cmc.a-pki.admin.ch
- Bundesamt fuer Informatik und Telekommunikation (BIT) -
Issued by QuoVadis Global SSL ICA G3
About this certificate
This digital certificate with serial number 26:29:69:a0:e7:8f:e7:c6:7e:07:9a:89:19:0a:9b:e0:7b:6d:1b:c7 was issued on by QuoVadis Limited.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Bundesamt fuer Informatik und Telekommunikation (BIT)
Organization:
Bundesamt fuer Informatik und Telekommunikation (BIT)
State / Province:
Bern
Locality: Bern
Country: CH
Locality: Bern
Country: CH
QuoVadis Limited
Organization:
QuoVadis Limited
Country:
BM
This certificate will expire on
Certificate Details
Serial Number (hex): 26:29:69:a0:e7:8f:e7:c6:7e:07:9a:89:19:0a:9b:e0:7b:6d:1b:c7Serial Number (int): 217865181387446066085599453298426372877225630663
Serial Number lenght: 158 bits, 20 octets
SubjectKeyId: 0a:26:c5:56:d5:d5:9b:c3:34:fb:8f:4d:b7:f9:b4:7a:79:2f:9e:71
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76
Fingerprint (sha1): 0d:a7:f7:70:51:61:b0:98:74:4c:d0:91:39:6d:41:64:bf:57:ab:51
Fingerprint (sha256): 01:b1:66:d6:5f:78:37:ef:61:7f:d1:9d:9c:91:37:40:5d:42:f1:87:39:7f:4a:fd:14:4d:5e:87:7b:51:cc:c6
Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt
Revocation information
OCSP Server: http://ocsp.quovadisglobal.comCRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl
Check the revocation status for certificate cmc.a-pki.admin.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cmc.a-pki.admin.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cmc.a-pki.admin.ch
Other certificates including the domain name admin.ch
(limited to 100 certificates)
www.blw.admin.ch
www.gate.bav.admin.ch
www.jira-a.estv.admin.ch
sts0032.sts.eiam.admin.ch
www.cmsp4-a.admin.ch
appint.naz.admin.ch
www.staatskalender.admin.ch
*.geo.admin.ch
www.code.admin.ch
www.bundespublikationen.admin.ch
www.suissetax-r.estv.admin.ch
help.geo.admin.ch
int.translation.eda.admin.ch
www.portal.bsv.admin.ch
viaduc.sfa-laboratory.ch
www.tacho-en.admin.ch
e-dec-web-a.ezv.admin.ch
ncts-formular.ezv.admin.ch
trifid-lindas.int.cluster.ldbar.ch
ws.inar-r.zas.admin.ch
rp-eda01.eda.admin.ch
apis.sem.admin.ch
ws.seodor.zas.admin.ch
www.sust.admin.ch
www.edb.admin.ch
www.sib.admin.ch
www.apistore.estv.admin.ch
www.xmlns.bfs.admin.ch
www.logixs.eda.admin.ch
www.esti.admin.ch
nd8.li.admin.ch
www.bar.admin.ch
sts003-r.gever.admin.ch
www-tmp-a.ekf.admin.ch
www.cfig.admin.ch
adonis.ezv.admin.ch
www.bag.admin.ch
key-recovery.a-pki.admin.ch
Int.ex4.lmsvbs.admin.ch
toolchain-selfservice.bit.admin.ch
s001047a.adr.admin.ch
ws.dds.bakom.admin.ch
rio-a.ssl.admin.ch
www.portal-a.eiam.admin.ch
www.ekff.admin.ch
www.cms-a1.admin.ch
ws.lsvastammdaten-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
www.sonderbewilligungen.admin.ch
intranet.sibad.vbs.admin.ch
storme-r.bafu.admin.ch
intranet.gate-r.bar.admin.ch
idp-base.gate-r.eiam.admin.ch
tokenunseal.a-pki.admin.ch
www.e-cites-a2.admin.ch
www.regress.admin.ch
intranet.vbs.admin.ch
www.oscitv-gw-a.admin.ch
epo.ejpd.admin.ch
test2.gate-a.bit.admin.ch
www.etv.blv.admin.ch
www.bestellung-k.admin.ch
www.pxweb-admin-a.bfs.admin.ch
www.widget.e-portal.admin.ch
www.ausbildung.eur-med.bazg.admin.ch
ebd.abn.ezv.admin.ch
www.cmsp8-a.admin.ch
www.b2cshop-i.admin.ch
idp-egov-federal.gate-d.eiam.admin.ch
flrt.bazl.admin.ch
ca-sbpp.seco.admin.ch
www.b2cshop.admin.ch
www.coff-ekff.admin.ch
sanadress.vbs.admin.ch
www.medregom-r.admin.ch
transfer-pr.wbf.admin.ch
cmc.a-pki.admin.ch
www.g2020-info.admin.ch
www.eofcom-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
ww2.elic-en.admin.ch
ws.quattrop-r.admin.ch
www.bbl.admin.ch
wwwt.interruptio-ges.bfs.admin.ch
www-tmp.roemerholz.admin.ch
www.aramis.admin.ch
survey.efk.admin.ch
uat-publish-internet-vbs.vbs.admin.ch
www.infoafam-a.zas.admin.ch
www.sust.admin.ch
www.plugins.aramis-a.admin.ch
www.pxweb-a.bfs.admin.ch
www.openegov.admin.ch
www.cms-t2.admin.ch
www.psyreg-k.admin.ch
www.cfej.admin.ch
www.cfig.admin.ch
pin-reset.a-pki.admin.ch
www.gate.bav.admin.ch
www.jira-a.estv.admin.ch
sts0032.sts.eiam.admin.ch
www.cmsp4-a.admin.ch
appint.naz.admin.ch
www.staatskalender.admin.ch
*.geo.admin.ch
www.code.admin.ch
www.bundespublikationen.admin.ch
www.suissetax-r.estv.admin.ch
help.geo.admin.ch
int.translation.eda.admin.ch
www.portal.bsv.admin.ch
viaduc.sfa-laboratory.ch
www.tacho-en.admin.ch
e-dec-web-a.ezv.admin.ch
ncts-formular.ezv.admin.ch
trifid-lindas.int.cluster.ldbar.ch
ws.inar-r.zas.admin.ch
rp-eda01.eda.admin.ch
apis.sem.admin.ch
ws.seodor.zas.admin.ch
www.sust.admin.ch
www.edb.admin.ch
www.sib.admin.ch
www.apistore.estv.admin.ch
www.xmlns.bfs.admin.ch
www.logixs.eda.admin.ch
www.esti.admin.ch
nd8.li.admin.ch
www.bar.admin.ch
sts003-r.gever.admin.ch
www-tmp-a.ekf.admin.ch
www.cfig.admin.ch
adonis.ezv.admin.ch
www.bag.admin.ch
key-recovery.a-pki.admin.ch
Int.ex4.lmsvbs.admin.ch
toolchain-selfservice.bit.admin.ch
s001047a.adr.admin.ch
ws.dds.bakom.admin.ch
rio-a.ssl.admin.ch
www.portal-a.eiam.admin.ch
www.ekff.admin.ch
www.cms-a1.admin.ch
ws.lsvastammdaten-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
www.sonderbewilligungen.admin.ch
intranet.sibad.vbs.admin.ch
storme-r.bafu.admin.ch
intranet.gate-r.bar.admin.ch
idp-base.gate-r.eiam.admin.ch
tokenunseal.a-pki.admin.ch
www.e-cites-a2.admin.ch
www.regress.admin.ch
intranet.vbs.admin.ch
www.oscitv-gw-a.admin.ch
epo.ejpd.admin.ch
test2.gate-a.bit.admin.ch
www.etv.blv.admin.ch
www.bestellung-k.admin.ch
www.pxweb-admin-a.bfs.admin.ch
www.widget.e-portal.admin.ch
www.ausbildung.eur-med.bazg.admin.ch
ebd.abn.ezv.admin.ch
www.cmsp8-a.admin.ch
www.b2cshop-i.admin.ch
idp-egov-federal.gate-d.eiam.admin.ch
flrt.bazl.admin.ch
ca-sbpp.seco.admin.ch
www.b2cshop.admin.ch
www.coff-ekff.admin.ch
sanadress.vbs.admin.ch
www.medregom-r.admin.ch
transfer-pr.wbf.admin.ch
cmc.a-pki.admin.ch
www.g2020-info.admin.ch
www.eofcom-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
ww2.elic-en.admin.ch
ws.quattrop-r.admin.ch
www.bbl.admin.ch
wwwt.interruptio-ges.bfs.admin.ch
www-tmp.roemerholz.admin.ch
www.aramis.admin.ch
survey.efk.admin.ch
uat-publish-internet-vbs.vbs.admin.ch
www.infoafam-a.zas.admin.ch
www.sust.admin.ch
www.plugins.aramis-a.admin.ch
www.pxweb-a.bfs.admin.ch
www.openegov.admin.ch
www.cms-t2.admin.ch
www.psyreg-k.admin.ch
www.cfej.admin.ch
www.cfig.admin.ch
pin-reset.a-pki.admin.ch
Certificate
The complete raw certificate details for cmc.a-pki.admin.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJDTCCBvWgAwIBAgIUJilpoOeP58Z+B5qJGQqb4HttG8cwDQYJKoZIhvcNAQEL BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEczMB4XDTIzMTEyMzEzMTA0 MloXDTI0MTEyMzEzMDUwMFowgYgxCzAJBgNVBAYTAkNIMQ0wCwYDVQQIDARCZXJu MQ0wCwYDVQQHDARCZXJuMT4wPAYDVQQKDDVCdW5kZXNhbXQgZnVlciBJbmZvcm1h dGlrIHVuZCBUZWxla29tbXVuaWthdGlvbiAoQklUKTEbMBkGA1UEAwwSY21jLmEt cGtpLmFkbWluLmNoMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsH3F u2mVTa6pg2PwdtsjwJySmScKOnWiHz2a4/ZO+iwNPp+2xUf4gZEwpr6ekwIszqN2 ATcAnpYa3NfsFv1EdCLMrlPkKf55nPUtbX6PNdtuCkNEGvuoieNJ9Hp16hXxfYEo CBN3suRnsHD/KRgUuJhmtjUaOcO//QzGix4g2YJCVDZIE4sJSy8nD+Hx6XX+AbPt huH5zD7P7EA8vRvVckfPbHb7PoCeqS1aoBgF9px26zv1KiQNE38ThjpWot4FrHuO AOR9IckaiIqph6ioxwKiUJK/Brp3p4OulEgQIrX3KUSDjNTRn+h8/mIgjdaf6Z+S DbC4lq564jLZeBlflLZo+0VtmCdtTpfrpcA5JV3OhGO9fjQ1lcnuwkVoQmfWYhRh 421RDI6M/bqMypNVu9IU4ikMlR65ABE+39hBl8VrBbzZvPHpJPfrB7W5PS/Kx06k +yUlOGnDzv/qd6G8Tixaf+FVkh6ybmKgQDqL/FUN0TKGUOJZ4SAOp/uSqXPzQ7RB PFKwOEXdqh2nTlYGvVIVGyPlZJjjducbTHYIVxecmFXTxaed9mCXTPXL+KdQUURO w7zP8W9DRRM/Sb458+asD9HxvuHL5zyIHH58KLlgWNHcR1NthqnC/uzQvb6AQLsG JweRDdnaU5E3WvCT+Gt5THCZgAmZw5owOa3DhhMCAwEAAaOCA6cwggOjMAwGA1Ud EwEB/wQCMAAwHwYDVR0jBBgwFoAUsxKJtalLNbwVAPCA6dh4h/ETfHYwcwYIKwYB BQUHAQEEZzBlMDcGCCsGAQUFBzAChitodHRwOi8vdHJ1c3QucXVvdmFkaXNnbG9i YWwuY29tL3F2c3NsZzMuY3J0MCoGCCsGAQUFBzABhh5odHRwOi8vb2NzcC5xdW92 YWRpc2dsb2JhbC5jb20wHQYDVR0RBBYwFIISY21jLmEtcGtpLmFkbWluLmNoMFsG A1UdIARUMFIwRgYMKwYBBAG+WAACZAEBMDYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93 d3cucXVvdmFkaXNnbG9iYWwuY29tL3JlcG9zaXRvcnkwCAYGZ4EMAQICMB0GA1Ud JQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATA6BgNVHR8EMzAxMC+gLaArhilodHRw Oi8vY3JsLnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdnNzbGczLmNybDAdBgNVHQ4EFgQU CibFVtXVm8M0+49Nt/m0enkvnnEwDgYDVR0PAQH/BAQDAgWgMIIB9QYKKwYBBAHW eQIEAgSCAeUEggHhAd8AdQDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7 qwAAAYv8VwaVAAAEAwBGMEQCIBRoEqRfYcTnuNSm6rTLkz8pri/RypQUGwiZ/OV8 YL/ZAiBUgAd9v5tJ43g6dX05ikIiIZJxZqreqNUAsrv6SzbH7QB1AHb/iD8KtvuV UcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABi/xXBkIAAAQDAEYwRAIgWyvHAL/m g3UP15QC67xKyRXg4JQK8d40dKMPyqsKVYoCIEvFItgXYlnH/2Rrk0/+CtNeKpxh VM2kBcaMFq+1HemTAHcAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4A AAGL/FcHOwAABAMASDBGAiEA5wkx+hoJGZd2kVK0Nkg1h9QiWvAP38QCud3BcTXZ vVYCIQCkt5geCzwEEpHowjkeyZhSWNQwkDr1zdVc9hwWzXX1bgB2AO7N0GTV2xrO xVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABi/xXBm0AAAQDAEcwRQIgRZbO8bqH +mHxWEJUP3HHrp81O0saLgwc1gC9N9DCEb0CIQCfUX5hfe9WKwqIwWWaY8jBaZAg 6VqEnkQ7EXgxoanw3TANBgkqhkiG9w0BAQsFAAOCAgEAH6TSXVmg68FAjhmH3nHh 40OlwmYhdvHoWUNGSHKTQhY/NUKjX62B6If/Citgso4iZZ4nMp4Yn5l05ECk1Ibi hcjzhtgOQoN17h2zsm4AtW2BzGQjRQjweFdv2gROqTSOl8L/O0oZdN/zgE8BB6Or IbcE6+IY2IQx+IPyUDyJAt+sF8P+h1/0nvmsTSmXiVg6zyDTtk46SZ+fbT2+hMsF GJ7MXJnSdro6NOB7ehy6LK14KQ+EE8sG+kNy9TjWpdXaXBiRLPIfBwv/6YIRCaQX 8mH2y4IGAjcC2kk3nX7NeJWydtJT1ZQk/iGZgjny9j8WUPlU7eBWPm9DglCmeZeC kbbgkrJSBr40uj3ZqNh7SM9h4uIQPbHAD5xGAtZmQA7JqeY3DuhPjKEnYAGQiZtf 51GxN2Cv+EWL60HKqT3tHjwFvtqYYTTm9kTJJmWWIrWJy4M0FV0QKRMIR5n0bfnv cOQox1AqMmlth6XQs/j3XTl7wSyuhpFJGpFcct6HoFnYnWnH0IHtpbjyz7peIBo2 RHEThfq1UcSYUtAJsUBvdNKUZVleAd95FIAIDi29i+mPKJbYHEjP43ctzfKdz8P2 AC+9jyCl93//f2KJ23EHfncL7yGkxk5VB8hncVyqZ1q3WYP2QPgQHfANa7icikxk g5eB4601OVbhJT+4vwu0HLw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsH3Fu2mVTa6pg2Pwdtsj wJySmScKOnWiHz2a4/ZO+iwNPp+2xUf4gZEwpr6ekwIszqN2ATcAnpYa3NfsFv1E dCLMrlPkKf55nPUtbX6PNdtuCkNEGvuoieNJ9Hp16hXxfYEoCBN3suRnsHD/KRgU uJhmtjUaOcO//QzGix4g2YJCVDZIE4sJSy8nD+Hx6XX+AbPthuH5zD7P7EA8vRvV ckfPbHb7PoCeqS1aoBgF9px26zv1KiQNE38ThjpWot4FrHuOAOR9IckaiIqph6io xwKiUJK/Brp3p4OulEgQIrX3KUSDjNTRn+h8/mIgjdaf6Z+SDbC4lq564jLZeBlf lLZo+0VtmCdtTpfrpcA5JV3OhGO9fjQ1lcnuwkVoQmfWYhRh421RDI6M/bqMypNV u9IU4ikMlR65ABE+39hBl8VrBbzZvPHpJPfrB7W5PS/Kx06k+yUlOGnDzv/qd6G8 Tixaf+FVkh6ybmKgQDqL/FUN0TKGUOJZ4SAOp/uSqXPzQ7RBPFKwOEXdqh2nTlYG vVIVGyPlZJjjducbTHYIVxecmFXTxaed9mCXTPXL+KdQUUROw7zP8W9DRRM/Sb45 8+asD9HxvuHL5zyIHH58KLlgWNHcR1NthqnC/uzQvb6AQLsGJweRDdnaU5E3WvCT +Gt5THCZgAmZw5owOa3DhhMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 217865181387446066085599453298426372877225630663 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-23 13:10:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-23 13:05:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bundesamt fuer Informatik und Telekommunikation (BIT)' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'cmc.a-pki.admin.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 720021678583284708154328299963310679113827800729659261235461849712642519777113656913354625808161600056148972697805501864248600031725124655874060139171319538736193916411757751190683748140148210755437186097890296882589481229266463604409447959019793804126129630175477491769369226420709732643948858995760590272570323681561303200135447679702858414635552325744035533474839269886428390617319881714890389074148119174462681508715430411574294085275099668191177496413109771911242524735948444656026601544894275879863001704174354854816052005948703594591909483594073236339721224681693626603671710937476253605479193306852114950285360433268769134950994927876771651388341159937112200646171438440158799917126194132720195349061510178799373803272557202689264730016774960151586363768531846778677685724519480185234560737298688910045695651743420841938868608859267026539426239441378443201226147988515528266634947817562659397703791598870599685968526556288931703473780917994906679870073347293374574582616595164803524988498068695341670734076400149588156679582510183545420893549416277745634142953344083885166941917708329669564775387800717298099932458471224163492266038224474575173903725057739497572183023346544773263312181843286556783309967225823033569352844819 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmc.a-pki.admin.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0a26c556d5d59bc334fb8f4db7f9b47a792f9e71 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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