rio-a.ssl.admin.ch

- Bundesamt fuer Informatik und Telekommunikation (BIT) -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 3c:55:4a:6d:f2:5c:0f:15:73:b1:55:4b:ea:8b:c1:69:9e:50:59:bd was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bundesamt fuer Informatik und Telekommunikation (BIT)

Organization: Bundesamt fuer Informatik und Telekommunikation (BIT)
State / Province: Bern
Locality: Bern
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 3c:55:4a:6d:f2:5c:0f:15:73:b1:55:4b:ea:8b:c1:69:9e:50:59:bd
Serial Number (int): 344441493313393591288239008157687040264266340797
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 16:02:fe:59:71:5a:6a:22:27:d6:f7:86:e6:59:8c:bd:a3:5e:68:a9
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 51:7b:df:49:f8:6b:74:d0:b8:ba:1a:92:de:13:c9:29:2b:e6:bb:32
Fingerprint (sha256): 01:02:b5:ee:02:36:01:88:e4:34:f3:b6:aa:72:cd:ba:80:7c:90:31:5e:c1:a4:25:19:80:44:37:5b:1b:72:ee

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate rio-a.ssl.admin.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rio-a.ssl.admin.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rio-a.ssl.admin.ch

Other certificates including the domain name admin.ch

(limited to 100 certificates)
www.blw.admin.ch
www.gate.bav.admin.ch
www.jira-a.estv.admin.ch
sts0032.sts.eiam.admin.ch
www.cmsp4-a.admin.ch
appint.naz.admin.ch
www.staatskalender.admin.ch
*.geo.admin.ch
www.code.admin.ch
www.bundespublikationen.admin.ch
www.suissetax-r.estv.admin.ch
help.geo.admin.ch
int.translation.eda.admin.ch
www.portal.bsv.admin.ch
viaduc.sfa-laboratory.ch
www.tacho-en.admin.ch
e-dec-web-a.ezv.admin.ch
ncts-formular.ezv.admin.ch
trifid-lindas.int.cluster.ldbar.ch
ws.inar-r.zas.admin.ch
rp-eda01.eda.admin.ch
apis.sem.admin.ch
ws.seodor.zas.admin.ch
www.sust.admin.ch
www.edb.admin.ch
www.sib.admin.ch
www.apistore.estv.admin.ch
www.xmlns.bfs.admin.ch
www.logixs.eda.admin.ch
www.esti.admin.ch
nd8.li.admin.ch
www.bar.admin.ch
sts003-r.gever.admin.ch
www-tmp-a.ekf.admin.ch
www.cfig.admin.ch
adonis.ezv.admin.ch
www.bag.admin.ch
key-recovery.a-pki.admin.ch
Int.ex4.lmsvbs.admin.ch
toolchain-selfservice.bit.admin.ch
s001047a.adr.admin.ch
ws.dds.bakom.admin.ch
rio-a.ssl.admin.ch
www.portal-a.eiam.admin.ch
www.ekff.admin.ch
www.cms-a1.admin.ch
ws.lsvastammdaten-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
www.sonderbewilligungen.admin.ch
intranet.sibad.vbs.admin.ch
storme-r.bafu.admin.ch
intranet.gate-r.bar.admin.ch
idp-base.gate-r.eiam.admin.ch
tokenunseal.a-pki.admin.ch
www.e-cites-a2.admin.ch
www.regress.admin.ch
intranet.vbs.admin.ch
www.oscitv-gw-a.admin.ch
epo.ejpd.admin.ch
test2.gate-a.bit.admin.ch
www.etv.blv.admin.ch
www.bestellung-k.admin.ch
www.pxweb-admin-a.bfs.admin.ch
www.widget.e-portal.admin.ch
www.ausbildung.eur-med.bazg.admin.ch
ebd.abn.ezv.admin.ch
www.cmsp8-a.admin.ch
www.b2cshop-i.admin.ch
idp-egov-federal.gate-d.eiam.admin.ch
flrt.bazl.admin.ch
ca-sbpp.seco.admin.ch
www.b2cshop.admin.ch
www.coff-ekff.admin.ch
sanadress.vbs.admin.ch
www.medregom-r.admin.ch
transfer-pr.wbf.admin.ch
cmc.a-pki.admin.ch
www.g2020-info.admin.ch
www.eofcom-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
ww2.elic-en.admin.ch
ws.quattrop-r.admin.ch
www.bbl.admin.ch
wwwt.interruptio-ges.bfs.admin.ch
www-tmp.roemerholz.admin.ch
www.aramis.admin.ch
survey.efk.admin.ch
uat-publish-internet-vbs.vbs.admin.ch
www.infoafam-a.zas.admin.ch
www.sust.admin.ch
www.plugins.aramis-a.admin.ch
www.pxweb-a.bfs.admin.ch
www.openegov.admin.ch
www.cms-t2.admin.ch
www.psyreg-k.admin.ch
www.cfej.admin.ch
www.cfig.admin.ch
pin-reset.a-pki.admin.ch

Certificate

The complete raw certificate details for rio-a.ssl.admin.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344441493313393591288239008157687040264266340797
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-27 09:20:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 09:15:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bundesamt fuer Informatik und Telekommunikation (BIT)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'rio-a.ssl.admin.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 739746015873861843572779934758840748431753817499332658164284147518360874644105443290919918020048588498097750972438728178809237097942468818699954191707777452356885356565959465076804720803057764193399424802975187507684130479270440939957720771318860608363629468994387574755577450089297385206203833606491918477884125091888286750860468584673992139405019751567265886055665950987221184923854307076223472949288199042495447231180898667687823866682281282121120337956902052719493681026324125323746994601626535031004284671249382017034960370523963079689941603964303545964286463043336199154254096111756346396773053848831787207127748839718868758612920012545388079655810464605517386410833701302678642599586767473576006945064107560348087919947318694176056664199437226864151095361415369712952616725294104862012406602139956627387141945095161960598086030049279837557620687376412155791561466251669677363341284004430365453914502178693677791045426196792027037653465238427634203110090027611389988667007531514497411235774608047502098078950255469461925665922237671046519555852719537235384595604688950725613011162889002614407696899639867714402938259590089603085952041107879875776513588645365733109588587629206624483678990130639879069072026309942993897896942291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rio-a.ssl.admin.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1602fe59715a6a2227d6f786e6598cbda35e68a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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