www.openegov.admin.ch

- Bundesamt fuer Informatik und Telekommunikation (BIT) -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 3c:1b:36:59:4e:d2:87:0d:29:09:12:ad:9f:bd:76:28:ae:2b:ea:2c was issued on by QuoVadis Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Bundesamt fuer Informatik und Telekommunikation (BIT)

Organization: Bundesamt fuer Informatik und Telekommunikation (BIT)
State / Province: Bern
Locality: Bern
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate will expire on

Certificate Details

Serial Number (hex): 3c:1b:36:59:4e:d2:87:0d:29:09:12:ad:9f:bd:76:28:ae:2b:ea:2c
Serial Number (int): 343146300823134574475130474482031095235021105708
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 20:78:fb:81:c6:1c:75:42:83:01:05:a8:97:79:d6:d7:87:24:66:c6
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): b7:5c:ca:71:13:41:b6:d8:6a:ec:13:b1:a3:e0:4b:85:6b:3a:9c:e0
Fingerprint (sha256): 02:37:e7:52:13:03:f5:21:6f:bd:38:4d:a3:3e:c0:a1:6b:1d:4f:11:3f:fe:cf:fd:35:76:47:b0:2a:c7:ba:ee

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate www.openegov.admin.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.openegov.admin.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.openegov.admin.ch
openegov.admin.ch

Other certificates including the domain name admin.ch

(limited to 100 certificates)
www.blw.admin.ch
www.gate.bav.admin.ch
www.jira-a.estv.admin.ch
sts0032.sts.eiam.admin.ch
www.cmsp4-a.admin.ch
appint.naz.admin.ch
www.staatskalender.admin.ch
*.geo.admin.ch
www.code.admin.ch
www.bundespublikationen.admin.ch
www.suissetax-r.estv.admin.ch
help.geo.admin.ch
int.translation.eda.admin.ch
www.portal.bsv.admin.ch
viaduc.sfa-laboratory.ch
www.tacho-en.admin.ch
e-dec-web-a.ezv.admin.ch
ncts-formular.ezv.admin.ch
trifid-lindas.int.cluster.ldbar.ch
ws.inar-r.zas.admin.ch
rp-eda01.eda.admin.ch
apis.sem.admin.ch
ws.seodor.zas.admin.ch
www.sust.admin.ch
www.edb.admin.ch
www.sib.admin.ch
www.apistore.estv.admin.ch
www.xmlns.bfs.admin.ch
www.logixs.eda.admin.ch
www.esti.admin.ch
nd8.li.admin.ch
www.bar.admin.ch
sts003-r.gever.admin.ch
www-tmp-a.ekf.admin.ch
www.cfig.admin.ch
adonis.ezv.admin.ch
www.bag.admin.ch
key-recovery.a-pki.admin.ch
Int.ex4.lmsvbs.admin.ch
toolchain-selfservice.bit.admin.ch
s001047a.adr.admin.ch
ws.dds.bakom.admin.ch
rio-a.ssl.admin.ch
www.portal-a.eiam.admin.ch
www.ekff.admin.ch
www.cms-a1.admin.ch
ws.lsvastammdaten-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
www.sonderbewilligungen.admin.ch
intranet.sibad.vbs.admin.ch
storme-r.bafu.admin.ch
intranet.gate-r.bar.admin.ch
idp-base.gate-r.eiam.admin.ch
tokenunseal.a-pki.admin.ch
www.e-cites-a2.admin.ch
www.regress.admin.ch
intranet.vbs.admin.ch
www.oscitv-gw-a.admin.ch
epo.ejpd.admin.ch
test2.gate-a.bit.admin.ch
www.etv.blv.admin.ch
www.bestellung-k.admin.ch
www.pxweb-admin-a.bfs.admin.ch
www.widget.e-portal.admin.ch
www.ausbildung.eur-med.bazg.admin.ch
ebd.abn.ezv.admin.ch
www.cmsp8-a.admin.ch
www.b2cshop-i.admin.ch
idp-egov-federal.gate-d.eiam.admin.ch
flrt.bazl.admin.ch
ca-sbpp.seco.admin.ch
www.b2cshop.admin.ch
www.coff-ekff.admin.ch
sanadress.vbs.admin.ch
www.medregom-r.admin.ch
transfer-pr.wbf.admin.ch
cmc.a-pki.admin.ch
www.g2020-info.admin.ch
www.eofcom-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
ww2.elic-en.admin.ch
ws.quattrop-r.admin.ch
www.bbl.admin.ch
wwwt.interruptio-ges.bfs.admin.ch
www-tmp.roemerholz.admin.ch
www.aramis.admin.ch
survey.efk.admin.ch
uat-publish-internet-vbs.vbs.admin.ch
www.infoafam-a.zas.admin.ch
www.sust.admin.ch
www.plugins.aramis-a.admin.ch
www.pxweb-a.bfs.admin.ch
www.openegov.admin.ch
www.cms-t2.admin.ch
www.psyreg-k.admin.ch
www.cfej.admin.ch
www.cfig.admin.ch
pin-reset.a-pki.admin.ch

Certificate

The complete raw certificate details for www.openegov.admin.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343146300823134574475130474482031095235021105708
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-06 14:51:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-06 14:46:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bundesamt fuer Informatik und Telekommunikation (BIT)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.openegov.admin.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 866642478103487442277836893537509583959378541644729620058475480038087859207281974122317437718337112767824864271614148157267257064690371944337847001242530426563719591748224464911633063726592430425754837130531868385822624969800110983063295254553026815290166689745322071629172656911846797261146735367316870497581565472641878879127559597739635257395671775718296049880924006773415445057478349898424074577405132646329538211003787523614773301676516452605111469326596792445327052097338190615260736900794089900799078849546816744116865533924612011084777345603684475521183915965533008360918970502110256518483005836396726435981436080474609646599408673024776964313879331199895264652709382503157311116651507080764856356294016458040210782021995398040014411293084373316721812137749669788993969557900600139193018127849801266019969259422975995349337882953432086115579720491151050816924408941507606388847317230922706534461907523258246835043379299734879193011773412241860545872529915608554143408326953670425330204651807591626197680492428746438900278834446454479997285286696425823708030366247326252284683833240066854860541264741937370783048698873950217018172414996703344784775252090618709843555846486870029525481612131643906054653704219277401856228266451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.openegov.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openegov.admin.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2078fb81c61c7542830105a89779d6d7872466c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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