gp-gw-prelogon.mobiliar.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 74:40:11:dd:38:b1:1f:1f:e8:69:97:5e:ad:49:71:4d:cb:8a:dc:a5 was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gp-gw-prelogon.mobiliar.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 74:40:11:dd:38:b1:1f:1f:e8:69:97:5e:ad:49:71:4d:cb:8a:dc:a5
Serial Number (int): 663671733294891709734311272636366809158052928677
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: b0:ec:ae:65:48:b8:9d:ff:43:ca:5f:35:5e:d9:42:27:b8:03:8a:7c
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 3d:38:14:47:e9:6e:21:26:3b:2d:93:3a:77:9d:41:59:69:f0:f3:0e
Fingerprint (sha256): 10:cc:28:d6:52:ce:34:04:20:22:3f:89:ec:42:49:61:eb:6a:8d:87:50:2c:8c:7b:38:cc:aa:de:8f:e8:1c:85

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate gp-gw-prelogon.mobiliar.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gp-gw-prelogon.mobiliar.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gp-gw-prelogon.mobiliar.ch

Other certificates including the domain name mobiliar.ch

(limited to 100 certificates)
standortcheck.mobiliar.ch
vpn.mobiliar.ch
gp-devsec.mobiliar.ch
cloud.campaign.mobiliar.ch
gp-ext.mobiliar.ch
securemail.mobiliar.ch
m24pp.mobiliar.ch
client-auto-i-dat.mobiliar.ch
vorsorge.mobiliar.ch
leonteq.mobiliar.ch
gp-gw-prelogon.mobiliar.ch
leonteq.mobiliar.ch
marke.mobiliar.ch
gp-portal.mobiliar.ch
gp-gw-prod.mobiliar.ch
video.mobiliar.ch
*.content.mobiliar.ch
meteo-alarm.mobi.ch
gp-gw-dev.mobiliar.ch
tinelstest.mobiliar.ch
sos.mobiliar.ch
test.mobiliar.ch
gp-prod.mobiliar.ch
strategiemap.mobiliar.ch
raiffeisen.mobiliar.ch
gp-gw-dev.mobiliar.ch
mobiliar.ch
trainingnet-compliance.mobiliar.ch
api.training.cyber.mobiliar.ch
staging-video.mobiliar.ch
gp-prelogon.mobiliar.ch
test500.apps.mobiliar.ch
marke.mobiliar.ch
click.campaign.mobiliar.ch
newsletter-cdn.mobiliar.ch
selfservice.mobiliar.ch
secure.mobi.ch
gp-userid.mobiliar.ch
meinauto.mobiliar.ch
handwerker.mobiliar.ch
jobs.mobiliar.ch
selfservice.mobiliar.ch
gp-userid.mobiliar.ch
luawext.mobiliar.ch
strategiemap.mobiliar.ch
url4870.mobiliar.ch
resources.mobiliar.ch
gp-gw-dev.mobiliar.ch
selfservice.mobiliar.ch
newsletter.mobiliar.ch
ucc.mobi.ch
gp-testzertifikat.mobiliar.ch
*.mobiliar.ch
gp-gw-prelogon.mobiliar.ch
mobiliar.ch
*.mobiliar.ch
kunst.mobiliar.ch
my.mobiliar.ch
fancystuff.mobiliar.ch
msghub.mobiliar.ch
mp.mobi.ch
cyber-training.mobiliar.ch
eshop.mobiliar.ch
test.mobiliar.ch
client-comparis.mobiliar.ch
b2capi1.mobiliar.ch
tinelstest.mobiliar.ch
www.handwerker.mobiliar.ch
check.mobiliar.ch
cyber-training.mobiliar.ch
b2capi.mobiliar.ch
liip-lead-client.mobiliar.ch
pssp-admin.mobiliar.ch
test.mobiliar.ch
vorsorge-mobiliar.ch
b2capi.mobiliar.ch
tymodenengelsman.com
vorsorge.mobiliar.ch
fileshare.mobiliar.ch
msghub.mobiliar.ch
meinauto-client.mobiliar.ch
smide.mobiliar.ch
gp-userid.mobiliar.ch
elm.mobiliar.ch
kunst.mobiliar.ch
igb2b.mobiliar.ch
b2eapi1.mobiliar.ch
eshop.mobiliar.ch
b2bapi2.mobiliar.ch
sign.mobiliar.ch
vorsorge.mobiliar.ch
viq.mobiliar.ch
jobs.mobiliar.ch
gp-gw-prelogon.mobiliar.ch
b2capi.mobiliar.ch
awareness.mobiliar.ch
z101392.mobiliar.ch
client-auto-i-dat.mobiliar.ch
kunst.mobiliar.ch
ftp.mobiliar.ch

Certificate

The complete raw certificate details for gp-gw-prelogon.mobiliar.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIjDCCBnSgAwIBAgIUdEAR3TixHx/oaZderUlxTcuK3KUwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDQyMzEx
NDg0M1oXDTI1MDQyMzExNDg0M1owJTEjMCEGA1UEAxMaZ3AtZ3ctcHJlbG9nb24u
bW9iaWxpYXIuY2gwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJvlsA
8fG8Slau10TS+nxAadvKWfCU9odAyh/Jy75wZFridQOUmQmJj4OcAF9JAk9HS0U1
4k/bj7Izm1FlQhrbvnvbNP2XgsarmWO9oqSjrMZVekJpIEdXTZ2dhmMRg+hRm37a
lUknzSRq4CaGGtcADhLfoeZAJdeP3QF9oxUYIrzcEZX81BKMbZ5renzUvDrhF3T4
ivyCcyKJHjrCSCuRGYYfYq36GvGbuNMwuBiZgXHqolE599BfIlJdLHyWxbzEvV0t
3EZfer98brnjeCETktJp077baVEhP1EMlbM8ofyyQIaOL60ELGf8ErKlnBT/Ke8W
tLoTL4bfbejFhk2pAgMBAAGjggSHMIIEgzCBsgYIKwYBBQUHAQEEgaUwgaIwTAYI
KwYBBQUHMAKGQGh0dHA6Ly9haWEuc3dpc3NzaWduLmNoL2Fpci0xYjg2MzM4NS1m
NGE5LTQ3ZmEtODhhNS0yYTVhYmZkNGExNjcwUgYIKwYBBQUHMAGGRmh0dHA6Ly9v
Y3NwLnN3aXNzc2lnbi5jaC9zaWduL29jcy1hYWNjY2VkNS02NmU4LTQwNjktOWIx
Yi1mZDI5YWI3M2VmZWMwbwYDVR0gBGgwZjAIBgZngQwBAgEwCAYGBACPegEGMFAG
CGCFdAFZAgEBMEQwQgYIKwYBBQUHAgEWNmh0dHBzOi8vcmVwb3NpdG9yeS5zd2lz
c3NpZ24uY29tL1N3aXNzU2lnbl9DUFNfVExTLnBkZjBRBgNVHR8ESjBIMEagRKBC
hkBodHRwOi8vY3JsLnN3aXNzc2lnbi5jaC9jZHAtNjc5NzIzYjItODY0MS00NjQy
LTg1MDAtZjZkMmZmMzdlNmJhMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAOBgNVHQ8BAf8EBAMCBaAwJQYDVR0RBB4wHIIaZ3AtZ3ctcHJlbG9nb24ubW9i
aWxpYXIuY2gwHQYDVR0OBBYEFLDsrmVIuJ3/Q8pfNV7ZQie4A4p8MB8GA1UdIwQY
MBaAFOu9f0mTjMnu7KK69xzSZ/CDsereMIICcAYKKwYBBAHWeQIEAgSCAmAEggJc
AloAdwAo4oE4/YMhRemp1qp1N22Dd6iFErPAf3JBSCHcvemMZgAAAY8KyW7UAAAE
AwBIMEYCIQC1l7QHekAVQ/yW79OJnIKeo+wPwxerh2PF6zZ1pZ6K4AIhAMxq18Ds
vE8KpJ3WlU3YPqTxPKn/7sak2Gudkiqn2RchAHYA4JKz/AwdyOdoNh/eYbmWTQpS
eBmKctZyxLBNpW1vVAQAAAGPCslr+AAABAMARzBFAiAKenagJtQEL59htKKeUfXg
YDWsN+8rYWDIEjyI4mh6bwIhAP7EOaLaKNOYUXp4naxfvYRvCSUNw5xNIJL+goya
//0YAHYAzxFW7tUufK/zh1vZaS6b6RpxZ0qwF+ysAdJbd87MOwgAAAGPCslq3AAA
BAMARzBFAiBsLwLmi3fsWmPhlObwR9x7V1t+wvsDh7TaiyL276t0agIhAP4zpUz/
ppppyaxl1Ww6Ri3SWkZpn5McUsb4W3Iqf7ZpAHcAzPsPaoVxCWX+lZtTzumyfCLp
hVwNl422qX5UwP5MDbAAAAGPCsltLwAABAMASDBGAiEA5JgKQ/9NCydPHNq+8Abu
lKkTmZLQE7kKZPUsaTH0WDoCIQDKpf1hClNbmJ/f+sxsd7bSh9MpGSo5p6TLSgNm
+wXPegB2AE51oydcmhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABjwrJbQEA
AAQDAEcwRQIhALFgx3ARAt3RZ/HN+SlnSSmiBoEmNr3asl6hkTKutb5GAiBEBHZ7
DQ2XpDBC0Cmi2cObzzjeWrkKHvRZMwQMB8FR4zANBgkqhkiG9w0BAQsFAAOCAgEA
mSiPp+5t8WfRLf0sJonBeSfn59zIw8aq44YHh+z57CnJxbvrpMYR9qkk8P/ks7Sm
nIbLt1SJfimCotUsYGiFksJXM26tFwQ4Yl9KTSM2ITvLICClMxBiuMRkG9zmf+Zr
WM8pasDJ3SCt9PraIhQltJTHI1xdWXnITOfHseX8Gi+j1DoWczGSHhzVX1hfJKqh
0ECMuZEBe46Y+MzR7ogG/FBsi773Xu/Zoy3hvv9BMA+dNqVkyMtqqt4ejO66FqMY
f+tE3w2J3npYU9cGK2ZcESsgKA9EHOKIZ8SgEFowVDgXUGHZI5znD/GpwpxpjdRX
IRj+gOI3Y5kTA22X26YsYQJ9/J7GwNAaymkUCQ/tS3+UW2mnRvLBmcc+BXGAqqxR
nbWwmuFvtcM6LUd4Eh4v/LZu4EUr9FUstLzwsNHuWz6ZhT8/01bETzFVW5AkGQvS
sAaqU56CdcmaN+W0TTpu8wu5QS8WA2tUJDg+B3xVA4Jdq/hJuDGRlqhBGWgRZubg
B+IX4kpuHjzqb0cs7fAodOaF9SqOcnsQ00cEneAcEguK5N0UfTwl3ZSiCQEzkb5X
HQpojIUJWFtNAIuBuTUnwAyj2HMzy99dvZc0AukVhFSQD2/ikLVayG8npjXR0gal
aaku/CRV9hqdDPZnCwp+6UpLEfMSJRWpnOe4NfA6sCw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb5bAPHxvEpWrtdE0vp8
QGnbylnwlPaHQMofycu+cGRa4nUDlJkJiY+DnABfSQJPR0tFNeJP24+yM5tRZUIa
27572zT9l4LGq5ljvaKko6zGVXpCaSBHV02dnYZjEYPoUZt+2pVJJ80kauAmhhrX
AA4S36HmQCXXj90BfaMVGCK83BGV/NQSjG2ea3p81Lw64Rd0+Ir8gnMiiR46wkgr
kRmGH2Kt+hrxm7jTMLgYmYFx6qJROffQXyJSXSx8lsW8xL1dLdxGX3q/fG6543gh
E5LSadO+22lRIT9RDJWzPKH8skCGji+tBCxn/BKypZwU/ynvFrS6Ey+G323oxYZN
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 663671733294891709734311272636366809158052928677
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 11:48:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-23 11:48:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gp-gw-prelogon.mobiliar.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25467767085429745944830535824023508088521791724591085728370970116211564969493122502449466829045637097567158551596688442795591661681379356254582127936763433572190731600003446404784878235171008578216181049175756680177555938617664329859860778499387733564660608297701709505651409607680664215102807473411133632589570355715626386131968734447864908538297658629119263175670160344501701421693933021781425221745048420610826911157059050215903577643336217804764344055297703644088214290077670692010566620671829701768699589016716804428659145067126220307109042326406657035256707471602542430097674084581234865330876112164422509022633
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gp-gw-prelogon.mobiliar.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0ecae6548b89dff43ca5f355ed94227b8038a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (608 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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