jabberguest.ge.ch

- Republique et Canton de Geneve -

Issued by SwissSign Server Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 78:80:63:f5:9a:7a:7b:ac:6d:10:d1:6a:54:11:d1:92:6e:e2:22:72 was issued on by SwissSign AG.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [ContentCommitment DataEncipherment DigitalSignature KeyEncipherment] (00001111) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Republique et Canton de Geneve

Organization: Republique et Canton de Geneve
Organization unit: OCSIN
State / Province: Geneva
Locality: Geneva
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 78:80:63:f5:9a:7a:7b:ac:6d:10:d1:6a:54:11:d1:92:6e:e2:22:72
Serial Number (int): 687942095575096882529433094393929538217556714098
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: c4:d7:ff:29:6a:1a:75:bf:c1:58:73:5d:0f:c5:2c:e9:65:50:40:2c
AuthorityKeyId: e7:f1:e7:fd:2e:53:ad:11:e5:81:1a:57:a4:73:8f:12:7d:98:c8:ae

Fingerprint (sha1): 20:48:66:78:08:d4:cc:94:12:aa:38:c2:cb:ad:1e:98:c1:ec:33:1d
Fingerprint (sha256): 13:c2:bf:03:ae:3e:81:17:13:da:8b:6d:2b:d4:de:d6:67:6b:04:23:3d:0b:38:ad:01:d1:16:e4:41:0f:3e:6f

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE

Revocation information

OCSP Server: http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate jabberguest.ge.ch

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jabberguest.ge.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jabberguest.ge.ch
jabbergexpe002.ge.ch
jabbergexpe001.ge.ch
jabbergexpe001.ceti.etat-ge.ch
jabbergexpe002.ceti.etat-ge.ch
jabbergexpe.ceti.etat-ge.ch

Other certificates including the domain name ge.ch

(limited to 100 certificates)
impuserlabo000-ms.ceti.etat-ge.ch
gc.ge.ch
contacts.ge.ch
testeaspolb2b.ge.ch
ge.ch
vcscgv2-1.ceti.etat-ge.ch
pol.b2b.ge.ch
cucmuser000-ms.ceti.etat-ge.ch
vcscnhp-1.ceti.etat-ge.ch
justice.ge.ch
test.b2b.ge.ch
testmobilepol.ge.ch
portailadmin.ge.ch
portail.ge.ch
survey.cdc.ge.ch
*.ge.ch
testservices.b2b.ge.ch
vpntest.ge.ch
www.etat.ge.ch
REPUBLIQUE ET CANTON DE GENEVE
epi.ge.ch
testservices.b2b.ge.ch
test.b2b.ge.ch
mobilepol.ge.ch
securebox.epi.ge.ch
imap.gc.ge.ch
appconpol02.ge.ch
ge.ch
pexip.ge.ch
recensement.app.ge.ch
vcsclabo-2.ceti.etat-ge.ch
jabberguest.ge.ch
vcselabo-1.ge.ch
epi.ge.ch
impuser000-ms.ceti.etat-ge.ch
padbleu.ge.ch
idp.ge.ch
dgsiemmensrec.ge.ch
cucmuserlabo000-ms.ceti.etat-ge.ch
padpolice.ge.ch
ssl829352.cloudflaressl.com
testeasadmb2b.ge.ch
ge.ch
pexipedge.ge.ch
vcsenhp-1.ge.ch
pol.b2b.ge.ch
jabberguest.ge.ch
ge.ch
test.b2b.ge.ch
justice-doc-ext.ge.ch
eas.gc.ge.ch
pjdeploy01.ceti.etat-ge.ch
vcselabo-2.ge.ch
webmail.gc.ge.ch
test.b2b.ge.ch
jabbergexpe002.ge.ch
testeasadmb2b.ge.ch
vcscnhp-1.ceti.etat-ge.ch
polmi.b2b.ge.ch
epi.ge.ch
appconsae01.ge.ch
epi.ge.ch
vcselabo-2.ge.ch
www.etat.ge.ch
easpolb2b.ge.ch
padjustice.ge.ch
sni.cloudflaressl.com
www.ge.ch
ssl829350.cloudflaressl.com
securebox.epi.ge.ch
annuaire.ge.ch
epi.ge.ch
*.ge.ch
epi.ge.ch
cucmuserlabo000-ms.ceti.etat-ge.ch
cucmuser000-ms.ceti.etat-ge.ch
survey.cdc.ge.ch
*.ge.ch
portailwifiedu.ge.ch
pocdme.etat.ge.ch
amendes.ge.ch
vcsclabo-2.ceti.etat-ge.ch
videogw.ge.ch
amendes.ge.ch
vpn.ge.ch
test.b2b.ge.ch
portail.ge.ch
vcselabo-1.ge.ch
*.app4.ge.ch
etoile.ge.ch
outlook.ge.ch
amendes-rec.ge.ch
testpolmi.b2b.ge.ch
mdmacore01.ge.ch
ge.ch
ldapedu.ge.ch
testmobilepol.ge.ch
*.epi.ge.ch
participer-rec.ge.ch
*.ge.ch

Certificate

The complete raw certificate details for jabberguest.ge.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJuzCCCKOgAwIBAgIUeIBj9Zp6e6xtENFqVBHRkm7iInIwDQYJKoZIhvcNAQEL
BQAwUjELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEsMCoGA1UE
AxMjU3dpc3NTaWduIFNlcnZlciBHb2xkIENBIDIwMTQgLSBHMjIwHhcNMTkwMTE2
MTAyMDUzWhcNMjEwMTE2MTAyMDUzWjCBhDELMAkGA1UEBhMCQ0gxDzANBgNVBAgT
BkdlbmV2YTEPMA0GA1UEBxMGR2VuZXZhMScwJQYDVQQKEx5SZXB1YmxpcXVlIGV0
IENhbnRvbiBkZSBHZW5ldmUxDjAMBgNVBAsTBU9DU0lOMRowGAYDVQQDExFqYWJi
ZXJndWVzdC5nZS5jaDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL+f
xLh7u8LDY4RljCDu2uf1BMVuSVlhY5rnO8u+i+XH/mtVbviIUU2KXu8KogUSReqp
WSGlYfXwofKVMhVIMVOk6gdo1uabWvr+VNqUxMem7LADti+yD21sJVB+qq0dCDq7
h/xMjVPAWwFxf8uQJuWGPJ4bAI62HaRKMBGUkbUpL8k0YmTsJXgPcS1K8FlBRLf5
JcBdX57bhJs/1vlxw/b2AzQui/4swKWLBoQo/5bhTH80DEVfwPIMgHeG3b+FCRNW
aAMNTBGlvmCQ+qcbYaQl8fXLbpw7ERtfS3xCGKxsf4Zi8oD0idmoR3+bPVbAkhKa
R56DTjRzF5gCupd9+HOVNA2Kf0LzuNXpNtTbw/SvcxyLi5Z7Ej4VGU0ILYlWDv4Q
45gzeUvHr+6gGPqWugmyKyJ5FcEBLPXKcrMV+Khz2tdVSbyIKj0j+MMU+ci78+Fh
DlA3taI/0b2COxLCVPmCtrxjwTLjJwy7tRw/zDJUImohDTkZ4ym2sD942W94VNtr
4+Rd7UqQ4yQ7IOV3PDN7vsZbjGeXc5+QS2T/Ns1j/5oAooc/qKEpToR/WUoLJgiY
42OZCJtaz4dHvYBlVck3qU5WdzwAKqdBCWfIlG37pDHJQ5xm8EalbnivoEGWI7Ty
goe4tbLuq9NwltoQowPwYRKU89etUesAU68gjVvPAgMBAAGjggVUMIIFUDCBpwYD
VR0RBIGfMIGcghFqYWJiZXJndWVzdC5nZS5jaIIUamFiYmVyZ2V4cGUwMDIuZ2Uu
Y2iCFGphYmJlcmdleHBlMDAxLmdlLmNogh5qYWJiZXJnZXhwZTAwMS5jZXRpLmV0
YXQtZ2UuY2iCHmphYmJlcmdleHBlMDAyLmNldGkuZXRhdC1nZS5jaIIbamFiYmVy
Z2V4cGUuY2V0aS5ldGF0LWdlLmNoMA4GA1UdDwEB/wQEAwIE8DAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFMTX/ylqGnW/wVhzXQ/FLOll
UEAsMB8GA1UdIwQYMBaAFOfx5/0uU60R5YEaV6RzjxJ9mMiuMIH/BgNVHR8Egfcw
gfQwR6BFoEOGQWh0dHA6Ly9jcmwuc3dpc3NzaWduLm5ldC9FN0YxRTdGRDJFNTNB
RDExRTU4MTFBNTdBNDczOEYxMjdEOThDOEFFMIGooIGloIGihoGfbGRhcDovL2Rp
cmVjdG9yeS5zd2lzc3NpZ24ubmV0L0NOPUU3RjFFN0ZEMkU1M0FEMTFFNTgxMUE1
N0E0NzM4RjEyN0Q5OEM4QUUlMkNPPVN3aXNzU2lnbiUyQ0M9Q0g/Y2VydGlmaWNh
dGVSZXZvY2F0aW9uTGlzdD9iYXNlP29iamVjdENsYXNzPWNSTERpc3RyaWJ1dGlv
blBvaW50MF8GA1UdIARYMFYwVAYJYIV0AVkBAgELMEcwRQYIKwYBBQUHAgEWOWh0
dHA6Ly9yZXBvc2l0b3J5LnN3aXNzc2lnbi5jb20vU3dpc3NTaWduLUdvbGQtQ1At
Q1BTLnBkZjCB1QYIKwYBBQUHAQEEgcgwgcUwZAYIKwYBBQUHMAKGWGh0dHA6Ly9z
d2lzc3NpZ24ubmV0L2NnaS1iaW4vYXV0aG9yaXR5L2Rvd25sb2FkL0U3RjFFN0ZE
MkU1M0FEMTFFNTgxMUE1N0E0NzM4RjEyN0Q5OEM4QUUwXQYIKwYBBQUHMAGGUWh0
dHA6Ly9nb2xkLXNlcnZlci1nMi5vY3NwLnN3aXNzc2lnbi5uZXQvRTdGMUU3RkQy
RTUzQUQxMUU1ODExQTU3QTQ3MzhGMTI3RDk4QzhBRTCCAfgGCisGAQQB1nkCBAIE
ggHoBIIB5AHiAHYARJRlLrDuzq/EQAfYqP4owNrmgr7YyzG1P9MzlrW2gagAAAFo
Vi2YMAAABAMARzBFAiEAkcuA7P6aM6g7fhVFqGbbyVIV1b1dJQSi+qEER7q9dLsC
IH9zAE0Kzn30C0mNDt/eJVG6WGU+HiGnvdroQmyLPqBGAHcAb1N2rDHwMRnYmQCk
URX/dxUcEdkCwQApBo2yCJo32RMAAAFoVi2YHAAABAMASDBGAiEA9nXD36bfQ01j
XWcpTIRa7ryEEkLZcKunTBvJrjCVp84CIQC28DBtRGxI08OE2QS3pEWKZVIhSjnV
FhOZFommLVB8DQB2ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAAB
aFYtl60AAAQDAEcwRQIgBGRCKQpxDAeRieBK2RSaR5chmj581273pCWK15b2F2kC
IQDP6qNEtS8DOhWGm0QtCs1TqoRAKwTNcRhmeWTaash4jAB3AO5Lvbd1zmC64UJp
H6vhnmajD35fsHLYgwDEe4l6qP3LAAABaFYtl5MAAAQDAEgwRgIhAJk/dIPHMDnE
1pRSznyfACmXI1Gnku3s8VHcJUHvGy/+AiEAxw6D92d9+RPnxhU0kWU8OzjIq1GK
PjUu+q28vX+nJYkwDQYJKoZIhvcNAQELBQADggEBABxMSIuVmrPLR4GiE+yFmGAX
r3DMROvDkTN3T/ZLNKgf+wRhHLCIpJ0DJjRpG+IuG7ATAu6F/BRfmhLW2ItQtQdG
8Vjp0Bn37sHVMKUa+OVsvk5WrDSdD5LtEMryjr6RspU4nVhvu+ytTDRWNwhFYQMp
r3gL5OM1DfJlfwIMrZBhgK6yVvFo0zzDA8ElivigP/CUM5T5Bow3ZAJQK4bYTLfP
GAgHI70EZOo8MjqqomaexT6HoYwMr3EN3yeuVTwOYseacwECBmNbZt4uLvhrv5aN
Tqpb7Fhmc+45FG7g5Yo8p4JK3YzCWhY5afGVTf2c9H/p4FFytFiIgUT7TU5HQ1U=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 687942095575096882529433094393929538217556714098
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-16 10:20:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-16 10:20:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Geneva'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Geneva'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Republique et Canton de Geneve'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OCSIN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jabberguest.ge.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 781758104368685328988535927809058523212081935556032115206681357951221622296324232046236879682715469317147931224193423523015903798486950179765025089113080267486273807454381163307494053114728757744398081108781142030380625980162011502103828007824529660468501659512731722658768014768903003750917215253084713483181931623625635041504026652163617160671136492864790856193987615612087191858837481810708174592504806484745158308064392746805327191231830861380887914823290312791353166397439729577158103073371907357930139081951093997310291665456700164172976034993468331757404102840838501988204295965322558769000692584583634988083248467771816570501349396979376529290577730950688957025177030675877400983237429856272371319591546462585709294818392609122691959922125137641609685251831142348353210032571574647993945412913709104749012942168294006787784839509026758403763453754233330381253755680793919411593037539948738818828908388176558616615062340352698785697216735685933845970253528910910724244532062280749553202332705284406491283236564399708981738066796805605277423643859682467192923547072413759380570463028620073808923960149065127173926781874344037111077587323776876188316741419778229515801117024216570173994235660290171719354039527583006693257993167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jabberguest.ge.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jabbergexpe002.ge.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jabbergexpe001.ge.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jabbergexpe001.ceti.etat-ge.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jabbergexpe002.ceti.etat-ge.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jabbergexpe.ceti.etat-ge.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c4d7ff296a1a75bfc158735d0fc52ce96550402c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e7f1e7fd2e53ad11e5811a57a4738f127d98c8ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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