node2.lb.trid.switch.ch
- SWITCH -
Issued by DigiCert EV RSA CA G2
About this certificate
This digital certificate with serial number 09:59:81:cd:9a:11:9b:fa:48:46:3e:52:a4:54:95:46 was issued on by DigiCert Inc.
With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
SWITCH
Company registration number:
CHE-101.494.993
Organization: SWITCH
Organization: SWITCH
Locality:
Zurich
Country: CH
Country: CH
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 09:59:81:cd:9a:11:9b:fa:48:46:3e:52:a4:54:95:46Serial Number (int): 12427799102768008839866744633497523526
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 76:7c:41:84:88:46:06:69:d8:8a:8a:0c:e9:c0:b6:c6:3b:c9:53:cf
AuthorityKeyId: 6a:4e:50:bf:98:68:9d:5b:7b:20:75:d4:59:01:79:48:66:92:32:06
Fingerprint (sha1): ce:11:eb:55:ec:2e:a5:04:35:f4:39:77:1f:97:ac:60:68:97:42:60
Fingerprint (sha256): 20:e2:19:c3:54:fb:a2:6c:b6:f6:24:c3:6b:68:ee:97:7e:80:69:8a:1f:04:61:bb:7b:4a:77:3e:a1:8d:46:af
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertEVRSACAG2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertEVRSACAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertEVRSACAG2.crl
Check the revocation status for certificate node2.lb.trid.switch.ch
86
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for node2.lb.trid.switch.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
node2.lb.trid.switch.ch
eduid.ch
www.eduid.ch
edu-id.ch
www.edu-id.ch
test.eduid.ch
www.test.eduid.ch
dev.eduid.ch
static.eduid.ch
mfa.eduid.ch
mfa.test.eduid.ch
mfa.dev.eduid.ch
wayf.switch.ch
wayf-test.switch.ch
attribute-viewer.aai.switch.ch
attribute-viewer-test.aai.switch.ch
attribute-viewer-dev.aai.switch.ch
login.eduid.ch
login.staging.eduid.ch
alumniethz.login.eduid.ch
bfh.login.eduid.ch
careum.login.eduid.ch
ehsm.login.eduid.ch
ethz.login.eduid.ch
ethz.login.staging.eduid.ch
fernuni.login.eduid.ch
ffhs.login.eduid.ch
fh-hwz.login.eduid.ch
fhnw.login.eduid.ch
graduateinstitute.login.eduid.ch
hep-bejune.login.eduid.ch
hepl.login.eduid.ch
hepvs.login.eduid.ch
hes-so.login.eduid.ch
hfh.login.eduid.ch
hslu.login.eduid.ch
hug.login.eduid.ch
ost.login.eduid.ch
phbern.login.eduid.ch
phgr.login.eduid.ch
phnmsbern.login.eduid.ch
phsg.login.eduid.ch
phsh.login.eduid.ch
phzg.login.eduid.ch
phzh.login.eduid.ch
psi.login.eduid.ch
sfuvet.login.eduid.ch
slsp.login.eduid.ch
switch.login.eduid.ch
switch.login.staging.eduid.ch
unibas.login.eduid.ch
unibe.login.eduid.ch
unifr.login.eduid.ch
unige.login.eduid.ch
unil.login.eduid.ch
unilu.login.eduid.ch
unine.login.eduid.ch
unisg.login.eduid.ch
usb.login.eduid.ch
usi.login.eduid.ch
usz.login.eduid.ch
uzh.login.eduid.ch
zhaw.login.eduid.ch
zhbluzern.login.eduid.ch
zhdk.login.eduid.ch
login.test.eduid.ch
login.idph.test.eduid.ch
login.aaidemo.test.eduid.ch
phnmsbern.azure-login.eduid.ch
phgr.azure-login.eduid.ch
testphgr.azure-login.eduid.ch
unils.azure-login.eduid.ch
hslu.login.test.eduid.ch
uni-demo.login.test.eduid.ch
uni-partner.login.test.eduid.ch
unige.login.test.eduid.ch
uni-demo.azure-login.test.eduid.ch
unidemo.azure-login.test.eduid.ch
kuriotec.azure-login.test.eduid.ch
aai-logon.switch.ch
aai-demo-idp.switch.ch
aai-logon.vho-switchaai.ch
switchboard.eduroam.ch
esign.switch.ch
esign-test.switch.ch
login.dev.eduid.ch
eduid.ch
www.eduid.ch
edu-id.ch
www.edu-id.ch
test.eduid.ch
www.test.eduid.ch
dev.eduid.ch
static.eduid.ch
mfa.eduid.ch
mfa.test.eduid.ch
mfa.dev.eduid.ch
wayf.switch.ch
wayf-test.switch.ch
attribute-viewer.aai.switch.ch
attribute-viewer-test.aai.switch.ch
attribute-viewer-dev.aai.switch.ch
login.eduid.ch
login.staging.eduid.ch
alumniethz.login.eduid.ch
bfh.login.eduid.ch
careum.login.eduid.ch
ehsm.login.eduid.ch
ethz.login.eduid.ch
ethz.login.staging.eduid.ch
fernuni.login.eduid.ch
ffhs.login.eduid.ch
fh-hwz.login.eduid.ch
fhnw.login.eduid.ch
graduateinstitute.login.eduid.ch
hep-bejune.login.eduid.ch
hepl.login.eduid.ch
hepvs.login.eduid.ch
hes-so.login.eduid.ch
hfh.login.eduid.ch
hslu.login.eduid.ch
hug.login.eduid.ch
ost.login.eduid.ch
phbern.login.eduid.ch
phgr.login.eduid.ch
phnmsbern.login.eduid.ch
phsg.login.eduid.ch
phsh.login.eduid.ch
phzg.login.eduid.ch
phzh.login.eduid.ch
psi.login.eduid.ch
sfuvet.login.eduid.ch
slsp.login.eduid.ch
switch.login.eduid.ch
switch.login.staging.eduid.ch
unibas.login.eduid.ch
unibe.login.eduid.ch
unifr.login.eduid.ch
unige.login.eduid.ch
unil.login.eduid.ch
unilu.login.eduid.ch
unine.login.eduid.ch
unisg.login.eduid.ch
usb.login.eduid.ch
usi.login.eduid.ch
usz.login.eduid.ch
uzh.login.eduid.ch
zhaw.login.eduid.ch
zhbluzern.login.eduid.ch
zhdk.login.eduid.ch
login.test.eduid.ch
login.idph.test.eduid.ch
login.aaidemo.test.eduid.ch
phnmsbern.azure-login.eduid.ch
phgr.azure-login.eduid.ch
testphgr.azure-login.eduid.ch
unils.azure-login.eduid.ch
hslu.login.test.eduid.ch
uni-demo.login.test.eduid.ch
uni-partner.login.test.eduid.ch
unige.login.test.eduid.ch
uni-demo.azure-login.test.eduid.ch
unidemo.azure-login.test.eduid.ch
kuriotec.azure-login.test.eduid.ch
aai-logon.switch.ch
aai-demo-idp.switch.ch
aai-logon.vho-switchaai.ch
switchboard.eduroam.ch
esign.switch.ch
esign-test.switch.ch
login.dev.eduid.ch
Other certificates including the domain name switch.ch
(limited to 100 certificates)
hsr.meet.switch.ch
point.switch.ch
wiki.smap.switch.ch
discourse.toolbox.switch.ch
collab-fms-test.switch.ch
kelimutu.switch.ch
tls.automattic.com
vico.switch.ch
zeus.switch.ch
parma.switch.ch
fl-0-51.zhdk.cloud.switch.ch
ssad.events.switch.ch
placement.api.s2.scloud.switch.ch
evct.ssl.switch.ch
unibas.meet.switch.ch
grafana.int.os-ls.kaas.switch.ch
*.s3-zh.lts.switch.ch
tls.automattic.com
zhaw.meet.switch.ch
neutron.api.s2.scloud.switch.ch
testsp.tw.switch.ch
portal-dev.switch.ch
landingpage.rpz.switch.ch
trust.aviareto.aero
mail.switch.ch
player.cast.switch.ch
test.toolbox.switch.ch
domain-pulse.at
intern.meet.switch.ch
zeus.switch.ch
influxdb.cast-test.switch.ch
glance.api.unil.cloud.switch.ch
producer.cast.switch.ch
filesender.switch.ch
staging.groupie.lard.switch.ch
unili.meet.switch.ch
backend.www.switch.ch
vcregister.switch.ch
kava-admin.cast.switch.ch
worker3.oc-test.switch.ch
alphubel.switch.ch
drive-backup.switch.ch
engines-admin.scloud.switch.ch
*.os.zhdk.cloud.switch.ch
www-test.switch.ch
monitor.switch.ch
wayf.switch.ch
teramac.switch.ch
tls.automattic.com
node21.webauthn.eduid.ch
forge.switch.ch
cast-ng.switch.ch
www.switch.ch
test.id.switch.ch
os.unil.cloud.switch.ch
wayf-test.switch.ch
aai-logon.switch.ch
tls.automattic.com
landingpage.mw.rpz.switch.ch
contracts-test.switch.ch
driveonlyoffice.switch.ch
portfolio.switch.ch
fl-6-178.zhdk.cloud.switch.ch
octavia.api.s1.scloud.switch.ch
cloud-id.switch.ch
compute.api.test1.cloud.switch.ch
portal-dev.switch.ch
status.dilercloud.com
player.cast.switch.ch
bonseyes.zhdk.cloud.switch.ch
cloud-id.switch.ch
tools.aai.switch.ch
download.cast.switch.ch
tools.switch.ch
www-dev.switch.ch
admin.oc-test.switch.ch
www-dev.switch.ch
wayf-test.switch.ch
test.idph.switch.ch
bfh.meet.switch.ch
urlanalyzer-staging-backend.misc01.k8s.cert.switch.ch
password.switch.ch
idp-monitor.aai.switch.ch
saqcnfbe.events.switch.ch
cr.gitlab.switch.ch
*.lts.switch.ch
kava-admin.cast.switch.ch
unibe.meet.switch.ch
domain-pulse.at
bonseyes.zhdk.cloud.switch.ch
wiki.smap.switch.ch
producer.cast.switch.ch
tls.automattic.com
switchnovember.events.switch.ch
*.sandstorm.cloud.switch.ch
portfolio.switch.ch
metadata-test.aai.switch.ch
kelimutu.switch.ch
presentation.cast.switch.ch
mirror.cloud.switch.ch
point.switch.ch
wiki.smap.switch.ch
discourse.toolbox.switch.ch
collab-fms-test.switch.ch
kelimutu.switch.ch
tls.automattic.com
vico.switch.ch
zeus.switch.ch
parma.switch.ch
fl-0-51.zhdk.cloud.switch.ch
ssad.events.switch.ch
placement.api.s2.scloud.switch.ch
evct.ssl.switch.ch
unibas.meet.switch.ch
grafana.int.os-ls.kaas.switch.ch
*.s3-zh.lts.switch.ch
tls.automattic.com
zhaw.meet.switch.ch
neutron.api.s2.scloud.switch.ch
testsp.tw.switch.ch
portal-dev.switch.ch
landingpage.rpz.switch.ch
trust.aviareto.aero
mail.switch.ch
player.cast.switch.ch
test.toolbox.switch.ch
domain-pulse.at
intern.meet.switch.ch
zeus.switch.ch
influxdb.cast-test.switch.ch
glance.api.unil.cloud.switch.ch
producer.cast.switch.ch
filesender.switch.ch
staging.groupie.lard.switch.ch
unili.meet.switch.ch
backend.www.switch.ch
vcregister.switch.ch
kava-admin.cast.switch.ch
worker3.oc-test.switch.ch
alphubel.switch.ch
drive-backup.switch.ch
engines-admin.scloud.switch.ch
*.os.zhdk.cloud.switch.ch
www-test.switch.ch
monitor.switch.ch
wayf.switch.ch
teramac.switch.ch
tls.automattic.com
node21.webauthn.eduid.ch
forge.switch.ch
cast-ng.switch.ch
www.switch.ch
test.id.switch.ch
os.unil.cloud.switch.ch
wayf-test.switch.ch
aai-logon.switch.ch
tls.automattic.com
landingpage.mw.rpz.switch.ch
contracts-test.switch.ch
driveonlyoffice.switch.ch
portfolio.switch.ch
fl-6-178.zhdk.cloud.switch.ch
octavia.api.s1.scloud.switch.ch
cloud-id.switch.ch
compute.api.test1.cloud.switch.ch
portal-dev.switch.ch
status.dilercloud.com
player.cast.switch.ch
bonseyes.zhdk.cloud.switch.ch
cloud-id.switch.ch
tools.aai.switch.ch
download.cast.switch.ch
tools.switch.ch
www-dev.switch.ch
admin.oc-test.switch.ch
www-dev.switch.ch
wayf-test.switch.ch
test.idph.switch.ch
bfh.meet.switch.ch
urlanalyzer-staging-backend.misc01.k8s.cert.switch.ch
password.switch.ch
idp-monitor.aai.switch.ch
saqcnfbe.events.switch.ch
cr.gitlab.switch.ch
*.lts.switch.ch
kava-admin.cast.switch.ch
unibe.meet.switch.ch
domain-pulse.at
bonseyes.zhdk.cloud.switch.ch
wiki.smap.switch.ch
producer.cast.switch.ch
tls.automattic.com
switchnovember.events.switch.ch
*.sandstorm.cloud.switch.ch
portfolio.switch.ch
metadata-test.aai.switch.ch
kelimutu.switch.ch
presentation.cast.switch.ch
mirror.cloud.switch.ch
Certificate
The complete raw certificate details for node2.lb.trid.switch.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIOjDCCDXSgAwIBAgIQCVmBzZoRm/pIRj5SpFSVRjANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE aWdpQ2VydCBFViBSU0EgQ0EgRzIwHhcNMjMwNjI4MDAwMDAwWhcNMjQwNjI3MjM1 OTU5WjCBtjETMBEGCysGAQQBgjc8AgEDEwJDSDEVMBMGCysGAQQBgjc8AgECEwRC ZXJuMR0wGwYDVQQPDBRQcml2YXRlIE9yZ2FuaXphdGlvbjEYMBYGA1UEBRMPQ0hF LTEwMS40OTQuOTkzMQswCQYDVQQGEwJDSDEPMA0GA1UEBxMGWnVyaWNoMQ8wDQYD VQQKEwZTV0lUQ0gxIDAeBgNVBAMTF25vZGUyLmxiLnRyaWQuc3dpdGNoLmNoMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fjofvT+jQFkIRi1JbPbXZCY k0kEnG7nQuaQEkiSK4YeU5VfX0PpUDx90iE0L8AxJRvbvzKhJ33RMIze5XCLeVN8 YH7YH7qdQmJW+d/5fct4YJDCZ2/ZXb4XfW/sFENi/NID6rkVCmOS0pgib1a9a/0S sgR0Wee5KmSI9p7aMUF9GZiIVBmGK9g8rBzWne2G7HzvyrYhQ+6kxkn6MkS1gONS +EObPvf8AEXB5jhEpayt/W1K676pmkkfc2mLKreP3LSRM0ueFmzr2D/9hjrC6mM4 oc/oZLWKc9/CH+B9Zfqqsb2lQB5sm8I5+FE8S7HJdwCasGiAxWtXTkzJA8s1bQID AQABo4ILBTCCCwEwHwYDVR0jBBgwFoAUak5Qv5honVt7IHXUWQF5SGaSMgYwHQYD VR0OBBYEFHZ8QYSIRgZp2IqKDOnAtsY7yVPPMIIHyQYDVR0RBIIHwDCCB7yCF25v ZGUyLmxiLnRyaWQuc3dpdGNoLmNogghlZHVpZC5jaIIMd3d3LmVkdWlkLmNoggll ZHUtaWQuY2iCDXd3dy5lZHUtaWQuY2iCDXRlc3QuZWR1aWQuY2iCEXd3dy50ZXN0 LmVkdWlkLmNoggxkZXYuZWR1aWQuY2iCD3N0YXRpYy5lZHVpZC5jaIIMbWZhLmVk dWlkLmNoghFtZmEudGVzdC5lZHVpZC5jaIIQbWZhLmRldi5lZHVpZC5jaIIOd2F5 Zi5zd2l0Y2guY2iCE3dheWYtdGVzdC5zd2l0Y2guY2iCHmF0dHJpYnV0ZS12aWV3 ZXIuYWFpLnN3aXRjaC5jaIIjYXR0cmlidXRlLXZpZXdlci10ZXN0LmFhaS5zd2l0 Y2guY2iCImF0dHJpYnV0ZS12aWV3ZXItZGV2LmFhaS5zd2l0Y2guY2iCDmxvZ2lu LmVkdWlkLmNoghZsb2dpbi5zdGFnaW5nLmVkdWlkLmNoghlhbHVtbmlldGh6Lmxv Z2luLmVkdWlkLmNoghJiZmgubG9naW4uZWR1aWQuY2iCFWNhcmV1bS5sb2dpbi5l ZHVpZC5jaIITZWhzbS5sb2dpbi5lZHVpZC5jaIITZXRoei5sb2dpbi5lZHVpZC5j aIIbZXRoei5sb2dpbi5zdGFnaW5nLmVkdWlkLmNoghZmZXJudW5pLmxvZ2luLmVk dWlkLmNoghNmZmhzLmxvZ2luLmVkdWlkLmNoghVmaC1od3oubG9naW4uZWR1aWQu Y2iCE2ZobncubG9naW4uZWR1aWQuY2iCIGdyYWR1YXRlaW5zdGl0dXRlLmxvZ2lu LmVkdWlkLmNoghloZXAtYmVqdW5lLmxvZ2luLmVkdWlkLmNoghNoZXBsLmxvZ2lu LmVkdWlkLmNoghRoZXB2cy5sb2dpbi5lZHVpZC5jaIIVaGVzLXNvLmxvZ2luLmVk dWlkLmNoghJoZmgubG9naW4uZWR1aWQuY2iCE2hzbHUubG9naW4uZWR1aWQuY2iC Emh1Zy5sb2dpbi5lZHVpZC5jaIISb3N0LmxvZ2luLmVkdWlkLmNoghVwaGJlcm4u bG9naW4uZWR1aWQuY2iCE3BoZ3IubG9naW4uZWR1aWQuY2iCGHBobm1zYmVybi5s b2dpbi5lZHVpZC5jaIITcGhzZy5sb2dpbi5lZHVpZC5jaIITcGhzaC5sb2dpbi5l ZHVpZC5jaIITcGh6Zy5sb2dpbi5lZHVpZC5jaIITcGh6aC5sb2dpbi5lZHVpZC5j aIIScHNpLmxvZ2luLmVkdWlkLmNoghVzZnV2ZXQubG9naW4uZWR1aWQuY2iCE3Ns c3AubG9naW4uZWR1aWQuY2iCFXN3aXRjaC5sb2dpbi5lZHVpZC5jaIIdc3dpdGNo LmxvZ2luLnN0YWdpbmcuZWR1aWQuY2iCFXVuaWJhcy5sb2dpbi5lZHVpZC5jaIIU dW5pYmUubG9naW4uZWR1aWQuY2iCFHVuaWZyLmxvZ2luLmVkdWlkLmNoghR1bmln ZS5sb2dpbi5lZHVpZC5jaIITdW5pbC5sb2dpbi5lZHVpZC5jaIIUdW5pbHUubG9n aW4uZWR1aWQuY2iCFHVuaW5lLmxvZ2luLmVkdWlkLmNoghR1bmlzZy5sb2dpbi5l ZHVpZC5jaIISdXNiLmxvZ2luLmVkdWlkLmNoghJ1c2kubG9naW4uZWR1aWQuY2iC EnVzei5sb2dpbi5lZHVpZC5jaIISdXpoLmxvZ2luLmVkdWlkLmNoghN6aGF3Lmxv Z2luLmVkdWlkLmNoghh6aGJsdXplcm4ubG9naW4uZWR1aWQuY2iCE3poZGsubG9n aW4uZWR1aWQuY2iCE2xvZ2luLnRlc3QuZWR1aWQuY2iCGGxvZ2luLmlkcGgudGVz dC5lZHVpZC5jaIIbbG9naW4uYWFpZGVtby50ZXN0LmVkdWlkLmNogh5waG5tc2Jl cm4uYXp1cmUtbG9naW4uZWR1aWQuY2iCGXBoZ3IuYXp1cmUtbG9naW4uZWR1aWQu Y2iCHXRlc3RwaGdyLmF6dXJlLWxvZ2luLmVkdWlkLmNoghp1bmlscy5henVyZS1s b2dpbi5lZHVpZC5jaIIYaHNsdS5sb2dpbi50ZXN0LmVkdWlkLmNoghx1bmktZGVt by5sb2dpbi50ZXN0LmVkdWlkLmNogh91bmktcGFydG5lci5sb2dpbi50ZXN0LmVk dWlkLmNoghl1bmlnZS5sb2dpbi50ZXN0LmVkdWlkLmNogiJ1bmktZGVtby5henVy ZS1sb2dpbi50ZXN0LmVkdWlkLmNogiF1bmlkZW1vLmF6dXJlLWxvZ2luLnRlc3Qu ZWR1aWQuY2iCImt1cmlvdGVjLmF6dXJlLWxvZ2luLnRlc3QuZWR1aWQuY2iCE2Fh aS1sb2dvbi5zd2l0Y2guY2iCFmFhaS1kZW1vLWlkcC5zd2l0Y2guY2iCGmFhaS1s b2dvbi52aG8tc3dpdGNoYWFpLmNoghZzd2l0Y2hib2FyZC5lZHVyb2FtLmNogg9l c2lnbi5zd2l0Y2guY2iCFGVzaWduLXRlc3Quc3dpdGNoLmNoghJsb2dpbi5kZXYu ZWR1aWQuY2gwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjB1BgNVHR8EbjBsMDSgMqAwhi5odHRwOi8vY3JsMy5kaWdpY2VydC5j b20vRGlnaUNlcnRFVlJTQUNBRzIuY3JsMDSgMqAwhi5odHRwOi8vY3JsNC5kaWdp Y2VydC5jb20vRGlnaUNlcnRFVlJTQUNBRzIuY3JsMEoGA1UdIARDMEEwCwYJYIZI AYb9bAIBMDIGBWeBDAEBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNl cnQuY29tL0NQUzBzBggrBgEFBQcBAQRnMGUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9v Y3NwLmRpZ2ljZXJ0LmNvbTA9BggrBgEFBQcwAoYxaHR0cDovL2NhY2VydHMuZGln aWNlcnQuY29tL0RpZ2lDZXJ0RVZSU0FDQUcyLmNydDAJBgNVHRMEAjAAMIIBfgYK KwYBBAHWeQIEAgSCAW4EggFqAWgAdgB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIK n+ZnTFo6dAAAAYkCiignAAAEAwBHMEUCIQC+KQKjSXK1saCWH0XOt79VZlDoEbah H6s7qlP6/R+LKAIgFaYpmuBCU9LjNKoyuoGi3PjrHAq30X1Pc20iyN669dgAdQBI sONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYkCiigpAAAEAwBGMEQC IES1dPnA9iyA40bTbV+hdn6S7WHawbWni/66BCrkLwS3AiBRfUxcpi8+Ka7FJzof KjyQ01GHMJYc3CsXxM/SYzm3iQB3ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2k PTBI1/urAAABiQKKKAQAAAQDAEgwRgIhAPU/jROG1vnFtfixAt7mRE9C1hJ2Q8P0 6/HfU6tmI9KVAiEAkPMYAjOpk7c8OHOS+54ktSaleY0PcwqJAc0l9ElntXQwDQYJ KoZIhvcNAQELBQADggEBAGDWB1Pee5jO1gi6sLVPPd1O3FOMaoSF+kXmsdIqOI1c UGB+/IwdH6QtdYNMLg74Fc99MkMA+TfkLNT4ok8qEfm22V1Gt8axk0LYTlIeRRun hI2YPG6BEglskEc6aS7q6+cQElITIT6iZupt8jmXCjU1yOnqi7LqPQ9jW+/tqUY9 lZl6Zevik+sSZE4sWLQ7agTn+dxOD6bJkH0SpY0Nps2QGy7DXD+CHf4OFIfvcF/4 f8+a4MXzcchi0btko3+PKssqjLRejzy4+UTYHmXjkkYpDeeEO7zDi1DO1mzH5SBJ 8ACvSkZ4kC7xEmdQbXdVy/7nmOa4b3Tvaodx7s9rf7Q= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fjofvT+jQFkIRi1JbPb XZCYk0kEnG7nQuaQEkiSK4YeU5VfX0PpUDx90iE0L8AxJRvbvzKhJ33RMIze5XCL eVN8YH7YH7qdQmJW+d/5fct4YJDCZ2/ZXb4XfW/sFENi/NID6rkVCmOS0pgib1a9 a/0SsgR0Wee5KmSI9p7aMUF9GZiIVBmGK9g8rBzWne2G7HzvyrYhQ+6kxkn6MkS1 gONS+EObPvf8AEXB5jhEpayt/W1K676pmkkfc2mLKreP3LSRM0ueFmzr2D/9hjrC 6mM4oc/oZLWKc9/CH+B9Zfqqsb2lQB5sm8I5+FE8S7HJdwCasGiAxWtXTkzJA8s1 bQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12427799102768008839866744633497523526 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert EV RSA CA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-27 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHE-101.494.993' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zurich' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SWITCH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'node2.lb.trid.switch.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27516453379375318184991432510977927288611205487722859757884962213829067939195912582524597191943122087763506685859689682204203592607959274657471726009878285180953012378859014372216081318530328712287943678095654318824082760532838183159238967282212341617956058288423164702787258059396883439394001753508855274602170950075633775140674135197917421659646148319127642468647310946823647602311477455428828790605759657632186791079754458030066984381748079529006880627961777679699254059877702902007548874867398780845276130236868207959570490669926043984909295088067196812496202720152368359774722536899843346995841365765863861073261 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6a4e50bf98689d5b7b2075d45901794866923206 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 767c418488460669d88a8a0ce9c0b6c63bc953cf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1984 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'node2.lb.trid.switch.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu-id.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edu-id.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfa.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfa.test.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfa.dev.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayf.switch.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayf-test.switch.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribute-viewer.aai.switch.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribute-viewer-test.aai.switch.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribute-viewer-dev.aai.switch.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.staging.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniethz.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfh.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careum.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehsm.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethz.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethz.login.staging.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fernuni.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffhs.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fh-hwz.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhnw.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graduateinstitute.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hep-bejune.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hepl.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hepvs.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hes-so.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfh.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hslu.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hug.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ost.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phbern.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phgr.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phnmsbern.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phsg.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phsh.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phzg.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phzh.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psi.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfuvet.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slsp.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switch.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switch.login.staging.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unibas.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unibe.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unifr.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unige.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unil.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unilu.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unine.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unisg.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usb.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usi.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usz.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uzh.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhaw.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhbluzern.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhdk.login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.test.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.idph.test.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.aaidemo.test.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phnmsbern.azure-login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phgr.azure-login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testphgr.azure-login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unils.azure-login.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hslu.login.test.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni-demo.login.test.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni-partner.login.test.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unige.login.test.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni-demo.azure-login.test.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unidemo.azure-login.test.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuriotec.azure-login.test.eduid.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aai-logon.switch.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aai-demo-idp.switch.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aai-logon.vho-switchaai.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switchboard.eduroam.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esign.switch.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esign-test.switch.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.dev.eduid.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertEVRSACAG2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertEVRSACAG2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertEVRSACAG2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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