www.migros-city.ch

- Migros Genossenschafts Bund -

Issued by QuoVadis Global SSL ICA G2

About this certificate

This digital certificate with serial number 3d:2d:36:51:e4:9b:f5:77:d1:49:8c:41:fb:85:f9:bd:a2:4f:bc:55 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Migros Genossenschafts Bund

Organization: Migros Genossenschafts Bund
Organization unit: MITS
State / Province: Zuerich
Locality: Zuerich
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 3d:2d:36:51:e4:9b:f5:77:d1:49:8c:41:fb:85:f9:bd:a2:4f:bc:55
Serial Number (int): 349256702484373892404234574239025726368355695701
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 6d:af:f6:12:7f:c1:07:6c:1a:00:36:d4:a3:a2:09:e5:16:5b:e1:a9
AuthorityKeyId: 91:19:62:ad:5b:17:a7:30:fb:f0:de:39:25:b1:bd:8c:b9:b8:51:27

Fingerprint (sha1): 68:0c:b5:3e:57:d3:16:f6:a1:75:5a:c9:16:dd:e2:34:c5:5c:e4:33
Fingerprint (sha256): bd:30:96:f0:93:35:3a:a0:8a:7e:f2:eb:15:f6:5f:de:a0:70:67:48:7b:77:aa:21:b3:e5:59:f6:e7:15:d4:b2

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg2.crl

Check the revocation status for certificate www.migros-city.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.migros-city.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.migros-city.ch

Other certificates including the domain name migros-city.ch

(limited to 100 certificates)
admin.migros-city.ch
migros-city.ch
migros-city.ch
migros-city.ch
migros-city.ch
migros-city.ch
www.migros-city.ch
migros-city.ch
www.migros-city.ch
admin.migros-city.ch
migros-city.ch
admin.migros-city.ch
admin.migros-city.ch
migros-city.ch
migros-city.ch
migros-city.ch

Certificate

The complete raw certificate details for www.migros-city.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51KPBoFE+0lZd2hsNvrw
Agvh5s0r08lpEq1jkPIM0HIxiM6Lm7A/LsPDPs83Z8eGoKTUs69PWJzbfUtjUFml
drxng8C09Kh6wK+jaQrdGEihvkKA87FuYG737zqLSYPJZqnSYNpC0/tyKiu4wyjk
qGI8sCatQTviMdKcjIBSyHag+QUW2BsKv5fIZJS+IzhMJzKiDMbDr9dBtlL3t/Rr
Dlf0jMrk/iO2sYauL9qenVGx8PCjESiEtN/Ys5KWrVfI9e915BbzXTb+rEhf7S+W
Iu12IBXSD4Ju5E9AJ4JuJhYa1I/SnmlxmlbLvk7V1ZMaGdadFc2dXBWcrVuYK9x6
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 349256702484373892404234574239025726368355695701
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-04 08:49:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-04 08:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuerich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuerich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Migros Genossenschafts Bund'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MITS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.migros-city.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29201759656009218242443518844410640515808410768928694756966144196018103730638268019906453018238782542495385366695582833571319820989418029801622146569822297943532040648292687358784527196229220171908461645386542998212679738582640638644482261733600272426895297890532181940456354667742135268833826172573095471552693404992937190128398969775532016889494091790338529510363000729085883381285660211592037828229783142843857523437455914011915469982864201464520868551677584796731757486174693008813145743524983693795779647322223722991273586002941493665382027031581591271367027090990628187898938553292972389257244414374006354639443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 911962ad5b17a730fbf0de3925b1bd8cb9b85127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.migros-city.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6daff6127fc1076c1a0036d4a3a209e5165be1a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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