sign.mobiliar.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 46:54:53:7c:58:52:65:5f:7f:31:08:cc:2c:e4:cb:da:93:83:dc:17 was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sign.mobiliar.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 46:54:53:7c:58:52:65:5f:7f:31:08:cc:2c:e4:cb:da:93:83:dc:17
Serial Number (int): 401509889186491061397931946535545073490123283479
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 73:ff:af:29:f3:3d:4a:ab:a4:55:14:33:45:b2:17:b3:d3:ca:61:71
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 49:3b:47:3b:fb:8c:d5:f4:c9:61:ae:7d:40:40:9c:83:de:ca:8b:43
Fingerprint (sha256): 1d:3d:8e:9a:9b:62:da:b1:f6:39:c4:d6:85:a0:9c:09:f1:33:45:06:45:27:f4:ab:ce:ac:5b:79:78:63:21:4b

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate sign.mobiliar.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sign.mobiliar.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sign.mobiliar.ch

Other certificates including the domain name mobiliar.ch

(limited to 100 certificates)
standortcheck.mobiliar.ch
vpn.mobiliar.ch
gp-devsec.mobiliar.ch
cloud.campaign.mobiliar.ch
gp-ext.mobiliar.ch
securemail.mobiliar.ch
m24pp.mobiliar.ch
client-auto-i-dat.mobiliar.ch
vorsorge.mobiliar.ch
leonteq.mobiliar.ch
gp-gw-prelogon.mobiliar.ch
leonteq.mobiliar.ch
marke.mobiliar.ch
gp-portal.mobiliar.ch
gp-gw-prod.mobiliar.ch
video.mobiliar.ch
*.content.mobiliar.ch
meteo-alarm.mobi.ch
gp-gw-dev.mobiliar.ch
tinelstest.mobiliar.ch
sos.mobiliar.ch
test.mobiliar.ch
gp-prod.mobiliar.ch
strategiemap.mobiliar.ch
raiffeisen.mobiliar.ch
gp-gw-dev.mobiliar.ch
mobiliar.ch
trainingnet-compliance.mobiliar.ch
api.training.cyber.mobiliar.ch
staging-video.mobiliar.ch
gp-prelogon.mobiliar.ch
test500.apps.mobiliar.ch
marke.mobiliar.ch
click.campaign.mobiliar.ch
newsletter-cdn.mobiliar.ch
selfservice.mobiliar.ch
secure.mobi.ch
gp-userid.mobiliar.ch
meinauto.mobiliar.ch
handwerker.mobiliar.ch
jobs.mobiliar.ch
selfservice.mobiliar.ch
gp-userid.mobiliar.ch
luawext.mobiliar.ch
strategiemap.mobiliar.ch
url4870.mobiliar.ch
resources.mobiliar.ch
gp-gw-dev.mobiliar.ch
selfservice.mobiliar.ch
newsletter.mobiliar.ch
ucc.mobi.ch
gp-testzertifikat.mobiliar.ch
*.mobiliar.ch
gp-gw-prelogon.mobiliar.ch
mobiliar.ch
*.mobiliar.ch
kunst.mobiliar.ch
my.mobiliar.ch
fancystuff.mobiliar.ch
msghub.mobiliar.ch
mp.mobi.ch
cyber-training.mobiliar.ch
eshop.mobiliar.ch
test.mobiliar.ch
client-comparis.mobiliar.ch
b2capi1.mobiliar.ch
tinelstest.mobiliar.ch
www.handwerker.mobiliar.ch
check.mobiliar.ch
cyber-training.mobiliar.ch
b2capi.mobiliar.ch
liip-lead-client.mobiliar.ch
pssp-admin.mobiliar.ch
test.mobiliar.ch
vorsorge-mobiliar.ch
b2capi.mobiliar.ch
tymodenengelsman.com
vorsorge.mobiliar.ch
fileshare.mobiliar.ch
msghub.mobiliar.ch
meinauto-client.mobiliar.ch
smide.mobiliar.ch
gp-userid.mobiliar.ch
elm.mobiliar.ch
kunst.mobiliar.ch
igb2b.mobiliar.ch
b2eapi1.mobiliar.ch
eshop.mobiliar.ch
b2bapi2.mobiliar.ch
sign.mobiliar.ch
vorsorge.mobiliar.ch
viq.mobiliar.ch
jobs.mobiliar.ch
gp-gw-prelogon.mobiliar.ch
b2capi.mobiliar.ch
awareness.mobiliar.ch
z101392.mobiliar.ch
client-auto-i-dat.mobiliar.ch
kunst.mobiliar.ch
ftp.mobiliar.ch

Certificate

The complete raw certificate details for sign.mobiliar.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIATCCBemgAwIBAgIURlRTfFhSZV9/MQjMLOTL2pOD3BcwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDMyNjEy
MzUyNFoXDTI1MDMyNjEyMzUyNFowGzEZMBcGA1UEAxMQc2lnbi5tb2JpbGlhci5j
aDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANu32lgl1ZflFHnnejCW
0g26AaT+Vvjy4mUmCmOkKB19nZb/jyZOybH7KsetDCfvV01mAnYMQthtLy79G410
srH1l7emDujZyX30x0JVPNceyh768sYMZYUF6iY3yYvTZPs5oMz3snxOLd424tUx
116yNnq1Ac2vnQ2N8P1T9oqLa9ZuQmKu9lBfg8oho3HvZgnskM7O+OKq+gjRhFf7
NDokw1+nenFOe9TeOuHYNzGjE9YqgLzMSqwtnbJ50HUiEo4PIhwC1uLAbHaGXQwj
q64PKyR/5hWANGDX0gCffqmPLJYUCkR3yXjAQwf6/RfIrHFCHLdHH0jxXjTGd9DA
/mMCAwEAAaOCBAYwggQCMIGyBggrBgEFBQcBAQSBpTCBojBMBggrBgEFBQcwAoZA
aHR0cDovL2FpYS5zd2lzc3NpZ24uY2gvYWlyLTFiODYzMzg1LWY0YTktNDdmYS04
OGE1LTJhNWFiZmQ0YTE2NzBSBggrBgEFBQcwAYZGaHR0cDovL29jc3Auc3dpc3Nz
aWduLmNoL3NpZ24vb2NzLWFhY2NjZWQ1LTY2ZTgtNDA2OS05YjFiLWZkMjlhYjcz
ZWZlYzBvBgNVHSAEaDBmMAgGBmeBDAECATAIBgYEAI96AQYwUAYIYIV0AVkCAQEw
RDBCBggrBgEFBQcCARY2aHR0cHM6Ly9yZXBvc2l0b3J5LnN3aXNzc2lnbi5jb20v
U3dpc3NTaWduX0NQU19UTFMucGRmMFEGA1UdHwRKMEgwRqBEoEKGQGh0dHA6Ly9j
cmwuc3dpc3NzaWduLmNoL2NkcC02Nzk3MjNiMi04NjQxLTQ2NDItODUwMC1mNmQy
ZmYzN2U2YmEwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB
/wQEAwIFoDAbBgNVHREEFDASghBzaWduLm1vYmlsaWFyLmNoMB0GA1UdDgQWBBRz
/68p8z1Kq6RVFDNFshez08phcTAfBgNVHSMEGDAWgBTrvX9Jk4zJ7uyiuvcc0mfw
g7Hq3jCCAfkGCisGAQQB1nkCBAIEggHpBIIB5QHjAHcAKOKBOP2DIUXpqdaqdTdt
g3eohRKzwH9yQUgh3L3pjGYAAAGOesIdqQAABAMASDBGAiEAiCYyXiN8KPuinYcQ
//neEdhg1Pws/gjX+wRK3F/zIQoCIQCkZc3WB3ocigX/kZZqpMF/DuIyB3P5En6M
km1RFsH53QB2AM8RVu7VLnyv84db2Wkum+kacWdKsBfsrAHSW3fOzDsIAAABjnrC
GoQAAAQDAEcwRQIgNH56W0pqts5KWy72TcNZ0u0VDBiZj5xcAgiDCLV28/8CIQD+
mLGRVri708K54DSfxGcttw3fIW4EjVYNEhXEssOi0wB3AMz7D2qFcQll/pWbU87p
snwi6YVcDZeNtql+VMD+TA2wAAABjnrCGtcAAAQDAEgwRgIhANQNYGHYvMV9otZp
fLnRWcJm2HWNpU9SJ8slq8YDnzm9AiEAo66dN011HwNwka7qwvBi3pvKJD2sKwz0
Y3+bHI5hF9AAdwBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAY56
whrAAAAEAwBIMEYCIQDqcXoF90xg6Cn3BIiL0XCbioTJIf5s6er7ZnEvrC4OQwIh
AMGdKfhPJ4yGRFBuFgwr7UppTteJi5/qQtVEV+l9pg17MA0GCSqGSIb3DQEBCwUA
A4ICAQCkVMsxMlxKX1T6SESUizPxwe0KHzYWHZwTNqRQXoEKmhcJik8laXCeCFfQ
lcRJOOqijdDzImzy/HZSpsrMy8gOAatAVQMlA8+hnwesfGkprqJGdbSBF/iCfSIE
MUtl9uAazRDidzMOxdAmQOM3+b1rOAv+oOfHXPudb76mlesJ0F1aZACRNncgE3+5
6cFxluzygum37h1H0bWdf0zvX1GY4Dz+xeyEvkL8MY30x+KOgtKIbEIRSNGYJhcz
NBVnU5ggu4AK/PPxbAMYl6VDuYFV4Mio9TGeF0+ehGGwS7LX53UQ97sZ3rwELt5s
C3VkF5gSDFfQDkiPTG0Cg+btfZ7+oNHrAhz/clXhccwyBVmheDy12qXCbnzpqvQy
0lIgEgHHTDR85lD2P0naIzTONjtMKWFHY0ZlUJjkRj2LAQQOwSR1EDxzfqUXzm/l
lrIu1ilL8gz51njnHSAoE94I1uEXZCBFPh1s/ZhjqwsKhTV7mAkOts5IVbTTnI+P
UoKmoudgVyCOQjmYNFk8yireSwoLiKx8Ze5GaQ5uvwUSVkbVgPwLfnIvxqSK5uON
Ml0KbqGaHGOTSPboNI+WNWM/+nzOdFYm3eyFtGDg1V3dRzcUR/5Uqy8Shndwmb4I
8npOigwYwirx/MwLyZFlpQyldvtVlZpvVJVhLns3VMKkMZANKQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27faWCXVl+UUeed6MJbS
DboBpP5W+PLiZSYKY6QoHX2dlv+PJk7Jsfsqx60MJ+9XTWYCdgxC2G0vLv0bjXSy
sfWXt6YO6NnJffTHQlU81x7KHvryxgxlhQXqJjfJi9Nk+zmgzPeyfE4t3jbi1THX
XrI2erUBza+dDY3w/VP2iotr1m5CYq72UF+DyiGjce9mCeyQzs744qr6CNGEV/s0
OiTDX6d6cU571N464dg3MaMT1iqAvMxKrC2dsnnQdSISjg8iHALW4sBsdoZdDCOr
rg8rJH/mFYA0YNfSAJ9+qY8slhQKRHfJeMBDB/r9F8iscUIct0cfSPFeNMZ30MD+
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401509889186491061397931946535545073490123283479
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 12:35:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-26 12:35:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sign.mobiliar.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27736850035260136957233703563533975620781155710496209605428657536880813257933924784242918207096440335840802099534250279365697109505990209937742618139472774273072456253689898114932677179520748088133786299340623246809783145912632736932142753615539381378282620382934994320665891068261051499344313435531318893718239739491597699284473558772355759158655881569813102609371279025482253359230170754178325331301220187709900766284627698678796079865894137770129400169676892139100359938068111779467386907775082901703201036941634614474010612246856520882730161458657236161028268024023836057543499888565426035343050977895804185935459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sign.mobiliar.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							73ffaf29f33d4aaba455143345b217b3d3ca6171
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (489 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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