cmc.a-pki.admin.ch

- Bundesamt fuer Informatik und Telekommunikation (BIT) -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 26:29:69:a0:e7:8f:e7:c6:7e:07:9a:89:19:0a:9b:e0:7b:6d:1b:c7 was issued on by QuoVadis Limited.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Bundesamt fuer Informatik und Telekommunikation (BIT)

Organization: Bundesamt fuer Informatik und Telekommunikation (BIT)
State / Province: Bern
Locality: Bern
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate will expire on

Certificate Details

Serial Number (hex): 26:29:69:a0:e7:8f:e7:c6:7e:07:9a:89:19:0a:9b:e0:7b:6d:1b:c7
Serial Number (int): 217865181387446066085599453298426372877225630663
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 0a:26:c5:56:d5:d5:9b:c3:34:fb:8f:4d:b7:f9:b4:7a:79:2f:9e:71
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 0d:a7:f7:70:51:61:b0:98:74:4c:d0:91:39:6d:41:64:bf:57:ab:51
Fingerprint (sha256): 01:b1:66:d6:5f:78:37:ef:61:7f:d1:9d:9c:91:37:40:5d:42:f1:87:39:7f:4a:fd:14:4d:5e:87:7b:51:cc:c6

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate cmc.a-pki.admin.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmc.a-pki.admin.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmc.a-pki.admin.ch

Other certificates including the domain name admin.ch

(limited to 100 certificates)
www.blw.admin.ch
www.gate.bav.admin.ch
www.jira-a.estv.admin.ch
sts0032.sts.eiam.admin.ch
www.cmsp4-a.admin.ch
appint.naz.admin.ch
www.staatskalender.admin.ch
*.geo.admin.ch
www.code.admin.ch
www.bundespublikationen.admin.ch
www.suissetax-r.estv.admin.ch
help.geo.admin.ch
int.translation.eda.admin.ch
www.portal.bsv.admin.ch
viaduc.sfa-laboratory.ch
www.tacho-en.admin.ch
e-dec-web-a.ezv.admin.ch
ncts-formular.ezv.admin.ch
trifid-lindas.int.cluster.ldbar.ch
ws.inar-r.zas.admin.ch
rp-eda01.eda.admin.ch
apis.sem.admin.ch
ws.seodor.zas.admin.ch
www.sust.admin.ch
www.edb.admin.ch
www.sib.admin.ch
www.apistore.estv.admin.ch
www.xmlns.bfs.admin.ch
www.logixs.eda.admin.ch
www.esti.admin.ch
nd8.li.admin.ch
www.bar.admin.ch
sts003-r.gever.admin.ch
www-tmp-a.ekf.admin.ch
www.cfig.admin.ch
adonis.ezv.admin.ch
www.bag.admin.ch
key-recovery.a-pki.admin.ch
Int.ex4.lmsvbs.admin.ch
toolchain-selfservice.bit.admin.ch
s001047a.adr.admin.ch
ws.dds.bakom.admin.ch
rio-a.ssl.admin.ch
www.portal-a.eiam.admin.ch
www.ekff.admin.ch
www.cms-a1.admin.ch
ws.lsvastammdaten-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
www.sonderbewilligungen.admin.ch
intranet.sibad.vbs.admin.ch
storme-r.bafu.admin.ch
intranet.gate-r.bar.admin.ch
idp-base.gate-r.eiam.admin.ch
tokenunseal.a-pki.admin.ch
www.e-cites-a2.admin.ch
www.regress.admin.ch
intranet.vbs.admin.ch
www.oscitv-gw-a.admin.ch
epo.ejpd.admin.ch
test2.gate-a.bit.admin.ch
www.etv.blv.admin.ch
www.bestellung-k.admin.ch
www.pxweb-admin-a.bfs.admin.ch
www.widget.e-portal.admin.ch
www.ausbildung.eur-med.bazg.admin.ch
ebd.abn.ezv.admin.ch
www.cmsp8-a.admin.ch
www.b2cshop-i.admin.ch
idp-egov-federal.gate-d.eiam.admin.ch
flrt.bazl.admin.ch
ca-sbpp.seco.admin.ch
www.b2cshop.admin.ch
www.coff-ekff.admin.ch
sanadress.vbs.admin.ch
www.medregom-r.admin.ch
transfer-pr.wbf.admin.ch
cmc.a-pki.admin.ch
www.g2020-info.admin.ch
www.eofcom-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
ww2.elic-en.admin.ch
ws.quattrop-r.admin.ch
www.bbl.admin.ch
wwwt.interruptio-ges.bfs.admin.ch
www-tmp.roemerholz.admin.ch
www.aramis.admin.ch
survey.efk.admin.ch
uat-publish-internet-vbs.vbs.admin.ch
www.infoafam-a.zas.admin.ch
www.sust.admin.ch
www.plugins.aramis-a.admin.ch
www.pxweb-a.bfs.admin.ch
www.openegov.admin.ch
www.cms-t2.admin.ch
www.psyreg-k.admin.ch
www.cfej.admin.ch
www.cfig.admin.ch
pin-reset.a-pki.admin.ch

Certificate

The complete raw certificate details for cmc.a-pki.admin.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 217865181387446066085599453298426372877225630663
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-23 13:10:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-23 13:05:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bundesamt fuer Informatik und Telekommunikation (BIT)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'cmc.a-pki.admin.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 720021678583284708154328299963310679113827800729659261235461849712642519777113656913354625808161600056148972697805501864248600031725124655874060139171319538736193916411757751190683748140148210755437186097890296882589481229266463604409447959019793804126129630175477491769369226420709732643948858995760590272570323681561303200135447679702858414635552325744035533474839269886428390617319881714890389074148119174462681508715430411574294085275099668191177496413109771911242524735948444656026601544894275879863001704174354854816052005948703594591909483594073236339721224681693626603671710937476253605479193306852114950285360433268769134950994927876771651388341159937112200646171438440158799917126194132720195349061510178799373803272557202689264730016774960151586363768531846778677685724519480185234560737298688910045695651743420841938868608859267026539426239441378443201226147988515528266634947817562659397703791598870599685968526556288931703473780917994906679870073347293374574582616595164803524988498068695341670734076400149588156679582510183545420893549416277745634142953344083885166941917708329669564775387800717298099932458471224163492266038224474575173903725057739497572183023346544773263312181843286556783309967225823033569352844819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmc.a-pki.admin.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a26c556d5d59bc334fb8f4db7f9b47a792f9e71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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