identifikation-test.ukb.ch
Issued by SwissSign RSA TLS DV ICA 2022 - 1
About this certificate
This digital certificate with serial number 43:f1:44:84:3f:f4:8b:4f:8f:2c:eb:ca:7b:3c:93:a6:6d:7d:5a:96 was issued on by SwissSign AG.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=identifikation-test.ukb.ch
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate will expire on
Certificate Details
Serial Number (hex): 43:f1:44:84:3f:f4:8b:4f:8f:2c:eb:ca:7b:3c:93:a6:6d:7d:5a:96Serial Number (int): 387882829875770031287582502281921490023402527382
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: 0f:ef:2d:38:67:42:2e:aa:34:9a:90:4d:13:44:fd:b5:21:8f:ea:86
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de
Fingerprint (sha1): 20:57:3f:62:40:13:8b:58:7f:a7:93:02:3a:a6:8c:aa:10:40:50:58
Fingerprint (sha256): 15:07:00:9b:16:dc:af:0d:92:e1:77:2b:9f:b9:7f:5d:07:d4:db:22:35:a4:77:ea:5f:2f:59:12:63:76:63:25
Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167
Revocation information
OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efecCRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba
Check the revocation status for certificate identifikation-test.ukb.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for identifikation-test.ukb.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
identifikation-test.ukb.ch
Other certificates including the domain name ukb.ch
(limited to 100 certificates)
www.ukb.ch
fintest-wwwsec.ukb.ch
gast.ukb.ch
fintest-dev-wwwsec.ukb.ch
www.privasphere.com
twint-test.ukb.ch
www.ukb.ch
fintest-e-banking.ukb.ch
ukb00ncs104-e.ukb.ch
satellite-test.ukb.ch
identifikation-test.ukb.ch
gast.ukb.ch
twint-test.ukb.ch
fintest-e-banking.ukb.ch
dialog.sbb.ch
www.privasphere.com
twint-test.ukb.ch
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ot.ukb.ch
ssl.ukb.ch
ot.ukb.ch
ukb00ucc114.ukb.ch
securemail.ukb.ch
eroeffnung-test.ukb.ch
satellite.ukb.ch
www.privasphere.com
ukb00ncs106-e.ukb.ch
securemail.ukb.ch
www.privasphere.com
gast.ukb.ch
www.ukb.ch
autodiscover.ukb.ch
ot.ukb.ch
autodiscover.ukb.ch
eroeffnung-test.ukb.ch
dialog.sbb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-e-banking.ukb.ch
www.privasphere.com
www.ukb.ch
wwwsec.ukb.ch
www.ukb.ch
ssl.ukb.ch
ukb00ncs104-e.ukb.ch
gast.ukb.ch
wwwsec.ukb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
eroeffnung.ukb.ch
wwwsec.ukb.ch
wwwsec.urkb.ch
ukb00ucc114.ukb.ch
twint.ukb.ch
www.privasphere.com
www.ukb.ch
identifikation-test.ukb.ch
twint-test.ukb.ch
www.privasphere.com
dialog.sbb.ch
gast.ukb.ch
dialog.sbb.ch
ukbhb01mx01-e.urkb.ch
ukb00ucc114.ukb.ch
fintest-dev-wwwsec.ukb.ch
ssl.ukb.ch
identifikation.ukb.ch
satellite-test.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-wwwsec.ukb.ch
wwwsec.ukb.ch
www.privasphere.com
ssl.ukb.ch
autodiscover.ukb.ch
www.ukb.ch
gast.ukb.ch
twint-test.ukb.ch
www.privasphere.com
ukbhb01mx01-e.urkb.ch
identifikation-test.ukb.ch
autodiscover.ukb.ch
fintest-e-banking.ukb.ch
twint.ukb.ch
wwwsec.ukb.ch
ukbhb01mx01-e.urkb.ch
zukunftsbild.ukb.ch
zukunftsbild.ukb.ch
eroeffnung.ukb.ch
www.ukb.ch
fintest-wwwsec.ukb.ch
ukb00ucc114.ukb.ch
identifikation-test.ukb.ch
ssl.ukb.ch
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ukb00ncs106-e.ukb.ch
ukb00ucc114.ukb.ch
ukb00ncs106-e.ukb.ch
fintest-wwwsec.ukb.ch
gast.ukb.ch
fintest-dev-wwwsec.ukb.ch
www.privasphere.com
twint-test.ukb.ch
www.ukb.ch
fintest-e-banking.ukb.ch
ukb00ncs104-e.ukb.ch
satellite-test.ukb.ch
identifikation-test.ukb.ch
gast.ukb.ch
twint-test.ukb.ch
fintest-e-banking.ukb.ch
dialog.sbb.ch
www.privasphere.com
twint-test.ukb.ch
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ot.ukb.ch
ssl.ukb.ch
ot.ukb.ch
ukb00ucc114.ukb.ch
securemail.ukb.ch
eroeffnung-test.ukb.ch
satellite.ukb.ch
www.privasphere.com
ukb00ncs106-e.ukb.ch
securemail.ukb.ch
www.privasphere.com
gast.ukb.ch
www.ukb.ch
autodiscover.ukb.ch
ot.ukb.ch
autodiscover.ukb.ch
eroeffnung-test.ukb.ch
dialog.sbb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-e-banking.ukb.ch
www.privasphere.com
www.ukb.ch
wwwsec.ukb.ch
www.ukb.ch
ssl.ukb.ch
ukb00ncs104-e.ukb.ch
gast.ukb.ch
wwwsec.ukb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
eroeffnung.ukb.ch
wwwsec.ukb.ch
wwwsec.urkb.ch
ukb00ucc114.ukb.ch
twint.ukb.ch
www.privasphere.com
www.ukb.ch
identifikation-test.ukb.ch
twint-test.ukb.ch
www.privasphere.com
dialog.sbb.ch
gast.ukb.ch
dialog.sbb.ch
ukbhb01mx01-e.urkb.ch
ukb00ucc114.ukb.ch
fintest-dev-wwwsec.ukb.ch
ssl.ukb.ch
identifikation.ukb.ch
satellite-test.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-wwwsec.ukb.ch
wwwsec.ukb.ch
www.privasphere.com
ssl.ukb.ch
autodiscover.ukb.ch
www.ukb.ch
gast.ukb.ch
twint-test.ukb.ch
www.privasphere.com
ukbhb01mx01-e.urkb.ch
identifikation-test.ukb.ch
autodiscover.ukb.ch
fintest-e-banking.ukb.ch
twint.ukb.ch
wwwsec.ukb.ch
ukbhb01mx01-e.urkb.ch
zukunftsbild.ukb.ch
zukunftsbild.ukb.ch
eroeffnung.ukb.ch
www.ukb.ch
fintest-wwwsec.ukb.ch
ukb00ucc114.ukb.ch
identifikation-test.ukb.ch
ssl.ukb.ch
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ukb00ncs106-e.ukb.ch
ukb00ucc114.ukb.ch
ukb00ncs106-e.ukb.ch
Certificate
The complete raw certificate details for identifikation-test.ukb.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJETCCBvmgAwIBAgIUQ/FEhD/0i0+PLOvKezyTpm19WpYwDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDEyNTEz MDgyM1oXDTI1MDEyNTEzMDgyM1owJTEjMCEGA1UEAxMaaWRlbnRpZmlrYXRpb24t dGVzdC51a2IuY2gwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDgPXde ZJDehx4NYkRiqo+ufscTmF023yAW9aCY1USnNiHh+u3UDWXUNb52geu97L/WbmxF QLEQ829rGeBTHblCbJ9TpSrO/b0zwQS1G+Y7hq80ON0T0VqfpyhCniA0fjFdXJRn agULD6zfeEc/eGR+oJv1UGaYECgEF31YTDhgzs2TA5RFUaR9XLdXIBt40SxOO7w8 sH60yBu9JRQbqu0k5TYt+/tmd8iF2M9JUh39DtQH9MhtkelIemhu8Tm57CInQZG+ MD3rXytyHIJBmUcona0EnOOhwtJ4SuB/NFfQgvppeZuVtxpyyspyRvNg33DkmRSS R7zap0JrZYf9ay0co/GZc3xZmNJplT85bUTPq8CqqvOto8cjECmHi4AB6cVfzzTX ICR1WzQ5pGtePp9+MnKccvBm+wbFN1uNAjfxX1s7nsMNF4SM0C8wZo45sPHdjyjf /49Wj/4uIsrqXMoeVm1eN3TJNoi6a4rqdysfjwVtzxTft013VC8DG3dQrV/TZf76 gAil71X+khKOkuRP30U8mDPVMXqbpXdKbbja+aPC8rml45TtO2qt5nKVWuvTMD4E hF3M0702r7BEyMXs7X7OjO6549ilnpC/5adJ8/MmMFIAIaiKCFukti2v5HiYenaK XbG1g1r6J4uYbB2AobK/3WzAuUKFWuXBjxJ/9wIDAQABo4IEDDCCBAgwgbIGCCsG AQUFBwEBBIGlMIGiMEwGCCsGAQUFBzAChkBodHRwOi8vYWlhLnN3aXNzc2lnbi5j aC9haXItMWI4NjMzODUtZjRhOS00N2ZhLTg4YTUtMmE1YWJmZDRhMTY3MFIGCCsG AQUFBzABhkZodHRwOi8vb2NzcC5zd2lzc3NpZ24uY2gvc2lnbi9vY3MtYWFjY2Nl ZDUtNjZlOC00MDY5LTliMWItZmQyOWFiNzNlZmVjMG8GA1UdIARoMGYwCAYGZ4EM AQIBMAgGBgQAj3oBBjBQBghghXQBWQIBATBEMEIGCCsGAQUFBwIBFjZodHRwczov L3JlcG9zaXRvcnkuc3dpc3NzaWduLmNvbS9Td2lzc1NpZ25fQ1BTX1RMUy5wZGYw UQYDVR0fBEowSDBGoESgQoZAaHR0cDovL2NybC5zd2lzc3NpZ24uY2gvY2RwLTY3 OTcyM2IyLTg2NDEtNDY0Mi04NTAwLWY2ZDJmZjM3ZTZiYTAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMCUGA1UdEQQeMByCGmlk ZW50aWZpa2F0aW9uLXRlc3QudWtiLmNoMB0GA1UdDgQWBBQP7y04Z0IuqjSakE0T RP21IY/qhjAfBgNVHSMEGDAWgBTrvX9Jk4zJ7uyiuvcc0mfwg7Hq3jCCAfUGCisG AQQB1nkCBAIEggHlBIIB4QHfAHYAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6Oq HQcT0wwAAAGNQLxhfAAABAMARzBFAiBHrLtmGUH+NS7Q9cwQSnzx0g60G14+KaQd UMiGbf7NUgIhANd3pD/iVT4HbfpRHHl+PQV8APt8WAinIkDREOd3H2vPAHYAzxFW 7tUufK/zh1vZaS6b6RpxZ0qwF+ysAdJbd87MOwgAAAGNQLxisQAABAMARzBFAiEA yMvJg0USAac3iIzR9AWDuc9KgsgbMfRxSUrJhbs1+88CIE4m59Z/6IVNwXnULIKP bw5dhzEzj3isrd8FdU5hHQ0qAHUAzPsPaoVxCWX+lZtTzumyfCLphVwNl422qX5U wP5MDbAAAAGNQLxlmAAABAMARjBEAiArG95OXX9H7S270CO+XNxz3ePu/ySRcu6X LK16hpsdXAIgZGLyNxaoUmVSSsfgzsawhGeyt+n/OvDlUTZIGB9HZWkAdgBOdaMn XJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAY1AvGb7AAAEAwBHMEUCIQCK gkIwYg9O5tY9fZmvEzZJpYvMuVCBknCv5WfImkVVdwIgZYyb2agmJ61SExonp/xZ kX8F1E2DPBO32GK2VtNMK/IwDQYJKoZIhvcNAQELBQADggIBAHT+0MKcLNaTNO0Q n3whopD6EjgKtoTu2UgVr3iW7p6No4paSJvH+VFfszcmIfBEZF7/6vaRoIULeoV9 kTy09YSMxL4IPAc7s14hxIT4KwTkW4pdelXCw2FYhHr05gUzQT1YHvygRe6DdHHE PGYjv/nucP6pJiTDUWexLRk5KA/zF7H9UCA9TUwUtDZYdGuRPDh9OIPiFSMNdKwg FZifE9gDl2A3aJT/JjPzEjBoVb3WkPn0MZDV84cvw8Yy42hRUJ6x8saErx3XPm5r o6pTxQXF11yIipEz0Sc6GA6uIh10+TfJDCVtKavkq36Pwu2MXp3LfUORFcKamjVM 0+2rlhlpqkENP6B9/HLBfxi42jmoY6KrcKlXBar7wySsi1H9hvqwERK5UvIHHYkw g20QiZdLO3hGzqDBVgvs3DsZYONS+3LFECAWjf5AuVxtmm3NbYjAJSqmvGzX5zKl uwsNoqIttETIyXvLgy0aBBvqaT0MS7tXIqJuK0GGV2HUPE73HNGFgh1Ng/1Q/2Cr TImbloC4ezkJCDAERRDWmkqlAqiJ9O+auG0TggZFaQ/sWXMySdzvamONnfTiBJHf J9pEUdoUSgbWRn+R86X63R3OcPmH5GglcH33Gwzc519z4pJ09PDd/tQUasL/ejHg UeJxiZ8O4u101EWoK/f0dGBmtLW/ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4D13XmSQ3oceDWJEYqqP rn7HE5hdNt8gFvWgmNVEpzYh4frt1A1l1DW+doHrvey/1m5sRUCxEPNvaxngUx25 QmyfU6Uqzv29M8EEtRvmO4avNDjdE9Fan6coQp4gNH4xXVyUZ2oFCw+s33hHP3hk fqCb9VBmmBAoBBd9WEw4YM7NkwOURVGkfVy3VyAbeNEsTju8PLB+tMgbvSUUG6rt JOU2Lfv7ZnfIhdjPSVId/Q7UB/TIbZHpSHpobvE5uewiJ0GRvjA9618rchyCQZlH KJ2tBJzjocLSeErgfzRX0IL6aXmblbcacsrKckbzYN9w5JkUkke82qdCa2WH/Wst HKPxmXN8WZjSaZU/OW1Ez6vAqqrzraPHIxAph4uAAenFX8801yAkdVs0OaRrXj6f fjJynHLwZvsGxTdbjQI38V9bO57DDReEjNAvMGaOObDx3Y8o3/+PVo/+LiLK6lzK HlZtXjd0yTaIumuK6ncrH48Fbc8U37dNd1QvAxt3UK1f02X++oAIpe9V/pISjpLk T99FPJgz1TF6m6V3Sm242vmjwvK5peOU7TtqreZylVrr0zA+BIRdzNO9Nq+wRMjF 7O1+zozuuePYpZ6Qv+WnSfPzJjBSACGoighbpLYtr+R4mHp2il2xtYNa+ieLmGwd gKGyv91swLlChVrlwY8Sf/cCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 387882829875770031287582502281921490023402527382 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 13:08:23 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-25 13:08:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'identifikation-test.ukb.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 914819804678660436002019733676306073737165633338025212220121971741105947851777347708764245394346516274024309337032899150144490780988805814896276149533883658872572133000461703586902655729301359798126594061141708492811611820378407752668279078757201816726201265597573614702238659032641386860905132786442074441820484618203701177731512004954972113413847523472697142315898735309130804893959115212034299340768668766449591824689303748798867936894461365221487324811229947556909210848531787395877989474193230421432598229335265027736561344270407006382893145163035083233660857846482368295933576048704813574055097689006296795175964978284572680760142605369387971752733405495432300533043235392628130238653683250964120547297512214725946965860814622840550931431875780583750606909029372851034499239749724867702883668235244725030268306888481937344371356767317944360979030813261429984027961214041436167550764066443711413613081153832803889467570498649241372204321235249942224843571826613550848315047638385804699953115108930921600180804439453166904828489426558577439401880528984757748404976627390872033726586874812053003668396737595786459710132838339625158822199983927191029633809710195002778263069617673333192392415045238957772408138345265526876214034423 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identifikation-test.ukb.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0fef2d3867422eaa349a904d1344fdb5218fea86 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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