internetbox-nas.swisscom.ch

- Swisscom (Schweiz) AG -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 57:25:bc:ba:80:9e:98:da:f3:93:64:eb:29:5a:3d:67:37:aa:1b:b9 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Swisscom (Schweiz) AG

Organization: Swisscom (Schweiz) AG
State / Province: BE
Locality: Worblaufen
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 57:25:bc:ba:80:9e:98:da:f3:93:64:eb:29:5a:3d:67:37:aa:1b:b9
Serial Number (int): 497523765207259756522944072142504020889016343481
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: b5:dd:34:6d:0c:8e:6c:8f:ff:1d:a3:cf:5e:ea:ea:05:42:88:fc:ec
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): ec:0f:db:ec:ab:6a:37:a7:4a:a7:1b:ee:db:4d:84:77:16:9b:da:02
Fingerprint (sha256): 02:69:2d:11:c5:4d:09:4e:49:d9:b3:d1:52:5d:14:8e:1e:e3:3d:cb:2e:14:0e:3a:68:53:9a:0b:77:e8:8c:16

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate internetbox-nas.swisscom.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for internetbox-nas.swisscom.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

internetbox-nas.swisscom.ch
www.internetbox-nas.swisscom.ch

Other certificates including the domain name swisscom.ch

(limited to 100 certificates)
olr-stag.swisscom.ch
cms.staging.entertainment.swisscom.ch
email.swisscom.ch
cp.cspp.swisscom.ch
spscms4linux02.exotrack.swisscom.ch
tvnow.swisscom.ch
internetbox-nas.staging.swisscom.ch
issue.swisscom.ch
secure04.stage.lithium.com
blockchain.swisscom.ch
partner-authz-staging.swisscom.ch
netzausbaukarte.swisscom.ch
magazin.swisscom.ch
i.swisscom.ch
docsafe-beta.swisscom.com
twint-prd.swisscom.ch
ssc1.imst.swisscom.ch
octane.swisscom.ch
*.portal.bankinghub.swisscom.ch
gaia-gateway.vega.m6s.swisscom.ch
iot.vodafone.swisscom.ch
sbc1-emea-che-zhh.teamsa.swisscom.ch
ccs.join.swisscom.ch
*.tcsbc02.teamsa.swisscom.ch
multi.swisscom.ch
l2.shared.global.fastly.net
bcs.join.swisscom.ch
secure05.lithium.com
wast.swisscom.ch
sdx.swisscom.ch
identity.phoenix.m6s.swisscom.ch
ccs.join.swisscom.ch
l2.shared.global.fastly.net
global-portal-dev.swisscom.ch
l2.shared.global.fastly.net
btbcs.swisscom.ch
tools.swisscom.ch
l2.shared.global.fastly.net
ssc1.ims.swisscom.ch
internetbox-nas.staging.swisscom.ch
lite.m2m.swisscom.ch
vimaphet-dasbc1.joind.swisscom.ch
extranet-acc.swisscom.ch
extranet-int.swisscom.ch
shop.swisscom.ch
secure05.stage.lithium.com
internetbox-nas.swisscom.ch
media.oid.swisscom.ch
5670976570261504-fe4.pantheonsite.io
acs.joind.swisscom.ch
secure04.stage.lithium.com
dis.swisscom.ch
wrc.joind.swisscom.ch
*.tasbc01.teamsd.swisscom.ch
sensu-backend-8.exotrack.swisscom.ch
simple2.swisscom.ch
secure04.stage.lithium.com
5754818358411264-fe2.pantheonsite.io
issue-int.swisscom.ch
l2.shared.global.fastly.net
wmt5443.conferencing.swisscom.ch
check.swisscom.ch
clientrvk.testweb38.swisscom.ch
tpe-staging.swisscom.ch
marketplace.bankinghub.swisscom.ch
inone-game.swisscom.ch
check.swisscom.ch
dns-vetting1e.map.fastly.net
handyhilfe.swisscom.ch
secure04.stage.lithium.com
hpalm-app-prd.swisscom.ch
cockpit.dev1.swisscom.ch
secure05.stage.lithium.com
rtc-dis.swisscom.ch
het-cds.swisscom.ch
mds01.swisscom.ch
www.survey.swisscom.ch
wfmweb.swisscom.ch
tv-thankyou.swisscom.ch
inone.swisscom.ch
buyback.swisscom.ch
secure04.stage.lithium.com
stag-messagingproxy.swisscom.ch
secure05.lithium.com
oms-tst.omsaas.swisscom.ch
cockpit.swisscom.ch
vergleich-server-cloud.swisscom.ch
buyback.swisscom.ch
hipchat.swisscom.ch
regapi-1olb.swisscom.ch
stream.swisscom.ch
repairmanager.swisscom.ch
robotics.swisscom.ch
zhheapp-sasbc01.joineapp.swisscom.ch
git-test.swisscom.ch
5754818358411264-fe2.pantheonsite.io
acs.gated.swisscom.ch
www.lawe-network.lime.novu.ch
chat.projuventute.swisscom.ch
cw000130.exotrack.swisscom.ch

Certificate

The complete raw certificate details for internetbox-nas.swisscom.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuSLu0CaobgvB4V+998do
H9IglIgM9Pcb+dgo9l0PmsWUxG1QRGEthSQNJJLPg7LraAM/eYwR9/DxGiM/BdP+
yMPtS4xnmVeeou35vZkjq0e2sWJfQ5fzPHwXz3/fSwlXabPFA6KDkevWrFGJpHtY
1mOb3PFpF2rQgAdyZ7ICrRFOkZY2trUZeJm9FHblitvLyrqYX6PXs/uq5ZLJvaiR
OANArtWgAEWHVicyZ8LuHSr58vgUtnUR0YUAPdT0I9Mob2M8BUx8XNlDl+7/ldaE
BW5lH117WVcY1RyVU8pjbLdJNnAXv1KxiRyZJYjmBJAkmNsyuX2z547UnT0J5Mmc
AgZCeCaL5ArS4Ceh/8iOmswnJYjeqhjPWRdn1oLTfiSmHRVVBc8XHGz2kU5Nd+Hh
I35sF670omwFyeGHqlQw/a81UUfZ2rQCRVjx1aJoLMvHbEk8JDcsrRUIB9PrT/zZ
w8McE5hbm/KqoTmKQZpTBOJOYC31mEFjvnf7M8Da+DChVpkPPO9WAMPZMoOI6T2B
1PzLxyrSoj/76vZcb5ygTnYOwIL1Ff3XD8BZvxTlMy7CsOp9PEwBjKn0BkEyg5st
nL1FKKzBv8MlRWdROlTraWJ6lAPR3v7nt3WiJsFzXiQ8pCTd1AMvzHMzshpUIkTE
r7rK8na6ag459qpOARAXqA8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 497523765207259756522944072142504020889016343481
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-27 16:37:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-27 16:37:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Worblaufen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swisscom (Schweiz) AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'internetbox-nas.swisscom.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 755290846528631845183991597264269634685127177144867379041162967308726530592705097108668444508194954049428908049521053435155766460891203022566282924885557434445614548063032694787595717798948402602241100443743421467546233849096493009797936615679203242855322032790209344292735690086267499609490808070358913442135224826966355640074785948255732919017168012423989203063975966108418257476542674509284544921936728437625249084485199783258751704868000700179002585027081107387581396072049688772064845779331528111183402107511354656913879879982880059096016141823757835681580615016595458661625354590275533726356496554542513484412721456276999600529557580347226658528207180183871639763471545543534179189519953082574397703574599585710506465554408267320351613160070084350409724753871256600026320894396949264297564216003272674096212531111808345985280590007851799208945222851059897284285630363916546797692357548690068922135799665970279256778119925837776929892805933628081116262383652791974777883116667803183201031791242843900421615065733883767179121447688422246306168843349825998310762020153021993442632517275150255094072740841585340846673700780793407746471441524992513905383510172481073407971573709268018603097522096990585445200089506118423589191919631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internetbox-nas.swisscom.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internetbox-nas.swisscom.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5dd346d0c8e6c8fff1da3cf5eeaea054288fcec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (727 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (723 bytes)
							02d10075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000181a6068bd600000403004630440220306f377d66f1b06baf823be89d74f9548636296afb768dd52a071fb1d50dfc3e022055069c947efed2936748e36255c0dc818d3d8d72f1bae6ce0832d6bb5650d33e0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000181a6068a320000040300483046022100b15075d00410bc0442258e725bb661732edae4b7ffa56104ae8344ec92b65e93022100d729a7d73a3fda68f0344087cd3afb1ab71368b7ee7877b2e3f133b6f073a8c20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000181a6068b150000040300483046022100ecd7e882e6ff76671cffdca4923a6e6edfe63da3136373b4317732e7c35b0413022100a3c6f3d131a3207988f5990dab2c01bfe2ed9eb89e5e883bbb6459bcec0f055d007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000181a6068a400000040300483046022100b2ace1aebeacf2fb221d81fe7a2632c6f6cb5bf7b035dcf5120c255f72c04a0c0221009f3666af6a8be46487c083815271f4443be53869643ede1c949d4503955f64f7007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000181a6068b5f0000040300463044022059e441439a33eddd5866e0abd877b63e4805b5788f0ee3c2cb2af7671ace58f10220309f824878d320d68da0b3ab35b250b64518d9805c3a956f5faac42c6223611e007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000181a6068a580000040300473045022100faf7e802d064a0ac47f007a0a2cc84cbe69e026e7ee6692d35f3818ff64ad63e02202bf8cee07c30ead9012637ab7d74cedf6ab3fa2693caa2004471092685c13eb5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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