mydata.ebs.swiss

Issued by SwissSign RSA TLS DV ICA 2021 - 1

About this certificate

This digital certificate with serial number 4b:d3:a2:d7:52:9b:83:c4:93:36:7c:e2:be:7d:0b:e7:ac:1c:1f:a9 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mydata.ebs.swiss

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 4b:d3:a2:d7:52:9b:83:c4:93:36:7c:e2:be:7d:0b:e7:ac:1c:1f:a9
Serial Number (int): 432893950509511933199450324306938556513857052585
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 30:47:d4:c4:10:00:b9:2d:8d:ff:27:7b:59:e5:0d:80:81:13:b9:b1
AuthorityKeyId: 3c:9e:52:79:03:63:6f:4f:9c:81:1b:d3:28:70:0c:24:5a:ea:a5:87

Fingerprint (sha1): 13:f7:65:a7:7b:3a:cd:1a:7d:c1:fc:b1:9e:5c:8d:7b:6a:ae:6c:fc
Fingerprint (sha256): d1:09:8f:05:d8:2c:3e:56:87:c6:61:dd:01:da:a6:cf:02:22:20:db:94:6a:06:0b:76:89:ad:c6:89:41:b7:3b

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587

Revocation information

OCSP Server: http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate mydata.ebs.swiss

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mydata.ebs.swiss

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mydata.ebs.swiss
www.mydata.ebs.swiss

Other certificates including the domain name ebs.swiss

(limited to 100 certificates)

Certificate

The complete raw certificate details for mydata.ebs.swiss in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1Cgjy/WDtjJIUxwGbDr2
H86mJuH3Pw9RStMasloefUe7Caq82whqe4kLfIa9S2vtY1HJnhwA6ZNlvfZN7yDC
lX/erpV4Y8YIr3dD3ZYmFjyaf+eG5wCUcZY4pNlX+B1jXfW/AfOuiP7y5+lilGRr
JtHnZD1g0U78TWartLRsgHfXb4mxqAebPyss4cdraZHuGUhyyAWtCtjaxKQr3kcg
W/Uxa1wMKz+M3NOgc0lySXjzv2TSbjU/AUA8OFH00jC97jv2lJNxVaKWvNgUYEbl
aIVDPbRVXHz0FRB0JIjFWkMqESkC2Tm1006G+fHT5UoEY1eyiC3l6o/iCe+vqlC+
CZ6HAEVQe0BomsOduK8+6jaSPgFxGUKqbiKqwoaEM8PZTtfdkbNKdMlRoCxzbSDY
Ev3Ob0qChgw3MHKbALpB4Q0GOPZEgkoftI76jnKeHJ6tCNmxgPGTTigfA7Kahmv5
dz22eVTPhaAeA/n7fXiMCL/fMuANA7Y2tbm72Cxu0XIYvTPnX6O3WIavXx9HTUfj
BvZZ2mA7sc5SuDP+g1zospuy+hYhtiI/bQOi3KvMXPFMJuqI6n7TP3w8mrwmmGgT
PlCfyxmt3PqLdw4tLqAlOnoev5ET7xs/8iUPIa9N0PdKVW1mwUvS4dtZXcBV14j+
gPjUi2XgT3wkVnNXmg09ehkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432893950509511933199450324306938556513857052585
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-28 07:23:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 07:23:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mydata.ebs.swiss'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 865524215166735220548385107354498768837206261170196209173481199950344412371099747720975409134069862731475102247680078655636013098724476078181668863328460748587548519495122272860123367952251565857349486368103303720724368254983041266040686530620377146400083884345982503096481439743647101947300952813420922165683847751678643825737748644134481279654754645745200400688332752698408263288757180797327330601569143166142685567810315973603469149459385227273529179589777852655997701823050004621938168886034001873796344483272438048043640093902092519873817341409457179806811107225451418599028741941995829238427973542160444989857991823512277764314437273332092338660296866308065323933461800799376435131761142125644415917849701842086811553038651371400236760963473160715594437234356199150415466999636073793959374586672588109970668332936623996839753471878768482300958522096486623706504658430159155310568033550943694235077792115815090222638674874344993791903904953712831157449400142917325825762985650280346492159140648613700845597900064230854560854734474041473277641515502015560050834603934177574966754766768940252499598336929746673992392619959515885463478283232769377584300592448233070500937885001838029227859433185540144523884115140816473753615432217
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydata.ebs.swiss'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mydata.ebs.swiss'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3047d4c41000b92d8dff277b59e50d808113b9b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3c9e527903636f4f9c811bd328700c245aeaa587
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (726 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (722 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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