www.blw.admin.ch

- Bundesamt für Informatik und Telekommunikation (BIT) -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 4a:9b:61:b8:16:0b:d2:09:1c:12:4a:f3:f5:f5:81:44:54:d8:dd:09 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bundesamt für Informatik und Telekommunikation (BIT)

Organization: Bundesamt für Informatik und Telekommunikation (BIT)
Organization unit: Swiss Government PKI
State / Province: Bern
Locality: Bern
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 4a:9b:61:b8:16:0b:d2:09:1c:12:4a:f3:f5:f5:81:44:54:d8:dd:09
Serial Number (int): 425930445079731656777262639750608709120425516297
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 87:46:52:ba:04:62:23:ac:b9:c0:ad:8c:f4:ef:f4:3a:9f:93:6d:6c
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 26:ef:3f:8f:bf:02:32:49:04:df:62:8d:86:b1:b1:81:6f:5c:38:4e
Fingerprint (sha256): 00:01:0c:a4:87:9d:50:35:be:af:ea:3a:82:f3:e6:f0:72:bf:e1:b7:95:f3:2c:5c:44:7c:34:ac:f5:bf:0d:7e

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate www.blw.admin.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.blw.admin.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.blw.admin.ch

Other certificates including the domain name admin.ch

(limited to 100 certificates)
www.blw.admin.ch
www.gate.bav.admin.ch
www.jira-a.estv.admin.ch
sts0032.sts.eiam.admin.ch
www.cmsp4-a.admin.ch
appint.naz.admin.ch
www.staatskalender.admin.ch
*.geo.admin.ch
www.code.admin.ch
www.bundespublikationen.admin.ch
www.suissetax-r.estv.admin.ch
help.geo.admin.ch
int.translation.eda.admin.ch
www.portal.bsv.admin.ch
viaduc.sfa-laboratory.ch
www.tacho-en.admin.ch
e-dec-web-a.ezv.admin.ch
ncts-formular.ezv.admin.ch
trifid-lindas.int.cluster.ldbar.ch
ws.inar-r.zas.admin.ch
rp-eda01.eda.admin.ch
apis.sem.admin.ch
ws.seodor.zas.admin.ch
www.sust.admin.ch
www.edb.admin.ch
www.sib.admin.ch
www.apistore.estv.admin.ch
www.xmlns.bfs.admin.ch
www.logixs.eda.admin.ch
www.esti.admin.ch
nd8.li.admin.ch
www.bar.admin.ch
sts003-r.gever.admin.ch
www-tmp-a.ekf.admin.ch
www.cfig.admin.ch
adonis.ezv.admin.ch
www.bag.admin.ch
key-recovery.a-pki.admin.ch
Int.ex4.lmsvbs.admin.ch
toolchain-selfservice.bit.admin.ch
s001047a.adr.admin.ch
ws.dds.bakom.admin.ch
rio-a.ssl.admin.ch
www.portal-a.eiam.admin.ch
www.ekff.admin.ch
www.cms-a1.admin.ch
ws.lsvastammdaten-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
www.sonderbewilligungen.admin.ch
intranet.sibad.vbs.admin.ch
storme-r.bafu.admin.ch
intranet.gate-r.bar.admin.ch
idp-base.gate-r.eiam.admin.ch
tokenunseal.a-pki.admin.ch
www.e-cites-a2.admin.ch
www.regress.admin.ch
intranet.vbs.admin.ch
www.oscitv-gw-a.admin.ch
epo.ejpd.admin.ch
test2.gate-a.bit.admin.ch
www.etv.blv.admin.ch
www.bestellung-k.admin.ch
www.pxweb-admin-a.bfs.admin.ch
www.widget.e-portal.admin.ch
www.ausbildung.eur-med.bazg.admin.ch
ebd.abn.ezv.admin.ch
www.cmsp8-a.admin.ch
www.b2cshop-i.admin.ch
idp-egov-federal.gate-d.eiam.admin.ch
flrt.bazl.admin.ch
ca-sbpp.seco.admin.ch
www.b2cshop.admin.ch
www.coff-ekff.admin.ch
sanadress.vbs.admin.ch
www.medregom-r.admin.ch
transfer-pr.wbf.admin.ch
cmc.a-pki.admin.ch
www.g2020-info.admin.ch
www.eofcom-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
ww2.elic-en.admin.ch
ws.quattrop-r.admin.ch
www.bbl.admin.ch
wwwt.interruptio-ges.bfs.admin.ch
www-tmp.roemerholz.admin.ch
www.aramis.admin.ch
survey.efk.admin.ch
uat-publish-internet-vbs.vbs.admin.ch
www.infoafam-a.zas.admin.ch
www.sust.admin.ch
www.plugins.aramis-a.admin.ch
www.pxweb-a.bfs.admin.ch
www.openegov.admin.ch
www.cms-t2.admin.ch
www.psyreg-k.admin.ch
www.cfej.admin.ch
www.cfig.admin.ch
pin-reset.a-pki.admin.ch

Certificate

The complete raw certificate details for www.blw.admin.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YDMZ1xyn/9+JFXX8ZJW
H0c+hZkOAyjgC201MobJzpOcEY/w/6XeqR7yADvGJK0AfGCK+nADvHfjgUFxW93l
JeGlNMmYLzIs19U4ApKnD7ab/Qres6mzTImTAnhWXYbrzW3oJX/o/CgqmXRhDMUM
JXb6tPXEdEvpQ/yBz/MNOL7eB3jLoR5LOjppjfp10XFfwXQOMCtCkCtdONWNsGRu
ziCictEdYtAxZpEXJOehxzuRtBnDkl+HwI8g2I7Zs7kW88ZYmETbEKmJIW7yXJrD
pOPJrvO8TZdEoR8oj1LpFX3+m2evpLbLRgaz4hghJha84wMP3K9z5JqdbmRDcnFG
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 425930445079731656777262639750608709120425516297
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-11 09:07:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-11 09:17:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bundesamt für Informatik und Telekommunikation (BIT)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Swiss Government PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.blw.admin.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27962178281419408387240614903032151080660921305707932157027418551059715594466910186694363986631957460061824196724353684028420504963234492779667890009900428915870905147298115359637615961947051824141059467602725417843325839988312948249111852636464951897911470063285780465355607312762909567334634010117976186892763299851891464377650982974338557106647652683583956428679951443785364207384611366761236098591317366991914445065579573939404792703381804652176991566333829339478579250593143132754561955522832561613522117365858583885108470494645454933785551425313466645063997310151999144902009514911359908108124818942950611437311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blw.admin.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							874652ba046223acb9c0ad8cf4eff43a9f936d6c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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