
Fingerprint (sha256): a4:67:80:fb:16:d6:9e:99:7b:04:30:bd:8e:ec:a3:b5:63:a9:46:ce:8b:50:4e:12:b7:59:e7:74:4e:70:51:6c

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/D3446FD9FE7AFCDEAC1C7AA2210D64FA65B0D782

Revocation information

OCSP Server: http://silver-server-g2.ocsp.swisssign.net/D3446FD9FE7AFCDEAC1C7AA2210D64FA65B0D782
CRL Distribution Point: http://crl.swisssign.net/D3446FD9FE7AFCDEAC1C7AA2210D64FA65B0D782
CRL Distribution Point: ldap://directory.swisssign.net/CN=D3446FD9FE7AFCDEAC1C7AA2210D64FA65B0D782%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate *.hesge.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.hesge.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hesge.ch
*.hesge.ch

Other certificates including the domain name hesge.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.hesge.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwhZ2/Ywu8XO7f/gIuDw
sRIARvJLycMLKs6d4aGjZropKQAuWGFFabn1uzno0WeiMElqiihOwpIyvHIDqXwc
dhMnQa2nJyhkAoxBbwAfhNwhJxbM90v2l5grIiHBPlTCLw38yBouJexw7ugJxTEW
pGCVoJ9Wvjj9ITvnPh2fk2TNV2UQ4GYIMdkOhJj4zs0oOQCWOHIWWWrUVFGgt4jO
AecZJZ8IIWslViH2jNsyJz3zGa+EZ1Gm7mPH25YkTkpujTGyy8sZ/SqtnpVhRYqt
7hOM63rGURl48HBimBdkhuUi4v5Z+VP+wYKEurg+rk5KI5G5yV2OVA1xS9TxkacU
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279713819321229463130660712951170718
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Silver CA 2008 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-08-10 13:49:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-08-10 13:49:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated Only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.hesge.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24115634286311081901811942464157437061101604574756870089786015405655004334054985276762682730263642736779667139370914537504035607131500522424340338336652310983435960706622621000485372489386823209130767644533706032588111030742766431291944779545813079838569073366276221309161402524983287830805003373275373721626867341518732548618075449219500687730625046968462085775912573790485411170324834686064003361068291849476454036225339224841191572763254071898395902146380889420501873227023171583962972882163617593339356646813305498484973757788474944473435690893412318867577311277578980112842535155755681165283172126328359794185261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hesge.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hesge.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54e2111345ac8478a8accd159c7f91543e9791b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d3446fd9fe7afcdeac1c7aa2210d64fa65b0d782
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/D3446FD9FE7AFCDEAC1C7AA2210D64FA65B0D782'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=D3446FD9FE7AFCDEAC1C7AA2210D64FA65B0D782%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.3.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Silver-CP-CPS-R4.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (202 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/D3446FD9FE7AFCDEAC1C7AA2210D64FA65B0D782'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://silver-server-g2.ocsp.swisssign.net/D3446FD9FE7AFCDEAC1C7AA2210D64FA65B0D782'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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