ras.snb.ch

- Schweizerische Nationalbank -

Issued by SwissSign EV Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 6f:3c:76:73:47:b1:4a:f9:60:1a:0e:a1:3d:43:b1:8c:ec:8a:a4:2a was issued on by SwissSign AG.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Schweizerische Nationalbank

Company registration number: CHE-105.944.570
Organization: Schweizerische Nationalbank
Organization unit: IT
Address: Börsenstrasse 15
Postal code: 8001
State / Province: Zurich
Locality: Zurich
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 6f:3c:76:73:47:b1:4a:f9:60:1a:0e:a1:3d:43:b1:8c:ec:8a:a4:2a
Serial Number (int): 635046338750865913095953603283637758047956935722
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 6a:41:91:37:5c:dc:0e:63:bf:23:ee:61:96:e0:ef:1d:0c:f2:e6:cc
AuthorityKeyId: ee:fd:46:ca:f7:27:5e:91:bc:5a:b6:e7:87:cd:0a:fa:55:0a:26:42

Fingerprint (sha1): b0:65:08:45:fa:c9:20:16:d3:9e:a2:cd:e3:7a:7d:b2:4e:88:ac:7e
Fingerprint (sha256): 0b:04:d8:0d:d1:50:15:7c:0d:51:cf:66:2e:b9:ad:17:83:09:28:5a:07:3e:cb:da:af:ee:cb:1c:27:38:05:f3

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642

Revocation information

OCSP Server: http://gold-ev-g2.ocsp.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642
CRL Distribution Point: http://crl.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642
CRL Distribution Point: ldap://directory.swisssign.net/CN=EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate ras.snb.ch

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ras.snb.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ras.snb.ch
ras-be.snb.ch
ras-support.snb.ch
ras-be21.snb.ch
ras-be22.snb.ch
ras-supportbe21.snb.ch
ras-supportbe22.snb.ch

Other certificates including the domain name snb.ch

(limited to 100 certificates)
remotemail.snb.ch
bbuem.snb.ch
mailb.snb.ch
ras.snb.ch
ras.snb.ch
ras.snb.ch
surveys.snb.ch
mailz.snb.ch
sip.snb.ch
mailz.snb.ch
rastest.snb.ch
ras.snb.ch
meet.snb.ch
datasharedev.snb.ch
vcse.snb.ch
ras.snb.ch
data.snb.ch
recruiting.snb.ch
rastest.snb.ch
ras.snb.ch
surveys.snb.ch
sip.snb.ch
ras.snb.ch
sip.snb.ch
ras.snb.ch
testgold.snb.ch
remotemail.snb.ch
testgold.snb.ch
ras2.snb.ch
wlanportal1.snb.ch
data.test.snb.ch
sip.snb.ch
testswiss.snb.ch
testgold.snb.ch
surveys-usertest.snb.ch
secmail.snb.ch
surveys.snb.ch
wlanportal1.snb.ch
mailb.snb.ch
snb.ch
surveys.snb.ch
datashare.snb.ch
alert.snb.ch
data.snb.ch
secmail.snb.ch
rastest.snb.ch
secmail.snb.ch
sip3.snb.ch
remotez.snb.ch
snb.ch
testgold.snb.ch
testgold.snb.ch
datasharedev.snb.ch
vcse.snb.ch
bbuem.snb.ch
secmail.snb.ch
ras.snb.ch
ras.snb.ch
sip3.snb.ch
remote.snb.ch
vcse.snb.ch
securemail.snb.ch
ras.snb.ch
surveys.snb.ch
testgold.snb.ch
webstats.snb.ch
securemail.snb.ch
surveys-usertest.snb.ch
snb.ch
careers.snb.ch
ras2.snb.ch
datasharedev.snb.ch
testgold.snb.ch
datasharedev.snb.ch
alert.snb.ch
snb.ch
remotez.snb.ch
data.snb.ch
surveys.snb.ch
datashare.snb.ch
data.snb.ch
testserver.snb.ch
ras-betest1.snb.ch
remoteb.snb.ch
datashare.snb.ch
rastest.snb.ch
rastest.snb.ch
testswiss.snb.ch
securemail.snb.ch
snb.ch
sip.snb.ch
mailb.snb.ch
testgold.snb.ch
bbuem.snb.ch
alert.snb.ch
bbuem.snb.ch
ras.snb.ch
data.test.snb.ch
bbuem.snb.ch
snb.ch

Certificate

The complete raw certificate details for ras.snb.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+jXdDvsod2DRlcAu1m2h
UKwI7JaKgxmn0N2jpnwJIyUzuDYnLrEHH1bDUJ4PFJTOdFKIcNLxesApUCAYgX2X
uvg7kk35+l/NCVJ2Twgq/I+jtePU050kUbvUc3oc1QakE5vR3Du1TkYRn0bq+6tF
/rqGf10nwqYlEdsCx3OBuABTVb6TiQfIQ2y5ddtkbDCyKmOA7wFdalzygwmrSORd
jSnOS8BCKKxmMZvfHAn34PVXDrqT6+F7VmmwPS9KuE3hWjH/kt2U6IyZz0qX+rd2
xDZuI6GFmN0sbrgHkVT79s4Uq/KS45dtK4ZSpNaZpeHCYSjfQZ/oNg3po9KdxL1q
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 635046338750865913095953603283637758047956935722
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign EV Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 08:53:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-19 08:53:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuerich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHE-105.944.570'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '8001'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Börsenstrasse 15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schweizerische Nationalbank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ras.snb.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31586137328163610797304820724917322950837713214031191357906869424011904060107686461053286836675227591013948659032050272116535439665108874620458943166896916584973998984545897923408468388986629938252628854212486424638374989054787374135628620006976065843856001104779085627844346368207206928371539140434740292015395931459515578616855990157788570451990528401173745750522264300238200467861208849306256847724946196645569185952198724019479921360158881593303568578916987538345298319112517483439368808701177069337504028194554057631876246231156228312552549762301728331685724937621470491054840705205715749205462740493555451390669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (132 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-be.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-support.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-be21.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-be22.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-supportbe21.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-supportbe22.snb.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a4191375cdc0e63bf23ee6196e0ef1d0cf2e6cc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eefd46caf7275e91bc5ab6e787cd0afa550a2642
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.1 (SwissSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (196 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-ev-g2.ocsp.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
							02590076002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f0200000170f1ff90f10000040300473045022072ae7fb69ca819c03f020b1f62596511751d10ecf731d50c908d216c9ee3d828022100bc59cff1349403ba3ce82d9ea32589d34dd22f1fb85dcf9cae980445b5af0b3700770041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000170f1ff90a7000004030048304602210094264396b665ce37106cd825fbf3801aa86851da617ff60ab4e00f5feba1fdfa022100f0e42898988691ac54be09c71ea21f826212cd7d9ada0bf5a6b647950fb675db0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170f1ff901900000403004730450221008087ccdd94771d89cb2aecea7639a0012cc4567851a28e49163efe4a078d2bac022015c820fc6932f0ee7bbdf414b4e41802b533e9f63777cc758a7fb38beb92f122007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000170f1ff8e570000040300483046022100af8008322a89f67cb8688243d30b9a7d8bdcff12734d6d1ee0551e90bb2475c9022100a1b65260bac96fe4bf7c30ac0ff0e61f7603a3ef59b588f0adeb914a7d87af13007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000170f1ff8de4000004030046304402204b03e95158b4e2fe447ed06559457615c43098132912045efeb1040f7f3dd8f70220494145eaee60ad73c3453b49bd5b0dee56223523ddcdd7b57e89ac38134b3ea6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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