Home Page Navigation Contents Contact Sitemap
To guarantee the authenticity of the web server you connect to, and to encrypt the communications connection with the server, e-banking facilities employ certificates, based on the SSL protocol. Every browser can check certificates for their authenticity and validity, but you can also check certificates manually by comparing fingerprints.

 

A certificate is authentic and valid if …
Info sheet: How to check a certificate?
  • the browser doesn’t return an error message when
    establishing the SSL connection
  • the address starts with «https://»
  • a lock is shown (might be hidden behind the website identity button)
  • the domain part of the financial institution website address is correct
  • the fingerprint is correct

 


If there is a need to establish a secure connection to a web server, nowadays this usually employs the SSL communications protocol. This is a communications technology which encrypts any information to be transferred in a tamper-proof manner and which guarantees the authenticity of the web server connected to. The protection applied is based on the issue of a so-called digital certificate by a trustworthy authority – also called certification authority – for a web server. As a web server can only be guaranteed to be tamper-proof and authentic as long as the certificate on which the SSL connection is based is authentic and valid, certificate checking plays a central role.

Every user can check certificates for their authenticity and validity, too. Users can choose between two different approaches here: They can either check using their browser support function, or manually by comparing finger prints.

 

Certificate check via your browser

Every browser verifies the following certificate properties when establishing an SSL connection:

  • Trustworthiness of certificate issuing agency: The certificate was issued by a trustworthy certification agency (i.e. was provided with a valid digital signature). This check confirms the certificate is authentic.

  • Certificate validity: The certificate has not expired, or been declared invalid by the certification agency before expiry of its validity period.

  • Web server address: The web server address stated in the certificate agrees with the address entered into the browser address field.

If these three checks have been run successfully, the browser will not show any error messages when establishing the SSL connection.

A correctly established SSL connection based on an authentic and valid certificate can be determined with the help of some distinct browser characteristics. These characteristics have been illustrated for four widely used browser types below.

 

Chrome

  • A lock symbol is shown at the beginning of the address line.

  • In case the certificate used is an Extended Validation certificate, there will be a button confirming the website identity in green colour to the right of the lock symbol. This button shows the name of the financial institution.
    With standard certificates, the web address (URL) is shown straight to the right of the lock symbol.

  • The web address (URL) begins with https:// displayed in green writing.

 

Chrome 27 to 52

Characteristics of a correctly established SSL connection with Chrome 27 to 52

Edge

  • A lock symbol is shown at the beginning of the address line.

  • In case the certificate used is an Extended Validation certificate, there will be a button confirming the website identity in green colour to the right of the lock symbol. This button shows the name of the financial institution.
    With standard certificates, the web address (URL) is shown straight to the right of the lock symbol.

 

Edge 13

Characteristics of a correctly established SSL connection with Edge 13

Firefox

  • A lock symbol is shown at the beginning of the address line.

  • In case the certificate used is an Extended Validation certificate, there will be a button confirming the website identity in green colour to the right of the lock symbol. This button shows the name of the financial institution.
    With standard certificates, the web address (URL) is shown straight to the right of the lock symbol.

  • The web address (URL) begins with https://.

 

Firefox 29 to 47

Characteristics of a correctly established SSL connection with Firefox 29 to 47

Internet Explorer

  • The beginning of the address line shows https://.

  • At the end of the address line, a lock is visible.

  • Depending on the type of certificate used, the address line has either a green or white background (green in case of an Extended Validation Certificate). With address lines having a green background, a lock is displayed to the right of the name of the financial institution, alternating with the name of the certification agency. Extended validation certificates are certificates where applicants for such certificates are subject to particularly stringent scrutiny by the certification agency to ensure no fraudster will ever be able to obtain a certificate in the name of a real organisation (e.g. a financial institution). For this reason, most financial institutions are using these more stringent certificates nowadays.

 

Internet Explorer 9 to 11

Characteristics of a correctly established SSL connection using Internet Explorer 9 to 11

Safari

  • A lock symbol is shown in the address line.

  • In case the certificate used is an Extended Validation certificate, the name of the financial institution is shown in green colour to the right of the green lock.
    With standard certificates, the web address domain part (URL) is shown in black straight to the right of a greyed-out lock symbol.

 

Safari 8 and 9

Characteristics of a correctly established SSL connection with Safari 8 and 9


Verification of a certificate’s properties via the browser (see above) offers a high degree of security, but browsers cannot identify certificates issued by a certification agency to a fraudster due to insufficient checks. A very few cases of this type of fraud have emerged. As any fraudster will most probably choose an address for his certificate which is different from the target of his attack (e. g. that of a financial institution), such fraudulently obtained certificates can be identified by checking the address actually displayed in your browser, by users verifying whether the so-called domain part of the address belongs to the organisation contacted (e. g. a financial institution). To facilitate such checks, Internet Explorer and Firefox highlight this part of the address graphically. In the two samples above, the relevant parts are «credit-suisse.com» (Credit Suisse) and «zkb.ch» (Zürcher Kantonalbank).

 

Domain part of the address

 

Certificate check by comparing fingerprints

Every user of an SSL connection can manually check the authenticity of the certificate forming the basis of an SSL connection. To do so, users will have to verify the fingerprint of a certificate. This fingerprint is a sequence of characters consisting of the letters A-F (there is no distinction between lower and upper case letters) and the numbers 0-9. Fingerprints are verified by comparing this sequence of characters with a reference sequence users will have received from the financial institution. In case the sequence of characters read from the certificate is identical to the one provided by the financial institution, the certificate is authentic.

Provided that the character sequence provided by the financial institution is authentic, a manual fingerprint check is the safest manner of checking certificates. In this case, there is no need for additional checks of the address line as described in the section about checking certificates via a browser. The following illustration shows how a certificate should be checked manually.

 

Manual check by the User exemplified «eBanking – but secure!»

 


To check electronic fingerprints see instructions below. Our browser check tells you the browser version you are using. Please note that so far, you cannot check a fingerprint with the new Edge browser.

Chrome 50 to 52

Instructions: Checking a certificate finger print - Chrome

Firefox 42 to 47

Instructions: Checking a certificate finger print - Firefox

Internet Explorer 11

Instructions: Checking a certificate finger print - Internet Explorer

 

Safari 8 and 9

Instructions: Checking a certificate finger print - Safari

Instructions for older browser versions:

 

The fingerprints of our partners’ e-banking login-pages are shown below:

A

Aargauische Kantonalbank

  • SHA1: fd 7f 31 48 ee 89 1b f1 eb 46 9f 0f 9b 00 db ed 5f 53 db 64

acrevis Bank AG

  • SHA1: 32 8a 17 0a 90 d5 09 48 1d 73 bc 5c 78 bf 49 9d 2b 97 8e 1a

AEK BANK 1826 Genossenschaft

  • SHA1: 59 f3 dd 37 91 cc e8 28 93 d1 15 78 ac ff cd 48 07 c6 75 29

Alpha RHEINTAL Bank AG

  • SHA1: 31 4c 6b 78 03 7f 79 0a a0 96 86 0d 80 4d c0 fe d4 9c 39 0f

Alternative Bank Schweiz AG

  • SHA1: 03 2a b1 35 3c d9 b2 79 5f 7d 98 f1 66 da 1f aa 73 62 dc 7c

B

Baloise Bank SoBa

  • SHA1: ‎fb fc cb 64 05 ab 4b cb 35 2b 93 67 c5 b6 38 ac e2 17 89 12

Banca del Sempione

  • SHA1: a0 41 be 2b 91 d6 d1 f0 b1 c8 23 93 33 d0 76 07 91 c8 61 60

Banca dello Stato del Cantone Ticino

  • SHA1: ‎b4 1f 15 4a 8a 7f e0 dd 9c d7 8e b9 6b c2 d2 fb 43 5c 8a 8e

Banca Popolare di Sondrio (SUISSE)

  • SHA1: f9 6d 01 77 02 53 e1 b8 03 e4 60 aa 78 f6 1b 09 65 bb da 66

Bank BSU

  • SHA1: ‎da 66 53 46 f3 c5 88 13 b9 df 3e 64 47 43 e6 ef b0 7c f6 f7

Bank Coop

  • SHA1: 6f 4c 0e da 9e 50 19 f4 38 46 92 b7 4d f0 28 17 27 67 91 53

Bank EEK AG

  • SHA1: d7 64 ec cd a9 eb ac c5 7b c5 e9 c8 2d ca 34 2c dd 74 a0 a1

Bank EKI Genossenschaft

  • SHA1: a3 c6 83 55 cb c7 1f 5e ed 46 14 ff 15 c7 3d 6b 34 7d f8 c6

Bank Gantrisch Genossenschaft

  • SHA1: ‎72 46 f7 86 54 b3 00 62 46 50 ad 93 b4 41 e6 a9 e5 ee 30 1e

Bank Thalwil Genossenschaft

  • SHA1: ‎d2 59 60 42 b7 39 3a c6 0c a6 f9 b0 e5 9d 4f c4 6c fc d1 fa

Banque Cantonale de Fribourg

  • SHA1: 9b ec 96 5b 0b ad 96 db 3d 55 41 4e 8e 2d 59 c4 27 7c 81 d5

Banque Cantonale du Jura

  • SHA1: d5 a6 f9 19 f4 12 9d 2f 3a 96 a4 71 62 d1 ac e5 7b 74 ea d3

Banque Cantonale Neuchâteloise

  • SHA1: 11 25 bc ab 22 95 72 2c 55 11 41 91 06 a8 5b ce ac 04 c1 56

Banque Cantonale Vaudoise

  • SHA1: 37 33 81 8e bd 52 c3 27 49 3a ab 66 7d c1 95 09 99 81 d5 7a

Banque CIC (Suisse)

Personal key card

  • SHA1: 99 72 f3 17 a3 8b 98 1c 48 08 5f 20 f8 a6 aa 79 ee 19 ff 30

Digipass

  • SHA1: b6 f4 a1 66 f2 e2 93 d2 36 77 71 de 3b b9 33 76 cd b2 18 10

Basellandschaftliche Kantonalbank

  • SHA1: ‎1b 56 00 d3 b6 93 d5 e9 76 05 2e df cc a5 96 37 41 db 5b df

Basler Kantonalbank

  • SHA1: 92 43 c5 80 f7 67 ba 35 2e ea 4d eb 6e be 38 ff 8b 69 72 c1

BBO Bank Brienz Oberhasli AG

  • SHA1: c6 15 0d f5 21 af 8c 4b dd ea 4d 05 ac ae 77 28 ef b2 df fd

BEKB | BCBE

banking.bekb.ch

  • SHA1: ‎6d f5 22 76 a9 a2 5b e2 6e 9f 32 35 21 14 2b ff 92 aa 62 c3

banking.bekbnet.ch

  • SHA1: ‎b6 7d bd f6 9f fd 5a 3e 6b 76 56 87 c2 0d 4d f4 c8 fe aa 9c

Bernerland Bank

  • SHA1: ‎61 65 e8 53 63 0b 85 b7 48 70 fa 0f 2d ec a5 43 66 9b 7c a6

Bezirks-Sparkasse Dielsdorf Genossenschaft

  • SHA1: bc 90 3f 63 cb 24 6c b3 88 af 97 a9 b9 0b 5b 05 d3 9f 83 c5

BSI

  • SHA1: 81 e8 98 a7 cc 14 14 16 c7 65 80 8e 03 0c f9 fa a2 fa e4 45

C

cash zweiplus

ebanking.cash.ch

  • SHA1: e1 f2 b8 48 f3 46 0a 1d be b4 79 77 f8 96 4f 19 41 d0 db f6

bankzweiplus.ch

  • SHA1: 22 94 2c a4 eb 27 a0 db 18 2e 09 c5 76 b5 2a a3 4c c8 62 79

Clientis Bank im Thal

  • SHA1: 3d 63 41 ff 1c bc 55 cb 2d 89 5b 6c 10 8e d3 f4 30 f1 fd 59

Clientis Bank Küttigen-Erlinsbach

  • SHA1: da 1a f7 3f 6a bf b6 17 b8 d8 4e ab c0 6a a2 9e 61 ad 88 15

Clientis Bank Oberaargau

  • SHA1: f9 7a 01 e2 17 08 0b 25 06 0a e2 cd 3f 72 59 8a 77 4f d3 74

Clientis Bank Oberuzwil

  • SHA1: a5 c5 95 38 ed 8b 58 c4 7f b1 2c 9b 42 ef 69 4a 1c 7b 43 59

Clientis Bank Thur

  • SHA1: f8 fd d2 cd 9c 2d c1 e7 77 21 bd 0a 3a a1 3b 90 19 9e 87 7a

Clientis Bank Toggenburg

  • SHA1: 90 25 56 8e 2d d7 8a 60 0a 0a 63 c8 53 18 37 98 ab d1 e7 e7

Clientis Biene Bank im Rheintal

  • SHA1: 1f c1 e2 5d 75 71 da d9 b3 a0 a6 23 f5 8c c7 42 ae 11 f4 d2

Clientis BS Bank Schaffhausen

  • SHA1: 5c c4 eb 0e f6 79 83 c2 50 11 d1 20 e2 6f b0 e4 f4 4a f5 ca

Clientis Caisse d'Epargne CEC

  • SHA1: 3c 25 86 5f de 8a bc 49 ee f2 a2 f8 66 50 67 22 28 bc 16 1c

Clientis EB Entlebucher Bank

  • SHA1: dc 5d 22 1b 96 b4 59 0e f2 89 56 e3 67 74 b6 f2 5a b1 28 c8

Clientis Spar- und Leihkasse Thayngen

  • SHA1: 44 4a 45 d0 15 90 2c ec b0 d7 52 84 50 1d 81 be 17 c3 e8 32

Clientis Sparcassa 1816

  • SHA1: be 11 98 66 f7 c2 5b 2a c6 83 17 98 7c 19 58 52 18 5e 23 cd

Clientis Sparkasse Oftringen

  • SHA1: f0 1f e5 2b dc b0 ce 9d dd a6 56 1f a2 5c 7c 75 85 d3 3d 6f

Clientis Sparkasse Sense

  • SHA1: 8f 8a 97 fa 2a 6e 6a 50 30 4a 04 5d 7a 8f 96 a1 dd 59 a6 4e

Clientis Zürcher Regionalbank

  • SHA1: 0f e0 fd fe 0a 8b 8f 5f 8b 81 e7 56 73 14 a4 60 c6 14 d5 9f

Cornèr Bank

  • SHA1: ‎83 e3 ab cc c4 39 19 d8 ce dc 1c e4 3b f6 21 07 e6 eb 28 c1

Cornèr Card

  • SHA1: ‎22 c9 47 ee de be 35 6d f9 df 8a 05 5b 3e 1f 90 35 25 00 d2

Credit Suisse

  • SHA1: 1b c2 93 b9 34 7c 43 80 06 ab 10 f5 0f db e2 40 82 7a b6 d3

E

Ersparniskasse Rüeggisberg Genossenschaft

  • SHA1: ‎5d 37 97 06 c2 7f 7f 4a 76 8c 92 17 d4 5b a3 15 90 7a fa 37

Ersparniskasse Schaffhausen

  • SHA1: 0e c2 73 f8 3e d4 c6 35 14 cd 3b 01 89 22 e5 14 f1 bf ee 07

G

Glarner Kantonalbank

  • SHA1: 18 3b 6b 06 27 4d 1e 06 3f af 2f 47 ee 00 e7 d0 32 a2 6f b0

Graubündner Kantonalbank

  • SHA1: ‎b9 d2 00 3d 30 a8 07 d3 df 3a 74 0b 60 10 45 4e 0a 1d 9b d9

H

Hypothekarbank Lenzburg

  • SHA1: ‎47 e9 db 02 58 d6 06 6f 3a 1b dd 0d 77 70 7e 46 ad 6a 35 7b

J

Julius Baer

  • SHA1: 85 a0 c3 98 87 3f 72 72 63 7c 45 90 c0 56 d5 3f 2e 08 2a f2

L

Luzerner Kantonalbank

www.lukb.ch

  • SHA1: 10 e5 48 14 2f 14 dc 08 77 d9 d8 9b 01 9b 6c 82 f5 fa 06 bd

inba.lukb.ch

  • SHA1: a0 ab 69 f8 6c 38 1a 3b 13 f0 e4 0b 03 37 e5 3b b2 ae 0f de

N

Nidwaldner Kantonalbank

  • SHA1: 19 d9 2c c1 06 c9 9e 0b e0 4d 1c c5 b6 42 42 e1 81 3e c7 2b

O

Obwaldner Kantonalbank

  • SHA1: e6 17 f8 21 61 0a 82 43 82 3e dd c3 3a 7d 07 90 84 ea f2 ad

P

Piguet Galland

  • SHA1: ‎e6 43 3d 8a ba 17 7b 47 82 c5 b0 2f 3d 5b 1b 36 73 ef be 0d

PostFinance

  • SHA1: ‎b4 4c 8c 61 80 6a 94 1f b5 19 a1 f6 f4 15 d1 6e 5d 6f 20 f2

R

Regiobank Männedorf

  • SHA1: 5c b5 47 2e 60 7a 4b 20 f4 6f 0f f7 48 74 53 33 93 cb 9f e0

Regiobank Solothurn AG

  • SHA1: 4f 87 60 c7 1d 87 eb 75 c4 f2 a3 31 96 85 06 d0 13 ea d0 09

S

Schaffhauser Kantonalbank

  • SHA1: ‎d4 d3 5b b2 57 11 bc 40 59 15 4e b4 8e 75 f1 cf 8b 5b 46 81

Schwyzer Kantonalbank

  • SHA1: a6 93 92 ce f3 55 58 ff 87 c6 ee e1 97 1a d3 5a 6a 9d 72 73

Spar- und Leihkasse Bucheggberg AG

  • SHA1: 56 cd 3b fa 34 f6 d2 cc 49 51 88 72 ba 68 a0 4f 9b 38 51 0d

Spar- und Leihkasse Frutigen AG

  • SHA1: a2 7e 0c 8e 81 4c e2 7a 87 84 8f 70 d4 67 dd cd 19 d9 6c 73

T

Triba Partner Bank AG

  • SHA1: ‎b0 e4 d1 0f 9c d9 7a 4f d6 00 d4 bc 74 4a fc 87 06 0b 9d 09

U

UBS (Switzerland)

  • SHA1: 2a ac 57 9b ca 73 f2 84 06 9c f5 3c 99 80 92 24 ca 35 f0 5a

Urner Kantonalbank

  • SHA1: 59 68 39 df 2f c7 25 29 b8 f6 35 82 c0 4e 25 b7 69 c4 c1 c3

V

Valiant Bank AG

  • SHA1: ‎b3 b3 a5 67 64 69 da 50 dd f9 da dc 4c 90 81 a9 42 8d b6 35

Vorarlberger Landes- und Hypothekenbank AG

  • SHA1: b2 df d6 2b 83 08 49 54 e0 94 1b e4 ed 22 4b 84 8f 18 c0 b4

VZ Depotbank AG

  • SHA1: e7 aa 34 51 1f 3e 72 63 58 b4 73 a9 f1 70 9f e9 fa c2 63 cf

W

Walliser Kantonalbank

  • SHA1: fb 81 11 1d 4f e9 be 0a ff 52 92 69 d7 f1 b4 55 a6 43 0e 46

WIR Bank Genossenschaft

  • SHA1: ‎58 97 8b 34 1c ba 8c 41 ab b5 a5 49 61 59 51 97 1e bd 76 5c

Z

Zuger Kantonalbank

  • SHA1: ‎5a ef f5 68 55 0a a2 fe d9 18 73 5d 29 cf 2b d4 b8 d6 40 4d

Zürcher Kantonalbank

  • SHA1: 83 c2 4d fd ed 86 85 1e 2d 7d 92 21 f9 11 02 a8 5e 70 ea cf

A fingerprint can be shown in different ways, for example as a «SHA1 Fingerprint» or as an «MD5 Fingerprint», depending on the algorithm on which its calculation is based, and on the browser it is displayed in. What’s important is the letters and numbers only, not whether they are capitalized or not, or any potential delimiters such as colons or spaces. If the fingerprint isn't correct, you may not start e-banking, or must close the e-banking connection immediately.

 

Aargauische KantonalbankBaloise Bank SoBaBanca del SempioneBancaStatoBank BSUBank CoopBank LinthBanque CIC (Suisse)Basellandschaftliche KantonalbankBasler KantonalbankFreiburger KantonalbankBanque Cantonale du JuraBanque Cantonale NeuchâteloiseBanque Cantonale VaudoiseBerner KantonalbankBernerland BankBSI AGBanca Popolare di Sondrio (SUISSE)cash zweiplusClientisCornèr Bank AGCredit SuisseGlarner KantonalbankGraubündner KantonalbankHypothekarbank LenzburgJulius BaerLuzerner KantonalbankNidwaldner KantonalbankObwaldner KantonalbankPiguet GallandPostFinanceSchaffhauser KantonalbankSchwyzer KantonalbankTriba Partner Bank AGUBSUrner KantonalbankValiant Bank AGVP BankWalliser KantonalbankZuger KantonalbankZürcher Kantonalbank