ws.quattrop-r.admin.ch

- Swiss Government PKI -

Issued by Swiss Government SSL CA 01

About this certificate

This digital certificate with serial number 50:db:8e:7a:d7:3b:b4:45:a5:e8:86:14:c7:fd:96:82 was issued on by Swiss Government PKI.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)

Swiss Government PKI

Organization: Swiss Government PKI
Organization unit: Servers
Organization unit: SSL
Country: CH

Swiss Government PKI

Organization: Swiss Government PKI
Organization unit: Services
Organization unit: Certification Authorities
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 50:db:8e:7a:d7:3b:b4:45:a5:e8:86:14:c7:fd:96:82
Serial Number (int): 107478242509423397406095793594472175234
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 8c:a5:07:07:e8:ce:f0:d9:ee:56:fb:d8:c4:03:cc:23:21:65:f3:a0
AuthorityKeyId: fc:35:5e:58:1d:f8:52:e0:2b:e8:ac:ab:b9:82:ad:15:11:d6:e6:cd

Fingerprint (sha1): d9:4d:10:8d:d5:54:1a:2c:eb:e6:9d:80:ea:62:ba:b1:db:3c:7a:21
Fingerprint (sha256): 01:df:96:ad:f2:47:55:f8:6e:b1:29:29:cc:ae:10:6b:1b:e2:60:8b:17:d2:52:fe:3e:53:cc:ca:7f:fc:f7:e6

Issuing Certificate URL: http://www.pki.admin.ch/aia/SSLCA01.crt

Revocation information

OCSP Server: http://www.pki.admin.ch/aia/ocsp
CRL Distribution Point: http://www.pki.admin.ch/crl/SSLCA01.crl
CRL Distribution Point: ldap://www.pki.admin.ch:389/cn=Swiss%20Government%20SSL%20CA%2001,ou=Certification%20Authorities,ou=Services,o=Admin,c=CH

Check the revocation status for certificate ws.quattrop-r.admin.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ws.quattrop-r.admin.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ws.quattrop-r.admin.ch

Other certificates including the domain name admin.ch

(limited to 100 certificates)
www.blw.admin.ch
www.gate.bav.admin.ch
www.jira-a.estv.admin.ch
sts0032.sts.eiam.admin.ch
www.cmsp4-a.admin.ch
appint.naz.admin.ch
www.staatskalender.admin.ch
*.geo.admin.ch
www.code.admin.ch
www.bundespublikationen.admin.ch
www.suissetax-r.estv.admin.ch
help.geo.admin.ch
int.translation.eda.admin.ch
www.portal.bsv.admin.ch
viaduc.sfa-laboratory.ch
www.tacho-en.admin.ch
e-dec-web-a.ezv.admin.ch
ncts-formular.ezv.admin.ch
trifid-lindas.int.cluster.ldbar.ch
ws.inar-r.zas.admin.ch
rp-eda01.eda.admin.ch
apis.sem.admin.ch
ws.seodor.zas.admin.ch
www.sust.admin.ch
www.edb.admin.ch
www.sib.admin.ch
www.apistore.estv.admin.ch
www.xmlns.bfs.admin.ch
www.logixs.eda.admin.ch
www.esti.admin.ch
nd8.li.admin.ch
www.bar.admin.ch
sts003-r.gever.admin.ch
www-tmp-a.ekf.admin.ch
www.cfig.admin.ch
adonis.ezv.admin.ch
www.bag.admin.ch
key-recovery.a-pki.admin.ch
Int.ex4.lmsvbs.admin.ch
toolchain-selfservice.bit.admin.ch
s001047a.adr.admin.ch
ws.dds.bakom.admin.ch
rio-a.ssl.admin.ch
www.portal-a.eiam.admin.ch
www.ekff.admin.ch
www.cms-a1.admin.ch
ws.lsvastammdaten-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
www.sonderbewilligungen.admin.ch
intranet.sibad.vbs.admin.ch
storme-r.bafu.admin.ch
intranet.gate-r.bar.admin.ch
idp-base.gate-r.eiam.admin.ch
tokenunseal.a-pki.admin.ch
www.e-cites-a2.admin.ch
www.regress.admin.ch
intranet.vbs.admin.ch
www.oscitv-gw-a.admin.ch
epo.ejpd.admin.ch
test2.gate-a.bit.admin.ch
www.etv.blv.admin.ch
www.bestellung-k.admin.ch
www.pxweb-admin-a.bfs.admin.ch
www.widget.e-portal.admin.ch
www.ausbildung.eur-med.bazg.admin.ch
ebd.abn.ezv.admin.ch
www.cmsp8-a.admin.ch
www.b2cshop-i.admin.ch
idp-egov-federal.gate-d.eiam.admin.ch
flrt.bazl.admin.ch
ca-sbpp.seco.admin.ch
www.b2cshop.admin.ch
www.coff-ekff.admin.ch
sanadress.vbs.admin.ch
www.medregom-r.admin.ch
transfer-pr.wbf.admin.ch
cmc.a-pki.admin.ch
www.g2020-info.admin.ch
www.eofcom-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
ww2.elic-en.admin.ch
ws.quattrop-r.admin.ch
www.bbl.admin.ch
wwwt.interruptio-ges.bfs.admin.ch
www-tmp.roemerholz.admin.ch
www.aramis.admin.ch
survey.efk.admin.ch
uat-publish-internet-vbs.vbs.admin.ch
www.infoafam-a.zas.admin.ch
www.sust.admin.ch
www.plugins.aramis-a.admin.ch
www.pxweb-a.bfs.admin.ch
www.openegov.admin.ch
www.cms-t2.admin.ch
www.psyreg-k.admin.ch
www.cfej.admin.ch
www.cfig.admin.ch
pin-reset.a-pki.admin.ch

Certificate

The complete raw certificate details for ws.quattrop-r.admin.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXSPgW8J9mMGd6jQ21TI
IhAA68hk0N1wJ7WFhBdcBYV/9/luIhldMtl4BwvqQKJkMXlI0F+MbehGnyNtPSA/
rMi5jcW+SSB3oaD2LPgxsMLiqonQlHiCzAdvMYU5W2+rqWUMsbZHZC8ty7uBBJ3Z
vlMIoBA4K7JhNVazbiSIYREaDOnVk+SrDiEzAlTPw2lzvrbrpa16prKG4a+kHB3R
v0JY1JQDOZSZ40QOD6GHHdMXs0wlD9i5S//6Q/Aek3ZtMcy+VVXnLBq6aqtEqlNm
Fz96JQXCMY9eBJZiyMjo7m2t0d4xGWmnMEKwADSPiR3zaUHmFNx/16ndSP6Rnf+m
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 107478242509423397406095793594472175234
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swiss Government PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certification Authorities'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swiss Government SSL CA 01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-20 12:14:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-19 12:14:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Swiss Government PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Servers'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ws.quattrop-r.admin.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24421471017141347383638640908324254222108853291261329146189266298024113685484594287383174635973549920292957004374109000586967328909366711342916371939343532078465805246537510889656649532782134693782931296695298635085631840647123292176404747709292184044409176317122790444819485098110694841895037028845830955472073683529887487363447815187997412653594957255798975447296225579144504584643862087372864415022761321512082354132451739211412668623038468304887965075525318535265416539915139768120402301317511257500940687436906400028494719402935705835680457686153717805418087147658073773609483877447616595218263228891579883169337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fc355e581df852e02be8acabb982ad1511d6e6cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ca50707e8cef0d9ee56fbd8c403cc232165f3a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (190 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.17.3.22.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.pki.admin.ch/cps/CPS_2_16_756_1_17_3_21_1.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [84 104 101 32 112 117 114 112 111 115 101 32 111 102 32 116 104 105 115 32 99 101 114 116 105 102 105 99 97 116 101 32 105 115 32 115 111 108 101 108 121 32 105 110 116 101 110 100 101 100 32 102 111 114 32 83 83 76 32 119 101 98 32 115 101 114 118 101 114 32 97 117 116 104 101 110 116 105 99 97 116 105 111 110 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (179 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.pki.admin.ch/crl/SSLCA01.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://www.pki.admin.ch:389/cn=Swiss%20Government%20SSL%20CA%2001,ou=Certification%20Authorities,ou=Services,o=Admin,c=CH'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.quattrop-r.admin.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.pki.admin.ch/aia/SSLCA01.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.pki.admin.ch/aia/ocsp'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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