mdm.ebs.swiss

Issued by SwissSign RSA TLS DV ICA 2021 - 1

About this certificate

This digital certificate with serial number 67:36:9a:c6:e9:0d:d3:8b:60:30:b3:20:b6:45:ae:17:87:2e:6e:3a was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mdm.ebs.swiss

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 67:36:9a:c6:e9:0d:d3:8b:60:30:b3:20:b6:45:ae:17:87:2e:6e:3a
Serial Number (int): 589243772613300179577412840448791957228854603322
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: ed:d0:0b:9c:13:3e:35:18:0c:ed:84:13:4b:f0:29:81:64:64:ef:fd
AuthorityKeyId: 3c:9e:52:79:03:63:6f:4f:9c:81:1b:d3:28:70:0c:24:5a:ea:a5:87

Fingerprint (sha1): 43:72:a6:7f:47:de:9c:2b:28:6a:a9:e9:38:17:ff:62:18:31:0e:64
Fingerprint (sha256): d3:47:c3:35:e3:f8:82:39:df:c4:d2:e9:7f:39:64:a1:14:66:8f:e2:17:9b:f2:28:0a:73:93:96:f3:0f:75:0b

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587

Revocation information

OCSP Server: http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate mdm.ebs.swiss

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mdm.ebs.swiss

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mdm.ebs.swiss
www.mdm.ebs.swiss

Other certificates including the domain name ebs.swiss

(limited to 100 certificates)

Certificate

The complete raw certificate details for mdm.ebs.swiss in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 589243772613300179577412840448791957228854603322
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-25 07:14:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-25 07:14:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mdm.ebs.swiss'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 781065842559230022410187093552783150871555060982704605870253074611952992769786730183979037492488674768350300485898055235835691834330434976024593778348286969601641618238006378870063654834205759452023628477269129784239386905825158151525392689418617400235922255786275111498593629537586043173852933350516448109029969089476396475407397983451114395002078116508715456370856338703630076760285583068923186841292498019090860136840585376342126429747800015331504007484638390573272294021238729261407133889195140256960001189298244080654689195689635627608715561761553347305981366071593113968556391607887569927421405203542184347836126595110938674344377835401580895810082506239252545144823900613838549177998809170129701614274966119733965095512026710943057158740933724816694960364458234132813451293365836794369795286152750892904063107796478449523718667679240292391054427801707315855842752015488107935528513413300186020696725635284109449117844170353271530343193940620778132024845107869122225527316407434276083958792305303217810834098364359601280341912667324034768118539490287268821905799931374975328321000007491728114943630179478708062249336346973869784172191385169463404543402966350261341447882356522235438541479860667391310789509111838908974673948341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdm.ebs.swiss'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mdm.ebs.swiss'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							edd00b9c133e35180ced84134bf029816464effd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3c9e527903636f4f9c811bd328700c245aeaa587
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (844 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (840 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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