events.empa.ch

Issued by SwissSign RSA TLS DV ICA 2021 - 1

About this certificate

This digital certificate with serial number 19:ff:5a:5f:9b:84:34:2a:5d:e3:85:9f:f1:80:1c:96:fe:3e:2d:ca was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=events.empa.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 19:ff:5a:5f:9b:84:34:2a:5d:e3:85:9f:f1:80:1c:96:fe:3e:2d:ca
Serial Number (int): 148419331935496793492200366408652205816385777098
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: da:02:95:0d:e0:52:86:8f:8d:55:82:d5:ef:d7:85:2e:7e:0f:37:fa
AuthorityKeyId: 3c:9e:52:79:03:63:6f:4f:9c:81:1b:d3:28:70:0c:24:5a:ea:a5:87

Fingerprint (sha1): 11:01:8c:97:45:7d:72:2f:cb:91:48:be:9c:32:f7:53:3c:70:27:d7
Fingerprint (sha256): a9:42:af:ed:56:86:c2:9e:4d:34:31:2a:d0:87:a1:02:14:1b:25:d4:d5:15:64:11:69:c6:31:85:94:00:ff:44

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587

Revocation information

OCSP Server: http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate events.empa.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for events.empa.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

events.empa.ch
www.events.empa.ch

Other certificates including the domain name empa.ch

(limited to 100 certificates)
certest-win.empa.ch
sonrail.empa.ch
certest-win.empa.ch
events.empa.ch
events.empa.ch
sonroad18.empa.ch
sontram.empa.ch
sonrail.empa.ch
sip.empa.ch
sonroad18.empa.ch
sbc.empa.ch
*.empa.ch
sonrail.empa.ch
events.empa.ch
sonroad18.empa.ch
test2.empa.ch
events.empa.ch
events.empa.ch
*.empa.ch
sonrail.empa.ch
*.empa.ch
*.empa.ch
*.empa.ch
certest-win.empa.ch
sonroad18.empa.ch
*.empa.ch
sontram.empa.ch
certest-win.empa.ch
*.empa.ch
sip.empa.ch
*.empa.ch
sontram.empa.ch
sip.empa.ch
events.empa.ch
adobesync.empa.ch
*.empa.ch
*.empa.ch
certest-win.empa.ch
sonroad18.empa.ch
events.empa.ch
test.empa.ch
*.empa.ch
sontram.empa.ch
test2.empa.ch
sip.empa.ch
certest-win.empa.ch
*.empa.ch
adobesync.empa.ch
sontram.empa.ch
sbc.empa.ch
sonrail.empa.ch
*.empa.ch
*.empa.ch
sonroad18.empa.ch
test.empa.ch
sonrail.empa.ch
sontram.empa.ch
sonroad18.empa.ch

Certificate

The complete raw certificate details for events.empa.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVw6PDm11jpJS8DgF//J
ob0aamI6agmPvoky5Rq8kJwtgZnypdl5fEEgEWcTFuzljUuF6XDfiu3F/T/a9epf
IT3gN6bDgabrku1qDgCc8AGwzJEDuNi3lWvhcELSj1DLIKRYsQjx59F2lMOvauyb
i47bkTVTgRxzoOq5GQXO3toRr0azDFTZE47sxp3oH5N0q/D5KcFF3Dk6GBQtCBwi
Gnv+mJnybzZ5zid3QNrKqHCLxR9NZrBTqPKdqkbEqctedL0/otdbpuho3XMP3DeA
JB/94RWnVIKJrlu5qjIetSEfsw2CkE9HGDwt/9x8nk5hvX70OXZHp4d/qDiOy3gk
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 148419331935496793492200366408652205816385777098
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-07 07:55:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-07 07:55:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'events.empa.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22894612264996067884528663193401899198677385865116858225393716877289336927006836118789872367694761586051036124827087798842390130099791125261131206117806442183351098119881014082382581543200544347992830350416093786951162058043852033148723517980656808921682164150832532924535156837993164924986712351503171451880518763629387534664887138130461006568459734594729186567517836068757564152185398698816186869316032215597121301970457995312767277324240895577414179270240242616331403147429763647738743602016539589758757962952099646707356745005604906854594698406257372687564738247064791341698812102654070183876465993226738946548789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.empa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.events.empa.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da02950de052868f8d5582d5efd7852e7e0f37fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3c9e527903636f4f9c811bd328700c245aeaa587
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (849 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (845 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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