privat.bhf-bank.ch

- BHF-BANK (Schweiz) AG -

Issued by QuoVadis Global SSL ICA

About this certificate

This digital certificate with serial number 4e:a3:a8:be:8f:2c:01:51:50:64:99:be:a1:9a:5f:14:75:10:39:76 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BHF-BANK (Schweiz) AG

Organization: BHF-BANK (Schweiz) AG
State / Province: ZH
Locality: Z�rich
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Organization unit: www.quovadisglobal.com
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 4e:a3:a8:be:8f:2c:01:51:50:64:99:be:a1:9a:5f:14:75:10:39:76
Serial Number (int): 448951001299614316345789924357224569286949878134
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 4f:f4:2b:1e:29:8e:94:f0:8c:13:04:b8:c0:60:d3:98:a8:15:11:fc
AuthorityKeyId: 32:4d:a1:4f:ea:f0:ae:99:b6:ee:9b:07:2c:84:08:11:50:8b:e2:7e

Fingerprint (sha1): 8d:76:69:23:35:1d:4a:29:58:4d:ab:d4:fa:55:dc:04:bf:5b:51:ea
Fingerprint (sha256): 66:07:6d:f9:7b:ff:13:e5:a6:15:7c:fb:72:ee:01:91:cb:0c:e0:b2:62:d2:80:2b:ed:ea:1b:ac:2a:b9:8a:0f

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslica.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslica.crl

Check the revocation status for certificate privat.bhf-bank.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for privat.bhf-bank.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

privat.bhf-bank.ch

Other certificates including the domain name bhf-bank.ch

(limited to 100 certificates)
privat.bhf-bank.ch
securegw.bhf-bank.ch
webmail.oddo-bhf.ch
privat.bhf-bank.ch
*.bhf-bank.ch
privat.bhf-bank.ch
privat.bhf-bank.ch
privat.bhf-bank.ch
securegw.bhf-bank.ch
*.bhf-bank.ch
www.bhf-bank.ch
privat.bhf-bank.ch
privat.bhf-bank.ch
privat.bhf-bank.ch
webmail.oddo-bhf.ch
secure.bhf-bank.ch
www.bhf-bank.ch
secure.bhf-bank.ch
securegw.bhf-bank.ch
www.bhf-bank.ch
webmail.bhf-bank.ch
www.bhf-bank.ch
privat.bhf-bank.ch
webmail.bhf-bank.ch
www.bhf-bank.ch
secure.bhf-bank.ch
secure.bhf-bank.ch
webmail.bhf-bank.ch
privat.bhf-bank.ch
www.bhf-bank.ch
privat.bhf-bank.ch
www.bhf-bank.ch
securegw.bhf-bank.ch

Certificate

The complete raw certificate details for privat.bhf-bank.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdj+sIt7pV7uz2kYmt7L
LMbksqeJSb3RlDHBmsO4LhknXmGFBkEb68IHiiEADc5h6Deau1cR7eto9OmXU7Ww
KhsEWEApJ2CKFdngSegR+dbanGlnboQM/x2HKgSF3s4Wwt2hgKYch524Y1s5Tc9l
13PM9PF2CECsCLtYwx3qNUhBKJU9nuTp/HCFcRPID2hayzg3T++yxn05JJdro5kE
/WLJK7ossRFbyAeqc+ytFhQ0/mpV+3rVF2uJM5bxZC6PiZkz/jrJpBLUN7DXOWKz
vQKiydBqvcJYM6bvZlgeMxAwI5h6VDe6hyIV1qkE4TXSFiJ2BTy1qEVKmQsb1kgB
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 448951001299614316345789924357224569286949878134
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.quovadisglobal.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-04 09:20:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-04 09:20:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Z�rich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BHF-BANK (Schweiz) AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'privat.bhf-bank.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24975950242412325607868024830828255549809188511567134713980563794320144993739971876025552445765829684909201174004146056217934275398554061840821811452582412087668367879509166059626513481788767508188711007095036809802960519255205971868067681617759921569906175873303285012591549541232474891751787677726914129829191498796876109230170985155975481662767552304525540580262800613090083353190517229466478518736858328222060060744355420447154182179509270847460309606127997873126117438702985060125478870206424814726721657751857900968291393601692689154372963029653469537016610168587075331270682636976016795157989098896016376594701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslica.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privat.bhf-bank.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 324da14feaf0ae99b6ee9b072c840811508be27e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslica.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ff42b1e298e94f08c1304b8c060d398a81511fc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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