abacus.bkwengineering.com

- BKW Energie AG -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 48:e1:83:94:3d:b4:d0:75:6d:4c:69:41:e4:8a:d1:cf:1d:4d:de:fd was issued on by QuoVadis Limited.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BKW Energie AG

Organization: BKW Energie AG
State / Province: Bern
Locality: Bern
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 48:e1:83:94:3d:b4:d0:75:6d:4c:69:41:e4:8a:d1:cf:1d:4d:de:fd
Serial Number (int): 416076465322254950064970148556525207873842437885
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 0c:b1:94:93:1d:e0:58:9e:9c:f5:d7:6b:4a:2d:4c:83:fc:e2:d2:99
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 94:f9:b0:1a:6a:28:8a:1f:99:b9:eb:b4:58:fe:b1:1b:c8:f3:f2:9d
Fingerprint (sha256): 63:55:a2:22:f2:f5:76:ed:8e:59:da:71:37:fc:16:82:88:72:98:c9:5d:37:46:fe:3a:b8:e2:4d:58:5d:45:38

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate abacus.bkwengineering.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for abacus.bkwengineering.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abacus.bkwengineering.com
abacus-q.bkwengineering.com
abacus-t.bkwengineering.com

Other certificates including the domain name bkwengineering.com

(limited to 100 certificates)
www.bkwengineering.com
*.bkwengineering.com
bkw-engineering.com
abacus.bkwengineering.com
*.bkwengineering.com
bkw-engineering.com
bkwengineering.com

Certificate

The complete raw certificate details for abacus.bkwengineering.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAkUNjhf4739PwszYnuF8Z
iq3nsYeSEegxfocFkkZwCor1tgVtCjLsBGq2siVc9GA4u8izXXXFWbkMGJ87Ez4Q
/PEuIgE9Wrf+J6fEajMgd3gIa2SA+oIqYTFtadA4bG11JP3hRzjF4ISNt2l4POsr
J38bLyOTguIsGeTkZ892iXlZUwvhUN7eVLY6cGJU7NorlYB38qRM9RFkFdc1UMpr
feQWTvITLlZ0RyP0WXcHWWpoATMl5u5c+M+cZz4AsNXZdDCflgJmxAIhiLgxUEom
hkb3Nj9leic8IbauOXF/YSJbusOQdAcT28X0UV4C2ZY+DjYXBz3jlafnEchH0TbZ
R2YxY0Vw657ivbnnElXYz5hHuqFn1BVZV6fCeu5mciwbZmNvo+cL+zbWBqgdbzII
LLi8NzQ/vTCW62X2LtEvZH6uz+Bvdu03qUpLF0W0AgaDWtJPcQHEkSOUe1A8D4GP
l/aTHRLwmyp46DMIQnEACrm/n7UJ28k5GA4J5zQ/lxQK7DhOR8nukD8Q+qkFPDHA
SvTccoUM2Gp64q/AN4b4MkGVaeAo/QYTJNHo620JB09yI/jWaMSyj0GAQrCiu8eU
9TofERikHtyGo8cAtUVoE3VOyLQgfSUjTyP24NvQeqaK3IW4RK88YRiz9BdcKE15
8z8gt7HlPStyPUrVPCgVryECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 416076465322254950064970148556525207873842437885
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-21 14:53:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 14:48:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BKW Energie AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'abacus.bkwengineering.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 592622304583776651635231028351343876507122441467317551477361369159597195066421263054124794591418907305977475318314842572768396226968835940872383432219096495310497361728907852355061497457066525779591721189665877670309861079021755891290890955078201506600755422209528393349192680943932008702347258995927144074104352839938546612647985806649859269131019119253725895879955648762682499868144731698671672978800639542341041710301954714390932417501407910204343226442023709650973019068507921251039163422429038187259063355330573176040638581035916328510084227973755533206072075558293964910817588164158776180500799158171295633579625532369237562637201356422185317330890879046930800028821048357281163517409756149831393017099033016476555338196005271059600658112898210203141131054164553179684632139199659946794445422311730681407225657641118932233130060914021073120484957633374967165376545093202874528641216139195294699864810290483462911587128374272979940415677295232282045904154387589682171919514602873737516890213346995855620240500730310766399420767678715974105141189693093058591107951016136806259943755145749929651781863549519027362452991273795003910967489217185751653824573915983435695408646452214747999786100421732465416072434277239894952004398881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abacus.bkwengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abacus-q.bkwengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abacus-t.bkwengineering.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0cb194931de0589e9cf5d76b4a2d4c83fce2d299
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		006f6e7f3dfccef5d1463a791847799500087ded9b07933ed686994f031286ccf1a775ac9a65649750abe3fa21fba79031e8b73c1505b7bf7a4cde111403eae72809bd10925bc0bcbdd863a3aa5bfc3e06b6e0f544d5f79a4a6264ec863d1043482d69bf910013cfeb5b98b552be133e73b556f8718a0575269f6beb5b9510b9ec201d8cec8e1e5b9e07829d17bd0113c0d7b8606e1300978c0719890ce292377d2a7471b2fcee6fe1fa24731031d031f5b578d0a1758286602e362cea69a39353fa92b8feed313d1fa231a6768095fe83a4ce335aa6f9010d0205a54f011ca0b3bc05f695e592c6beab5d9fd83f97150202e1efb6faee740079b2e8b368ec3c7a697a4983cb668aebeed75c1ade1ddc72f8cd7c0cf6486a57340ea101390a405f9fbdd9c25ce9ecdb9ffbbfc5ba74f90e6fe78925d7c4fcd87b455f3ba1bd55417e5082605dde87799b2d32905560d7bc4833468448bd3ee71b8edee4696a3eb9960cae6c5dc72e01cd3e42fcc04b5ec0c6f20d5d8ac0d48779dc7f1514c5192cd4f98eb1fb1e650c602137aa557be543a7fe62949a7a84d19b1173302ed8eecd0bb88f58ea4372d92bc7eee7cac94217355f67f105486048689c3234dd4f6d09b69f7be1cad5d1c69826516dd81d4a3a91a7b0dfeef74be774f23ea15665944f929022b536d6923347ddd5064eded33afc08ba9ceb84de80b9b8b73d0dd97a34