*.onegovcloud.ch

Issued by SwissSign Server Silver CA 2014 - G22

About this certificate

This digital certificate with serial number 78:b1:14:6c:5c:86:a6:b2:bc:ea:60:e3:1b:70:f1:94:6a:db:7e:b9 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.onegovcloud.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 78:b1:14:6c:5c:86:a6:b2:bc:ea:60:e3:1b:70:f1:94:6a:db:7e:b9
Serial Number (int): 689027903518203050302645662942953183904244924089
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: fa:4e:ea:ad:13:98:39:1b:58:15:b0:bd:ee:3e:bf:14:35:c6:de:25
AuthorityKeyId: db:bc:bf:82:18:59:dc:69:fa:f8:ab:aa:83:4d:77:1d:0b:b0:8b:d8

Fingerprint (sha1): 10:83:3c:a5:d0:bf:04:40:bf:00:24:80:2e:ab:ca:4a:8b:96:bf:29
Fingerprint (sha256): d3:61:38:c1:b4:2d:a0:47:bd:e6:a6:0d:8a:89:c5:38:46:58:b4:27:2a:3d:14:73:8e:c8:4a:41:f3:98:be:4a

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8

Revocation information

OCSP Server: http://silver-server-g2.ocsp.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8
CRL Distribution Point: http://crl.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8
CRL Distribution Point: ldap://directory.swisssign.net/CN=DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate *.onegovcloud.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.onegovcloud.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.onegovcloud.ch
onegovcloud.ch

Other certificates including the domain name onegovcloud.ch

(limited to 100 certificates)
*.onegovcloud.ch
onegovcloud.ch
docs.onegovcloud.ch
*.onegovcloud.ch
docs.onegovcloud.ch
*.onegovcloud.ch
*.onegovcloud.ch
docs.onegovcloud.ch
docs.onegovcloud.ch
*.onegovcloud.ch
docs.onegovcloud.ch
onegovcloud.ch
docs.onegovcloud.ch
docs.onegovcloud.ch
*.onegovcloud.ch
docs.onegovcloud.ch
*.onegovcloud.ch
docs.onegovcloud.ch
docs.onegovcloud.ch
docs.onegovcloud.ch
*.onegovcloud.ch
onegovcloud.ch
docs.onegovcloud.ch
onegovcloud.ch
onegovcloud.ch

Certificate

The complete raw certificate details for *.onegovcloud.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kMyQOS3NWRGPMrcYf/C
erTguHGVV8uS+fKvS7Uy5FaHt+lM1isoYjwPKRoU2dWIqLUL4KW4MVHwQS2/zIxM
WHMq/38hLCYDksxFKG6ZZ4jop5OERlPpji0NOVr1+fqAxwFerHh1IdQ9S1nRhpju
+LVVpizUa6FrXDhKQpp7Fpm+EyMeXUb4F44mmuLSk6162VpuvsweTj8C1Xjumemm
03R+4nUnTIkvHXEBgHeT6bVd1dzdrhXVziWupIFVFaucwnfGvEbReCzqP5B9cZTY
ahWdUIZSJvS+VvIlFTZE8N9H3rsWi5DQtOBIRVRUTkLI4EahRjiB65ypLamFuSeD
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 689027903518203050302645662942953183904244924089
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Silver CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-06 10:14:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-06 10:14:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.onegovcloud.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28058039434309564780996231253068401007352669506511943046201681114857963388737026312772908880287386983420596360471108552504338334861660272493381237526745435853258426992907267558705971263142180053284026323527103559085657720522684856118528442218987741607947001845091364474735885132856192843136794242511948806574055369527924784262842669344573346094037354323808992354252347627579182454763225140592034231846890174305447613850155264361499441530628686689032341326226115464485547365935561561620734763843596276557727273239163551329800599589388805128870491882092729417641841735595132478457163221987452943247062962554006785196973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onegovcloud.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onegovcloud.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fa4eeaad1398391b5815b0bdee3ebf1435c6de25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dbbcbf821859dc69faf8abaa834d771d0bb08bd8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.3.1.12
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Silver-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (202 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://silver-server-g2.ocsp.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							01e00076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000170af573c3c0000040300473045022100d3339b93961f2de2374579ec837cb34148c67cde343c8220ff75ccf06d8fbc8702204b69499dd9abbf0b0d200092f5723952314296cac8df660b2c80ad2748554db80077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170af573a790000040300483046022100cc69c212d56f3b2822ec660be477b1948f2e1a43c4ca295d4fab03b86eb5b95702210082637287ba5f009654f046d8f864613aa63acaa492e5273c52b2a478a25c923c007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000170af5739f10000040300463044022020bd76412801a7899cd509ee4dd723cc1226e84ef657914cc18640391186da530220357101592ee3126b09b1933b3a4b617829a7f1ee51c76942cf28fa7c0b8962e7007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000170af5739f900000403004730450220074c3e5b15878b730eb8bb62204399aa2b31652bc0a13af8923735013eb6fb440221009714e3d9eb0e20e38dff590395dc17d97385cae096d7b30961fbb8f04e4b2273
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0026cefc2b985ec67a8c67208c6126fba527a41977e4fb839d95135fe10c2675e686d79b573f842e578b888d2d53a9ed01e7b15b3ce911a8a16869f37b632df021ef2dba70d84bcf289f20dd3d955e0b82914b9f54c4512d5d391d6559f19f6d2c7e8006c5fef4d317d07d7c0437c6653034ec18375a5e2f297af77608f2e437754e4eae1e3136b2b7a610d0a9724d9457f282171b8ba202169fb4ec7f3b02a3fe995a9ad892663134fab07e2ac519c0da7c6af8dde1b2a9b5cdcf3b780e127d6df8b79c825fb64a9b73b429ab2ada6485ab0565ec056025594b4f526e1e09a1af63a0f5f2389ce6a53737139c5d065312615c78a67cde8e2bbb5b1ab9f3429c52