my.ebs.swiss

Issued by SwissSign RSA TLS DV ICA 2021 - 1

About this certificate

This digital certificate with serial number 2f:64:7e:a4:fa:ef:f1:06:4d:ab:74:7b:4d:09:c6:a9:ba:f6:2b:34 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=my.ebs.swiss

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 2f:64:7e:a4:fa:ef:f1:06:4d:ab:74:7b:4d:09:c6:a9:ba:f6:2b:34
Serial Number (int): 270563673036461943233636685996282002531365038900
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: e5:81:cd:6c:bd:42:cc:25:4e:08:75:65:28:12:5a:08:20:11:64:c6
AuthorityKeyId: 3c:9e:52:79:03:63:6f:4f:9c:81:1b:d3:28:70:0c:24:5a:ea:a5:87

Fingerprint (sha1): 27:50:32:75:61:bb:85:b0:d0:cd:36:1c:27:74:76:d8:ef:21:3b:2d
Fingerprint (sha256): af:97:49:07:eb:d1:1a:c5:18:fc:98:5d:c5:95:c4:cc:b5:6f:cc:fd:53:77:8e:86:b3:00:66:4f:8c:cb:5a:83

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587

Revocation information

OCSP Server: http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate my.ebs.swiss

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for my.ebs.swiss

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

my.ebs.swiss
www.my.ebs.swiss

Other certificates including the domain name ebs.swiss

(limited to 100 certificates)

Certificate

The complete raw certificate details for my.ebs.swiss in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270563673036461943233636685996282002531365038900
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-08 13:12:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 13:12:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'my.ebs.swiss'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 884531342870715803120257532649108132529795508222001039144286967492138152295443246534998750207866269994022105776842708856274955591975181237445836431004891680314956532890150876964624152044984203104096766719018592127637549237178118912181318972546663386850088016944561196584668858921069989124059077151671729656839691615533267747542112306609013246199356750645657631719740627788901276300080959604471367704430555908085855059694039784116207292638908320229178779454210989965054136707646200288001652079709683867803346391347700866215241634278639059578171114175247734234051778309581114813566406494936593810430126153705895332925417430852325720901378245035401577143048220903230384413071125529829968475338658495683502464457934525223949854393638624307789688023301528188905991234752216992182729664267168176905416537764997931599224520069545821245939021962866618418187196312364340821482477443125068920713066124184847784260854827122830531181260345932983435066420923994370732570055829492829696864828620877331867621908433206630963573803150496766934924734439434821113280939848615905803319015350621905725650339041093794896744340467639897621959218068210292846782920138078391943619376265934273070185168087905711591283041756172690604673307219481365445985436689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.ebs.swiss'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my.ebs.swiss'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e581cd6cbd42cc254e08756528125a08201164c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3c9e527903636f4f9c811bd328700c245aeaa587
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (842 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (838 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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