DV SSL/TLS Certificate for sontram.empa.ch

Certificate is witin its validity period

Issued by SwissSign AG (SwissSign RSA TLS DV ICA 2022 - 1)

About the sontram.empa.ch DV SSL/TLS Certificate

This certificate with serial number 3c:f5:b3:09:c2:32:0a:bb:68:ac:80:cf:3f:00:58:da:ea:1c:e4:c1 for sontram.empa.ch was issued on by SwissSign AG.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for sontram.empa.ch provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SwissSign AG

Organization: SwissSign AG
Country: CH

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 3c:f5:b3:09:c2:32:0a:bb:68:ac:80:cf:3f:00:58:da:ea:1c:e4:c1
Serial Number (int): 348018725242923525193618632450279725568874046657
Serial Number Length: 158 bits, 20 octets

Subject Key Identifier: dc:91:56:ed:ba:ab:ad:54:57:45:3b:26:3d:18:64:16:03:a3:d8:96
Authority Key Identifier: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (SHA-1): 71:1a:57:d1:2a:26:b5:09:f9:46:77:dd:03:26:24:46:a9:b3:aa:82
Fingerprint (SHA-256): 57:9f:7d:c0:8e:77:71:70:f0:8f:38:57:6f:3d:11:15:a2:f0:f8:40:82:cc:79:a7:ea:c0:1b:63:f6:9f:ea:22

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation Information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate sontram.empa.ch
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for sontram.empa.ch

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9
CA Certificate
This is not a CA certificate

Subject Alternative Names

sontram.empa.ch

X.509 Certificate

The complete raw X.509 certificate details for sontram.empa.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2kcECOmi4hIlUF1VMVV
nwKB0YoMaA15Hp/vv3/ls4DJMnX/2KxUNjbTQM8hvKzqbDrPB2iEReNSdZP8poaJ
ro8l9stO9PwWEl83Z0u7ZTq97Vs3/jXhz0pPeaWtOc2+0qD11olvRtpGJ2k7iizx
zzf6FoXCnwZoiVhDdUAEnKoMebbyqZaBK0ab+mejc0EcFMiJ68KC7RFf1MV1T1Vr
2cp4pyFiykxUOwUP0mpnrAzxb+pZAYDEqOjE7pl4Ujj/wAd6vb/YsrI/lf2aOO0o
4Nf5e0vZBSvzWDDMNs2+4JIfa5WPBydtbURPMK10NTNdrBixmyV4Ajj2FcsxW2Im
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348018725242923525193618632450279725568874046657
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-28 12:45:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-10-28 12:45:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sontram.empa.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24668300954413420537865946964706695015989520421307932356861372252194793586736197462363171843528451771665293027988707753305405677534361178606215947218389653672644937314937473402769090047791963212560910127922012835141832650078804426180059488807507291923569996313865137730576446747795377715679764541504268869555244872645847849234088743030134405889109977208199653277847747434974205133763303040084809470512058939440003158557146647492832251288427879761508443097315475419565371140588854924357939830876947758124604249870891351320321810889389134537912388651967324638710002974427302213535573343917300405316809346494707378824781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sontram.empa.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc9156edbaabad5457453b263d18641603a3d896
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00552faf61a8dd8df01df0af3e1eab9078dcec6b15de9f78f774184f4a7b362c59cb5ef41ee8be957f6a0c9ca527c53873d0efa33c2f70f775e3324721fc39ce7296791d30ae0c93078fb8eea6ec0b3e4921f197d07cf71016bcf3565ed970377acc63f22758b82d79f10dc7792b58232e24855090d4b981e3436996804b73625efc88dca608a8d2994fb52303cf5e434a4858c10ddcf2a1b24b7e9dd09d79abd28c71e1f693b993f6de0ce48539d81e457e3b97c1c84bd7edd2fe4dad8d1d96c385e8c874ecc95c205368b2d2d48a8b2157016b166b6993da2e169b538e22fa61eb95c0eadf5caa84f650866ddc75d27aafc5c33d0c202edeb74095fea1b38f578533ea2aea8193863af347262b6465aa50885f8aad9ddc6574299848259682fc8b0e8c8f1fbfd0fc2f8ab3f9abce65e5ab01c3c6f320be9649e37cbf46a2494369e26ca1157d38dbe09610fce292588e01accccb2d524aa9e71224018157d5c31266778717eddaa3b4e3b52cf9cc2afd652b9c9ca719d868ad6bc27f484e5a5b9fa38fe003a5ffba0e162ac0aa57756d1fde1ee98aec28876879f439814dbda764ad247089c27cab6cfc94f269e7cd50908a7da8ea7bae824136d66c4f07ec4e8b38dcdac8f727c1a9b4edaafe4840809c7d6a675ee0c3b65563eacc9e38c4a8a93df0c72826e40ca5ffcfd410e3d99b8a5f105216da4fdc01b845cd2250f1b3