rp-eda01.eda.admin.ch

- Bundesamt fuer Informatik und Telekommunikation (BIT) -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 01:9e:b8:c4:ac:36:cc:0b:49:f1:eb:7a:e2:9b:4a:22:e3:6e:4c:aa was issued on by QuoVadis Limited.

With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bundesamt fuer Informatik und Telekommunikation (BIT)

Organization: Bundesamt fuer Informatik und Telekommunikation (BIT)
State / Province: Bern
Locality: Bern
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 01:9e:b8:c4:ac:36:cc:0b:49:f1:eb:7a:e2:9b:4a:22:e3:6e:4c:aa
Serial Number (int): 9248604097058776181237817275317897632991300778
Serial Number lenght: 153 bits, 20 octets

SubjectKeyId: 75:cb:9c:b4:b1:59:ab:31:1f:bf:ed:e6:0b:04:b1:3f:53:c5:77:6e
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 2e:eb:14:cb:1f:10:60:0a:e0:ee:fd:a7:e8:ae:4a:e3:3f:28:13:d6
Fingerprint (sha256): 00:67:06:42:37:5c:9a:7a:75:50:a7:3f:5a:84:3b:3e:33:ff:a1:93:8d:c5:42:22:e4:99:38:08:95:f3:5b:19

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate rp-eda01.eda.admin.ch

31

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rp-eda01.eda.admin.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rp-eda01.eda.admin.ch
rp-abi.eda.admin.ch
rp-abu.eda.admin.ch
rp-acc.eda.admin.ch
rp-adh.eda.admin.ch
rp-amm.eda.admin.ch
rp-amn.eda.admin.ch
rp-ank.eda.admin.ch
rp-ath.eda.admin.ch
rp-bar.eda.admin.ch
rp-bed.eda.admin.ch
rp-bel.eda.admin.ch
rp-bik.eda.admin.ch
rp-br1.eda.admin.ch
rp-brm.eda.admin.ch
rp-bru.eda.admin.ch
rp-buc.eda.admin.ch
rp-bud.eda.admin.ch
rp-chu.eda.admin.ch
rp-han.eda.admin.ch
rp-hml.eda.admin.ch
rp-kat.eda.admin.ch
rp-lon.eda.admin.ch
rp-lyo.eda.admin.ch
rp-mad.eda.admin.ch
rp-mar.eda.admin.ch
rp-mil.eda.admin.ch
rp-mon.eda.admin.ch
rp-mun.eda.admin.ch
rp-nai.eda.admin.ch
rp-ndh.eda.admin.ch

Other certificates including the domain name admin.ch

(limited to 100 certificates)
www.blw.admin.ch
www.gate.bav.admin.ch
www.jira-a.estv.admin.ch
sts0032.sts.eiam.admin.ch
www.cmsp4-a.admin.ch
appint.naz.admin.ch
www.staatskalender.admin.ch
*.geo.admin.ch
www.code.admin.ch
www.bundespublikationen.admin.ch
www.suissetax-r.estv.admin.ch
help.geo.admin.ch
int.translation.eda.admin.ch
www.portal.bsv.admin.ch
viaduc.sfa-laboratory.ch
www.tacho-en.admin.ch
e-dec-web-a.ezv.admin.ch
ncts-formular.ezv.admin.ch
trifid-lindas.int.cluster.ldbar.ch
ws.inar-r.zas.admin.ch
rp-eda01.eda.admin.ch
apis.sem.admin.ch
ws.seodor.zas.admin.ch
www.sust.admin.ch
www.edb.admin.ch
www.sib.admin.ch
www.apistore.estv.admin.ch
www.xmlns.bfs.admin.ch
www.logixs.eda.admin.ch
www.esti.admin.ch
nd8.li.admin.ch
www.bar.admin.ch
sts003-r.gever.admin.ch
www-tmp-a.ekf.admin.ch
www.cfig.admin.ch
adonis.ezv.admin.ch
www.bag.admin.ch
key-recovery.a-pki.admin.ch
Int.ex4.lmsvbs.admin.ch
toolchain-selfservice.bit.admin.ch
s001047a.adr.admin.ch
ws.dds.bakom.admin.ch
rio-a.ssl.admin.ch
www.portal-a.eiam.admin.ch
www.ekff.admin.ch
www.cms-a1.admin.ch
ws.lsvastammdaten-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
www.sonderbewilligungen.admin.ch
intranet.sibad.vbs.admin.ch
storme-r.bafu.admin.ch
intranet.gate-r.bar.admin.ch
idp-base.gate-r.eiam.admin.ch
tokenunseal.a-pki.admin.ch
www.e-cites-a2.admin.ch
www.regress.admin.ch
intranet.vbs.admin.ch
www.oscitv-gw-a.admin.ch
epo.ejpd.admin.ch
test2.gate-a.bit.admin.ch
www.etv.blv.admin.ch
www.bestellung-k.admin.ch
www.pxweb-admin-a.bfs.admin.ch
www.widget.e-portal.admin.ch
www.ausbildung.eur-med.bazg.admin.ch
ebd.abn.ezv.admin.ch
www.cmsp8-a.admin.ch
www.b2cshop-i.admin.ch
idp-egov-federal.gate-d.eiam.admin.ch
flrt.bazl.admin.ch
ca-sbpp.seco.admin.ch
www.b2cshop.admin.ch
www.coff-ekff.admin.ch
sanadress.vbs.admin.ch
www.medregom-r.admin.ch
transfer-pr.wbf.admin.ch
cmc.a-pki.admin.ch
www.g2020-info.admin.ch
www.eofcom-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
ww2.elic-en.admin.ch
ws.quattrop-r.admin.ch
www.bbl.admin.ch
wwwt.interruptio-ges.bfs.admin.ch
www-tmp.roemerholz.admin.ch
www.aramis.admin.ch
survey.efk.admin.ch
uat-publish-internet-vbs.vbs.admin.ch
www.infoafam-a.zas.admin.ch
www.sust.admin.ch
www.plugins.aramis-a.admin.ch
www.pxweb-a.bfs.admin.ch
www.openegov.admin.ch
www.cms-t2.admin.ch
www.psyreg-k.admin.ch
www.cfej.admin.ch
www.cfig.admin.ch
pin-reset.a-pki.admin.ch

Certificate

The complete raw certificate details for rp-eda01.eda.admin.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILjDCCCXSgAwIBAgIUAZ64xKw2zAtJ8et64ptKIuNuTKowDQYJKoZIhvcNAQEL
BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh
BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEczMB4XDTIzMDUwMjA5MTkw
NloXDTI0MDUwMjA5MTQwMFowgYsxCzAJBgNVBAYTAkNIMQ0wCwYDVQQIDARCZXJu
MQ0wCwYDVQQHDARCZXJuMT4wPAYDVQQKDDVCdW5kZXNhbXQgZnVlciBJbmZvcm1h
dGlrIHVuZCBUZWxla29tbXVuaWthdGlvbiAoQklUKTEeMBwGA1UEAwwVcnAtZWRh
MDEuZWRhLmFkbWluLmNoMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
oJ84tjT3caWAMlck+O7x7/XChEOocR2qVzL66VUlFGcIRaMHRLb5Dz3/vGv+Kr70
LD198C3AEk5sRKz4su9pTTPOxhQURj0MH4LGg8RzxeQqOfVgIT9lcs8/EKk+oTLT
WURzlZlpukWNjScBP87Pq5ng8v7vT7EhqSEoFw8tEc3LR2uG90ZQtIvNRhZ/i6Eq
WoFlYKmCbCvNTEHOmZj39+N5LSoGjBL7eVPO/7WN/BsmYF9VYCklwsI1ppA/MteK
dTV03XBJCJRt5ao0HdGZo5l8Km2sL0g8Ik9udl1ujBV/n5CF7Rp3CiSe6wioouDA
NnocB/eno66pxOxMJlJ9BfSAE0nMoCPHCrpDTrLGnXpdYXd/VHSPERvwRzAJ4noz
KMBSbBGCyrIpDZSRxKw0LCNQ7o7X5jOyTQstVKduVcRWcBHXwKi3Ss007jBojryi
nccblfa7y9a35/eV5YF1k+eEOvgYMHKGfqv+B+XlUU3dnLYW3nm0ya5SvCb2lIWK
627NqhBNUI7s8PNFTMsN7HqTmwTrivdvLy4sZtH2g5FfTlEgaT5vSVUFs7t1bH1V
dgDlorkRyAnjq2IPfuXQy0/BXRiAGyobeJAtq4LeGmLhqGyQYPFm1uUfxp6h0LE0
o+WlMPKURgHx2pgebeQirvtTWt8mxtfVkDjfHRhJjWMCAwEAAaOCBiMwggYfMAkG
A1UdEwQCMAAwHwYDVR0jBBgwFoAUsxKJtalLNbwVAPCA6dh4h/ETfHYwcwYIKwYB
BQUHAQEEZzBlMDcGCCsGAQUFBzAChitodHRwOi8vdHJ1c3QucXVvdmFkaXNnbG9i
YWwuY29tL3F2c3NsZzMuY3J0MCoGCCsGAQUFBzABhh5odHRwOi8vb2NzcC5xdW92
YWRpc2dsb2JhbC5jb20wggKaBgNVHREEggKRMIICjYIVcnAtZWRhMDEuZWRhLmFk
bWluLmNoghNycC1hYmkuZWRhLmFkbWluLmNoghNycC1hYnUuZWRhLmFkbWluLmNo
ghNycC1hY2MuZWRhLmFkbWluLmNoghNycC1hZGguZWRhLmFkbWluLmNoghNycC1h
bW0uZWRhLmFkbWluLmNoghNycC1hbW4uZWRhLmFkbWluLmNoghNycC1hbmsuZWRh
LmFkbWluLmNoghNycC1hdGguZWRhLmFkbWluLmNoghNycC1iYXIuZWRhLmFkbWlu
LmNoghNycC1iZWQuZWRhLmFkbWluLmNoghNycC1iZWwuZWRhLmFkbWluLmNoghNy
cC1iaWsuZWRhLmFkbWluLmNoghNycC1icjEuZWRhLmFkbWluLmNoghNycC1icm0u
ZWRhLmFkbWluLmNoghNycC1icnUuZWRhLmFkbWluLmNoghNycC1idWMuZWRhLmFk
bWluLmNoghNycC1idWQuZWRhLmFkbWluLmNoghNycC1jaHUuZWRhLmFkbWluLmNo
ghNycC1oYW4uZWRhLmFkbWluLmNoghNycC1obWwuZWRhLmFkbWluLmNoghNycC1r
YXQuZWRhLmFkbWluLmNoghNycC1sb24uZWRhLmFkbWluLmNoghNycC1seW8uZWRh
LmFkbWluLmNoghNycC1tYWQuZWRhLmFkbWluLmNoghNycC1tYXIuZWRhLmFkbWlu
LmNoghNycC1taWwuZWRhLmFkbWluLmNoghNycC1tb24uZWRhLmFkbWluLmNoghNy
cC1tdW4uZWRhLmFkbWluLmNoghNycC1uYWkuZWRhLmFkbWluLmNoghNycC1uZGgu
ZWRhLmFkbWluLmNoMFsGA1UdIARUMFIwRgYMKwYBBAG+WAACZAEBMDYwNAYIKwYB
BQUHAgEWKGh0dHA6Ly93d3cucXVvdmFkaXNnbG9iYWwuY29tL3JlcG9zaXRvcnkw
CAYGZ4EMAQICMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATA6BgNVHR8E
MzAxMC+gLaArhilodHRwOi8vY3JsLnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdnNzbGcz
LmNybDAdBgNVHQ4EFgQUdcuctLFZqzEfv+3mCwSxP1PFd24wDgYDVR0PAQH/BAQD
AgWgMIIB9QYKKwYBBAHWeQIEAgSCAeUEggHhAd8AdwB2/4g/Crb7lVHCYcz1h7o0
tKTNuyncaEIKn+ZnTFo6dAAAAYfby1FKAAAEAwBIMEYCIQDqqJPq5tCW90gzJ7aO
J7UQGnWbWKhKOyOlsE/F/3M6igIhAJqa3RQ3DaYG626t964iba/0R8XacEoD08AS
u8Dk9EvoAHYAc9meiRtMlnigIH1HneayxhzQUV5xGSqMa4AQesF3crUAAAGH28tR
gAAABAMARzBFAiAP/sq40STUkz8RDy/5Q1mF5rQ6NcWYZRwCO1CSDxk4QwIhANbV
DSMMGMYo237uOCyjzyEPFwaR1d8nu8SnljlJL05zAHUAO1N3dT4tuYBOizBbBv5A
O2fYT8P0x70ADS1yb+H61BcAAAGH28tRegAABAMARjBEAiAEJXlaUkKiH4B+Wsge
Y8w7jMYxO22Ws3M22BUGQREBugIgRhZ7yx3f0QYjHTd16OTVMsWFRpsbut8H5vVy
rpQHrPIAdQBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAYfby1F7
AAAEAwBGMEQCICMXur8yQPhYLnCrW5+takN448ErC7XU54lqyu5NFrn8AiBYcl67
MncIAhIHCvjJwq6z8qRdeg3T0qzRfen0FDVykzANBgkqhkiG9w0BAQsFAAOCAgEA
Bdhg1xF3mCk0y++aule7wWdFo5bFM3oYBAQ+9etGMU7ByOqlMShGwENqPqmWTSJW
DxHDcJZAyFgIyVMjcGpzY9s/X4dzA2glVljznV0y5aNgzB7kPgOGlUO5Yf7tnQor
9L7mq/xU557uzx9HiwH+6Z6e9+DByABCFJo3a4mLgMLGHArdJVZCcdX2gTPgNe4y
r3YZaZoxN8iNDqcwrT6/IkGjH3/BU4Op1KovQkvDWfXJAtfMAYMusui+3masTF9r
lbNbrycZyG1D+Rlp00Zbw8yZYUGGQi90iMDZ0JUF4REsD02gIAvEQAduZ6X1+WcN
6ZZKDsBSPnJfTqhU1cjZ8v/f5G7kqjmvPyZu8vMOW8L5H6SnewEOu9Y29d0KQEBH
Zxe/xVr+VtH5vGxVZCp4n5M+06aWKPvq2UOPAYzVr6nGJjTUn461tDjugzNBWuMV
M28CPo1mG5OcI4ns1BBjWtRPPJvoxNM/wLM9fNFwp79W1zfwBzDVdsfcPhOaKEZB
LGMYsTdfwdvwLUmJKuRiVMm+WlIREgCfTEbngIXECxVVNyOZN2VWBkg203NKFW0M
7Ai+8jnBxiAZ2OiBdimyp14QeGFoZ4XgeeOAV4X+9ybasqymLM8LthLc6mcI1dHa
6NRyXGRwvoLI6M9ZGMXRheyAoUtLsBAGPNcDUMRMT5Q=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9248604097058776181237817275317897632991300778
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-02 09:19:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-02 09:14:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bundesamt fuer Informatik und Telekommunikation (BIT)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'rp-eda01.eda.admin.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 655280422646551114108467267841128310762839111976970847863252015771755478828379176899806897460666887380624498903685117747923473042433895382839882540975455248982943224736164499399932473882127919148178379063133460897026639228730847532570945834613334173413983692594153106320547609624345873507757322042169365396886658179192326437029165477746470917069915257885129277280264461503902909561740407258546242560679459268490607390527854713227536458324565975183466308172691274920577242108413053637520764689584065414407623767063014692817235093924735333140730376863766788183644863093913036020509174674655082969981212938494615912567705183142514031798888561823027705881638240219595153979568582663399386777414224379926033144848112918048168560183719575426931677389083735778922552711399108477061708810058759887521505580383255251710515075442539514559454449937519013954101653082195700708750490188007080276545526704834627844807652448219655536549558817051931396193559644140151814119293606960182292000906301257408017537753282456242828921007938375041822045445581503162890978380448462647060064834967120363232257779785753315795428470005621653295814358345832034262353250892715402125605405810854315522340582516254291707011661443649712974595329053331788132493397347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (657 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-eda01.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-abi.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-abu.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-acc.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-adh.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-amm.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-amn.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-ank.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-ath.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-bar.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-bed.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-bel.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-bik.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-br1.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-brm.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-bru.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-buc.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-bud.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-chu.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-han.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-hml.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-kat.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-lon.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-lyo.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-mad.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-mar.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-mil.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-mon.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-mun.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-nai.eda.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp-ndh.eda.admin.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							75cb9cb4b159ab311fbfede60b04b13f53c5776e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0005d860d71177982934cbef9aba57bbc16745a396c5337a1804043ef5eb46314ec1c8eaa5312846c0436a3ea9964d22560f11c3709640c85808c95323706a7363db3f5f87730368255658f39d5d32e5a360cc1ee43e03869543b961feed9d0a2bf4bee6abfc54e79eeecf1f478b01fee99e9ef7e0c1c80042149a376b898b80c2c61c0add25564271d5f68133e035ee32af7619699a3137c88d0ea730ad3ebf2241a31f7fc15383a9d4aa2f424bc359f5c902d7cc01832eb2e8bede66ac4c5f6b95b35baf2719c86d43f91969d3465bc3cc99614186422f7488c0d9d09505e1112c0f4da0200bc440076e67a5f5f9670de9964a0ec0523e725f4ea854d5c8d9f2ffdfe46ee4aa39af3f266ef2f30e5bc2f91fa4a77b010ebbd636f5dd0a4040476717bfc55afe56d1f9bc6c55642a789f933ed3a69628fbead9438f018cd5afa9c62634d49f8eb5b438ee8333415ae315336f023e8d661b939c2389ecd410635ad44f3c9be8c4d33fc0b33d7cd170a7bf56d737f00730d576c7dc3e139a2846412c6318b1375fc1dbf02d49892ae46254c9be5a521112009f4c46e78085c40b1555372399376556064836d3734a156d0cec08bef239c1c62019d8e8817629b2a75e107861686785e079e3805785fef726dab2aca62ccf0bb612dcea6708d5d1dae8d4725c6470be82c8e8cf5918c5d185ec80a14b4bb010063cd70350c44c4f94