ucc.mobi.ch

- Schweizerische Mobiliar Holding AG -

Issued by SwissSign Server Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 13:29:e5:d6:31:2c:8f:2b:c6:72:08:5e:b6:94:bb:91:f3:30:c2:35 was issued on by SwissSign AG.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Schweizerische Mobiliar Holding AG

Organization: Schweizerische Mobiliar Holding AG
Organization unit: IT
State / Province: BE
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 13:29:e5:d6:31:2c:8f:2b:c6:72:08:5e:b6:94:bb:91:f3:30:c2:35
Serial Number (int): 109405176798061137394582565666815856202669408821
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 9d:6a:92:62:c4:57:b7:f4:63:5e:d6:fd:61:57:02:d0:0d:a3:5c:56
AuthorityKeyId: e7:f1:e7:fd:2e:53:ad:11:e5:81:1a:57:a4:73:8f:12:7d:98:c8:ae

Fingerprint (sha1): cf:0e:1d:9d:0c:63:26:cb:c3:23:ac:91:c0:70:87:59:87:03:5b:4b
Fingerprint (sha256): 0f:e8:7c:21:c1:45:0b:65:24:ac:7e:38:89:da:07:48:2c:76:dc:ea:c6:67:7f:02:c7:52:72:41:29:63:57:11

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE

Revocation information

OCSP Server: http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate ucc.mobi.ch

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ucc.mobi.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ucc.mobi.ch
ucc.mobiliar.ch
uccweb02.mobi.ch
uccweb03.mobi.ch
uccwac.mobi.ch
uccweb02.mobiliar.ch
uccweb03.mobiliar.ch
uccwac.mobiliar.ch
lyncdiscover.mobi.ch
lyncdiscover.mobiliar.ch
lyncdiscover.mobiliere.ch
lyncdiscover.mobiliare.ch
lyncdiscover.protekta.ch
lyncdiscover.protekta-risikoberatung.ch
lyncdiscover.xpertcenter.ch
lyncdiscover.mobicorp.ch
lyncdiscover.mobi24.ch
oos.mobiliar.ch

Other certificates including the domain name mobi.ch

(limited to 100 certificates)
revproxy-p.mobi.ch
sslme2.mobi.ch
test.mobi.ch
ebill.mobi.ch
sslme2.mobi.ch
mobiliar-int.ch
Z100807.mobi.ch
securemail.mobiliar.ch
m24pp.mobiliar.ch
z101373.mobi.ch
gp-portal.mobiliar.ch
mehe.mobi.ch
z101596.mobi.ch
help.mobi.ch
meteo-alarm.mobi.ch
z101373.mobi.ch
igb2b.mobi.ch
z101121.mobi.ch
z101596.mobi.ch
url2288.mobi.ch
pr.mobi.ch
ides.mobi.ch
mdm.mobi.ch
z101010.mobi.ch
secure.mobi.ch
tunnel-ext.mobi.ch
*.mobi.ch
gp-hosting.mobi.ch
secure.mobi.ch
gp-userid.mobiliar.ch
rms.mobi.ch
gp-userid.mobiliar.ch
z100710.mobi.ch
z100075.mobi.ch
sts.mobi.ch
ucc.mobi.ch
z101475.mobi.ch
mobiliar.ch
*.mobiliar-int.ch
z101121.mobi.ch
my.mobiliar.ch
*.mobi.ch
mp.mobi.ch
m24pp-i.mobiliar-int.ch
Z101365.mobi.ch
z101373.mobi.ch
Z101474.mobi.ch
sslme2.mobi.ch
elmreceiver.mobi.ch
z101494.mobi.ch
*.mobi.ch
elmreceiver-i.mobi.ch
Z101474.mobi.ch
z100661.mobi.ch
sts.mobi.ch
z100075.mobi.ch
z101284.mobi.ch
Z101365.mobi.ch
Z100807.mobi.ch
gp-userid.mobiliar.ch
Z100807.mobi.ch
igb2b.mobiliar.ch
z101494.mobi.ch
userid.mobi.ch
sslme2.mobi.ch
z101494.mobi.ch
idp.mobiliar-int.ch
sip.mobi.ch
ftp.mobiliar.ch
mobiliar-int.ch
m24pp.mobi.ch
my.mobiliar.ch
Z101474.mobi.ch
z101373.mobi.ch
z100448.mobi.ch
z101365.mobi.ch
trianon.mobi.ch
b2bapi1-i.mobiliar-int.ch
z101373.mobi.ch
mdm-i.mobi.ch
mp.mobiliar.ch
z100958.mobi.ch
sslme2.mobi.ch
idp.mobiliar.ch
z100807.mobi.ch
sslme2.mobi.ch
mobi.ch
z101373.mobi.ch
elmreceiver.mobi.ch
z100394.mobi.ch
*.mobi.ch
meteo-alarm.mobi.ch
idp.mobiliar.ch
mobiliar-int.ch
z100946.mobi.ch
m24pp.mobi.ch
securemail.mobiliar.ch
secure.mobiliar.ch
acronissync.mobi.ch
webaccess.mobi.ch

Certificate

The complete raw certificate details for ucc.mobi.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmyMmJYVBGPeXYEpx5Jc
+/jumkRB9Hj/HpeWljSqhK7UT7V5ykQHDUV8MJtJ/NUjoFNjwru5pJN6wsm4w29E
jDkA36ytoJf6HIeV7MCvR5w5BHh9nwHmkPH3deGMor+vYjbxkcVRaoczCSG5XZjY
eI4dwdTdZeXyN/Q0oPgtRATapQpNgIaeFrvYzI3v1q5igChhCF0Hnk2P58I6W4Tm
VVder87dviTQpcTGm4v1FvMJW8CXdCR8LCevib6vZ5DnxwokZzfbDsm4yj1Oz1Ua
UNXQ2ty0riuEpxA8WkwLMi1OEQU24aOjO7rBG2Y1R5Rb9BR4BlulMnz3Ru8ka5Ds
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 109405176798061137394582565666815856202669408821
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-22 11:51:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-22 11:51:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schweizerische Mobiliar Holding AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ucc.mobi.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24543758770554732794935935815728886269919680998122118321018102797617044508174303614777365089182422935611495570803046431792329450805489894119432555254031227726666999586939889824928103367900934963209333639455712233441054605696434502588666035309070190112139093779102240432340692260036258974171500944018803550430551504808141126863281294517982041400957753110674402865835288993265637702317087393740041997709103477543580331268676042966786861500746473816744881408806790731639765741129004684728760920249000790999989849170049928709565389891303381376415170542429990114646335708434402589335725877299074373882766970145680156323071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (415 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucc.mobi.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucc.mobiliar.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uccweb02.mobi.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uccweb03.mobi.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uccwac.mobi.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uccweb02.mobiliar.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uccweb03.mobiliar.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uccwac.mobiliar.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.mobi.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.mobiliar.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.mobiliere.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.mobiliare.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.protekta.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.protekta-risikoberatung.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.xpertcenter.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.mobicorp.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.mobi24.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oos.mobiliar.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d6a9262c457b7f4635ed6fd615702d00da35c56
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e7f1e7fd2e53ad11e5811a57a4738f127d98c8ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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