azimi.int.bkw.ch
- BKW Energie AG -
Issued by QuoVadis Global SSL ICA G3
About this certificate
This digital certificate with serial number 12:5b:55:8d:e1:9a:b8:24:67:2c:64:dd:e6:c2:ab:54:b2:0b:eb:68 was issued on by QuoVadis Limited.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
BKW Energie AG
Organization:
BKW Energie AG
Organization unit: ICT
Organization unit: ICT
State / Province:
Bern
Locality: Bern
Country: CH
Locality: Bern
Country: CH
QuoVadis Limited
Organization:
QuoVadis Limited
Country:
BM
This certificate has expire since
Certificate Details
Serial Number (hex): 12:5b:55:8d:e1:9a:b8:24:67:2c:64:dd:e6:c2:ab:54:b2:0b:eb:68Serial Number (int): 104798654511892981230696633887144812702927154024
Serial Number lenght: 157 bits, 20 octets
SubjectKeyId: 0c:39:06:d6:d4:42:84:95:b2:e8:09:1b:0a:5c:41:fe:11:ce:62:dd
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76
Fingerprint (sha1): ae:93:f4:23:7c:b9:c2:c4:97:d5:c2:23:f7:b1:bf:8e:8b:9f:29:fc
Fingerprint (sha256): 09:dc:dc:84:2c:74:74:15:7b:cd:6c:c0:cb:8f:01:b4:b5:67:42:e0:ed:c0:32:84:4a:a9:88:92:cd:11:a2:28
Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt
Revocation information
OCSP Server: http://ocsp.quovadisglobal.comCRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl
Check the revocation status for certificate azimi.int.bkw.ch
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for azimi.int.bkw.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
azimi.int.bkw.ch
azimi-q.int.bkw.ch
azimi-t.int.bkw.ch
azimi-q.int.bkw.ch
azimi-t.int.bkw.ch
Other certificates including the domain name bkw.ch
(limited to 100 certificates)
ecmt.bkw.ch
jobs.bkw.ch
ins.bkw.ch
auth.crmdynamicst.bkw.ch
gridconnection.bkw.ch
event.bkw.ch
trinity.bkw.ch
blog.bkw.ch
blog.bkw.ch
zoon.bkw.ch
haefa.bkw.ch
event-nachhaltigkeit.bkw.ch
blue.bkw.ch
api-notis.bkw.ch
login.bkw.ch
azimi.int.bkw.ch
oscar.bkw.ch
api.bkw.ch
www.bkw.ch
shop.bkw.ch
blog.bkw.ch
bfc-example-app-next.bkw.ch
www.bkw.ch
outlook.bkw.ch
api-crm.bkw.ch
zoon.bkw.ch
blog.bkw.ch
ns-t-bkw-dmz-cus-aaa-ldap-01.bkw.ch
bkw.ch
event-nachhaltigkeit.bkw.ch
bkw.ch
feuerwehr.bkw.ch
ictmonitoring.bkw.ch
belvis.aek.ch
services-q.bkw.ch
ewp.bkw.ch
static.bkw.ch
event.bkw.ch
connect.bkw.ch
fed.bkw.ch
api-dsv-energy-strategy-backend.bkw.ch
event.bkw.ch
git.bkw.ch
netzauskunft.bkw.ch
blog.bkw.ch
akeneo-admin.bkw.ch
eventportal.bkw.ch
ra-kkm.bkw.ch
m2c-bills.bkw.ch
cloud.aek.ch
event.bkw.ch
jobs.bkw.ch
oscar.bkw-fmb.ch
event.bkw.ch
pwreset.bkw.ch
oscar.bkw.ch
*.msda.bkw.ch
www.bkwengineering.com
my.home-energy.bkw.ch
sitzung.hostedapps.bkw.ch
cockpitservicears.bkw.ch
outage.bkw.ch
api-tangento.bkw.ch
jobs.bkw.ch
shop.bkw.ch
event-nachhaltigkeit.bkw.ch
visualization.bkw.ch
visustrom1.bkw.ch
netzauskunft.bkw.ch
blog.bkw.ch
thehub-cloud.bkw.ch
ise.bkw-fmb.ch
BESUCHERZENTREN.BKW.CH
gsxmonitoring.bkw.ch
energy-asset.bkw.ch
mdomus-poc.bkw.ch
login-v2-t.bkw.ch
shop.bkw.ch
metering-workforce.bkw.ch
nexus.bkw.ch
my.home-energy.bkw.ch
haefa.test.bkw.ch
energymonitoring.bkw.ch
api-q.bkw.ch
oscar.bkw.ch
www.abaclik.bkw.ch
*.apps.collab.bkw.ch
*.elastic.int.bkw.ch
plantservices.bkw.ch
mdl.bkw.ch
blog.bkw.ch
*.aks02.bkw.ch
api-energy-asset.bkw.ch
netzauskunft.bkw.ch
smk-mdm.bkw.ch
event-nachhaltigkeit.bkw.ch
shop.bkw.ch
api-m2c-t.bkw.ch
eventportal.bkw.ch
api-oneportal-edm.bkw.ch
jobs.bkw.ch
ins.bkw.ch
auth.crmdynamicst.bkw.ch
gridconnection.bkw.ch
event.bkw.ch
trinity.bkw.ch
blog.bkw.ch
blog.bkw.ch
zoon.bkw.ch
haefa.bkw.ch
event-nachhaltigkeit.bkw.ch
blue.bkw.ch
api-notis.bkw.ch
login.bkw.ch
azimi.int.bkw.ch
oscar.bkw.ch
api.bkw.ch
www.bkw.ch
shop.bkw.ch
blog.bkw.ch
bfc-example-app-next.bkw.ch
www.bkw.ch
outlook.bkw.ch
api-crm.bkw.ch
zoon.bkw.ch
blog.bkw.ch
ns-t-bkw-dmz-cus-aaa-ldap-01.bkw.ch
bkw.ch
event-nachhaltigkeit.bkw.ch
bkw.ch
feuerwehr.bkw.ch
ictmonitoring.bkw.ch
belvis.aek.ch
services-q.bkw.ch
ewp.bkw.ch
static.bkw.ch
event.bkw.ch
connect.bkw.ch
fed.bkw.ch
api-dsv-energy-strategy-backend.bkw.ch
event.bkw.ch
git.bkw.ch
netzauskunft.bkw.ch
blog.bkw.ch
akeneo-admin.bkw.ch
eventportal.bkw.ch
ra-kkm.bkw.ch
m2c-bills.bkw.ch
cloud.aek.ch
event.bkw.ch
jobs.bkw.ch
oscar.bkw-fmb.ch
event.bkw.ch
pwreset.bkw.ch
oscar.bkw.ch
*.msda.bkw.ch
www.bkwengineering.com
my.home-energy.bkw.ch
sitzung.hostedapps.bkw.ch
cockpitservicears.bkw.ch
outage.bkw.ch
api-tangento.bkw.ch
jobs.bkw.ch
shop.bkw.ch
event-nachhaltigkeit.bkw.ch
visualization.bkw.ch
visustrom1.bkw.ch
netzauskunft.bkw.ch
blog.bkw.ch
thehub-cloud.bkw.ch
ise.bkw-fmb.ch
BESUCHERZENTREN.BKW.CH
gsxmonitoring.bkw.ch
energy-asset.bkw.ch
mdomus-poc.bkw.ch
login-v2-t.bkw.ch
shop.bkw.ch
metering-workforce.bkw.ch
nexus.bkw.ch
my.home-energy.bkw.ch
haefa.test.bkw.ch
energymonitoring.bkw.ch
api-q.bkw.ch
oscar.bkw.ch
www.abaclik.bkw.ch
*.apps.collab.bkw.ch
*.elastic.int.bkw.ch
plantservices.bkw.ch
mdl.bkw.ch
blog.bkw.ch
*.aks02.bkw.ch
api-energy-asset.bkw.ch
netzauskunft.bkw.ch
smk-mdm.bkw.ch
event-nachhaltigkeit.bkw.ch
shop.bkw.ch
api-m2c-t.bkw.ch
eventportal.bkw.ch
api-oneportal-edm.bkw.ch
Certificate
The complete raw certificate details for azimi.int.bkw.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGJjCCBA6gAwIBAgIUEltVjeGauCRnLGTd5sKrVLIL62gwDQYJKoZIhvcNAQEL BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEczMB4XDTIwMDQwNzA1MDY1 OFoXDTIyMDQwNzA1MTYwMFowbTELMAkGA1UEBhMCQ0gxDTALBgNVBAgMBEJlcm4x DTALBgNVBAcMBEJlcm4xFzAVBgNVBAoMDkJLVyBFbmVyZ2llIEFHMQwwCgYDVQQL DANJQ1QxGTAXBgNVBAMMEGF6aW1pLmludC5ia3cuY2gwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQCbqlKk9f6txVBF40y4nVjr0Dyfm7RAbEUeXZfNSVCI w+Bd31yb9B6uwurxkrU5VI0PBhDvPifH6NdJFUpdDTjsM6Jj+4t+yIcdDV8CFnfP BL9005wVjcRF9rYD8TCDhnEETYl4sMo5fbWjv6cCvdPqD+WEpCC9y8NeDnjq2DBF DkR4JVQPXz15K9qVS7Q5xJZZxS/hYSIUU5S8iCEAEbSrNLGxVqc/25lWbmeD4gwz i08KdXDbBf2GVuEfKz1RTGTpfohgthDwShc+dwC3anJBbS9m2qjJ66IqoFI2QlDI 5uohQouYg++2b+uDI5C8ckRKZqHA6pSN2lMXkyZNSJurAgMBAAGjggHcMIIB2DAJ BgNVHRMEAjAAMB8GA1UdIwQYMBaAFLMSibWpSzW8FQDwgOnYeIfxE3x2MHMGCCsG AQUFBwEBBGcwZTA3BggrBgEFBQcwAoYraHR0cDovL3RydXN0LnF1b3ZhZGlzZ2xv YmFsLmNvbS9xdnNzbGczLmNydDAqBggrBgEFBQcwAYYeaHR0cDovL29jc3AucXVv dmFkaXNnbG9iYWwuY29tMEMGA1UdEQQ8MDqCEGF6aW1pLmludC5ia3cuY2iCEmF6 aW1pLXEuaW50LmJrdy5jaIISYXppbWktdC5pbnQuYmt3LmNoMFEGA1UdIARKMEgw RgYMKwYBBAG+WAACZAEBMDYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cucXVvdmFk aXNnbG9iYWwuY29tL3JlcG9zaXRvcnkwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsG AQUFBwMBMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jcmwucXVvdmFkaXNnbG9i YWwuY29tL3F2c3NsZzMuY3JsMB0GA1UdDgQWBBQMOQbW1EKElbLoCRsKXEH+Ec5i 3TAOBgNVHQ8BAf8EBAMCBaAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcN AQELBQADggIBABF0KZEHESoN/nbSFW0JbCkwXfyfnuZLwb+CuED2T6NmrWs3jM04 UUTAYuQgQuVjE3RnragFvtJx3k7AZBCW76TUM0KtOvy3zGnzoI9INP9dBffXI2Bf yPxpElp7ZYQJML3bydtwqcrPZ5KtlnCVNIow+XGAOsXoXnaWSFQivjildLbf7xWI J4p0+ucP7pVRghx9CnOzZt3G9zhIn8ow/qEWCbN60TqPZHCQHmWniXRJiUmB+q7g Jh3bQhqLcEdkYQ2/yJNT7AUMP4TLRQfPXIz+qaW4idaXxAs5y8JIHuE6kxaEyQIw x8a+Qgh/HPm6jxIqeJLVJkHYc2d0EFwXg0IGUQuVTamaUS+Gkinu+5br5/eUEzIT K/7C0rbeinCmy6P58KsPdh2IVEtH9v28V/TgHR0gJsUn/ATC/n9GLP2FSqwyrKqI IZCCDho2ydmLxmKNIFfV4ZgAdOI9B654wyX/+Uy59q84Ejwzf0Z9kbRVSHk/1IA1 q6s2zPBqe2rCgxqi3Nj6QhnP+U+BEbdlavbTEqhnVt2rHLSIKt510tTzP07z2wIf Wwtnja27P7eCcQcJkGZoGo8GcDdqc0ZJ+nOTC9jRIWeZAC/12JfKvy/dcSINqfnP 7HBTHC7gHs46whA+MTdp07N/cBRcamtSjKl9gAeMjIbC7QDIq2xrDzlV -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6pSpPX+rcVQReNMuJ1Y 69A8n5u0QGxFHl2XzUlQiMPgXd9cm/QersLq8ZK1OVSNDwYQ7z4nx+jXSRVKXQ04 7DOiY/uLfsiHHQ1fAhZ3zwS/dNOcFY3ERfa2A/Ewg4ZxBE2JeLDKOX21o7+nAr3T 6g/lhKQgvcvDXg546tgwRQ5EeCVUD189eSvalUu0OcSWWcUv4WEiFFOUvIghABG0 qzSxsVanP9uZVm5ng+IMM4tPCnVw2wX9hlbhHys9UUxk6X6IYLYQ8EoXPncAt2py QW0vZtqoyeuiKqBSNkJQyObqIUKLmIPvtm/rgyOQvHJESmahwOqUjdpTF5MmTUib qwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 104798654511892981230696633887144812702927154024 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 05:06:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-07 05:16:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BKW Energie AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ICT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'azimi.int.bkw.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19650926587341476096212604264026463968580090881624784998927905354502350832003031425576862032873586241480737860863218375756197380626868732264596429796426359359939434594867822382920951728326815697229838113682533562946328969038880859396539002941943168765168528535766750872269601150098946028500301844145392209281552610512055741109489287958420834470012510027914347845606100400818387090667820251768957780344809100691015235277889637152749597806068915523567354698957751636809049543266382125597805484392806692675509898185069717036056759823679307645043437545547831250035229764655395706396405914842655717527906460360186700274603 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azimi.int.bkw.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azimi-q.int.bkw.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azimi-t.int.bkw.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0c3906d6d4428495b2e8091b0a5c41fe11ce62dd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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