www.buelach-sued.ch

- Migros Genossenschafts Bund -

Issued by QuoVadis Global SSL ICA G2

About this certificate

This digital certificate with serial number 46:62:b1:3e:eb:c8:04:0c:44:2c:93:a0:9f:5b:18:d4:17:bf:65:f5 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Migros Genossenschafts Bund

Organization: Migros Genossenschafts Bund
Organization unit: MITS
State / Province: Zuerich
Locality: Zuerich
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 46:62:b1:3e:eb:c8:04:0c:44:2c:93:a0:9f:5b:18:d4:17:bf:65:f5
Serial Number (int): 401830267272648558908669189986719632971307902453
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 78:39:f5:b8:88:3c:b2:d3:77:95:52:59:22:da:e4:75:91:1e:ae:31
AuthorityKeyId: 91:19:62:ad:5b:17:a7:30:fb:f0:de:39:25:b1:bd:8c:b9:b8:51:27

Fingerprint (sha1): c1:07:de:36:cb:73:75:0a:26:95:8d:30:0c:f6:51:db:fd:a2:23:30
Fingerprint (sha256): 02:7a:a7:3d:00:b8:77:2f:d2:36:c9:7e:21:28:1d:3a:dd:b4:4e:7f:91:01:2b:d4:4d:a5:74:08:cb:35:9a:f2

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg2.crl

Check the revocation status for certificate www.buelach-sued.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.buelach-sued.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.buelach-sued.ch

Other certificates including the domain name buelach-sued.ch

(limited to 100 certificates)
www.buelach-sued.ch
buelach-sued.ch
buelach-sued.ch
admin.buelach-sued.ch
admin.buelach-sued.ch
buelach-sued.ch
admin.buelach-sued.ch
www.buelach-sued.ch
buelach-sued.ch
buelach-sued.ch
admin.buelach-sued.ch
buelach-sued.ch
buelach-sued.ch

Certificate

The complete raw certificate details for www.buelach-sued.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32lpMGM3zkFdIm68mSSg
JUGKSI6YQeAFk5bhQYhhMrH2BZ2D31YLaQQD/2qVqOD9ToChteAROcrWMYBbev0w
y0wCh7Ecf079R8m5iqlpFKfomXa1WAbaouwRTffJUuIjyc5JYw/WkSeWx0IV5HU9
FL+8csBltmmZAuE2RVVou5rgIJzTEBdVCcORk+eVY6nY9J7jt8X4RcdIZwLnSdXT
jXBm308r+7BsvAb7z3Yjr2jz0Md2Nrc1GHG6ncBe4tUUgI6+mam6wK5mktSCt3pN
7phosyfesLHvj1KlFbwr8JGTZ/gAXPIsIJHgmri617rys1DtqGn+KflIXg8gMpys
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401830267272648558908669189986719632971307902453
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-18 11:30:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-18 11:40:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuerich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuerich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Migros Genossenschafts Bund'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MITS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.buelach-sued.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28203122056874268868743877120996606276672143036905813726833445988323622297414962809807936417120277023040214958664384128527736651707469858763074133451315039611705803112730422522068982351094375199113398995847698123087651846429751013131364744176430494029875742197909452453096027912872186764852806539850648348385848530310698283616250083798799727260901343496179514147961149054227693986664805529876327876469247311717582530173958052429356725807089732329929590556779527531674501676460657534971373079320579795602164361319033629599029528074924586637012770159818881431723959014589152654027399085654509706062626900312299444939857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 911962ad5b17a730fbf0de3925b1bd8cb9b85127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buelach-sued.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7839f5b8883cb2d37795525922dae475911eae31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (489 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
							01e3007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000163730cc62c0000040300473045022100bc0c63104a6ee3bdf10e6e93986bff271a31a486fdd5ec3b81c52a81e8c52ac90220119993d3bb49952937025ba9f14643716322955a048efb57b71b4c2a2ff8f8f7007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000163730cc6540000040300483046022100d940f58f447df9b4126a2c39bc0eca0c19c9a0e289fc4406c912ca177ae0e417022100ae3536de09f3fe0e484e536c3928b432aceb8a5b0d91eace6d857f5e1dd42b260077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd00000163730cc9db0000040300483046022100e3700f7a938b83b6904c59ea17351147fdae9de380d8a992b05e60d7461fb5fc022100c8bbd86d1aa9a63f4b738bf7df0dba934d33d821570391d96d3dc71ef2869fe50077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000163730ccabe0000040300483046022100886fc978a53daaf8d4df3ca97f48950b64ebbb2d4df1370468903b0dea11cc8d022100952cab4852a2fc63c344a0b7408fa8b8dffb1b370b1a150d2fa79c004af18d21
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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