www.ebf.com

- EBF-EDV Beratung Föllmer GmbH -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 16:79:eb:49:ea:bd:d6:d2:94:c9:47:50:07:b2:55:de:bb:58:47:7c was issued on by SwissSign AG.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

EBF-EDV Beratung Föllmer GmbH

Organization: EBF-EDV Beratung Föllmer GmbH
Organization unit: IT-Services Cloud
State / Province: NW
Locality: Köln
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 16:79:eb:49:ea:bd:d6:d2:94:c9:47:50:07:b2:55:de:bb:58:47:7c
Serial Number (int): 128316683666978476059274595107156217102606026620
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: c5:81:84:20:4d:f3:d8:50:2e:a4:af:fc:d2:e5:8b:13:1d:58:8f:b4
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): 6c:0c:e4:84:aa:8a:d2:0f:11:2d:17:80:ae:9f:a9:2f:fa:c2:e8:9c
Fingerprint (sha256): f0:74:37:84:df:ab:1c:af:9f:a3:5c:f0:25:96:07:98:99:48:35:1b:cc:7a:49:5f:22:81:81:3c:ae:e8:50:5c

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate www.ebf.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ebf.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ebf.com
www.ebf.de
ebf.com
ebf.de

Other certificates including the domain name ebf.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ebf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 128316683666978476059274595107156217102606026620
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-02 13:45:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-02 13:45:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Köln'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'EBF-EDV Beratung Föllmer GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT-Services Cloud'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ebf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 698248478699465753779371484125235380504200007533864002052470699706635397025409545051634455565720537212924941061334741255496201978151310759734986284015518484832509771505246126925836977460561088834223617111870118660560293598255484173457985312853326078779338698430281123191828560065405852209275434378158419641786596446801537846466960031414468156936418529560132596535396288321558157893781382869908564845606857027990359946907010032377159471362922003129597953228764342641475022566766714219160046062254216636347651396044804488479921205931353713549044615293084762619562239259281732400792491693740042915712424555573487774491054101347281055265099343189743668190572674481170091816872655832382164999097968967577709864951333986317838467428749673942118068396617064424915626284211807487784136575023711106500952738213419964176125317865217287754204268372285108769137854593177834998347416209718337692595503254014389301885019327659073391454574323020129183003218762244722919216810990412767029625793211233857806666879456077679187849896820465819981902784322736541798887399297775336772995015428673756092445209318144220660360947707001194861943863920013289953175047519946962497838165742567136679241023168094164219884918844117227024346969803671876956463398563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebf.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c58184204df3d8502ea4affcd2e58b131d588fb4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (843 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (839 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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