www.regress.admin.ch

- Bundesamt für Informatik und Telekommunikation BIT -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 54:86:0f:e7:51:59:74:a8:c3:03:77:e6:06:72:7b:ac:45:ff:07:68 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bundesamt für Informatik und Telekommunikation BIT

Organization: Bundesamt für Informatik und Telekommunikation BIT
State / Province: Bern
Locality: Bern
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 54:86:0f:e7:51:59:74:a8:c3:03:77:e6:06:72:7b:ac:45:ff:07:68
Serial Number (int): 482544910003453306886221512633365881068579653480
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: f4:35:28:f3:65:be:ec:71:76:e6:fd:b9:ed:27:2c:54:ba:c2:24:1e
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 28:c8:68:ae:b7:9f:34:13:90:88:60:7e:f9:0d:26:9e:28:7a:ed:96
Fingerprint (sha256): 01:39:ce:cc:fd:2a:8f:78:af:a9:1d:fe:cd:63:2a:e8:12:f4:2d:45:56:ec:6d:4a:3d:4b:57:26:b0:e0:b0:a1

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate www.regress.admin.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.regress.admin.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.regress.admin.ch

Other certificates including the domain name admin.ch

(limited to 100 certificates)
www.blw.admin.ch
www.gate.bav.admin.ch
www.jira-a.estv.admin.ch
sts0032.sts.eiam.admin.ch
www.cmsp4-a.admin.ch
appint.naz.admin.ch
www.staatskalender.admin.ch
*.geo.admin.ch
www.code.admin.ch
www.bundespublikationen.admin.ch
www.suissetax-r.estv.admin.ch
help.geo.admin.ch
int.translation.eda.admin.ch
www.portal.bsv.admin.ch
viaduc.sfa-laboratory.ch
www.tacho-en.admin.ch
e-dec-web-a.ezv.admin.ch
ncts-formular.ezv.admin.ch
trifid-lindas.int.cluster.ldbar.ch
ws.inar-r.zas.admin.ch
rp-eda01.eda.admin.ch
apis.sem.admin.ch
ws.seodor.zas.admin.ch
www.sust.admin.ch
www.edb.admin.ch
www.sib.admin.ch
www.apistore.estv.admin.ch
www.xmlns.bfs.admin.ch
www.logixs.eda.admin.ch
www.esti.admin.ch
nd8.li.admin.ch
www.bar.admin.ch
sts003-r.gever.admin.ch
www-tmp-a.ekf.admin.ch
www.cfig.admin.ch
adonis.ezv.admin.ch
www.bag.admin.ch
key-recovery.a-pki.admin.ch
Int.ex4.lmsvbs.admin.ch
toolchain-selfservice.bit.admin.ch
s001047a.adr.admin.ch
ws.dds.bakom.admin.ch
rio-a.ssl.admin.ch
www.portal-a.eiam.admin.ch
www.ekff.admin.ch
www.cms-a1.admin.ch
ws.lsvastammdaten-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
www.sonderbewilligungen.admin.ch
intranet.sibad.vbs.admin.ch
storme-r.bafu.admin.ch
intranet.gate-r.bar.admin.ch
idp-base.gate-r.eiam.admin.ch
tokenunseal.a-pki.admin.ch
www.e-cites-a2.admin.ch
www.regress.admin.ch
intranet.vbs.admin.ch
www.oscitv-gw-a.admin.ch
epo.ejpd.admin.ch
test2.gate-a.bit.admin.ch
www.etv.blv.admin.ch
www.bestellung-k.admin.ch
www.pxweb-admin-a.bfs.admin.ch
www.widget.e-portal.admin.ch
www.ausbildung.eur-med.bazg.admin.ch
ebd.abn.ezv.admin.ch
www.cmsp8-a.admin.ch
www.b2cshop-i.admin.ch
idp-egov-federal.gate-d.eiam.admin.ch
flrt.bazl.admin.ch
ca-sbpp.seco.admin.ch
www.b2cshop.admin.ch
www.coff-ekff.admin.ch
sanadress.vbs.admin.ch
www.medregom-r.admin.ch
transfer-pr.wbf.admin.ch
cmc.a-pki.admin.ch
www.g2020-info.admin.ch
www.eofcom-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
ww2.elic-en.admin.ch
ws.quattrop-r.admin.ch
www.bbl.admin.ch
wwwt.interruptio-ges.bfs.admin.ch
www-tmp.roemerholz.admin.ch
www.aramis.admin.ch
survey.efk.admin.ch
uat-publish-internet-vbs.vbs.admin.ch
www.infoafam-a.zas.admin.ch
www.sust.admin.ch
www.plugins.aramis-a.admin.ch
www.pxweb-a.bfs.admin.ch
www.openegov.admin.ch
www.cms-t2.admin.ch
www.psyreg-k.admin.ch
www.cfej.admin.ch
www.cfig.admin.ch
pin-reset.a-pki.admin.ch

Certificate

The complete raw certificate details for www.regress.admin.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pegr1FLpourj/uSWqPo
aaRO/of81pVV2kWO8u2OBAFDZmXGp70bPRMBHtHs+aUIB9tueJwOMauc9cZxBt/3
JKKwq8Oh/XeHo95DcmAK7HxdnyvLwposbSC0O5YY/8JMfz5jJrQQpqSdV+gNcK91
vWmrhZ4XWCF25wpcx9V0Yrgvq6Hm9d1jHjKUd9arR+5tjk2iV8E+UIVYubPuE9hh
wA9+2AsyF5Sr4LSlCJxnX2RE5NDDMLx2vGuwCwzp690Rk0NDgjxlOsAtUkGcHaGC
bQJSxxytikPQBqSuBQpR4ViVNK18qMAqy9TbOtj+6FB0/5qSXLlKATvZogPa8JcH
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 482544910003453306886221512633365881068579653480
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-06 06:48:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-12 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bundesamt für Informatik und Telekommunikation BIT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.regress.admin.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29614533755396856072707990828287315860046386192331133702972749615360315534635182858499786981105125865170382702236590924019411700124559614589380483953535405903524711149862178487767068680122890186111150986022992159816568208202335275034297420488881408535066109290754316096101310840766512661714172693464237515113287896579836133920624815259768891329553713133633543784045891408702194162999492271771427110781478596832058781644614570973971092327327074099640054485863310988651925173246378945244115333665050455934067161277981318493470090068917338709627765093654864777678141286814881154351972758230073307582602306909856599574441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regress.admin.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f43528f365beec7176e6fdb9ed272c54bac2241e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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