kelimutu.switch.ch
- Switch - Teleinformatikdienste fuer Lehre und Forschung -
Issued by Cybertrust Educational CA
About this certificate
This digital certificate with serial number 01:00:00:00:00:01:11:46:bd:a6:d1 was issued on by Cybertrust.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
Switch - Teleinformatikdienste fuer Lehre und Forschung
Organization:
Switch - Teleinformatikdienste fuer Lehre und Forschung
Country:
CH
Cybertrust
Organization:
Cybertrust
Organization unit: Educational CA
Organization unit: Educational CA
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 01:00:00:00:00:01:11:46:bd:a6:d1Serial Number (int): 1208925819615802887612113
Serial Number lenght: 81 bits, 11 octets
SubjectKeyId: 11:c7:ac:b4:82:0e:9e:5b:39:79:f9:e1:77:42:bf:1c:fc:9b:3d:e9
AuthorityKeyId: 65:65:a3:3d:d7:3b:11:a3:0a:07:25:37:c9:42:4a:5b:76:77:50:e1
Fingerprint (sha1): 3c:d8:70:be:91:5e:ca:e1:3f:1f:92:e7:5a:6e:85:8b:84:a1:84:f0
Fingerprint (sha256): 00:94:0c:03:ae:86:dc:31:ed:c2:fa:f4:1f:7f:87:5f:b9:e9:c1:63:1c:8e:8c:06:fb:1b:a4:54:77:0f:3c:56
Issuing Certificate URL: http://secure.globalsign.net/cacert/educational.crt
Revocation information
CRL Distribution Point: http://crl.globalsign.net/educational.crlCheck the revocation status for certificate kelimutu.switch.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kelimutu.switch.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kelimutu.switch.ch
Other certificates including the domain name switch.ch
(limited to 100 certificates)
hsr.meet.switch.ch
point.switch.ch
wiki.smap.switch.ch
discourse.toolbox.switch.ch
collab-fms-test.switch.ch
kelimutu.switch.ch
tls.automattic.com
vico.switch.ch
zeus.switch.ch
parma.switch.ch
fl-0-51.zhdk.cloud.switch.ch
ssad.events.switch.ch
placement.api.s2.scloud.switch.ch
evct.ssl.switch.ch
unibas.meet.switch.ch
grafana.int.os-ls.kaas.switch.ch
*.s3-zh.lts.switch.ch
tls.automattic.com
zhaw.meet.switch.ch
neutron.api.s2.scloud.switch.ch
testsp.tw.switch.ch
portal-dev.switch.ch
landingpage.rpz.switch.ch
trust.aviareto.aero
mail.switch.ch
player.cast.switch.ch
test.toolbox.switch.ch
domain-pulse.at
intern.meet.switch.ch
zeus.switch.ch
influxdb.cast-test.switch.ch
glance.api.unil.cloud.switch.ch
producer.cast.switch.ch
filesender.switch.ch
staging.groupie.lard.switch.ch
unili.meet.switch.ch
backend.www.switch.ch
vcregister.switch.ch
kava-admin.cast.switch.ch
worker3.oc-test.switch.ch
alphubel.switch.ch
drive-backup.switch.ch
engines-admin.scloud.switch.ch
*.os.zhdk.cloud.switch.ch
www-test.switch.ch
monitor.switch.ch
wayf.switch.ch
teramac.switch.ch
tls.automattic.com
node21.webauthn.eduid.ch
forge.switch.ch
cast-ng.switch.ch
www.switch.ch
test.id.switch.ch
os.unil.cloud.switch.ch
wayf-test.switch.ch
aai-logon.switch.ch
tls.automattic.com
landingpage.mw.rpz.switch.ch
contracts-test.switch.ch
driveonlyoffice.switch.ch
portfolio.switch.ch
fl-6-178.zhdk.cloud.switch.ch
octavia.api.s1.scloud.switch.ch
cloud-id.switch.ch
portal-dev.switch.ch
status.dilercloud.com
player.cast.switch.ch
bonseyes.zhdk.cloud.switch.ch
cloud-id.switch.ch
tools.aai.switch.ch
download.cast.switch.ch
tools.switch.ch
www-dev.switch.ch
admin.oc-test.switch.ch
www-dev.switch.ch
wayf-test.switch.ch
test.idph.switch.ch
bfh.meet.switch.ch
urlanalyzer-staging-backend.misc01.k8s.cert.switch.ch
password.switch.ch
idp-monitor.aai.switch.ch
saqcnfbe.events.switch.ch
cr.gitlab.switch.ch
*.lts.switch.ch
kava-admin.cast.switch.ch
unibe.meet.switch.ch
domain-pulse.at
bonseyes.zhdk.cloud.switch.ch
wiki.smap.switch.ch
producer.cast.switch.ch
tls.automattic.com
switchnovember.events.switch.ch
*.sandstorm.cloud.switch.ch
portfolio.switch.ch
metadata-test.aai.switch.ch
kelimutu.switch.ch
presentation.cast.switch.ch
mirror.cloud.switch.ch
srp.switch.ch
point.switch.ch
wiki.smap.switch.ch
discourse.toolbox.switch.ch
collab-fms-test.switch.ch
kelimutu.switch.ch
tls.automattic.com
vico.switch.ch
zeus.switch.ch
parma.switch.ch
fl-0-51.zhdk.cloud.switch.ch
ssad.events.switch.ch
placement.api.s2.scloud.switch.ch
evct.ssl.switch.ch
unibas.meet.switch.ch
grafana.int.os-ls.kaas.switch.ch
*.s3-zh.lts.switch.ch
tls.automattic.com
zhaw.meet.switch.ch
neutron.api.s2.scloud.switch.ch
testsp.tw.switch.ch
portal-dev.switch.ch
landingpage.rpz.switch.ch
trust.aviareto.aero
mail.switch.ch
player.cast.switch.ch
test.toolbox.switch.ch
domain-pulse.at
intern.meet.switch.ch
zeus.switch.ch
influxdb.cast-test.switch.ch
glance.api.unil.cloud.switch.ch
producer.cast.switch.ch
filesender.switch.ch
staging.groupie.lard.switch.ch
unili.meet.switch.ch
backend.www.switch.ch
vcregister.switch.ch
kava-admin.cast.switch.ch
worker3.oc-test.switch.ch
alphubel.switch.ch
drive-backup.switch.ch
engines-admin.scloud.switch.ch
*.os.zhdk.cloud.switch.ch
www-test.switch.ch
monitor.switch.ch
wayf.switch.ch
teramac.switch.ch
tls.automattic.com
node21.webauthn.eduid.ch
forge.switch.ch
cast-ng.switch.ch
www.switch.ch
test.id.switch.ch
os.unil.cloud.switch.ch
wayf-test.switch.ch
aai-logon.switch.ch
tls.automattic.com
landingpage.mw.rpz.switch.ch
contracts-test.switch.ch
driveonlyoffice.switch.ch
portfolio.switch.ch
fl-6-178.zhdk.cloud.switch.ch
octavia.api.s1.scloud.switch.ch
cloud-id.switch.ch
portal-dev.switch.ch
status.dilercloud.com
player.cast.switch.ch
bonseyes.zhdk.cloud.switch.ch
cloud-id.switch.ch
tools.aai.switch.ch
download.cast.switch.ch
tools.switch.ch
www-dev.switch.ch
admin.oc-test.switch.ch
www-dev.switch.ch
wayf-test.switch.ch
test.idph.switch.ch
bfh.meet.switch.ch
urlanalyzer-staging-backend.misc01.k8s.cert.switch.ch
password.switch.ch
idp-monitor.aai.switch.ch
saqcnfbe.events.switch.ch
cr.gitlab.switch.ch
*.lts.switch.ch
kava-admin.cast.switch.ch
unibe.meet.switch.ch
domain-pulse.at
bonseyes.zhdk.cloud.switch.ch
wiki.smap.switch.ch
producer.cast.switch.ch
tls.automattic.com
switchnovember.events.switch.ch
*.sandstorm.cloud.switch.ch
portfolio.switch.ch
metadata-test.aai.switch.ch
kelimutu.switch.ch
presentation.cast.switch.ch
mirror.cloud.switch.ch
srp.switch.ch
Certificate
The complete raw certificate details for kelimutu.switch.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEwzCCA6ugAwIBAgILAQAAAAABEUa9ptEwDQYJKoZIhvcNAQEFBQAwXzELMAkG A1UEBhMCQkUxEzARBgNVBAoTCkN5YmVydHJ1c3QxFzAVBgNVBAsTDkVkdWNhdGlv bmFsIENBMSIwIAYDVQQDExlDeWJlcnRydXN0IEVkdWNhdGlvbmFsIENBMB4XDTA3 MDMxMjE1MjE0NVoXDTEwMDMxMjE1MjE0NVowbDELMAkGA1UEBhMCQ0gxQDA+BgNV BAoTN1N3aXRjaCAtIFRlbGVpbmZvcm1hdGlrZGllbnN0ZSBmdWVyIExlaHJlIHVu ZCBGb3JzY2h1bmcxGzAZBgNVBAMTEmtlbGltdXR1LnN3aXRjaC5jaDCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAOi6ysqhVW4gEQxxXGV5/e6SJExAI6AE PEW6dgkBV2EGzAwl1mUOGlEbmrqKYbLRS2Eu6eY/+pYyaQsinYUnC/EZHRbn5pSG 68T2wnIu01SJDMztgO1ut4ixdOIy4yDAJwhx8L199E2ymIU3c70bENpcnbGJSta8 ca+WhqRPe4HPltUMoe7tAVGT4At+lFD2wjeNtcfKb/kAI/TqX+nqJGfLOyGAjLnF Es9Fibf0JSwU7QxoWqgBz3QFun//bjMRw2xJGZy9JGmcelYo2ToaeLfcYSNX8O5i M5VkFlokWpkKN2ViWDZmh2j9RYTJrHyZ5aTNA2Dg7TZL1Cley+bC8f8CAwEAAaOC AXEwggFtMFAGA1UdIARJMEcwRQYHKoZIsT4BADA6MDgGCCsGAQUFBwIBFixodHRw Oi8vd3d3Lmdsb2JhbHNpZ24ubmV0L3JlcG9zaXRvcnkvY3BzLmNmbTAOBgNVHQ8B Af8EBAMCBaAwHwYDVR0jBBgwFoAUZWWjPdc7EaMKByU3yUJKW3Z3UOEwHQYDVR0O BBYEFBHHrLSCDp5bOXn54XdCvxz8mz3pMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6 Ly9jcmwuZ2xvYmFsc2lnbi5uZXQvZWR1Y2F0aW9uYWwuY3JsME8GCCsGAQUFBwEB BEMwQTA/BggrBgEFBQcwAoYzaHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLm5ldC9j YWNlcnQvZWR1Y2F0aW9uYWwuY3J0MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjAdBgNVHREEFjAUghJrZWxpbXV0dS5zd2l0Y2guY2gwDQYJKoZIhvcNAQEF BQADggEBAC59awUh4rDXlQNrQh03WpOzArlGU4ly+pzIfTDPGGHoUoiBj6XwWw0J iqpufaWFVTFI+QSEa6yCy4cJ8c+/MPzedDopJBH1MGKs7ui6YXoD8m8W9IscxsqC L2jesqf9gLpVcMjav5LNHj9kFHwx+TB9hsE9ezcILSb5ufegga6urw8u3+bBEnDm LT/4PgTZPDvcHThZ/s/yOD837asbr/lhABEvQaBM7lSN9vo6nb5BV6zSyxT1kZ6i 4zSQp+BlRICH7/mOIaZ/6e6ZTYE/H2ovixDd4hRlmEqc0h8+5XyD04lRdGbp1Wiu bIUbAKwUnIY2ai3xroNKb7HIvfNgplY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LrKyqFVbiARDHFcZXn9 7pIkTEAjoAQ8Rbp2CQFXYQbMDCXWZQ4aURuauophstFLYS7p5j/6ljJpCyKdhScL 8RkdFufmlIbrxPbCci7TVIkMzO2A7W63iLF04jLjIMAnCHHwvX30TbKYhTdzvRsQ 2lydsYlK1rxxr5aGpE97gc+W1Qyh7u0BUZPgC36UUPbCN421x8pv+QAj9Opf6eok Z8s7IYCMucUSz0WJt/QlLBTtDGhaqAHPdAW6f/9uMxHDbEkZnL0kaZx6VijZOhp4 t9xhI1fw7mIzlWQWWiRamQo3ZWJYNmaHaP1FhMmsfJnlpM0DYODtNkvUKV7L5sLx /wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1208925819615802887612113 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Educational CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Educational CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2007-03-12 15:21:45 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-03-12 15:21:45 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Switch - Teleinformatikdienste fuer Lehre und Forschung' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kelimutu.switch.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29379397396466840963672422588408407126385526653011050405244709164769084928256671928551635373462454987625071630465341798252582530290081953674085535521155284849712279428542087842265317901506181153161499316781840220093443990658358758816517439807826923693999666815228420108502900609136292319052928141483448520033710980520952961681903892342289489514471688563450175429614890955589481335744656824557807219476328838255778087140638430843680102962343895879356540553671691789250868818269201009532197927580270693619010937725604010677582017955003818887417800302845703886815815949758865730605081646170465458792816914394412656816639 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.6334.1.0 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.globalsign.net/repository/cps.cfm' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6565a33dd73b11a30a072537c9424a5b767750e1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 11c7acb4820e9e5b3979f9e17742bf1cfc9b3de9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.net/educational.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.net/cacert/educational.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kelimutu.switch.ch' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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