elektroform.ebs.swiss

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 5e:fb:93:54:01:b7:fd:76:53:25:8b:3e:a4:5c:9c:1c:8f:72:c6:67 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=elektroform.ebs.swiss

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 5e:fb:93:54:01:b7:fd:76:53:25:8b:3e:a4:5c:9c:1c:8f:72:c6:67
Serial Number (int): 542255453594307450946711307955852935369921316455
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: e4:6b:45:84:eb:7c:61:6c:61:63:01:0f:01:8b:ac:d4:23:f0:d2:d5
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 1a:06:ff:c1:c5:4a:e0:03:01:62:c7:01:9d:4d:cf:00:25:04:a3:c6
Fingerprint (sha256): f8:ae:af:32:c0:52:6d:d2:eb:c0:18:cf:56:f6:a8:47:a9:ea:00:18:fe:61:61:b6:b7:3d:ed:6a:fb:2b:a0:35

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate elektroform.ebs.swiss

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for elektroform.ebs.swiss

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

elektroform.ebs.swiss
www.elektroform.ebs.swiss

Other certificates including the domain name ebs.swiss

(limited to 100 certificates)
connector.ebs.swiss
stecker.ebs.swiss
sso.ebs.swiss
hybridex.ebs.swiss
testsalary.ebs.swiss
www.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
*.ebs.swiss
sso.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
www.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
ebs.swiss
abacus.ebs.swiss
geoportal.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
elektroform.ebs.swiss
geoportal.ebs.swiss
geoportal.ebs.swiss
kabaapp.ebs.swiss
sftp.ebs.swiss
salary.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
hybridex.ebs.swiss
mdm.ebs.swiss
www.ebs.swiss
abacustest.ebs.swiss
ebs.swiss
ebs.swiss
lora.ebs.swiss
asset.ebs.swiss
connector.ebs.swiss
qmtest.ebs.swiss
ebs.swiss
testsalary.ebs.swiss
testsalary.ebs.swiss
kaba.ebs.swiss
www.ebs.swiss
salary.ebs.swiss
connector.ebs.swiss
www.ebs.swiss
*.ebs.swiss
lora.ebs.swiss
qmtest.ebs.swiss
geoportal.ebs.swiss
lora.ebs.swiss
www.ebs.swiss
my.ebs.swiss
stecker.ebs.swiss
asset.ebs.swiss
lora.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
salary.ebs.swiss
*.ebs.swiss
ebs.swiss
ebs.swiss
my.ebs.swiss
abacustest.ebs.swiss
www.ebs.swiss
asset.ebs.swiss
infoscreen.ebs.swiss
infoscreen.ebs.swiss
salary.ebs.swiss
ebs.swiss
sftp.ebs.swiss
sftp.ebs.swiss
energieportal.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
mydata.ebs.swiss
ebs.swiss
mdm.ebs.swiss
sftp.ebs.swiss
infoscreen.ebs.swiss
qm.ebs.swiss
geoportal.ebs.swiss
abacus.ebs.swiss
kabaapp.ebs.swiss
sftp.ebs.swiss
betrieb.ebs.swiss
betrieb.ebs.swiss
energieportal.ebs.swiss
ebs.swiss
infoscreen.ebs.swiss
testsalary.ebs.swiss

Certificate

The complete raw certificate details for elektroform.ebs.swiss in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqzaTOmi/4HMfPQK3lmAR
18Fhy6Wj+rTVMnUZgcIRcGvZdsVeGQwJniE93sknQb1mVkGvflEmYRhBHVhDttKI
bv3e8nLOyYJWxnfQmySsLq6Uel1FHCUI/so/IxLOSOrJNVaT/CdBIAdVPE3QPHbv
ZPp2rzcbmjIMx8GuKYqGtLytHNWSxEzs/tEdprx38rdlZ9cpFQvyyzx+3omhK0qz
Pspb/EfABPOHFpeuYZVL8qozv984eYXuijPF4x4h1wudqJKoxnOrUdSLz3s3/GQo
MgHqOJXln5m1PZIfdV32PRWNe763j/Hl+uCaPRxAn16lRBhaGfawxrmYdf466aZ4
yKlcdIWTvu0hmIsQJ2xe9Hb6APU3LgpDPzev/0KxQtJHhVbhC2mlwjEbTqM8EFfr
fsCM9LE/jF+5tMT9ZS/MLzccgZSunO4BqMbz+z/Ojvwn4tvFToaM02qd/Hcb8Hm2
b1QsDZfouv46e5JWCZ5jXcu4VOnniCu1LYv/mMMgPMV15sYvKbfEQTlpEH7xLr2z
uqsxkHid09XBMF6qPyNESuRy/hShqLe8Wp3LRDHMUgmReD1Krf9HccxCqYmInSrJ
0SaJ/KDlOW1y90u6XGN00UUKgD4/n5w1Tpg7Rj2+kWF8tRLIvAkYKyzFIL77VHlH
rk0/Co1bv+MzZpADlDqn+pkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 542255453594307450946711307955852935369921316455
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 13:14:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-15 13:14:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elektroform.ebs.swiss'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 698488850568108137236905670739639054154741873075450658425567772158012335820357819679646116066300064380029171571574897705335792888111440349191745744700971296157439937925130278720510933396125334270591064367933590428399417742561455183161461559996489536290654349451377375462756782153841827157684562145027435829167927218155935595758590252211153391531726048722365083469087942905857510220169467995886525729946929588878156334349956179463295638512885528120580211742117292907547899258354770608523654404157193192909158544192339447634397441756786173224654877062266428248017202132320917193759753177203811824018044999680993664492443792147724274625169872358774129950802970643720301062167002411230037663441541976988697352587695127650724774047485774928375184002468322453911185404869747442517364836050484574243953438027307255081008969174727301026224084026815132935363136427827960984995219070636126695460122533549571603662690045985940646788702229606786087822089974361820605843539875646003103072426808372235476336852158482093725849177502751989671293463984047560335947747495038684879357198919107577550811569243806909410805861725179836805090975505285667228503981769925646331651370347962813308991483712863790453559273922268023801112753524104209142303423129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elektroform.ebs.swiss'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elektroform.ebs.swiss'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e46b4584eb7c616c6163010f018bacd423f0d2d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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