www.golfparks.ch

- Migros Genossenschafts Bund -

Issued by QuoVadis Global SSL ICA G2

About this certificate

This digital certificate with serial number 0a:7a:ad:a6:08:16:e7:3d:45:c8:c2:9e:bc:90:fb:3a:01:99:4e:c4 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Migros Genossenschafts Bund

Organization: Migros Genossenschafts Bund
Organization unit: M-KSFA
State / Province: Zuerich
Locality: Zuerich
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:7a:ad:a6:08:16:e7:3d:45:c8:c2:9e:bc:90:fb:3a:01:99:4e:c4
Serial Number (int): 59825725545550979252354217267958942042387205828
Serial Number lenght: 156 bits, 20 octets

SubjectKeyId: 63:a0:4d:b1:d3:a6:8d:90:a4:c3:09:9c:f0:a7:ca:5c:18:7f:d1:bc
AuthorityKeyId: 91:19:62:ad:5b:17:a7:30:fb:f0:de:39:25:b1:bd:8c:b9:b8:51:27

Fingerprint (sha1): 2a:4e:fe:af:28:fa:1b:6c:06:10:f3:66:00:5a:a2:99:f7:50:ab:13
Fingerprint (sha256): c6:45:13:45:c5:02:a6:c3:7a:a8:76:fd:36:ec:ad:83:d9:24:fe:ee:26:fe:7c:99:aa:8a:a2:e5:14:14:48:cb

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg2.crl

Check the revocation status for certificate www.golfparks.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.golfparks.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.golfparks.ch

Other certificates including the domain name golfparks.ch

(limited to 100 certificates)
azq.golfparks.ch
admin.golfparks.ch
azqadmin.golfparks.ch
moom.golfparks.ch
alpyou.golfparks.ch
rainbird-holz.golfparks.ch
www.golfparks.ch
moom.golfparks.ch
azq.golfparks.ch
www.golfparks.ch
moom.golfparks.ch
alpyou.golfparks.ch
moom.golfparks.ch
moom.golfparks.ch
moom.golfparks.ch
golfparkmigros.alpyou.com
www.golfparks.ch
azqadmin.golfparks.ch
alpyou.golfparks.ch
www.golfparks.ch
www.golfparks.ch
admin.golfparks.ch
www.golfparks.ch
www.golfparks.ch
www.golfparks.ch
azqadmin.golfparks.ch
azq.golfparks.ch
www.golfparks.ch
www.golfparks.ch
www.golfparks.ch
admin.golfparks.ch
admin.golfparks.ch

Certificate

The complete raw certificate details for www.golfparks.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17RavOs6X17EIfwOV6T5
+KF2If/79BIfzeVGNRseJL3SEFeDbSWKkxIzWbz5OzGAsDHmHgw8yUFuOfH1IsBq
nuUPjCKvy6jKcQKyTItd3HU2DNhZqcLZmKk+oHWKMj1nvyQoaPuWw3TR1SDgrnJ9
GBrjdHXvrh29e7BP/+QR6iUZJDV+6bSrW2a3/HWW/biMaZd7vYuARughZj1Lfffj
QmthW55+Tq7Q06lWh721Essf2OweZy53DHqLHeQePXpEIcgV7FD6W6QNC0944B3V
T4JmKJGfAflgDhZ7l82n7exfCp7lKIzEVcnJFDna/SB05L9DYPARrpM6+PXHiVMm
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 59825725545550979252354217267958942042387205828
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-16 11:13:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-16 11:23:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuerich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuerich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Migros Genossenschafts Bund'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'M-KSFA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.golfparks.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27230171659310950582134035335995621314977490662841964691439625556292707749185763346211576254226552903170956359917785850204157055583236643766207595744993891166570407236567592805286039400270245112034923168669994908857960962263063503175195227168017283500542865170517950873781236192586753844614636399168565650526359901708846039939806643722407711465072173200738023861082000287565343108052187693193118189417508467618779551863992624968859817322804323147080501189327622264121795437857859538716978563301360462646785296152518771856577081712310362256354642448352678704215083305039256139945503719272434430647014734101647050614499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 911962ad5b17a730fbf0de3925b1bd8cb9b85127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.golfparks.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							63a04db1d3a68d90a4c3099cf0a7ca5c187fd1bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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