www.dailies.com

- Novartis International AG -

Issued by QuoVadis Global SSL ICA G2

About this certificate

This digital certificate with serial number 39:21:4b:8a:c5:fa:25:aa:5a:10:29:3f:53:f0:49:bf:aa:7d:0c:b6 was issued on by QuoVadis Limited.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Novartis International AG

Organization: Novartis International AG
State / Province: Basel-Stadt
Locality: Basel
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 39:21:4b:8a:c5:fa:25:aa:5a:10:29:3f:53:f0:49:bf:aa:7d:0c:b6
Serial Number (int): 326154979172078633883044619363820474405226351798
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 81:6f:5e:9e:3d:90:b0:b8:cc:9d:64:8d:88:1d:c4:a9:43:b2:0c:cf
AuthorityKeyId: 91:19:62:ad:5b:17:a7:30:fb:f0:de:39:25:b1:bd:8c:b9:b8:51:27

Fingerprint (sha1): 1f:95:aa:c6:b6:bd:22:8e:c3:bf:37:e6:6a:1c:8a:65:ae:81:f0:84
Fingerprint (sha256): e4:c5:57:8d:7d:e3:c3:ba:e8:34:4c:f0:03:f8:d8:5e:81:7a:c9:a2:6f:0f:2b:71:b8:bc:75:eb:67:f9:9f:a2

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg2.crl

Check the revocation status for certificate www.dailies.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dailies.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.dailies.com
dailies.com
www.dailiestotal1.dailies.com
dailiestotal1.dailies.com
www.dailiestotal1.com
dailiestotal1.com

Other certificates including the domain name dailies.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.dailies.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui6DQI3334867VEKQsGH
LXqGX0H+K+A4rx3Nabrmz3He6ki/gfhv2+rmewq06ThHaBRzh8pg70RjvigevcKQ
55AvNzBPsweNTQonzxAhv/nofIdnWZGZhp9bT/udI93e/rNmLl858mCrk4koc7N/
pGH0pq4MK5VuYYjgzeljLg0vknCk64R/hB65kZEGv/IkqhlOzkHJIeRf7VxHmkhz
QvYweZINkt+gVlBr4qAfKyxMihxR1rNGIghYiig6p1VPJMLxa5RZpdn6gUs4RYgY
1XOtAfGCkIYtP0Stt5w4e5czCv/rnvUJ9mRae7i3QaSlme66J1bNbmLDT36y6T1r
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326154979172078633883044619363820474405226351798
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-26 15:56:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-26 16:06:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel-Stadt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Novartis International AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.dailies.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23503260992764548908632699407048914674410112240595265765757500093615624682884401998275858179026610819157762575638857462755624017797398837894691193073640043996598642496937964951687287450665222657005810654787686937912747411558330167967294133382377962567148437095809558838384377749891212773268570831884575449981506284337377538661973785969752425810242098225443240062482031528218228620123207096760767260418102842290428429573680310364951732439623298793464652674851935512914313836084916396469761313935513867009905321629430480246724812493012278280738142082370018778686047099543653486842400454393024218493261286920936927095697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 911962ad5b17a730fbf0de3925b1bd8cb9b85127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dailies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dailiestotal1.dailies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailiestotal1.dailies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dailiestotal1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailiestotal1.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							816f5e9e3d90b0b8cc9d648d881dc4a943b20ccf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							01670075005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd00000166b1207fdb000004030046304402206bfa99394de7ec2eae2463432b65cc48e8164d423c32e1741b699e6ddc7479a002207dc0412dee7070391579ae9deb14cff101f657bf3da2698c348dbb4bbfe594410077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000166b12080aa00000403004830460221008f6b0b89b44aff4af5962a14ec0a63b1bad669a4ee628bbf081405a515638383022100928b2ba8591f9f35c6a2f13ca1e5e833eefc497c7249124c07f76365f13cdab8007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000166b1207fd80000040300463044022065eb818b5af20af641a107948b60ec9cf94889dddafd5c8a3dffb4f26d6f7bfb02203c14716a45a9eb1d79ca88a5c069b3269d8d01eda51ef7343d5d02ad81642866
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00dbc6f4509b94b793e06a1ab394cbed0a0d9f6a9ace73c5ead524d67342557cdf6445dc28485c7bdf2bd53b346ec278e9e73187308d9b039bf35f07b5809d118ea7af0bfab150ec4e4cc6383906f0b6de225fbb5f14f1a10aae4e70782c9dab41bf126382f8dd48008fc2509c7d3f5b8303724cbbefd768dd0a23a386032001b57a551c5d0e900a98b097d9f9aa788ab0eba7604a358e2ec3aadb8ffc934e463177bb13a0809abf831f58901d82cb8b117a5f0fa8924abc4fc09883e19e29bcb0c6f952874bd9425222792c92691245c91580b837fbd32ba77733452b26cb034705fc3dc8fa22bf51a45e93e7105e50f95eae2f5e668603f86821924f8eef223b