ukbhb01mx01-e.urkb.ch

- Urner Kantonalbank -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 4d:74:26:64:d7:19:77:71:ea:d9:75:38:a4:ef:d4:90:c9:10:a9:eb was issued on by SwissSign AG.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Urner Kantonalbank

Organization: Urner Kantonalbank
State / Province: UR
Locality: Altdorf
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 4d:74:26:64:d7:19:77:71:ea:d9:75:38:a4:ef:d4:90:c9:10:a9:eb
Serial Number (int): 442182520377483543781017004744228165669138508267
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: b6:80:93:f8:bd:ff:06:13:b6:ee:a5:54:4c:43:1a:e4:b5:03:2e:b6
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): 87:95:91:1d:2a:39:81:a4:8d:9e:9f:9b:02:1b:57:6b:93:da:5a:45
Fingerprint (sha256): d8:50:99:2e:bb:49:1d:35:02:1b:49:e3:0b:69:bd:2c:0b:9b:3c:04:55:e0:46:cf:35:e0:fa:30:a7:15:67:a0

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate ukbhb01mx01-e.urkb.ch

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ukbhb01mx01-e.urkb.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ukbhb01mx01-e.urkb.ch
ukbhb01mx01-e.ukb.ch
ukbhb01mx02-e.urkb.ch
ukbhb01mx02-e.ukb.ch

Other certificates including the domain name urkb.ch

(limited to 100 certificates)
www.ukb.ch
fintest-wwwsec.ukb.ch
fintest-dev-wwwsec.ukb.ch
www.ukb.ch
fintest-e-banking.ukb.ch
fintest-e-banking.ukb.ch
ukbhb01mx01-e.urkb.ch
www.privasphere.com
wwwsec.urkb.ch
www.ukb.ch
www.urkb.ch
www.ukb.ch
fintest-e-banking.ukb.ch
www.ukb.ch
wwwsec.ukb.ch
www.ukb.ch
wwwsec.ukb.ch
ibdemo.urkb.ch
www.ukb.ch
wwwsec.ukb.ch
wwwsec.urkb.ch
www.ukb.ch
ukbhb01mx01-e.urkb.ch
fintest-dev-wwwsec.ukb.ch
fintest-wwwsec.ukb.ch
wwwsec.ukb.ch
www.urkb.ch
www.ukb.ch
ukbhb01mx01-e.urkb.ch
fintest-e-banking.ukb.ch
wwwsec.ukb.ch
ukbhb01mx01-e.urkb.ch
mobilebanking.urkb.ch
www.ukb.ch
fintest-wwwsec.ukb.ch
wwwsec.urkb.ch
ukbhb01mx01-e.urkb.ch
www.ukb.ch
www.privasphere.com
ukbhb01mx01-e.urkb.ch
fintest-wwwsec.ukb.ch
www.ukb.ch
www.ukb.ch
ukbhb01mx01-e.urkb.ch
www.urkb.ch
ssl.urkb.ch
fintest-wwwsec.ukb.ch
fintest-e-banking.ukb.ch
wwwsec.urkb.ch
www.privasphere.com
wwwsec.urkb.ch
www.ukb.ch

Certificate

The complete raw certificate details for ukbhb01mx01-e.urkb.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 442182520377483543781017004744228165669138508267
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-13 11:43:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 11:43:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Altdorf'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Urner Kantonalbank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ukbhb01mx01-e.urkb.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 734463913795324099529189949621712662212436701546289261610560450497199308762651353350275273427735739532216453969709926464365616760181087281923670669441229595334312463493218111281365713328217265511959214143407375703939961258860390882375282519386804842238636252684622421564808617946283923380045458588246434512603018589177241900600573697419561844505992003963245922136281965701199238408449696294324673690351873500172336231379853335687585609739901590000375246449864906484449845851332637861734208771798437641744335057995032565511063574491606431874431558219041830292814587210547637678438876847481892716123809299232649054707516803294886097275089301128232709247390509208787319096539833475297008800672073621273623015662034482765914009234925942397249310225549192686929734400006439872430977972981615346389026172352081186295934332319534737331583877372023020930583942490008393178277694328289863962746847173452532416099471719119221357399736760099995906835020850891858729433646970709835645704630120797380708945361175118970136214883160227881697911880055441987428394023059272312602158995869691923420535792511341693248363308319883834442010539581185851716184541339687796896761735341143193594284967112727548944941794192719510466671312576780969310793045321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukbhb01mx01-e.urkb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukbhb01mx01-e.ukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukbhb01mx02-e.urkb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukbhb01mx02-e.ukb.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b68093f8bdff0613b6eea5544c431ae4b5032eb6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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