remotedesktop.hoegg.ch

Issued by SwissSign Server Silver CA 2014 - G22

About this certificate

This digital certificate with serial number 55:91:95:c3:c7:6d:76:3e:5b:d0:16:af:79:d2:df:46:f2:62:c0:1c was issued on by SwissSign AG.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=remotedesktop.hoegg.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 55:91:95:c3:c7:6d:76:3e:5b:d0:16:af:79:d2:df:46:f2:62:c0:1c
Serial Number (int): 488510869924563411558763192375546475294176231452
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 79:48:cb:3d:69:35:ba:26:ef:9f:19:ae:b9:d9:91:24:0f:b5:52:df
AuthorityKeyId: db:bc:bf:82:18:59:dc:69:fa:f8:ab:aa:83:4d:77:1d:0b:b0:8b:d8

Fingerprint (sha1): a3:58:d5:a8:6a:c5:5a:e4:14:ce:d4:1d:35:38:13:60:5b:8a:77:87
Fingerprint (sha256): bc:1d:a6:17:5d:b5:85:b9:b3:94:13:7c:6d:d6:e7:84:aa:a3:2c:47:a0:27:16:71:da:70:81:a8:48:15:3c:95

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8

Revocation information

OCSP Server: http://silver-server-g2.ocsp.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8
CRL Distribution Point: http://crl.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8
CRL Distribution Point: ldap://directory.swisssign.net/CN=DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate remotedesktop.hoegg.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for remotedesktop.hoegg.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

remotedesktop.hoegg.ch

Other certificates including the domain name hoegg.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for remotedesktop.hoegg.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdj5fvUIJvmFbWiJ0WIC
lT7cVTEO1tqd4+Thl+VDI8fHwDgv65SpiQ0o/9dH7n9QDOeVzglV5JW9eUomw6Br
To+5QlLjbd0r5Cb0YEuee+bTFazfY4DGeTkgZFIUWYlplwz5ucBdBQyA6DYbiBDm
uNaNymalgxDHmZb2TMa/2v6jeqHaJJCa25jsyTgJZv13VqTevHiQNL/YC1W8DQ1E
b7rJ1NcEnG3c86VgLroNIaR+EDYpC0w+GBi3CGwkY2B7Ww+rLbEd3GDsvio8Bdjn
DWTt3yYhAwaQArajol5WyozNbpIPyTV3HzT5BSrB+t2DBrg5Y7nbBg4ypZ3B97gY
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 488510869924563411558763192375546475294176231452
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Silver CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-03 06:10:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-03 06:10:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'remotedesktop.hoegg.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21441267699027189798189896455688326985328793088530842549691156677410259783759945227723871370812372541519558478590613707230063421614553013532570957838538861085171684749140460615793731645971411378513084294381353915472759083748357698550509445138665145448847873400040640299209328372541323924128904029956263740006271737895477628339407940281048027608392171868589375417299332774964246382093005250381326217188005526441285782835556600630967791836445311620994753817797117175229902706973765875326888020585334290436060487397847767257142202724792073151092023803441236111221947404207783690578915427318926732688380943914987721070597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remotedesktop.hoegg.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7948cb3d6935ba26ef9f19aeb9d991240fb552df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dbbcbf821859dc69faf8abaa834d771d0bb08bd8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.3.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Silver-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (202 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://silver-server-g2.ocsp.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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