*.hoegg.ch
Issued by SwissSign Server Silver CA 2014 - G22
About this certificate
This digital certificate with serial number 10:f3:92:9e:0a:c3:a2:ce:48:58:52:8c:39:98:e7:60:89:f4:2e:b0 was issued on by SwissSign AG.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.hoegg.ch,OU=Domain Validated Only
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate has expire since
Certificate Details
Serial Number (hex): 10:f3:92:9e:0a:c3:a2:ce:48:58:52:8c:39:98:e7:60:89:f4:2e:b0Serial Number (int): 96775705589092464254421531513209345078503681712
Serial Number lenght: 157 bits, 20 octets
SubjectKeyId: 8b:b3:94:9d:00:a9:2d:ee:ab:a2:01:b5:57:42:57:64:62:d6:24:79
AuthorityKeyId: db:bc:bf:82:18:59:dc:69:fa:f8:ab:aa:83:4d:77:1d:0b:b0:8b:d8
Fingerprint (sha1): 0b:c2:2d:99:58:39:a4:0a:19:17:3f:5f:37:79:ec:dc:10:7c:3f:5f
Fingerprint (sha256): cf:d8:8a:ec:b3:e7:80:1b:e9:d4:d6:c1:5b:9f:d8:33:7b:ec:51:1e:ab:35:2c:1a:e8:7d:3b:e4:6b:fc:ef:7b
Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8
Revocation information
OCSP Server: http://silver-server-g2.ocsp.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8CRL Distribution Point: http://crl.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8
CRL Distribution Point: ldap://directory.swisssign.net/CN=DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint
Check the revocation status for certificate *.hoegg.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.hoegg.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.hoegg.ch
Other certificates including the domain name hoegg.ch
(limited to 100 certificates)
abacus.hoegg.ch
ssl.hoegg.ch
ssl.hoegg.ch
ssl.hoegg.ch
remotedesktop.hoegg.ch
hoegg.ch
www.hoegg.ch
hoegg.ch
hoegg.ch
www.hoegg.ch
hoegg.ch
remotedesktop.hoegg.ch
hoegg.ch
hoegg.ch
remotedesktop.hoegg.ch
hoegg.ch
www.hoegg.ch
hoegg.ch
www.hoegg.ch
ssl.hoegg.ch
ssl.hoegg.ch
hoegg.ch
remotedesktop.hoegg.ch
abacus.hoegg.ch
*.hoegg.ch
hoegg.ch
ssl.hoegg.ch
ssl.hoegg.ch
remotedesktop.hoegg.ch
hoegg.ch
hoegg.ch
hoegg.ch
ssl.hoegg.ch
ssl.hoegg.ch
ssl.hoegg.ch
remotedesktop.hoegg.ch
hoegg.ch
www.hoegg.ch
hoegg.ch
hoegg.ch
www.hoegg.ch
hoegg.ch
remotedesktop.hoegg.ch
hoegg.ch
hoegg.ch
remotedesktop.hoegg.ch
hoegg.ch
www.hoegg.ch
hoegg.ch
www.hoegg.ch
ssl.hoegg.ch
ssl.hoegg.ch
hoegg.ch
remotedesktop.hoegg.ch
abacus.hoegg.ch
*.hoegg.ch
hoegg.ch
ssl.hoegg.ch
ssl.hoegg.ch
remotedesktop.hoegg.ch
hoegg.ch
hoegg.ch
hoegg.ch
Certificate
The complete raw certificate details for *.hoegg.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUEPOSngrDos5IWFKMOZjnYIn0LrAwDQYJKoZIhvcNAQEL BQAwVDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEuMCwGA1UE AxMlU3dpc3NTaWduIFNlcnZlciBTaWx2ZXIgQ0EgMjAxNCAtIEcyMjAeFw0xNzA1 MjkxMzQ0NTJaFw0xODA1MjkxMzQ0NTJaMDUxHjAcBgNVBAsTFURvbWFpbiBWYWxp ZGF0ZWQgT25seTETMBEGA1UEAwwKKi5ob2VnZy5jaDCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBALIBx0lNUdOsIqLqLR4pauatW/rZf4OHV9OINli2QVkG w+06Qmyw8Z3mOFBgLyPGHvW+//qb1IqxiIUcP545fEXnpQWbpz8Atl9p/iS+B2tO FKFK2Ls7ZTNuXRywQ2Tbd5fH/B2OhwRH3R7mzLClAjSPJUI6JruHyeVv3p7JnN9y hF6iDkArUf22knFq0fRFbalVHWV8EXkYnwgKWafgXCglmJv54SZQaWLYWNfNEPLj 4tLscrftarL+mUX9pA36minZobLVLUZR2jD0dToBpU/Ut/Xrm7czyyFn383IOlZa KFt8n+61SGlKHgYaOfhoMUfprw6srk/YB1s1bxmL3cMCAwEAAaOCAskwggLFMBUG A1UdEQQOMAyCCiouaG9lZ2cuY2gwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQUi7OUnQCpLe6rogG1V0JXZGLW JHkwHwYDVR0jBBgwFoAU27y/ghhZ3Gn6+Kuqg013HQuwi9gwgf8GA1UdHwSB9zCB 9DBHoEWgQ4ZBaHR0cDovL2NybC5zd2lzc3NpZ24ubmV0L0RCQkNCRjgyMTg1OURD NjlGQUY4QUJBQTgzNEQ3NzFEMEJCMDhCRDgwgaiggaWggaKGgZ9sZGFwOi8vZGly ZWN0b3J5LnN3aXNzc2lnbi5uZXQvQ049REJCQ0JGODIxODU5REM2OUZBRjhBQkFB ODM0RDc3MUQwQkIwOEJEOCUyQ089U3dpc3NTaWduJTJDQz1DSD9jZXJ0aWZpY2F0 ZVJldm9jYXRpb25MaXN0P2Jhc2U/b2JqZWN0Q2xhc3M9Y1JMRGlzdHJpYnV0aW9u UG9pbnQwYQYDVR0gBFowWDBWBglghXQBWQEDAQYwSTBHBggrBgEFBQcCARY7aHR0 cDovL3JlcG9zaXRvcnkuc3dpc3NzaWduLmNvbS9Td2lzc1NpZ24tU2lsdmVyLUNQ LUNQUy5wZGYwgdcGCCsGAQUFBwEBBIHKMIHHMGQGCCsGAQUFBzAChlhodHRwOi8v c3dpc3NzaWduLm5ldC9jZ2ktYmluL2F1dGhvcml0eS9kb3dubG9hZC9EQkJDQkY4 MjE4NTlEQzY5RkFGOEFCQUE4MzRENzcxRDBCQjA4QkQ4MF8GCCsGAQUFBzABhlNo dHRwOi8vc2lsdmVyLXNlcnZlci1nMi5vY3NwLnN3aXNzc2lnbi5uZXQvREJCQ0JG ODIxODU5REM2OUZBRjhBQkFBODM0RDc3MUQwQkIwOEJEODANBgkqhkiG9w0BAQsF AAOCAQEAIxwngouuD+rVOiwOwXhVXNmtPEyY1hLO63EZ74R32RSDx8H2ILEv6bgg UAnl2PBEK623IefgZY2CQDt6cgo0HRn35dh1Rc3sVg4VMgIRO0Oetxfgd0eZSdnT AkCly8Gtx9EHsGhYr4+f/TFG3LSQh9W7xQC7kK06JuB1qqGa5gp0aezEoolFcvmI tJMgoX6Ar/LNuYJV8lii7K0LisYVNAfPfcCdGQGHLFAVesM0FMykc2UW+dCBPA6b ceUqJs04mmMxsE/rICu7fqHlyQujIfKuQGveU1uQ8E8G0vZJO72cvhxBsDKI0pPR lqwNc7q3r38rShvs6kjwavLTBfgklA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgHHSU1R06wiouotHilq 5q1b+tl/g4dX04g2WLZBWQbD7TpCbLDxneY4UGAvI8Ye9b7/+pvUirGIhRw/njl8 ReelBZunPwC2X2n+JL4Ha04UoUrYuztlM25dHLBDZNt3l8f8HY6HBEfdHubMsKUC NI8lQjomu4fJ5W/ensmc33KEXqIOQCtR/baScWrR9EVtqVUdZXwReRifCApZp+Bc KCWYm/nhJlBpYthY180Q8uPi0uxyt+1qsv6ZRf2kDfqaKdmhstUtRlHaMPR1OgGl T9S39eubtzPLIWffzcg6VlooW3yf7rVIaUoeBho5+GgxR+mvDqyuT9gHWzVvGYvd wwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 96775705589092464254421531513209345078503681712 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Silver CA 2014 - G22' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-29 13:44:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-29 13:44:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated Only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hoegg.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22471295276379968982493783331492412061312231259813600682907808709880241645121711676893674376338689069863335946908798315888272146769482803144673523628715034352047665232193853691786463654145296432735243777186479827901520673996868943970273953388542180112491472095737076794735594633292014105086074187954511479661856325995408982886780723649502010309321061853915603657082463309958307316117263401002538814711060905292608981894949265849641323880957667888986304244258098621167703692414555629953442571002683564764333109430236767056943388546795266354515424877282680495278884291824754754824073640230317441634598481137430426279363 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoegg.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8bb3949d00a92deeaba201b55742576462d62479 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dbbcbf821859dc69faf8abaa834d771d0bb08bd8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.3.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Silver-CP-CPS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (202 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://silver-server-g2.ocsp.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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