rio-a.ssl.admin.ch
- Bundesamt fuer Informatik und Telekommunikation (BIT) -
Issued by QuoVadis Global SSL ICA G3
About this certificate
This digital certificate with serial number 3c:55:4a:6d:f2:5c:0f:15:73:b1:55:4b:ea:8b:c1:69:9e:50:59:bd was issued on by QuoVadis Limited.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Bundesamt fuer Informatik und Telekommunikation (BIT)
Organization:
Bundesamt fuer Informatik und Telekommunikation (BIT)
State / Province:
Bern
Locality: Bern
Country: CH
Locality: Bern
Country: CH
QuoVadis Limited
Organization:
QuoVadis Limited
Country:
BM
This certificate has expire since
Certificate Details
Serial Number (hex): 3c:55:4a:6d:f2:5c:0f:15:73:b1:55:4b:ea:8b:c1:69:9e:50:59:bdSerial Number (int): 344441493313393591288239008157687040264266340797
Serial Number lenght: 158 bits, 20 octets
SubjectKeyId: 16:02:fe:59:71:5a:6a:22:27:d6:f7:86:e6:59:8c:bd:a3:5e:68:a9
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76
Fingerprint (sha1): 51:7b:df:49:f8:6b:74:d0:b8:ba:1a:92:de:13:c9:29:2b:e6:bb:32
Fingerprint (sha256): 01:02:b5:ee:02:36:01:88:e4:34:f3:b6:aa:72:cd:ba:80:7c:90:31:5e:c1:a4:25:19:80:44:37:5b:1b:72:ee
Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt
Revocation information
OCSP Server: http://ocsp.quovadisglobal.comCRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl
Check the revocation status for certificate rio-a.ssl.admin.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rio-a.ssl.admin.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
rio-a.ssl.admin.ch
Other certificates including the domain name admin.ch
(limited to 100 certificates)
www.blw.admin.ch
www.gate.bav.admin.ch
www.jira-a.estv.admin.ch
sts0032.sts.eiam.admin.ch
www.cmsp4-a.admin.ch
appint.naz.admin.ch
www.staatskalender.admin.ch
*.geo.admin.ch
www.code.admin.ch
www.bundespublikationen.admin.ch
www.suissetax-r.estv.admin.ch
help.geo.admin.ch
int.translation.eda.admin.ch
www.portal.bsv.admin.ch
viaduc.sfa-laboratory.ch
www.tacho-en.admin.ch
e-dec-web-a.ezv.admin.ch
ncts-formular.ezv.admin.ch
trifid-lindas.int.cluster.ldbar.ch
ws.inar-r.zas.admin.ch
rp-eda01.eda.admin.ch
apis.sem.admin.ch
ws.seodor.zas.admin.ch
www.sust.admin.ch
www.edb.admin.ch
www.sib.admin.ch
www.apistore.estv.admin.ch
www.xmlns.bfs.admin.ch
www.logixs.eda.admin.ch
www.esti.admin.ch
nd8.li.admin.ch
www.bar.admin.ch
sts003-r.gever.admin.ch
www-tmp-a.ekf.admin.ch
www.cfig.admin.ch
adonis.ezv.admin.ch
www.bag.admin.ch
key-recovery.a-pki.admin.ch
Int.ex4.lmsvbs.admin.ch
toolchain-selfservice.bit.admin.ch
s001047a.adr.admin.ch
ws.dds.bakom.admin.ch
rio-a.ssl.admin.ch
www.portal-a.eiam.admin.ch
www.ekff.admin.ch
www.cms-a1.admin.ch
ws.lsvastammdaten-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
www.sonderbewilligungen.admin.ch
intranet.sibad.vbs.admin.ch
storme-r.bafu.admin.ch
intranet.gate-r.bar.admin.ch
idp-base.gate-r.eiam.admin.ch
tokenunseal.a-pki.admin.ch
www.e-cites-a2.admin.ch
www.regress.admin.ch
intranet.vbs.admin.ch
www.oscitv-gw-a.admin.ch
epo.ejpd.admin.ch
test2.gate-a.bit.admin.ch
www.etv.blv.admin.ch
www.bestellung-k.admin.ch
www.pxweb-admin-a.bfs.admin.ch
www.widget.e-portal.admin.ch
www.ausbildung.eur-med.bazg.admin.ch
ebd.abn.ezv.admin.ch
www.cmsp8-a.admin.ch
www.b2cshop-i.admin.ch
idp-egov-federal.gate-d.eiam.admin.ch
flrt.bazl.admin.ch
ca-sbpp.seco.admin.ch
www.b2cshop.admin.ch
www.coff-ekff.admin.ch
sanadress.vbs.admin.ch
www.medregom-r.admin.ch
transfer-pr.wbf.admin.ch
cmc.a-pki.admin.ch
www.g2020-info.admin.ch
www.eofcom-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
ww2.elic-en.admin.ch
ws.quattrop-r.admin.ch
www.bbl.admin.ch
wwwt.interruptio-ges.bfs.admin.ch
www-tmp.roemerholz.admin.ch
www.aramis.admin.ch
survey.efk.admin.ch
uat-publish-internet-vbs.vbs.admin.ch
www.infoafam-a.zas.admin.ch
www.sust.admin.ch
www.plugins.aramis-a.admin.ch
www.pxweb-a.bfs.admin.ch
www.openegov.admin.ch
www.cms-t2.admin.ch
www.psyreg-k.admin.ch
www.cfej.admin.ch
www.cfig.admin.ch
pin-reset.a-pki.admin.ch
www.gate.bav.admin.ch
www.jira-a.estv.admin.ch
sts0032.sts.eiam.admin.ch
www.cmsp4-a.admin.ch
appint.naz.admin.ch
www.staatskalender.admin.ch
*.geo.admin.ch
www.code.admin.ch
www.bundespublikationen.admin.ch
www.suissetax-r.estv.admin.ch
help.geo.admin.ch
int.translation.eda.admin.ch
www.portal.bsv.admin.ch
viaduc.sfa-laboratory.ch
www.tacho-en.admin.ch
e-dec-web-a.ezv.admin.ch
ncts-formular.ezv.admin.ch
trifid-lindas.int.cluster.ldbar.ch
ws.inar-r.zas.admin.ch
rp-eda01.eda.admin.ch
apis.sem.admin.ch
ws.seodor.zas.admin.ch
www.sust.admin.ch
www.edb.admin.ch
www.sib.admin.ch
www.apistore.estv.admin.ch
www.xmlns.bfs.admin.ch
www.logixs.eda.admin.ch
www.esti.admin.ch
nd8.li.admin.ch
www.bar.admin.ch
sts003-r.gever.admin.ch
www-tmp-a.ekf.admin.ch
www.cfig.admin.ch
adonis.ezv.admin.ch
www.bag.admin.ch
key-recovery.a-pki.admin.ch
Int.ex4.lmsvbs.admin.ch
toolchain-selfservice.bit.admin.ch
s001047a.adr.admin.ch
ws.dds.bakom.admin.ch
rio-a.ssl.admin.ch
www.portal-a.eiam.admin.ch
www.ekff.admin.ch
www.cms-a1.admin.ch
ws.lsvastammdaten-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
www.sonderbewilligungen.admin.ch
intranet.sibad.vbs.admin.ch
storme-r.bafu.admin.ch
intranet.gate-r.bar.admin.ch
idp-base.gate-r.eiam.admin.ch
tokenunseal.a-pki.admin.ch
www.e-cites-a2.admin.ch
www.regress.admin.ch
intranet.vbs.admin.ch
www.oscitv-gw-a.admin.ch
epo.ejpd.admin.ch
test2.gate-a.bit.admin.ch
www.etv.blv.admin.ch
www.bestellung-k.admin.ch
www.pxweb-admin-a.bfs.admin.ch
www.widget.e-portal.admin.ch
www.ausbildung.eur-med.bazg.admin.ch
ebd.abn.ezv.admin.ch
www.cmsp8-a.admin.ch
www.b2cshop-i.admin.ch
idp-egov-federal.gate-d.eiam.admin.ch
flrt.bazl.admin.ch
ca-sbpp.seco.admin.ch
www.b2cshop.admin.ch
www.coff-ekff.admin.ch
sanadress.vbs.admin.ch
www.medregom-r.admin.ch
transfer-pr.wbf.admin.ch
cmc.a-pki.admin.ch
www.g2020-info.admin.ch
www.eofcom-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
ww2.elic-en.admin.ch
ws.quattrop-r.admin.ch
www.bbl.admin.ch
wwwt.interruptio-ges.bfs.admin.ch
www-tmp.roemerholz.admin.ch
www.aramis.admin.ch
survey.efk.admin.ch
uat-publish-internet-vbs.vbs.admin.ch
www.infoafam-a.zas.admin.ch
www.sust.admin.ch
www.plugins.aramis-a.admin.ch
www.pxweb-a.bfs.admin.ch
www.openegov.admin.ch
www.cms-t2.admin.ch
www.psyreg-k.admin.ch
www.cfej.admin.ch
www.cfig.admin.ch
pin-reset.a-pki.admin.ch
Certificate
The complete raw certificate details for rio-a.ssl.admin.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJDDCCBvSgAwIBAgIUPFVKbfJcDxVzsVVL6ovBaZ5QWb0wDQYJKoZIhvcNAQEL BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEczMB4XDTIzMDQyNzA5MjAx NVoXDTI0MDQyNzA5MTUwMFowgYgxCzAJBgNVBAYTAkNIMQ0wCwYDVQQIDARCZXJu MQ0wCwYDVQQHDARCZXJuMT4wPAYDVQQKDDVCdW5kZXNhbXQgZnVlciBJbmZvcm1h dGlrIHVuZCBUZWxla29tbXVuaWthdGlvbiAoQklUKTEbMBkGA1UEAwwScmlvLWEu c3NsLmFkbWluLmNoMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtVN8 YER0W9Ll9aUkDbFAd3bFDbKjjVOZTsWQupISs725UtPyP7HXbqTvk9AHcgsbSkNZ LW7dKtxXEhVu+Wlf1BVhih+2p6sYC1sDeqMZ9NxoEaWPW/rvzXg9GfQG2qP9vbxQ t+shH1LnwQ+l1oaqHAjlhkKVqb5r0r215LUnqaReFGudk9mmJlFRDK73bRnzeJaF 26Kwko07cNK5E2oIkM1NThDISyIc4EumGQhKwxoTJ694mTTOtzB0Q1wuC6rOlfT+ Ed/H5aqKNbA9AeOh5XPiHAXv+pC60kcbCzunR+2v9B7hLtfNENm4X8Kpqb/BcxGi GLsPH4rrqyZI9ZAg3/16P97O3JYGgPfsDpCjCijKhhXXo20GKZlt6SHihSalxCne EYgkhguGtFoHAIE7J9eKXT8ZYASQQdLbrnqMxey7CZiAjoGNcDVeMjKW3uBHE6Sc Hs+nn2JFc8VOsdF1V97FGT9EfY839UBAeH4i9hSC2FFwbDCdZS5WFmcyb6HLeeNg QVmqleA3PqlY1jFtoSEtfB/yz4ZAT5ZsAEZG/2pwTHSJnjr7vtrVMM9BYOY5QAcb KTZcsmU1NUzDtdJNfdT8s1dob2d77ROv/c3dWXDJFD4MV4ue5wm+Mrb8iET1Evkp N2AZelJEqg8L4eOBYWRFUnBhfBV8v1q2jW12GtMCAwEAAaOCA6YwggOiMAkGA1Ud EwQCMAAwHwYDVR0jBBgwFoAUsxKJtalLNbwVAPCA6dh4h/ETfHYwcwYIKwYBBQUH AQEEZzBlMDcGCCsGAQUFBzAChitodHRwOi8vdHJ1c3QucXVvdmFkaXNnbG9iYWwu Y29tL3F2c3NsZzMuY3J0MCoGCCsGAQUFBzABhh5odHRwOi8vb2NzcC5xdW92YWRp c2dsb2JhbC5jb20wHQYDVR0RBBYwFIIScmlvLWEuc3NsLmFkbWluLmNoMFsGA1Ud IARUMFIwRgYMKwYBBAG+WAACZAEBMDYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cu cXVvdmFkaXNnbG9iYWwuY29tL3JlcG9zaXRvcnkwCAYGZ4EMAQICMB0GA1UdJQQW MBQGCCsGAQUFBwMCBggrBgEFBQcDATA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8v Y3JsLnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdnNzbGczLmNybDAdBgNVHQ4EFgQUFgL+ WXFaaiIn1veG5lmMvaNeaKkwDgYDVR0PAQH/BAQDAgWgMIIB9wYKKwYBBAHWeQIE AgSCAecEggHjAeEAdQDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAA AYfCDJIhAAAEAwBGMEQCIFDuRpC8QM7+jnFIq+2NIQ7rvZ5NcB/VCLATzM2PwhQL AiB6Frnhzz17KT0pwbAQaqAI+CLixrT3I+f/8nCR2zturAB3AHb/iD8KtvuVUcJh zPWHujS0pM27KdxoQgqf5mdMWjp0AAABh8IMkbEAAAQDAEgwRgIhALvTmoyZ49rU v76w1t/VAg1sJQlKqD/D3IN9kzPOb+pLAiEAohtrMEQp1++pLEO6uvWimwj+tN/J HzzZRTbgPeSCRpEAdwBz2Z6JG0yWeKAgfUed5rLGHNBRXnEZKoxrgBB6wXdytQAA AYfCDJKpAAAEAwBIMEYCIQDwOw4EH8xxWzQbJmVeGYC4UsvkhqmFKGkbo0gUvICM oAIhAMg4wldqS3R2uC/LworqDoGbjTxbmF4C9ggU5VnXfw44AHYA7s3QZNXbGs7F XLedtM0TojKHRny87N7DUUhZRnEftZsAAAGHwgyR5wAABAMARzBFAiEAnwOm7LIf sgfTUtmNR1D7jEyRUCn/LyGq2jJLf2/tfzACIHWZ+UJsM2ueVLz5VZxuNhBE2iL9 e0qzJcwp5BpPrXSfMA0GCSqGSIb3DQEBCwUAA4ICAQCs7n+0l405ImPQMssT0sKd 591qPzKrOOZ0jiZ9t5MrLM76uYpJBB5QO6nkGJZ7/XDRqu1Nc2oE4yVK+QMb6PlI yqdJwXJZyMkO+FBWgIg+8cZ54mT/THuCBEaFakR4ued4UjJkm8wjE4tL7eC8lRIF rdBELv5Ss2uN+2MtWwDshhIIgfNKvpiltjJGtQG7mYUXoBGVshkxtWnOyiU8dMh3 U0LtfLNu7XAn3tqAUspQFwieKgkwnZUhFQRoL1phGFpav7Ag888pU+BcAZtLCVxM SrF0wC2GZUDZWxU0M3F1HEm/5CT23BJIX9dlQzaXtj3K1CGzq8rPZc9of9yX8sMY nayNliXlcqXV+nC5UIujYn38e9XsfiCinWFAJFQCaiebQocjOJeCu9bsdNNXiLnK nThvQQj5b+vjPbMOQ8Q5XBRJoWAiB1YF7MQDEabTilBeebMmr7759hyC+PJVsc5n CJH3HcD6Lj/6XryiLt8V+4XUDfeJGZEf//lh9tHA5fajN/2vwUTE7JXCNtm/xmsk bZFHn3B6n+gied02+Z6MBGvSyan1jP2C0eWseR374NtV4Odqbmc+w5HLEA1svoKn gyrnXpzRas+Gp3pBB0aneOBSdyj614lpqdhnlYsa1FYu9C5FicDaR5cu++DEAlQT TjdLeWFOyftEjYmJoE8GTg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtVN8YER0W9Ll9aUkDbFA d3bFDbKjjVOZTsWQupISs725UtPyP7HXbqTvk9AHcgsbSkNZLW7dKtxXEhVu+Wlf 1BVhih+2p6sYC1sDeqMZ9NxoEaWPW/rvzXg9GfQG2qP9vbxQt+shH1LnwQ+l1oaq HAjlhkKVqb5r0r215LUnqaReFGudk9mmJlFRDK73bRnzeJaF26Kwko07cNK5E2oI kM1NThDISyIc4EumGQhKwxoTJ694mTTOtzB0Q1wuC6rOlfT+Ed/H5aqKNbA9AeOh 5XPiHAXv+pC60kcbCzunR+2v9B7hLtfNENm4X8Kpqb/BcxGiGLsPH4rrqyZI9ZAg 3/16P97O3JYGgPfsDpCjCijKhhXXo20GKZlt6SHihSalxCneEYgkhguGtFoHAIE7 J9eKXT8ZYASQQdLbrnqMxey7CZiAjoGNcDVeMjKW3uBHE6ScHs+nn2JFc8VOsdF1 V97FGT9EfY839UBAeH4i9hSC2FFwbDCdZS5WFmcyb6HLeeNgQVmqleA3PqlY1jFt oSEtfB/yz4ZAT5ZsAEZG/2pwTHSJnjr7vtrVMM9BYOY5QAcbKTZcsmU1NUzDtdJN fdT8s1dob2d77ROv/c3dWXDJFD4MV4ue5wm+Mrb8iET1EvkpN2AZelJEqg8L4eOB YWRFUnBhfBV8v1q2jW12GtMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 344441493313393591288239008157687040264266340797 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-27 09:20:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 09:15:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bundesamt fuer Informatik und Telekommunikation (BIT)' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'rio-a.ssl.admin.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 739746015873861843572779934758840748431753817499332658164284147518360874644105443290919918020048588498097750972438728178809237097942468818699954191707777452356885356565959465076804720803057764193399424802975187507684130479270440939957720771318860608363629468994387574755577450089297385206203833606491918477884125091888286750860468584673992139405019751567265886055665950987221184923854307076223472949288199042495447231180898667687823866682281282121120337956902052719493681026324125323746994601626535031004284671249382017034960370523963079689941603964303545964286463043336199154254096111756346396773053848831787207127748839718868758612920012545388079655810464605517386410833701302678642599586767473576006945064107560348087919947318694176056664199437226864151095361415369712952616725294104862012406602139956627387141945095161960598086030049279837557620687376412155791561466251669677363341284004430365453914502178693677791045426196792027037653465238427634203110090027611389988667007531514497411235774608047502098078950255469461925665922237671046519555852719537235384595604688950725613011162889002614407696899639867714402938259590089603085952041107879875776513588645365733109588587629206624483678990130639879069072026309942993897896942291 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rio-a.ssl.admin.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1602fe59715a6a2227d6f786e6598cbda35e68a9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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