OV SSL/TLS Certificate for eportal.sg.ch Issued to Kanton St. Gallen

Certificate is witin its validity period

Issued by SwissSign AG (SwissSign RSA TLS OV ICA 2022 - 1)

About the eportal.sg.ch OV SSL/TLS Certificate

This certificate with serial number 40:6d:87:39:9c:f7:a9:47:15:90:7e:5e:4b:45:a6:d6:01:8a:d0:93 for eportal.sg.ch was issued on by SwissSign AG.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for eportal.sg.ch provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SwissSign AG

Organization: SwissSign AG
Country: CH

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 40:6d:87:39:9c:f7:a9:47:15:90:7e:5e:4b:45:a6:d6:01:8a:d0:93
Serial Number (int): 367817970322706767625739714633752904375139487891
Serial Number Length: 159 bits, 20 octets

Subject Key Identifier: 13:a2:e0:fb:e2:46:92:0c:88:7d:07:a7:fd:e2:38:fc:71:ad:35:c8
Authority Key Identifier: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (SHA-1): 1b:53:16:b7:03:99:c7:a6:0e:6d:7c:a0:97:65:8c:d8:8f:39:28:63
Fingerprint (SHA-256): fd:5d:ad:8d:3d:ee:e8:16:45:51:c9:8f:9b:33:21:b5:8b:45:97:dc:ff:c8:f4:60:d1:ec:79:ff:16:28:d5:4e

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation Information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate eportal.sg.ch
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for eportal.sg.ch

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for eportal.sg.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznR+A7DkEVRDQAxlX2f9
Clfj6uEUWkfE42FfxLo/U9JakTuhLOORhGWGvJX4zyoAdAOxZV8ft17iLbNXyxzF
mg1bHTcd67Ir/kPpcHLFCX1QyCk6UKKANX4zvc9PlYp0raVfvZGtuDnp3ZkS0vYG
eWXgzaKYZM74lRJD14aYpve0aSKH6CpRsFlapJnxXcMAq2xIANoJBbkyjLbzp3d/
ynEA7+lxMSORP72ft6CG55tBdHePuwNZ9BtolMi/G2j839GdeuuZKw5cbVD70wWZ
+b2FSgVmHwUI8s81Oo6GcRmdaf3LxkapvOxTCAypXBHbfJ8W/wKWQRo5ctS6QnDi
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 367817970322706767625739714633752904375139487891
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-08 15:07:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-05-08 15:07:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sankt Gallen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kanton St. Gallen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eportal.sg.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26062535289420244950540440271664859258627855947447550192508403618522557778079291810149252209743044952223656859703773108614526089031934138807067975419835731340855030383852378072699351981390920054508578732217825886249239811847842334502113532863817418261328329152761833489835910517992430220416791446088143056223595549990975878719546982479014727934162871945468577569824826514294343204171501750279638513234502737438937788679093290734754809839226633848354402713439002833909401178800533312458582571023740738570674575245584344156845819699484828470597776450715577614502714065879377675706855058856525220652395276832271005442759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eportal.sg.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eportal.sg.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13a2e0fbe246920c887d07a7fde238fc71ad35c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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