versicherungscheck.mobiliar.ch

- Schweizerische Mobiliar Holding AG -

Issued by SwissSign Server Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 52:07:90:e8:b6:ae:fb:8e:2d:46:96:2c:90:df:4a:ec:c8:3b:37:18 was issued on by SwissSign AG.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Schweizerische Mobiliar Holding AG

Organization: Schweizerische Mobiliar Holding AG
Organization unit: IT
State / Province: Bern
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 52:07:90:e8:b6:ae:fb:8e:2d:46:96:2c:90:df:4a:ec:c8:3b:37:18
Serial Number (int): 468305971781455911517810687248851639180222740248
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 57:6f:65:0c:e6:79:08:00:5a:40:ff:16:fe:d4:9b:ba:35:23:27:cb
AuthorityKeyId: e7:f1:e7:fd:2e:53:ad:11:e5:81:1a:57:a4:73:8f:12:7d:98:c8:ae

Fingerprint (sha1): a4:ff:11:57:7a:3a:26:98:60:8c:92:7b:ff:5b:24:e0:30:63:db:0e
Fingerprint (sha256): 20:e5:cc:6a:35:9a:ec:5f:c6:e5:8d:0c:88:55:69:2e:06:41:c8:fd:90:ee:fc:38:51:84:e8:8c:84:25:ef:ea

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE

Revocation information

OCSP Server: http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate versicherungscheck.mobiliar.ch

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for versicherungscheck.mobiliar.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

versicherungscheck.mobiliar.ch
checkupassurances.mobiliere.ch
checkassicurativo.mobiliare.ch
insurancecheck.mobiliere.ch

Other certificates including the domain name mobiliar.ch

(limited to 100 certificates)
standortcheck.mobiliar.ch
vpn.mobiliar.ch
gp-devsec.mobiliar.ch
cloud.campaign.mobiliar.ch
gp-ext.mobiliar.ch
securemail.mobiliar.ch
m24pp.mobiliar.ch
client-auto-i-dat.mobiliar.ch
vorsorge.mobiliar.ch
leonteq.mobiliar.ch
gp-gw-prelogon.mobiliar.ch
leonteq.mobiliar.ch
marke.mobiliar.ch
gp-portal.mobiliar.ch
gp-gw-prod.mobiliar.ch
video.mobiliar.ch
*.content.mobiliar.ch
meteo-alarm.mobi.ch
gp-gw-dev.mobiliar.ch
tinelstest.mobiliar.ch
sos.mobiliar.ch
test.mobiliar.ch
gp-prod.mobiliar.ch
strategiemap.mobiliar.ch
raiffeisen.mobiliar.ch
gp-gw-dev.mobiliar.ch
mobiliar.ch
trainingnet-compliance.mobiliar.ch
api.training.cyber.mobiliar.ch
staging-video.mobiliar.ch
gp-prelogon.mobiliar.ch
test500.apps.mobiliar.ch
marke.mobiliar.ch
click.campaign.mobiliar.ch
newsletter-cdn.mobiliar.ch
selfservice.mobiliar.ch
secure.mobi.ch
gp-userid.mobiliar.ch
meinauto.mobiliar.ch
handwerker.mobiliar.ch
jobs.mobiliar.ch
selfservice.mobiliar.ch
gp-userid.mobiliar.ch
luawext.mobiliar.ch
strategiemap.mobiliar.ch
url4870.mobiliar.ch
resources.mobiliar.ch
gp-gw-dev.mobiliar.ch
selfservice.mobiliar.ch
newsletter.mobiliar.ch
ucc.mobi.ch
gp-testzertifikat.mobiliar.ch
*.mobiliar.ch
gp-gw-prelogon.mobiliar.ch
mobiliar.ch
*.mobiliar.ch
kunst.mobiliar.ch
my.mobiliar.ch
fancystuff.mobiliar.ch
msghub.mobiliar.ch
mp.mobi.ch
cyber-training.mobiliar.ch
sslme3.mobiliar.ch
eshop.mobiliar.ch
test.mobiliar.ch
client-comparis.mobiliar.ch
b2capi1.mobiliar.ch
tinelstest.mobiliar.ch
www.handwerker.mobiliar.ch
check.mobiliar.ch
cyber-training.mobiliar.ch
b2capi.mobiliar.ch
liip-lead-client.mobiliar.ch
pssp-admin.mobiliar.ch
test.mobiliar.ch
vorsorge-mobiliar.ch
b2capi.mobiliar.ch
tymodenengelsman.com
vorsorge.mobiliar.ch
fileshare.mobiliar.ch
msghub.mobiliar.ch
meinauto-client.mobiliar.ch
smide.mobiliar.ch
gp-userid.mobiliar.ch
elm.mobiliar.ch
kunst.mobiliar.ch
igb2b.mobiliar.ch
b2eapi1.mobiliar.ch
eshop.mobiliar.ch
b2bapi2.mobiliar.ch
sign.mobiliar.ch
vorsorge.mobiliar.ch
viq.mobiliar.ch
jobs.mobiliar.ch
gp-gw-prelogon.mobiliar.ch
b2capi.mobiliar.ch
awareness.mobiliar.ch
z101392.mobiliar.ch
client-auto-i-dat.mobiliar.ch
kunst.mobiliar.ch

Certificate

The complete raw certificate details for versicherungscheck.mobiliar.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LFhBeySNZnCryOC3k20
JSkWubKWL3+6PZSGjIw8O7Bpw/UB5DZLZACesYnxPwg/rsRTMhisZEmVgZnKVUZg
15Gfhse/yUZ0/Aja+JP9gMVZPyU2byFwBJ24arKMmF1YX49xlD08ZL4P7qaM4dDX
niH2NEzEdcjgM2/VXeTOUxodQIMQRq11/MZhmeNCJSRSe68mfsrNxNJEvQ6sJvii
ppC3tt0+fR75in5zfO3Z8xUt5DCxb4aPf+vRmQfgi2qAOL9Ymr9rryUdj6aCi4nj
MxIPKsQrLlAaVFwIjOChlHrhTVp33HwxETUryZ1+qxVVCwfA4OBsluLdHyB35G6y
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 468305971781455911517810687248851639180222740248
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-05 07:48:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-05 07:48:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schweizerische Mobiliar Holding AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'versicherungscheck.mobiliar.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26345036276194119389437612701641331871892279052538223340113791100678863824958722882493407257559530287036960373498335253995625113002786656287538080321891555118955156452591156284315943437312210893899260319927130854183364040523216980347507344927408210864504566128466948518128021647347111921607676209413918670431310592412548011086540143738000824411363944143708934298804247245728672469318756076521253481876258023633165552972261731405831943499101654870569788682699252831348939171953594816316860142697785299269157780086031118838270643159144101063869512204333324353605717604984711727677093607718512117489619340797665510077011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'versicherungscheck.mobiliar.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkupassurances.mobiliere.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkassicurativo.mobiliare.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insurancecheck.mobiliere.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							576f650ce67908005a40ff16fed49bba352327cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e7f1e7fd2e53ad11e5811a57a4738f127d98c8ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00751f5a91f536937144eb830f07b2d0764fb6f735838f7d039a88b951f666bf69882f1980ff19015e11bac6be034f0221b54e7f51fbee43d480d33277957c9950080423b164e65b2502171fc8bfcd96a4ac622884fd5d4ea1e97654a23412eb3e414c703014f4b2c6b94ca3a90a53f9cb0b048200344610f1a1235fd438094c7dd3e0aa6df0e6672690e3e13227472bf204b48963bed6d81e5b1e05336f188f50c37fdceb3e3f8f414b0f75af15f06ed8eac04ae85f2c5904dac1afe403e468944de164a3641c122a63f97c1a937888f834a01bae115e9a4dfe9bf85891d3fe2fef01f407d7f2944e7161de42e87ce23440638d6d7deb0d9a713de47020bef2fb