www.ebf.com

- EBF-EDV Beratung Föllmer GmbH -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 5a:76:bc:e7:1d:96:5a:c7:82:d5:21:a3:c9:a5:9c:17:9e:1b:af:48 was issued on by SwissSign AG.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

EBF-EDV Beratung Föllmer GmbH

Organization: EBF-EDV Beratung Föllmer GmbH
State / Province: NW
Locality: Köln
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:76:bc:e7:1d:96:5a:c7:82:d5:21:a3:c9:a5:9c:17:9e:1b:af:48
Serial Number (int): 516457113061882398005140953873859049259221626696
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 16:83:da:14:08:8d:93:8e:91:9a:51:a0:f5:c7:f8:b3:a9:27:37:24
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): 78:92:87:3c:56:bb:f1:70:0f:22:d3:1e:4b:7b:be:ec:03:2d:66:28
Fingerprint (sha256): d0:ba:79:36:6f:31:31:39:c0:83:ef:0d:bd:ab:d0:d8:24:b7:84:ea:1f:1e:de:1e:20:52:e5:97:b3:6f:de:2c

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate www.ebf.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ebf.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ebf.com
www.ebf.de
www.ebf.us
ebf.com
ebf.de
ebf.us

Other certificates including the domain name ebf.com

(limited to 100 certificates)
*.ebf.com
support.ebf.com
adfs.cloud.ebf.com
emm-cloud-sentry.ebf.com
emm-cloud-sentry.ebf.com
www.ebf.com
adfs.cloud.ebf.com
www.ebf.com
ebf.com
support.ebf.com
*.test4.ebf.com
m.ebf.com
support.ebf.com
*.vodafone.ebf.com
www.ebf.com
*.cdn.ebf.com
www.ebf.com
zm.ebf.com
*.unite-staging.ebf.com
*.unite-staging.ebf.com
www.ebf.com
support.ebf.com
www.partner.ebf.com
ebf.com
www.ebf.com
support.ebf.com
*.vodafone.ebf.com
www.ebf.com
www.ebf.com

Certificate

The complete raw certificate details for www.ebf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 516457113061882398005140953873859049259221626696
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-16 14:09:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 14:09:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Köln'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'EBF-EDV Beratung Föllmer GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ebf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 828977850800825984736375771101931487588004880401175903007206442058456306057672229904421660952221258217318122533647185528152330873473406598111105154676467644014854827964757042793914981650234606362270558883031772424346168526855660410950232132336675628517046940871586440527582562063222568464607486323612728505122559878852356394741275888096105884433858669175824831088222249447780577265225308236930592485185212133495366774091175227828118052204235276685181540634031247701496289870039994077404030105915468012144903158157409094008758143680041111395817745680394062641889257211995643603305341581715589233512087508903404486667296619934768731567566754866899137766598317947887762907776929355265711332258102846234936650220237403585456765499575281673061932772515928388814367565382889112948618830579244315768567055214035347678010406896292742332399610795099250396560410864009374631316359325920771015060009677606098474789205542498638784039209527077235645641936466361098253314552524997906275316738123424638963239257876632852608593358289938719863651635134837677440426707916614340409218608840136256793714688999506294750790618101991253281430099360899175470777396495182705087307927842513472675895691204900927443095108939263334939167568848685178601096324401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebf.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1683da14088d938e919a51a0f5c7f8b3a9273724
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (608 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0059ff027cba0b02382041ae6dcda9790c0b21713d7e81a9029df57f8e24cc546692468e4a54784f39495888eb34514c32cf9a60c65ee607f7b2d2e21c8356746011a41484dfc4ec3a183bded721d5356fb480e6d1c6a975c215a77ec4c44050984d525e37f0f69e65dd8c0799e4563d5f8d864d17720135f6197f02a8ebda0262fbfb541ca16934a1bfd8219563040607209418a045071695ec32b18a2e5851f8a79f962aa4104ba5a49e64442bc3409dd1d2062805f0068e6dedf70cb09eab4f3e82d8b3a131ca7222724ce3c3965692e4f90525628aa39128d8a0b68cdb30da093bf7da23f93c1e41ece4f0d68ad8e6283d66c0ea11f72212edf2c425b04020c0b5a36ca865da6fd7bac78d4eda641e7ce255665daa10cda6d54c9ba1d2ce3e44a1fa1be279a6f7fd00a6c2c4867e8d2c5cd159582f27e0691661505fd7c2abc6220c2d3ca58c9a23d11c43f5f12158eb3ee121d2200bbae8227fa8ea77596ec0a56265a8f8e41696a393898d66ad8603433d6fb97bfb796a840153277ab389a1cadaee90629150b506e9a80306b31b3d26e6e1b507095525efd95fe37bdbbb65cb91840537387916e6be9f619a98c61f6a80db60542f4e3887c92b9eade8b1efc8e0768a464743700cd9600bebcf3d4c05aa8dfc19e0ee7006068ed7543a104e558501a6aba86725ea827a25cd8152fdc0a1f3eb777ebb28d0cd371eb2d27d