evct.ssl.switch.ch
- SWITCH -
Issued by QuoVadis EV SSL ICA G1
About this certificate
This digital certificate with serial number 28:bf:62:41:e4:80:b7:f7:67:7c:15:3c:56:16:4b:eb:41:66:7c:30 was issued on by QuoVadis Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
SWITCH
Company registration number:
CH-035.7.001.278-9
Organization: SWITCH
Organization: SWITCH
State / Province:
Zuerich
Locality: Zuerich
Country: CH
Locality: Zuerich
Country: CH
QuoVadis Limited
Organization:
QuoVadis Limited
Country:
BM
This certificate has expire since
Certificate Details
Serial Number (hex): 28:bf:62:41:e4:80:b7:f7:67:7c:15:3c:56:16:4b:eb:41:66:7c:30Serial Number (int): 232627632591980420673724420896929441153078950960
Serial Number lenght: 158 bits, 20 octets
SubjectKeyId: 94:dc:6a:3d:d7:51:a3:cb:5e:57:4d:b7:31:06:23:f3:a8:8e:9a:79
AuthorityKeyId: 55:58:86:ce:ba:7c:76:4e:99:13:a9:0f:d3:6c:9f:c2:f5:d3:3c:e3
Fingerprint (sha1): 5d:3c:4b:2a:d5:91:66:f9:45:a3:c5:7f:7c:9e:fa:43:88:76:37:d3
Fingerprint (sha256): 01:e6:14:a7:de:d9:46:0d:64:f9:8f:97:81:53:69:cb:18:f0:1b:1e:81:c2:ec:d2:1c:b2:60:74:31:60:71:79
Issuing Certificate URL: http://trust.quovadisglobal.com/qvevssl1.crt
Revocation information
OCSP Server: http://ev.ocsp.quovadisglobal.comCRL Distribution Point: http://crl.quovadisglobal.com/qvevssl1.crl
Check the revocation status for certificate evct.ssl.switch.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for evct.ssl.switch.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
evct.ssl.switch.ch
ct.ssl.switch.ch
ct.ssl.switch.ch
Other certificates including the domain name switch.ch
(limited to 100 certificates)
hsr.meet.switch.ch
point.switch.ch
wiki.smap.switch.ch
discourse.toolbox.switch.ch
collab-fms-test.switch.ch
kelimutu.switch.ch
tls.automattic.com
vico.switch.ch
zeus.switch.ch
parma.switch.ch
fl-0-51.zhdk.cloud.switch.ch
ssad.events.switch.ch
placement.api.s2.scloud.switch.ch
evct.ssl.switch.ch
unibas.meet.switch.ch
grafana.int.os-ls.kaas.switch.ch
*.s3-zh.lts.switch.ch
tls.automattic.com
zhaw.meet.switch.ch
neutron.api.s2.scloud.switch.ch
testsp.tw.switch.ch
portal-dev.switch.ch
landingpage.rpz.switch.ch
trust.aviareto.aero
mail.switch.ch
player.cast.switch.ch
test.toolbox.switch.ch
domain-pulse.at
intern.meet.switch.ch
zeus.switch.ch
influxdb.cast-test.switch.ch
glance.api.unil.cloud.switch.ch
producer.cast.switch.ch
filesender.switch.ch
staging.groupie.lard.switch.ch
unili.meet.switch.ch
backend.www.switch.ch
vcregister.switch.ch
kava-admin.cast.switch.ch
worker3.oc-test.switch.ch
alphubel.switch.ch
drive-backup.switch.ch
engines-admin.scloud.switch.ch
*.os.zhdk.cloud.switch.ch
www-test.switch.ch
monitor.switch.ch
wayf.switch.ch
teramac.switch.ch
tls.automattic.com
node21.webauthn.eduid.ch
forge.switch.ch
cast-ng.switch.ch
www.switch.ch
test.id.switch.ch
os.unil.cloud.switch.ch
wayf-test.switch.ch
aai-logon.switch.ch
tls.automattic.com
landingpage.mw.rpz.switch.ch
contracts-test.switch.ch
driveonlyoffice.switch.ch
portfolio.switch.ch
fl-6-178.zhdk.cloud.switch.ch
octavia.api.s1.scloud.switch.ch
cloud-id.switch.ch
portal-dev.switch.ch
status.dilercloud.com
player.cast.switch.ch
bonseyes.zhdk.cloud.switch.ch
cloud-id.switch.ch
tools.aai.switch.ch
download.cast.switch.ch
tools.switch.ch
www-dev.switch.ch
admin.oc-test.switch.ch
www-dev.switch.ch
wayf-test.switch.ch
test.idph.switch.ch
bfh.meet.switch.ch
urlanalyzer-staging-backend.misc01.k8s.cert.switch.ch
password.switch.ch
idp-monitor.aai.switch.ch
saqcnfbe.events.switch.ch
cr.gitlab.switch.ch
*.lts.switch.ch
kava-admin.cast.switch.ch
unibe.meet.switch.ch
domain-pulse.at
bonseyes.zhdk.cloud.switch.ch
wiki.smap.switch.ch
producer.cast.switch.ch
tls.automattic.com
switchnovember.events.switch.ch
*.sandstorm.cloud.switch.ch
portfolio.switch.ch
metadata-test.aai.switch.ch
kelimutu.switch.ch
presentation.cast.switch.ch
mirror.cloud.switch.ch
srp.switch.ch
point.switch.ch
wiki.smap.switch.ch
discourse.toolbox.switch.ch
collab-fms-test.switch.ch
kelimutu.switch.ch
tls.automattic.com
vico.switch.ch
zeus.switch.ch
parma.switch.ch
fl-0-51.zhdk.cloud.switch.ch
ssad.events.switch.ch
placement.api.s2.scloud.switch.ch
evct.ssl.switch.ch
unibas.meet.switch.ch
grafana.int.os-ls.kaas.switch.ch
*.s3-zh.lts.switch.ch
tls.automattic.com
zhaw.meet.switch.ch
neutron.api.s2.scloud.switch.ch
testsp.tw.switch.ch
portal-dev.switch.ch
landingpage.rpz.switch.ch
trust.aviareto.aero
mail.switch.ch
player.cast.switch.ch
test.toolbox.switch.ch
domain-pulse.at
intern.meet.switch.ch
zeus.switch.ch
influxdb.cast-test.switch.ch
glance.api.unil.cloud.switch.ch
producer.cast.switch.ch
filesender.switch.ch
staging.groupie.lard.switch.ch
unili.meet.switch.ch
backend.www.switch.ch
vcregister.switch.ch
kava-admin.cast.switch.ch
worker3.oc-test.switch.ch
alphubel.switch.ch
drive-backup.switch.ch
engines-admin.scloud.switch.ch
*.os.zhdk.cloud.switch.ch
www-test.switch.ch
monitor.switch.ch
wayf.switch.ch
teramac.switch.ch
tls.automattic.com
node21.webauthn.eduid.ch
forge.switch.ch
cast-ng.switch.ch
www.switch.ch
test.id.switch.ch
os.unil.cloud.switch.ch
wayf-test.switch.ch
aai-logon.switch.ch
tls.automattic.com
landingpage.mw.rpz.switch.ch
contracts-test.switch.ch
driveonlyoffice.switch.ch
portfolio.switch.ch
fl-6-178.zhdk.cloud.switch.ch
octavia.api.s1.scloud.switch.ch
cloud-id.switch.ch
portal-dev.switch.ch
status.dilercloud.com
player.cast.switch.ch
bonseyes.zhdk.cloud.switch.ch
cloud-id.switch.ch
tools.aai.switch.ch
download.cast.switch.ch
tools.switch.ch
www-dev.switch.ch
admin.oc-test.switch.ch
www-dev.switch.ch
wayf-test.switch.ch
test.idph.switch.ch
bfh.meet.switch.ch
urlanalyzer-staging-backend.misc01.k8s.cert.switch.ch
password.switch.ch
idp-monitor.aai.switch.ch
saqcnfbe.events.switch.ch
cr.gitlab.switch.ch
*.lts.switch.ch
kava-admin.cast.switch.ch
unibe.meet.switch.ch
domain-pulse.at
bonseyes.zhdk.cloud.switch.ch
wiki.smap.switch.ch
producer.cast.switch.ch
tls.automattic.com
switchnovember.events.switch.ch
*.sandstorm.cloud.switch.ch
portfolio.switch.ch
metadata-test.aai.switch.ch
kelimutu.switch.ch
presentation.cast.switch.ch
mirror.cloud.switch.ch
srp.switch.ch
Certificate
The complete raw certificate details for evct.ssl.switch.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUKL9iQeSAt/dnfBU8VhZL60FmfDAwDQYJKoZIhvcNAQEL BQAwSTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHzAd BgNVBAMTFlF1b1ZhZGlzIEVWIFNTTCBJQ0EgRzEwHhcNMTUwMTIyMTQ0OTMyWhcN MTcwMTIyMTQ1OTAwWjCBxzETMBEGCysGAQQBgjc8AgEDEwJDSDEVMBMGCysGAQQB gjc8AgECDARCZXJuMR0wGwYDVQQPDBRQcml2YXRlIE9yZ2FuaXphdGlvbjEbMBkG A1UEBRMSQ0gtMDM1LjcuMDAxLjI3OC05MQswCQYDVQQGEwJDSDEQMA4GA1UECAwH WnVlcmljaDEQMA4GA1UEBwwHWnVlcmljaDEPMA0GA1UECgwGU1dJVENIMRswGQYD VQQDDBJldmN0LnNzbC5zd2l0Y2guY2gwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDkEp0+CZIf2LwuBkfRCs5eF2TxB9AR47Yum+vFTYwdJzViriW2kRcq a2WAg8fxBjvaEga0diuvUXjcn9p8LHrdUcO6cWeR5wHKbdocWL22lIMJubjACH7a lAj3LLefPNXloBMX3hNC3vkN8vhE2iAyrGH8LIGudWowXf76iHZaZQ0ucbEM7eV+ EI/AoV11Pbmecdc5S6g14YfKEXBNdZ84G43iT8ZXEiGyEGLWND8w0tgRcziC48al fM9f6CrO5sj6+mvCw/BqKKp8RpuhT4nDVu9czm4bTVSPSTM7zO05d2ASefY5XmL0 5KQvQsY8RQhWhC7mWUFVexSKxFUpmsafAgMBAAGjggHQMIIBzDB3BggrBgEFBQcB AQRrMGkwOAYIKwYBBQUHMAKGLGh0dHA6Ly90cnVzdC5xdW92YWRpc2dsb2JhbC5j b20vcXZldnNzbDEuY3J0MC0GCCsGAQUFBzABhiFodHRwOi8vZXYub2NzcC5xdW92 YWRpc2dsb2JhbC5jb20wHQYDVR0OBBYEFJTcaj3XUaPLXldNtzEGI/Oojpp5MAwG A1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUVViGzrp8dk6ZE6kP02yfwvXTPOMwUQYD VR0gBEowSDBGBgwrBgEEAb5YAAJkAQIwNjA0BggrBgEFBQcCARYoaHR0cDovL3d3 dy5xdW92YWRpc2dsb2JhbC5jb20vcmVwb3NpdG9yeTA7BgNVHR8ENDAyMDCgLqAs hipodHRwOi8vY3JsLnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdmV2c3NsMS5jcmwwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAvBgNV HREEKDAmghJldmN0LnNzbC5zd2l0Y2guY2iCEGN0LnNzbC5zd2l0Y2guY2gwEwYK KwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAKSKS5wQhRVlTPHZ JZdvSFTIStgnD8XAxF4jv3B9jI75nUNopHfkezMUfA5J9TlLqIALVY55Sgo2vKTP 71e00QTco5/u2Ma14OVfWHrJMa7gj5AmBqNa1NtgvAaGTfjcJn7SvjetEJ5TauNH PETeJUR0X5KTBUWjJANJqIDyVetU+NfzJhc7ZwHWxkupKA3C1FRbfIFkZeG6jd/r XGuTziFFBdyHJzEcG8qPaOgtZYuBovh0HaPDG5Q9xQwRfaZK56LiK3xK4WIU+/sV +9fUl6LtNNw+l9/wDWwgtcHjKEUyKSWq9E54ZYaiQ24N0ZCz2xhM4h4drMTizXP0 p1bY1XQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BKdPgmSH9i8LgZH0QrO Xhdk8QfQEeO2LpvrxU2MHSc1Yq4ltpEXKmtlgIPH8QY72hIGtHYrr1F43J/afCx6 3VHDunFnkecBym3aHFi9tpSDCbm4wAh+2pQI9yy3nzzV5aATF94TQt75DfL4RNog Mqxh/CyBrnVqMF3++oh2WmUNLnGxDO3lfhCPwKFddT25nnHXOUuoNeGHyhFwTXWf OBuN4k/GVxIhshBi1jQ/MNLYEXM4guPGpXzPX+gqzubI+vprwsPwaiiqfEaboU+J w1bvXM5uG01Uj0kzO8ztOXdgEnn2OV5i9OSkL0LGPEUIVoQu5llBVXsUisRVKZrG nwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 232627632591980420673724420896929441153078950960 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis EV SSL ICA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-22 14:49:32 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-22 14:59:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH-035.7.001.278-9' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuerich' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuerich' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SWITCH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'evct.ssl.switch.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28791512550128468586978800921608386719163041801990375918452986091718053384686922777800250700298546982981263317190387950173561667432387598421096752464378752559293583148143474437261993046625495802628181611115547116150065897622791830107715119275748250752156904534377564862384767404201213556127299466088017982571904671211854784761380072079906417361919920445879632658414047694104099562001063099144958293079210762904456365066993938951504174323166353701448197287730640356019413984349349587437523155122509265189277231502090589132874874770139657570234466919315143737124465426374534757909733352128861462770923849086379216258719 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvevssl1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ev.ocsp.quovadisglobal.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 94dc6a3dd751a3cb5e574db7310623f3a88e9a79 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 555886ceba7c764e9913a90fd36c9fc2f5d33ce3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvevssl1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evct.ssl.switch.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ct.ssl.switch.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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