i-world.mitreva.ch

- Migros Genossenschafts Bund -

Issued by QuoVadis Global SSL ICA G2

About this certificate

This digital certificate with serial number 12:ea:b9:e5:e2:ca:75:62:6a:df:6f:3c:94:0d:60:dd:9e:ca:55:f8 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Migros Genossenschafts Bund

Organization: Migros Genossenschafts Bund
Organization unit: MITS
State / Province: Zuerich
Locality: Zuerich
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 12:ea:b9:e5:e2:ca:75:62:6a:df:6f:3c:94:0d:60:dd:9e:ca:55:f8
Serial Number (int): 107996402250301429644027809309913850848196843000
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 4f:ff:6c:ad:f8:c3:ea:90:b8:23:65:86:3c:b2:07:91:00:dc:37:c2
AuthorityKeyId: 91:19:62:ad:5b:17:a7:30:fb:f0:de:39:25:b1:bd:8c:b9:b8:51:27

Fingerprint (sha1): 5f:65:7a:30:d2:ca:46:8d:de:c7:83:e4:97:a7:1b:79:71:09:d2:6a
Fingerprint (sha256): 58:64:76:67:09:0b:89:22:8d:c9:95:e0:cc:2f:df:0e:c1:d3:ce:47:6a:31:a3:69:98:4b:a2:10:a4:21:c9:2e

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg2.crl

Check the revocation status for certificate i-world.mitreva.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for i-world.mitreva.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

i-world.mitreva.ch

Other certificates including the domain name mitreva.ch

(limited to 100 certificates)
www.mitreva.ch
i-world.mitreva.ch
sip.m-workplace.net
www.mitreva.ch
sip.m-workplace.net
auditmanager-test.mitreva.ch
mitreva.ch
auditmanager-test.mitreva.ch
admin.mitreva.ch
auditmanager-test.mitreva.ch
sip.m-workplace.net
i-world.mitreva.ch
sip.m-workplace.net
i-world.mitreva.ch
sip.m-workplace.net
auditmanager.mitreva.ch
www.mitreva.ch
auditmanager.mitreva.ch
auditmanager.mitreva.ch
am-test.mitreva.ch
auditmanager.mitreva.ch
sip.migros.ch
auditmanager.mitreva.ch
auditmanager.mitreva.ch
i-world.mitreva.ch
lyncdiscover.m-workplace.net
sip.m-workplace.net
auditmanager.mitreva.ch
lync.m-workplace.net
i-world.mitreva.ch
i-world.mitreva.ch
admin.mitreva.ch
mitreva.ch
am.mitreva.ch
sip.m-workplace.net
sip.m-workplace.net

Certificate

The complete raw certificate details for i-world.mitreva.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6r1PVdDs3171jwvd5NJg
HwPlaVfWrzUzDVeOOK0+eqK/U2X7+8QF2Z+dY42NKoxDgsNGD4+EnaCh2SML38DT
nBpwGtwgIH1BtFFL75c2BpNJgeyfrFsJhXKdSxGxZCB8cfLWJvZxES+nlVsCLDek
K9vtHJ0rcEn9wRe5yf9i4gTHD1JI9OHrQIqN2FEWZ/7OHvbv1GACTX1pEwrq/38f
Z7U5TEqc3ObRcCk7b0aD2ipIHnDwbpvIDCpjHz7CJeiK94gPxsdFjWjvwX9P+DKe
PxGTqi8Z1Cc2Hrl1bIrQlBTACprwBIDiPDliASIkHzpKxr/2i//79yWcRz0hqBiE
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 107996402250301429644027809309913850848196843000
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-17 14:34:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-17 14:44:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuerich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuerich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Migros Genossenschafts Bund'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MITS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'i-world.mitreva.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29633115554609495240782774430825909046981688462191661429020598908056792904813231108177812458851390490717410612335272597973685610113648972198053949517302457031049840900299346276458197774039006607870216989822131671669563401124696623658788002066986915886790056996834781074580694195305789366209389452916743351443124976292198752633461526175899436742124588739865268111652440632228494887754662050716268686362692768168477775739356177942607570699601635792421892986147622738611681082582456264556054472021561939963754416008385269537428745401183708749998581160211763605567309588914040544394974762976057986664360836514764618761271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 911962ad5b17a730fbf0de3925b1bd8cb9b85127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-world.mitreva.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4fff6cadf8c3ea90b82365863cb2079100dc37c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a151f18ea5202da02440a2ff9a761e8b5ab0d511cc03239a56e762a911ec268a36355a9e5e6a63adeca9bb3f946f7c7f83523304c718f2089d296863ecf7eadfc09aa7242eefdffc12aa08c585f68fb12177af6bbbb30842232c16705d9a1a5603ba4983bba588632d0dbbd3e9367ab6d99ec44048718cc33131d6881ee1ffc8f08d14de4f33306596efcf8919e44d3a5d143752f58679e22eda204e7669d1f2329958bc3142e8735ae89b4d9e5c0fa5805ef32f3bd9d48d8e0b531c734bfc9a0411ef707381f2e5a9a2f7ceb5901b293ebb8c30e07a7edc10bd3da700b5ee5e3b510c396d0515670d60e35b4112f44de62eb9c3fe895b2fe082ce1719b589b3