www.openegov.admin.ch
- Bundesamt fuer Informatik und Telekommunikation (BIT) -
Issued by QuoVadis Global SSL ICA G3
About this certificate
This digital certificate with serial number 3c:1b:36:59:4e:d2:87:0d:29:09:12:ad:9f:bd:76:28:ae:2b:ea:2c was issued on by QuoVadis Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Bundesamt fuer Informatik und Telekommunikation (BIT)
Organization:
Bundesamt fuer Informatik und Telekommunikation (BIT)
State / Province:
Bern
Locality: Bern
Country: CH
Locality: Bern
Country: CH
QuoVadis Limited
Organization:
QuoVadis Limited
Country:
BM
This certificate will expire on
Certificate Details
Serial Number (hex): 3c:1b:36:59:4e:d2:87:0d:29:09:12:ad:9f:bd:76:28:ae:2b:ea:2cSerial Number (int): 343146300823134574475130474482031095235021105708
Serial Number lenght: 158 bits, 20 octets
SubjectKeyId: 20:78:fb:81:c6:1c:75:42:83:01:05:a8:97:79:d6:d7:87:24:66:c6
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76
Fingerprint (sha1): b7:5c:ca:71:13:41:b6:d8:6a:ec:13:b1:a3:e0:4b:85:6b:3a:9c:e0
Fingerprint (sha256): 02:37:e7:52:13:03:f5:21:6f:bd:38:4d:a3:3e:c0:a1:6b:1d:4f:11:3f:fe:cf:fd:35:76:47:b0:2a:c7:ba:ee
Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt
Revocation information
OCSP Server: http://ocsp.quovadisglobal.comCRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl
Check the revocation status for certificate www.openegov.admin.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.openegov.admin.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.openegov.admin.ch
openegov.admin.ch
openegov.admin.ch
Other certificates including the domain name admin.ch
(limited to 100 certificates)
www.blw.admin.ch
www.gate.bav.admin.ch
www.jira-a.estv.admin.ch
sts0032.sts.eiam.admin.ch
www.cmsp4-a.admin.ch
appint.naz.admin.ch
www.staatskalender.admin.ch
*.geo.admin.ch
www.code.admin.ch
www.bundespublikationen.admin.ch
www.suissetax-r.estv.admin.ch
help.geo.admin.ch
int.translation.eda.admin.ch
www.portal.bsv.admin.ch
viaduc.sfa-laboratory.ch
www.tacho-en.admin.ch
e-dec-web-a.ezv.admin.ch
ncts-formular.ezv.admin.ch
trifid-lindas.int.cluster.ldbar.ch
ws.inar-r.zas.admin.ch
rp-eda01.eda.admin.ch
apis.sem.admin.ch
ws.seodor.zas.admin.ch
www.sust.admin.ch
www.edb.admin.ch
www.sib.admin.ch
www.apistore.estv.admin.ch
www.xmlns.bfs.admin.ch
www.logixs.eda.admin.ch
www.esti.admin.ch
nd8.li.admin.ch
www.bar.admin.ch
sts003-r.gever.admin.ch
www-tmp-a.ekf.admin.ch
www.cfig.admin.ch
adonis.ezv.admin.ch
www.bag.admin.ch
key-recovery.a-pki.admin.ch
Int.ex4.lmsvbs.admin.ch
toolchain-selfservice.bit.admin.ch
s001047a.adr.admin.ch
ws.dds.bakom.admin.ch
rio-a.ssl.admin.ch
www.portal-a.eiam.admin.ch
www.ekff.admin.ch
www.cms-a1.admin.ch
ws.lsvastammdaten-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
www.sonderbewilligungen.admin.ch
intranet.sibad.vbs.admin.ch
storme-r.bafu.admin.ch
intranet.gate-r.bar.admin.ch
idp-base.gate-r.eiam.admin.ch
tokenunseal.a-pki.admin.ch
www.e-cites-a2.admin.ch
www.regress.admin.ch
intranet.vbs.admin.ch
www.oscitv-gw-a.admin.ch
epo.ejpd.admin.ch
test2.gate-a.bit.admin.ch
www.etv.blv.admin.ch
www.bestellung-k.admin.ch
www.pxweb-admin-a.bfs.admin.ch
www.widget.e-portal.admin.ch
www.ausbildung.eur-med.bazg.admin.ch
ebd.abn.ezv.admin.ch
www.cmsp8-a.admin.ch
www.b2cshop-i.admin.ch
idp-egov-federal.gate-d.eiam.admin.ch
flrt.bazl.admin.ch
ca-sbpp.seco.admin.ch
www.b2cshop.admin.ch
www.coff-ekff.admin.ch
sanadress.vbs.admin.ch
www.medregom-r.admin.ch
transfer-pr.wbf.admin.ch
cmc.a-pki.admin.ch
www.g2020-info.admin.ch
www.eofcom-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
ww2.elic-en.admin.ch
ws.quattrop-r.admin.ch
www.bbl.admin.ch
wwwt.interruptio-ges.bfs.admin.ch
www-tmp.roemerholz.admin.ch
www.aramis.admin.ch
survey.efk.admin.ch
uat-publish-internet-vbs.vbs.admin.ch
www.infoafam-a.zas.admin.ch
www.sust.admin.ch
www.plugins.aramis-a.admin.ch
www.pxweb-a.bfs.admin.ch
www.openegov.admin.ch
www.cms-t2.admin.ch
www.psyreg-k.admin.ch
www.cfej.admin.ch
www.cfig.admin.ch
pin-reset.a-pki.admin.ch
www.gate.bav.admin.ch
www.jira-a.estv.admin.ch
sts0032.sts.eiam.admin.ch
www.cmsp4-a.admin.ch
appint.naz.admin.ch
www.staatskalender.admin.ch
*.geo.admin.ch
www.code.admin.ch
www.bundespublikationen.admin.ch
www.suissetax-r.estv.admin.ch
help.geo.admin.ch
int.translation.eda.admin.ch
www.portal.bsv.admin.ch
viaduc.sfa-laboratory.ch
www.tacho-en.admin.ch
e-dec-web-a.ezv.admin.ch
ncts-formular.ezv.admin.ch
trifid-lindas.int.cluster.ldbar.ch
ws.inar-r.zas.admin.ch
rp-eda01.eda.admin.ch
apis.sem.admin.ch
ws.seodor.zas.admin.ch
www.sust.admin.ch
www.edb.admin.ch
www.sib.admin.ch
www.apistore.estv.admin.ch
www.xmlns.bfs.admin.ch
www.logixs.eda.admin.ch
www.esti.admin.ch
nd8.li.admin.ch
www.bar.admin.ch
sts003-r.gever.admin.ch
www-tmp-a.ekf.admin.ch
www.cfig.admin.ch
adonis.ezv.admin.ch
www.bag.admin.ch
key-recovery.a-pki.admin.ch
Int.ex4.lmsvbs.admin.ch
toolchain-selfservice.bit.admin.ch
s001047a.adr.admin.ch
ws.dds.bakom.admin.ch
rio-a.ssl.admin.ch
www.portal-a.eiam.admin.ch
www.ekff.admin.ch
www.cms-a1.admin.ch
ws.lsvastammdaten-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
www.sonderbewilligungen.admin.ch
intranet.sibad.vbs.admin.ch
storme-r.bafu.admin.ch
intranet.gate-r.bar.admin.ch
idp-base.gate-r.eiam.admin.ch
tokenunseal.a-pki.admin.ch
www.e-cites-a2.admin.ch
www.regress.admin.ch
intranet.vbs.admin.ch
www.oscitv-gw-a.admin.ch
epo.ejpd.admin.ch
test2.gate-a.bit.admin.ch
www.etv.blv.admin.ch
www.bestellung-k.admin.ch
www.pxweb-admin-a.bfs.admin.ch
www.widget.e-portal.admin.ch
www.ausbildung.eur-med.bazg.admin.ch
ebd.abn.ezv.admin.ch
www.cmsp8-a.admin.ch
www.b2cshop-i.admin.ch
idp-egov-federal.gate-d.eiam.admin.ch
flrt.bazl.admin.ch
ca-sbpp.seco.admin.ch
www.b2cshop.admin.ch
www.coff-ekff.admin.ch
sanadress.vbs.admin.ch
www.medregom-r.admin.ch
transfer-pr.wbf.admin.ch
cmc.a-pki.admin.ch
www.g2020-info.admin.ch
www.eofcom-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
ww2.elic-en.admin.ch
ws.quattrop-r.admin.ch
www.bbl.admin.ch
wwwt.interruptio-ges.bfs.admin.ch
www-tmp.roemerholz.admin.ch
www.aramis.admin.ch
survey.efk.admin.ch
uat-publish-internet-vbs.vbs.admin.ch
www.infoafam-a.zas.admin.ch
www.sust.admin.ch
www.plugins.aramis-a.admin.ch
www.pxweb-a.bfs.admin.ch
www.openegov.admin.ch
www.cms-t2.admin.ch
www.psyreg-k.admin.ch
www.cfej.admin.ch
www.cfig.admin.ch
pin-reset.a-pki.admin.ch
Certificate
The complete raw certificate details for www.openegov.admin.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJKTCCBxGgAwIBAgIUPBs2WU7Shw0pCRKtn712KK4r6iwwDQYJKoZIhvcNAQEL BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEczMB4XDTIzMTAwNjE0NTEy NloXDTI0MTAwNjE0NDYwMFowgYsxCzAJBgNVBAYTAkNIMQ0wCwYDVQQIDARCZXJu MQ0wCwYDVQQHDARCZXJuMT4wPAYDVQQKDDVCdW5kZXNhbXQgZnVlciBJbmZvcm1h dGlrIHVuZCBUZWxla29tbXVuaWthdGlvbiAoQklUKTEeMBwGA1UEAwwVd3d3Lm9w ZW5lZ292LmFkbWluLmNoMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA 1G5PvIJILg4QIEYdBYX4/HSjs670M/97Fn3s5q3Rs263j0El0XoZsZTsQj5Tqk/b IIqUcaROSEF22a/rwMRll0NoPc9QEb4vzxQc2lvdg7LNXCNYrpCCTOI/inpufTnq Z3yT/i5r/tx/+1JH7cTVL+UIPdB3uSgp+DQhkZE8oOQpj/BbEACqTk/jKyKa8Mke Pn+cZnqpmJ/IipiRmY5mYDdIepQF8E4rSX0Dih54quWWupvgtL1fmZxwApQzroRs IFv16TmE1p6svyo+jyucyjr6aFY0NA+Ti5jccgBoUHllo406Vs+tAiekFqM0/aY0 LV3DsugR16zVYP0cNpCCkm2ml4Y6+1W/ckToEPidMm5hUieSXFn2cIyDQwMRALGb Q38+etkMCaIcjnBq756uZKii19uia04E9H173qG1WXNPDbBED7DznY59CcgAHc5y yz4pLcH7GobK0Acr/T/BfK5svfmMAn1PVlhihobUzf1mVHtlVVvuirLhLIYMxQ83 Tk6SqbbXTdaklp8VfrmT9ajMT2av/73kXCBPxZEOQbibEtzoE6YwA3lVxlzNocZm jI8sfGgMrbefj007FTOpxiLPpmh7Xv9j0+YtedsZyyKlcx+HzTS/93IgPFbNhCdM GoWj5xXPaf7/q/Az34u9W/fES5KhHaWaGFLWqkQREdMCAwEAAaOCA8AwggO8MAwG A1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUsxKJtalLNbwVAPCA6dh4h/ETfHYwcwYI KwYBBQUHAQEEZzBlMDcGCCsGAQUFBzAChitodHRwOi8vdHJ1c3QucXVvdmFkaXNn bG9iYWwuY29tL3F2c3NsZzMuY3J0MCoGCCsGAQUFBzABhh5odHRwOi8vb2NzcC5x dW92YWRpc2dsb2JhbC5jb20wMwYDVR0RBCwwKoIVd3d3Lm9wZW5lZ292LmFkbWlu LmNoghFvcGVuZWdvdi5hZG1pbi5jaDBbBgNVHSAEVDBSMEYGDCsGAQQBvlgAAmQB ATA2MDQGCCsGAQUFBwIBFihodHRwOi8vd3d3LnF1b3ZhZGlzZ2xvYmFsLmNvbS9y ZXBvc2l0b3J5MAgGBmeBDAECAjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUH AwEwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NybC5xdW92YWRpc2dsb2JhbC5j b20vcXZzc2xnMy5jcmwwHQYDVR0OBBYEFCB4+4HGHHVCgwEFqJd51teHJGbGMA4G A1UdDwEB/wQEAwIFoDCCAfgGCisGAQQB1nkCBAIEggHoBIIB5AHiAHcAdv+IPwq2 +5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGLBYH7AgAABAMASDBGAiEA9OeG kfjMGpu9Wh07nwwqTD9SkBtKcCKuK/Ge0mkDQ2ECIQDIRCumiPuyJ3i8Lq09f+30 v85S7r2hcKMZt3GwIsL9QwB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s5 2IRzAAABiwWB/J0AAAQDAEgwRgIhAIJdoskVq5VH1ovv2qyo8rYNsIIegIdNKs+D 1UULfDRWAiEAtkMe4WsfCH0maZnb8LeI3dEmQsUATrG02viPYF0hMBsAdgA/F0tP 1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAAAYsFgfvzAAAEAwBHMEUCICJJ uxGfAGgap8tiueCdcMltFj6/DUk87NK2nFM/zlrAAiEAr/0jIsMtQV2F0nlrd59W imX2jUissOvHYWGLttL2R6gAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlG cR+1mwAAAYsFgfuMAAAEAwBHMEUCIQCNieuJwTqiY3esw4vWNXGaT/6eKyGOZC/Y qJElmWND2QIgJr6xcP3hQQ7CasQDdI8RlkAHUIBU+krq7lMoWtx8feAwDQYJKoZI hvcNAQELBQADggIBAHoMni+9bUbA8s/cLWIuDLBT8thuSJedqpF3exSyELCW2z02 rX255cyDtg+ygno2pS83PhvaKAD/ut8AukE4mfG2uO61tYV6tPc1JIHmaBf/JMSK PpPmv9b95bQqcMlJCVu0G35Srm8+U+XnQw+SnbkmRbb9MiKhynBYOQ0QU5JD/Z43 qxfZbON83VMxjDyJ1KjTmnacFY9HUL0Nq3Ito5D4hac0y0q74s9gl2W0Fubc44Ft Dqq5E3jpgkUdFsMTYjTxxlKNItQoPNpGOxsw2BwUeEiRPT7GTa55DeJue6VjX0Gl Pph26W9ap0wwkP+eDbUE4fBb8ggqljEoug6Hf0aMmPBQmbBul/RM4ZJEPKnRT8Ia v0j5XquEexpULqgIK9mjfzDIwofVQRPeMRxW5/6D9lq5F7a2TCNzu+q6EYpiLNC5 FUm6jP/FSXVPqNp/7MSt7DVpORZGq+RNbYgA1aMZxbPhhlc8jHDNznP4O/RxixOU j3uzK+3ZvrUbc/VRXuuWd9BpjdpOrza758GCmoTeE+0SMTfkvakWHTAS2vdSM6Mw ipKJxfBWGwrN6ufyTtqFH55co87poquV8qUR+C4d0+WTs60WS9oozGJH1w6m7uDu 5iB2aVki2uWNKjm7wFc0MH/ij5O3VmxNsoNl+6orwRPoOaP2ye+4S5TlPkvO -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1G5PvIJILg4QIEYdBYX4 /HSjs670M/97Fn3s5q3Rs263j0El0XoZsZTsQj5Tqk/bIIqUcaROSEF22a/rwMRl l0NoPc9QEb4vzxQc2lvdg7LNXCNYrpCCTOI/inpufTnqZ3yT/i5r/tx/+1JH7cTV L+UIPdB3uSgp+DQhkZE8oOQpj/BbEACqTk/jKyKa8MkePn+cZnqpmJ/IipiRmY5m YDdIepQF8E4rSX0Dih54quWWupvgtL1fmZxwApQzroRsIFv16TmE1p6svyo+jyuc yjr6aFY0NA+Ti5jccgBoUHllo406Vs+tAiekFqM0/aY0LV3DsugR16zVYP0cNpCC km2ml4Y6+1W/ckToEPidMm5hUieSXFn2cIyDQwMRALGbQ38+etkMCaIcjnBq756u ZKii19uia04E9H173qG1WXNPDbBED7DznY59CcgAHc5yyz4pLcH7GobK0Acr/T/B fK5svfmMAn1PVlhihobUzf1mVHtlVVvuirLhLIYMxQ83Tk6SqbbXTdaklp8VfrmT 9ajMT2av/73kXCBPxZEOQbibEtzoE6YwA3lVxlzNocZmjI8sfGgMrbefj007FTOp xiLPpmh7Xv9j0+YtedsZyyKlcx+HzTS/93IgPFbNhCdMGoWj5xXPaf7/q/Az34u9 W/fES5KhHaWaGFLWqkQREdMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 343146300823134574475130474482031095235021105708 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-06 14:51:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-06 14:46:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bundesamt fuer Informatik und Telekommunikation (BIT)' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.openegov.admin.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 866642478103487442277836893537509583959378541644729620058475480038087859207281974122317437718337112767824864271614148157267257064690371944337847001242530426563719591748224464911633063726592430425754837130531868385822624969800110983063295254553026815290166689745322071629172656911846797261146735367316870497581565472641878879127559597739635257395671775718296049880924006773415445057478349898424074577405132646329538211003787523614773301676516452605111469326596792445327052097338190615260736900794089900799078849546816744116865533924612011084777345603684475521183915965533008360918970502110256518483005836396726435981436080474609646599408673024776964313879331199895264652709382503157311116651507080764856356294016458040210782021995398040014411293084373316721812137749669788993969557900600139193018127849801266019969259422975995349337882953432086115579720491151050816924408941507606388847317230922706534461907523258246835043379299734879193011773412241860545872529915608554143408326953670425330204651807591626197680492428746438900278834446454479997285286696425823708030366247326252284683833240066854860541264741937370783048698873950217018172414996703344784775252090618709843555846486870029525481612131643906054653704219277401856228266451 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.openegov.admin.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openegov.admin.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2078fb81c61c7542830105a89779d6d7872466c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes) 01e200770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b0581fb020000040300483046022100f4e78691f8cc1a9bbd5a1d3b9f0c2a4c3f52901b4a7022ae2bf19ed269034361022100c8442ba688fbb22778bc2ead3d7fedf4bfce52eebda170a319b771b022c2fd4300770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b0581fc9d0000040300483046022100825da2c915ab9547d68befdaaca8f2b60db0821e80874d2acf83d5450b7c3456022100b6431ee16b1f087d266999dbf0b788ddd12642c5004eb1b4daf88f605d21301b0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018b0581fbf3000004030047304502202249bb119f00681aa7cb62b9e09d70c96d163ebf0d493cecd2b69c533fce5ac0022100affd2322c32d415d85d2796b779f568a65f68d48acb0ebc761618bb6d2f647a8007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b0581fb8c00000403004730450221008d89eb89c13aa26377acc38bd635719a4ffe9e2b218e642fd8a89125996343d9022026beb170fde1410ec26ac403748f11964007508054fa4aeaee53285adc7c7de0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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