www.privasphere.com
- PrivaSphere AG -
Issued by QuoVadis Global SSL ICA G3
About this certificate
This digital certificate with serial number 58:78:50:f2:bf:b0:91:63:3e:1c:63:3e:7d:80:f1:3d:a8:4b:95:62 was issued on by QuoVadis Limited.
With 27 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
PrivaSphere AG
Organization:
PrivaSphere AG
State / Province:
Zürich
Locality: Zürich
Country: CH
Locality: Zürich
Country: CH
QuoVadis Limited
Organization:
QuoVadis Limited
Country:
BM
This certificate will expire on
Certificate Details
Serial Number (hex): 58:78:50:f2:bf:b0:91:63:3e:1c:63:3e:7d:80:f1:3d:a8:4b:95:62Serial Number (int): 505074328842328228850564904478080736309673694562
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: e7:57:c6:f0:1e:d1:fd:a3:b3:c4:2e:f9:89:43:93:56:66:f8:5c:ab
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76
Fingerprint (sha1): 7c:ac:95:2a:8f:19:4e:db:71:17:44:a4:c6:ea:a5:7a:99:b1:c0:4e
Fingerprint (sha256): 11:7b:de:ad:0e:4c:54:0b:11:5d:ee:09:ff:64:7f:c1:e1:fb:2d:57:b0:40:11:2e:8e:b2:92:9b:50:35:01:84
Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt
Revocation information
OCSP Server: http://ocsp.quovadisglobal.comCRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl
Check the revocation status for certificate www.privasphere.com
27
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.privasphere.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.privasphere.com
secmail.tg.ch
eeg.lu.ch
ees.lu.ch
erv.tg.ch
securemail.holcim.com
securemail.ar.ch
securemail.zg.ch
securemail.bekb.ch
securemail.ifrc.org
secmail.ukb.ch
p4u.ch
www.p4u.ch
zh.p4u.ch
glb.p4u.ch
securemail.lu.ch
www.zh.privasphere.com
www.glb.privasphere.com
vrfy5210.privasphere.com
large.privasphere.com
erv.sh.ch
jusphere.privasphere.com
securemail.bav.admin.ch
secmail.bvger.ch
securemail.blw.admin.ch
secmail.ti.ch
sec-data-exchange.oak-bv.admin.ch
secmail.tg.ch
eeg.lu.ch
ees.lu.ch
erv.tg.ch
securemail.holcim.com
securemail.ar.ch
securemail.zg.ch
securemail.bekb.ch
securemail.ifrc.org
secmail.ukb.ch
p4u.ch
www.p4u.ch
zh.p4u.ch
glb.p4u.ch
securemail.lu.ch
www.zh.privasphere.com
www.glb.privasphere.com
vrfy5210.privasphere.com
large.privasphere.com
erv.sh.ch
jusphere.privasphere.com
securemail.bav.admin.ch
secmail.bvger.ch
securemail.blw.admin.ch
secmail.ti.ch
sec-data-exchange.oak-bv.admin.ch
Other certificates including the domain name privasphere.com
(limited to 100 certificates)
git.privasphere.com
crm.privasphere.com
crm.privasphere.com
bugs.privasphere.com
www-dev.privasphere.com
www-dev.privasphere.com
crm.privasphere.com
crl-dev.privasphere.com
bugs.privasphere.com
typo3.privasphere.com
git.privasphere.com
www.privasphere.com
crl-dev.privasphere.com
typo3.privasphere.com
*.privasphere.com
bugs.privasphere.com
www.privasphere.com
crm.privasphere.com
bugs.privasphere.com
bugs.privasphere.com
crl-dev.privasphere.com
typo3.privasphere.com
www.privasphere.com
git.privasphere.com
tickets.privasphere.com
www.privasphere.com
crm.privasphere.com
crl-dev.privasphere.com
tickets.privasphere.com
www.privasphere.com
typo3.privasphere.com
www.privasphere.com
www.privasphere.com
typo3.privasphere.com
typo3.privasphere.com
www.privasphere.com
crm.privasphere.com
tickets.privasphere.com
tickets.privasphere.com
www.privasphere.com
tickets.privasphere.com
*.privasphere.com
smtp.privasphere.com
bugs.privasphere.com
www.privasphere.com
www.privasphere.com
typo3.privasphere.com
www.privasphere.com
crl-dev.privasphere.com
tickets.privasphere.com
www.privasphere.com
crl-dev.privasphere.com
www-dev.privasphere.com
www.privasphere.com
www.privasphere.com
www.privasphere.com
crl-dev.privasphere.com
crm.privasphere.com
puppet.privasphere.com
www.privasphere.com
tickets.privasphere.com
typo3.privasphere.com
tickets.privasphere.com
typo3.privasphere.com
typo3.privasphere.com
www.privasphere.com
typo3.privasphere.com
www.privasphere.com
www-dev.privasphere.com
git.privasphere.com
bugs.privasphere.com
crm.privasphere.com
crl-dev.privasphere.com
puppet.privasphere.com
www.privasphere.com
www.privasphere.com
git.privasphere.com
git.privasphere.com
tickets.privasphere.com
crl-dev.privasphere.com
tickets.privasphere.com
crl-dev.privasphere.com
bugs.privasphere.com
bugs.privasphere.com
typo3.privasphere.com
*.privasphere.com
www.privasphere.com
www.privasphere.com
crm.privasphere.com
typo3.privasphere.com
crm.privasphere.com
typo3.privasphere.com
bugs.privasphere.com
tickets.privasphere.com
bugs.privasphere.com
tickets.privasphere.com
bugs.privasphere.com
crm.privasphere.com
git.privasphere.com
typo3.privasphere.com
crm.privasphere.com
crm.privasphere.com
bugs.privasphere.com
www-dev.privasphere.com
www-dev.privasphere.com
crm.privasphere.com
crl-dev.privasphere.com
bugs.privasphere.com
typo3.privasphere.com
git.privasphere.com
www.privasphere.com
crl-dev.privasphere.com
typo3.privasphere.com
*.privasphere.com
bugs.privasphere.com
www.privasphere.com
crm.privasphere.com
bugs.privasphere.com
bugs.privasphere.com
crl-dev.privasphere.com
typo3.privasphere.com
www.privasphere.com
git.privasphere.com
tickets.privasphere.com
www.privasphere.com
crm.privasphere.com
crl-dev.privasphere.com
tickets.privasphere.com
www.privasphere.com
typo3.privasphere.com
www.privasphere.com
www.privasphere.com
typo3.privasphere.com
typo3.privasphere.com
www.privasphere.com
crm.privasphere.com
tickets.privasphere.com
tickets.privasphere.com
www.privasphere.com
tickets.privasphere.com
*.privasphere.com
smtp.privasphere.com
bugs.privasphere.com
www.privasphere.com
www.privasphere.com
typo3.privasphere.com
www.privasphere.com
crl-dev.privasphere.com
tickets.privasphere.com
www.privasphere.com
crl-dev.privasphere.com
www-dev.privasphere.com
www.privasphere.com
www.privasphere.com
www.privasphere.com
crl-dev.privasphere.com
crm.privasphere.com
puppet.privasphere.com
www.privasphere.com
tickets.privasphere.com
typo3.privasphere.com
tickets.privasphere.com
typo3.privasphere.com
typo3.privasphere.com
www.privasphere.com
typo3.privasphere.com
www.privasphere.com
www-dev.privasphere.com
git.privasphere.com
bugs.privasphere.com
crm.privasphere.com
crl-dev.privasphere.com
puppet.privasphere.com
www.privasphere.com
www.privasphere.com
git.privasphere.com
git.privasphere.com
tickets.privasphere.com
crl-dev.privasphere.com
tickets.privasphere.com
crl-dev.privasphere.com
bugs.privasphere.com
bugs.privasphere.com
typo3.privasphere.com
*.privasphere.com
www.privasphere.com
www.privasphere.com
crm.privasphere.com
typo3.privasphere.com
crm.privasphere.com
typo3.privasphere.com
bugs.privasphere.com
tickets.privasphere.com
bugs.privasphere.com
tickets.privasphere.com
bugs.privasphere.com
crm.privasphere.com
git.privasphere.com
typo3.privasphere.com
Certificate
The complete raw certificate details for www.privasphere.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKzzCCCLegAwIBAgIUWHhQ8r+wkWM+HGM+fYDxPahLlWIwDQYJKoZIhvcNAQEL BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEczMB4XDTIzMDcwNzE1MDY1 NFoXDTI0MDcwNzE1MDEwMFowaDELMAkGA1UEBhMCQ0gxEDAOBgNVBAgMB1rDvHJp Y2gxEDAOBgNVBAcMB1rDvHJpY2gxFzAVBgNVBAoMDlByaXZhU3BoZXJlIEFHMRww GgYDVQQDDBN3d3cucHJpdmFzcGhlcmUuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC Ag8AMIICCgKCAgEAuD4OA/fPEGjmFQPN3J+Y3wojBJod5Agt/+uDnwHjzmi+V+a5 dhZh1XBd9D8bBG+DjT4csjDqGurEWPeYpFIsPBkzgfTOpkJL5idkUT6R16yLafG6 UY49EbyDJeCR1WY1L6e2ZKWHpO0f9iv++nrXU8r7MeSttIHOOwbsYUt5AI9LsZ/U 6WyBrHpPH6KhLeO1vw25dIsQ2n5ywkJda393kkvEDXd/dEhZK77+yuzgbP6ko5mK FAwFNqvih+GTZRtSvMBpZgjDRRNahxBiP+GFskmUdcV3ti6D4bBiFBajICsJZXaR Dnzypv+FeuzNFmpGAGgZF02B/zLoGaJYMNnzug5pur/h46+TvpwL3d/fZcbPXAug mPwG4+1Zwqqh+vTLZvdCqxxki38+6WdsqIsxrNOhpxDigMvtbA5wsVuDqM/UIaMl zmHh1pj3SdsLx2TGOY/Uwd3+GhDC4KPRdWxRa8JCj3kzfDLp9PtPmFgLd+MZZkF9 Eyze/tNRjYIQSmfi6AbU/T7RY2CpYAlCZpqDgwI9145X0H6Uz4rc4Fkw72qP3S/3 QpvJuWGJGsJ+F8EgQ+UrTPMp8O33Hq0hO4YJybTF03l6YzERsjXafy2w/3H+i7fW Jvlew16P9DmzUN8Jwfluvf27p+0iylwHxF2aNovNBElo6oGCp2m5X0aPbTMCAwEA AaOCBYowggWGMAkGA1UdEwQCMAAwHwYDVR0jBBgwFoAUsxKJtalLNbwVAPCA6dh4 h/ETfHYwcwYIKwYBBQUHAQEEZzBlMDcGCCsGAQUFBzAChitodHRwOi8vdHJ1c3Qu cXVvdmFkaXNnbG9iYWwuY29tL3F2c3NsZzMuY3J0MCoGCCsGAQUFBzABhh5odHRw Oi8vb2NzcC5xdW92YWRpc2dsb2JhbC5jb20wggIABgNVHREEggH3MIIB84ITd3d3 LnByaXZhc3BoZXJlLmNvbYINc2VjbWFpbC50Zy5jaIIJZWVnLmx1LmNoggllZXMu bHUuY2iCCWVydi50Zy5jaIIVc2VjdXJlbWFpbC5ob2xjaW0uY29tghBzZWN1cmVt YWlsLmFyLmNoghBzZWN1cmVtYWlsLnpnLmNoghJzZWN1cmVtYWlsLmJla2IuY2iC E3NlY3VyZW1haWwuaWZyYy5vcmeCDnNlY21haWwudWtiLmNoggZwNHUuY2iCCnd3 dy5wNHUuY2iCCXpoLnA0dS5jaIIKZ2xiLnA0dS5jaIIQc2VjdXJlbWFpbC5sdS5j aIIWd3d3LnpoLnByaXZhc3BoZXJlLmNvbYIXd3d3LmdsYi5wcml2YXNwaGVyZS5j b22CGHZyZnk1MjEwLnByaXZhc3BoZXJlLmNvbYIVbGFyZ2UucHJpdmFzcGhlcmUu Y29tggllcnYuc2guY2iCGGp1c3BoZXJlLnByaXZhc3BoZXJlLmNvbYIXc2VjdXJl bWFpbC5iYXYuYWRtaW4uY2iCEHNlY21haWwuYnZnZXIuY2iCF3NlY3VyZW1haWwu Ymx3LmFkbWluLmNogg1zZWNtYWlsLnRpLmNogiFzZWMtZGF0YS1leGNoYW5nZS5v YWstYnYuYWRtaW4uY2gwWwYDVR0gBFQwUjBGBgwrBgEEAb5YAAJkAQEwNjA0Bggr BgEFBQcCARYoaHR0cDovL3d3dy5xdW92YWRpc2dsb2JhbC5jb20vcmVwb3NpdG9y eTAIBgZngQwBAgIwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMDoGA1Ud HwQzMDEwL6AtoCuGKWh0dHA6Ly9jcmwucXVvdmFkaXNnbG9iYWwuY29tL3F2c3Ns ZzMuY3JsMB0GA1UdDgQWBBTnV8bwHtH9o7PELvmJQ5NWZvhcqzAOBgNVHQ8BAf8E BAMCBaAwggH2BgorBgEEAdZ5AgQCBIIB5gSCAeIB4AB3ANq2v2s/tbYin5vCu1xr 6HCRcWy7UYSFNL2kPTBI1/urAAABiTDtc6MAAAQDAEgwRgIhAIRli3KGLZx19jMt BU1IDSm19MBPdOAblO6gGa/cFy02AiEAvtaeR0tAdsxOc0cEZSM/bKW89labTDZq GMjPcX+7cicAdgB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYkw 7XMjAAAEAwBHMEUCIAkaDoLeGuEWHzOg6juPJlCpZuTmkUJSYWh5OSn5LSV+AiEA qpLj4+2adHk2rgTo7dQwh037ZlP4tI0lrYe8P2IMmYkAdQA/F0tP1yJHWJQdZRyE vg0S7ZA3fx+FauvBvyiF7PhkbgAAAYkw7XQlAAAEAwBGMEQCIGCf4exUgMdAbEPN 7xImpozSWT0ceZgji/dfBVW09d4wAiB3wOKA1I67t60rPLwLP+mne6fEpah0jm21 XDYpzAvzugB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABiTDt c1oAAAQDAEcwRQIgRcNWN0+CO13FdTWWn28IIef5DQvC93OtCyE+41afwegCIQCm yKNI6iMBX3OSexvGGddLmpd1OOIesstOpL6sM1NwGDANBgkqhkiG9w0BAQsFAAOC AgEAkoSpXKWn9TGlDW8nGzNrBF65llLxWa6Ds2bZm9bLktxzxfsOBoCyrNP7/XpU q3gKQ77iv2Fp2PTqdaEuaKALb5b2AnR6fIJH5mzGO1UL2AeisCHsY9moNVEMNRaG qquO7IiRLgFC8WK/83pG9MNxUP9HGU3pHZDyCOxG9WaQHJ2BvYYCEbHnuX+I3xoC 86DL6NKuzU/AZSDjRldMbZc/TsEWcHpREu9aMGoy8JSbN2JTBoOOJza/o05wIf3P 3j07HKFGYweT+YA4R/RNXtPkXOlE88hGOBcJGiVYx4D0z4UdWIWaGiGb1guJx8lK 1ZFkHhkE+2Wb90HjGMsYoCHRWLuF1tyChbophZ7Y+24WzMZF5y21xvra3UjD/tlS N4nR+ZHLPeF6vg/QGlPbnJz0eb8E2bxutZ7H1z9DLpydf0v4PNn1wXBD8ALQuE9P vBQtLKE/lrE1UwnYwX1W+7Qa1jQqJwBi8J6Nc1amYQ5IIEtyIIvwCvFRu7m7X52k NTsY8hMp68jIH7NRO6ER9DPeEaofwhNoCz0wk93nFjw68nE8b9Iu3lLLSuBTs3Zc d4y1dDbLPJmT6FUb0heKLDSZlDA8cZ/Ukbz3bY/8ceRlbmxXT4phZTEmQCHzS/48 AJ2Hsd7j0vq/zPjaSKq44vQVEamu5/dOKGqEaJTS/RvEfQE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuD4OA/fPEGjmFQPN3J+Y 3wojBJod5Agt/+uDnwHjzmi+V+a5dhZh1XBd9D8bBG+DjT4csjDqGurEWPeYpFIs PBkzgfTOpkJL5idkUT6R16yLafG6UY49EbyDJeCR1WY1L6e2ZKWHpO0f9iv++nrX U8r7MeSttIHOOwbsYUt5AI9LsZ/U6WyBrHpPH6KhLeO1vw25dIsQ2n5ywkJda393 kkvEDXd/dEhZK77+yuzgbP6ko5mKFAwFNqvih+GTZRtSvMBpZgjDRRNahxBiP+GF skmUdcV3ti6D4bBiFBajICsJZXaRDnzypv+FeuzNFmpGAGgZF02B/zLoGaJYMNnz ug5pur/h46+TvpwL3d/fZcbPXAugmPwG4+1Zwqqh+vTLZvdCqxxki38+6WdsqIsx rNOhpxDigMvtbA5wsVuDqM/UIaMlzmHh1pj3SdsLx2TGOY/Uwd3+GhDC4KPRdWxR a8JCj3kzfDLp9PtPmFgLd+MZZkF9Eyze/tNRjYIQSmfi6AbU/T7RY2CpYAlCZpqD gwI9145X0H6Uz4rc4Fkw72qP3S/3QpvJuWGJGsJ+F8EgQ+UrTPMp8O33Hq0hO4YJ ybTF03l6YzERsjXafy2w/3H+i7fWJvlew16P9DmzUN8Jwfluvf27p+0iylwHxF2a NovNBElo6oGCp2m5X0aPbTMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 505074328842328228850564904478080736309673694562 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-07 15:06:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-07 15:01:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zürich' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zürich' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PrivaSphere AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.privasphere.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 751643419784305404891678440170354160801484565893953817887270057091968179881534013643408931992224379347221914412168238543980746005584381985227731787937184561503820454470056991331519235326943726613779819569733407283189801427556661921903012871549697025246247590491269931117048298624304666168325386866513162839351916099291632880097033682609591246083768955343449692369012315333328497939883566124391337744572390972146891698175357608230927069859991951679044224100800904407652858588239057737459431243461011173277304743856796350448162967609782703810456481117935551599431966248144563573294587328895063476872122915502775770779377808037573304071523442287561713546676149096916003088570496486653959063735853084708112291278485248188071106702631764401145634102285663811252693837978797042168986853774304284871774604647704285522563436952081760928487076505066893361619926467409612584228762358427674895864101254237673281705126497043897278745437592348247553657939743012778413527279113912071704254135691102139219506503026826464876581520536934584346235264379630760308369142883229295704247014324832959778478009867810356715405367277898542594108877478149378304902770894790089802972196109708446048082996746879103122771462301682241901566790309994441405337922867 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (503 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privasphere.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secmail.tg.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eeg.lu.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ees.lu.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erv.tg.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.holcim.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.ar.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.zg.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.bekb.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.ifrc.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secmail.ukb.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p4u.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p4u.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zh.p4u.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glb.p4u.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.lu.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zh.privasphere.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glb.privasphere.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrfy5210.privasphere.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'large.privasphere.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erv.sh.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jusphere.privasphere.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.bav.admin.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secmail.bvger.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.blw.admin.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secmail.ti.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec-data-exchange.oak-bv.admin.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e757c6f01ed1fda3b3c42ef98943935666f85cab . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes) 01e0007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018930ed73a3000004030048304602210084658b72862d9c75f6332d054d480d29b5f4c04f74e01b94eea019afdc172d36022100bed69e474b4076cc4e73470465233f6ca5bcf6569b4c366a18c8cf717fbb722700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018930ed732300000403004730450220091a0e82de1ae1161f33a0ea3b8f2650a966e4e69142526168793929f92d257e022100aa92e3e3ed9a747936ae04e8edd430874dfb6653f8b48d25ad87bc3f620c99890075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018930ed742500000403004630440220609fe1ec5480c7406c43cdef1226a68cd2593d1c7998238bf75f0555b4f5de30022077c0e280d48ebbb7ad2b3cbc0b3fe9a77ba7c4a5a8748e6db55c3629cc0bf3ba007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018930ed735a0000040300473045022045c356374f823b5dc57535969f6f0821e7f90d0bc2f773ad0b213ee3569fc1e8022100a6c8a348ea23015f73927b1bc619d74b9a977538e21eb2cb4ea4beac33537018 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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