OV SSL/TLS Certificate for xrp3.bcv.ch Issued to Banque Cantonale Vaudoise

Certificate is witin its validity period

Issued by DigiCert Ireland Limited (DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1)

About the xrp3.bcv.ch OV SSL/TLS Certificate

This certificate with serial number 0a:9e:e3:38:a0:da:bc:c2:8c:7d:0f:43:c2:cf:1c:a7 for xrp3.bcv.ch was issued on by DigiCert Ireland Limited.

This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for xrp3.bcv.ch provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DigiCert Ireland Limited

Organization: DigiCert Ireland Limited
Country: IE

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 0a:9e:e3:38:a0:da:bc:c2:8c:7d:0f:43:c2:cf:1c:a7
Serial Number (int): 14117271455036830016116624557431790759
Serial Number Length: 124 bits, 16 octets

Subject Key Identifier: 41:22:a9:a7:9b:ae:eb:68:90:64:3a:02:e5:aa:64:6d:da:9d:89:7b
Authority Key Identifier: 18:89:e7:af:f0:28:f6:7c:ca:68:05:52:e1:62:d8:91:d6:16:65:60

Fingerprint (SHA-1): 1d:50:1f:ae:ad:92:31:6f:34:00:63:f2:d5:86:6e:18:d3:b8:f0:ae
Fingerprint (SHA-256): 6e:08:cf:0c:26:b5:4e:cd:ee:00:e9:16:51:a8:c3:da:44:c7:a8:09:e6:31:80:9c:6f:f1:dd:08:53:31:cb:6a

Issuing Certificate URL: http://cacerts.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crt

Revocation Information

OCSP Server: http://ocsp.digicert.eu
CRL Distribution Point: http://crl.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crl

Check the revocation status for certificate xrp3.bcv.ch
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for xrp3.bcv.ch

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

xrp3.bcv.ch

X.509 Certificate

The complete raw X.509 certificate details for xrp3.bcv.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14117271455036830016116624557431790759
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Ireland Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-11-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lausanne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Banque Cantonale Vaudoise'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xrp3.bcv.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 815336537560569283930524565005870199439589009119394794612832047980078822780590864055431688562754686777358398455060264930486914818791883919623914484366764550939731077085342506646777439813968592624660606526505210468862087318934250456315730199654805347482176129434032845116270326359874630342868278622087902059922723586182997325092868261174142453983907705576646009453693893400192528752773028562103993581270744870268049350488921809927914343395309103520160899408281933006592554052414126110118446293195860164288095808030860760722771599544964663257531703510001054730176298574756482058342777464870170549775681159301353590943598546426557835955929856528654434093644030874046421685891973157698970719487504227555914271345045483253133507434734830237550263303351591505582850684308774916603283013299035082404997027970562549516784478215783495054778530714893242872829539259345886937663427129281467044347626722068859750031173216093054565833223932631190241828270118130356235359048931273754202673622911873189846543097602371978567772125891026977259038309757999062316667106868776721443718210838937781882401918975784810743688658997438941702026569488207715820708269531894780930447885275746797355604574662133934332191109847216693801696309108684203599218002359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1889e7aff028f67cca680552e162d891d6166560
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4122a9a79baeeb6890643a02e5aa646dda9d897b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xrp3.bcv.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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