ge.ch
- Republique et Canton de Geneve -
Issued by SwissSign RSA TLS OV ICA 2021 - 1
About this certificate
This digital certificate with serial number 1f:fe:84:7c:fc:01:fd:1b:63:6b:59:8b:1b:58:3d:f5:c9:d1:1c:17 was issued on by SwissSign AG.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Republique et Canton de Geneve
Organization:
Republique et Canton de Geneve
State / Province:
GE
Locality: Geneve
Country: CH
Locality: Geneve
Country: CH
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate has expire since
Certificate Details
Serial Number (hex): 1f:fe:84:7c:fc:01:fd:1b:63:6b:59:8b:1b:58:3d:f5:c9:d1:1c:17Serial Number (int): 182654644527698074932320596915014741684212800535
Serial Number lenght: 157 bits, 20 octets
SubjectKeyId: 8f:6b:13:5e:3d:47:c0:a7:b9:c0:cc:96:fb:3a:0c:82:b1:36:66:d6
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d
Fingerprint (sha1): e8:71:fe:c6:0d:f4:72:f7:29:76:aa:16:42:d0:03:22:d3:4b:27:e4
Fingerprint (sha256): 30:21:16:49:b8:e5:23:34:22:96:f6:bb:67:b4:d9:12:ff:90:4d:c1:d5:d2:c9:41:64:40:1e:48:d0:28:a6:70
Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D
Revocation information
OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3DCRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint
Check the revocation status for certificate ge.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ge.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ge.ch
www.ge.ch
www.ge.ch
Other certificates including the domain name ge.ch
(limited to 100 certificates)
impuserlabo000-ms.ceti.etat-ge.ch
gc.ge.ch
contacts.ge.ch
testeaspolb2b.ge.ch
ge.ch
vcscgv2-1.ceti.etat-ge.ch
pol.b2b.ge.ch
cucmuser000-ms.ceti.etat-ge.ch
vcscnhp-1.ceti.etat-ge.ch
justice.ge.ch
test.b2b.ge.ch
testmobilepol.ge.ch
portailadmin.ge.ch
portail.ge.ch
survey.cdc.ge.ch
*.ge.ch
testservices.b2b.ge.ch
vpntest.ge.ch
www.etat.ge.ch
REPUBLIQUE ET CANTON DE GENEVE
epi.ge.ch
testservices.b2b.ge.ch
test.b2b.ge.ch
mobilepol.ge.ch
securebox.epi.ge.ch
imap.gc.ge.ch
appconpol02.ge.ch
ge.ch
pexip.ge.ch
recensement.app.ge.ch
vcsclabo-2.ceti.etat-ge.ch
jabberguest.ge.ch
vcselabo-1.ge.ch
epi.ge.ch
impuser000-ms.ceti.etat-ge.ch
padbleu.ge.ch
idp.ge.ch
dgsiemmensrec.ge.ch
cucmuserlabo000-ms.ceti.etat-ge.ch
padpolice.ge.ch
ssl829352.cloudflaressl.com
testeasadmb2b.ge.ch
ge.ch
pexipedge.ge.ch
vcsenhp-1.ge.ch
pol.b2b.ge.ch
jabberguest.ge.ch
ge.ch
test.b2b.ge.ch
justice-doc-ext.ge.ch
eas.gc.ge.ch
pjdeploy01.ceti.etat-ge.ch
vcselabo-2.ge.ch
webmail.gc.ge.ch
test.b2b.ge.ch
jabbergexpe002.ge.ch
testeasadmb2b.ge.ch
vcscnhp-1.ceti.etat-ge.ch
polmi.b2b.ge.ch
epi.ge.ch
appconsae01.ge.ch
epi.ge.ch
vcselabo-2.ge.ch
www.etat.ge.ch
easpolb2b.ge.ch
padjustice.ge.ch
sni.cloudflaressl.com
www.ge.ch
ssl829350.cloudflaressl.com
securebox.epi.ge.ch
annuaire.ge.ch
epi.ge.ch
*.ge.ch
epi.ge.ch
cucmuserlabo000-ms.ceti.etat-ge.ch
cucmuser000-ms.ceti.etat-ge.ch
survey.cdc.ge.ch
*.ge.ch
portailwifiedu.ge.ch
pocdme.etat.ge.ch
amendes.ge.ch
vcsclabo-2.ceti.etat-ge.ch
videogw.ge.ch
amendes.ge.ch
vpn.ge.ch
test.b2b.ge.ch
portail.ge.ch
vcselabo-1.ge.ch
*.app4.ge.ch
etoile.ge.ch
outlook.ge.ch
amendes-rec.ge.ch
testpolmi.b2b.ge.ch
mdmacore01.ge.ch
ge.ch
ldapedu.ge.ch
testmobilepol.ge.ch
*.epi.ge.ch
participer-rec.ge.ch
*.ge.ch
gc.ge.ch
contacts.ge.ch
testeaspolb2b.ge.ch
ge.ch
vcscgv2-1.ceti.etat-ge.ch
pol.b2b.ge.ch
cucmuser000-ms.ceti.etat-ge.ch
vcscnhp-1.ceti.etat-ge.ch
justice.ge.ch
test.b2b.ge.ch
testmobilepol.ge.ch
portailadmin.ge.ch
portail.ge.ch
survey.cdc.ge.ch
*.ge.ch
testservices.b2b.ge.ch
vpntest.ge.ch
www.etat.ge.ch
REPUBLIQUE ET CANTON DE GENEVE
epi.ge.ch
testservices.b2b.ge.ch
test.b2b.ge.ch
mobilepol.ge.ch
securebox.epi.ge.ch
imap.gc.ge.ch
appconpol02.ge.ch
ge.ch
pexip.ge.ch
recensement.app.ge.ch
vcsclabo-2.ceti.etat-ge.ch
jabberguest.ge.ch
vcselabo-1.ge.ch
epi.ge.ch
impuser000-ms.ceti.etat-ge.ch
padbleu.ge.ch
idp.ge.ch
dgsiemmensrec.ge.ch
cucmuserlabo000-ms.ceti.etat-ge.ch
padpolice.ge.ch
ssl829352.cloudflaressl.com
testeasadmb2b.ge.ch
ge.ch
pexipedge.ge.ch
vcsenhp-1.ge.ch
pol.b2b.ge.ch
jabberguest.ge.ch
ge.ch
test.b2b.ge.ch
justice-doc-ext.ge.ch
eas.gc.ge.ch
pjdeploy01.ceti.etat-ge.ch
vcselabo-2.ge.ch
webmail.gc.ge.ch
test.b2b.ge.ch
jabbergexpe002.ge.ch
testeasadmb2b.ge.ch
vcscnhp-1.ceti.etat-ge.ch
polmi.b2b.ge.ch
epi.ge.ch
appconsae01.ge.ch
epi.ge.ch
vcselabo-2.ge.ch
www.etat.ge.ch
easpolb2b.ge.ch
padjustice.ge.ch
sni.cloudflaressl.com
www.ge.ch
ssl829350.cloudflaressl.com
securebox.epi.ge.ch
annuaire.ge.ch
epi.ge.ch
*.ge.ch
epi.ge.ch
cucmuserlabo000-ms.ceti.etat-ge.ch
cucmuser000-ms.ceti.etat-ge.ch
survey.cdc.ge.ch
*.ge.ch
portailwifiedu.ge.ch
pocdme.etat.ge.ch
amendes.ge.ch
vcsclabo-2.ceti.etat-ge.ch
videogw.ge.ch
amendes.ge.ch
vpn.ge.ch
test.b2b.ge.ch
portail.ge.ch
vcselabo-1.ge.ch
*.app4.ge.ch
etoile.ge.ch
outlook.ge.ch
amendes-rec.ge.ch
testpolmi.b2b.ge.ch
mdmacore01.ge.ch
ge.ch
ldapedu.ge.ch
testmobilepol.ge.ch
*.epi.ge.ch
participer-rec.ge.ch
*.ge.ch
Certificate
The complete raw certificate details for ge.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKCjCCB/KgAwIBAgIUH/6EfPwB/Rtja1mLG1g99cnRHBcwDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgT1YgSUNBIDIwMjEgLSAxMB4XDTIyMDkxNjEz MTA1MFoXDTIzMDkxNjEzMTA1MFowZDELMAkGA1UEBhMCQ0gxCzAJBgNVBAgTAkdF MQ8wDQYDVQQHEwZHZW5ldmUxJzAlBgNVBAoTHlJlcHVibGlxdWUgZXQgQ2FudG9u IGRlIEdlbmV2ZTEOMAwGA1UEAxMFZ2UuY2gwggIiMA0GCSqGSIb3DQEBAQUAA4IC DwAwggIKAoICAQDDJZDU7hUqYApTTKT5WEWfjtZutyUlH69zqI7uI3of8LKnqGEe xhjaSIh0HKwuvUQ+oF3h6O2BvmyL6VZgIT5naQ5ctHS15HP+Ekx/T9+DjiJemUfK bcEMPJGnTpCejq92T7BgUTnqLxQIhNwvVyJS9lldHeqXOoseSiOax5OfxsUj9AL+ D2hCWn4XaDDFexNs9DMZi/JLgDD7lYgc59tYFiGnZwBKrfddwPXDVUaLncUFLaWl FEBtSaG9Xq1odeLvyoOLFiDqx/PORNTThOUqHNuNVM1msPayWC3wVeWPy+oMsRB9 sKD0LdQhywJ0FoqUFCshHvSWSPkRZt5yawEiM4/daZUljRUXIx6/3ZhS7AqOfBhs A46zLWXg7gsAkIy7kiawTbjt8HZQD9aLSyoq4nB2qpt7Ux5z6S6AQdNkEtJs3o3g JXyew22qV/oiSMyHL9HDZAQhBvg0A1U20tLYVsmE/YRNrHL8H4eMdWwNoQzGeNhb tKZyFo0zcbhI8C9vlATMzLaVnTYmiOAFZr2RIh5CFhzeHDNmx+BVzAMpOdylO5IZ g+b281s6nN5t1A5dQZUgYJngC8WDOfb0pLLs8nVmXEy7Cyws1izGDueQLSrB/idQ BcOfy6lSPIoz93al6Rb4VRRZbPJtfq79JXejgVm5n2jngNNv0ejfHZsb9wIDAQAB o4IExjCCBMIwGwYDVR0RBBQwEoIFZ2UuY2iCCXd3dy5nZS5jaDAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBSP axNePUfAp7nAzJb7OgyCsTZm1jAfBgNVHSMEGDAWgBSs0DrCwldVkWkRzHBqWTiK jKycPTCB/wYDVR0fBIH3MIH0MEegRaBDhkFodHRwOi8vY3JsLnN3aXNzc2lnbi5u ZXQvQUNEMDNBQzJDMjU3NTU5MTY5MTFDQzcwNkE1OTM4OEE4Q0FDOUMzRDCBqKCB paCBooaBn2xkYXA6Ly9kaXJlY3Rvcnkuc3dpc3NzaWduLm5ldC9DTj1BQ0QwM0FD MkMyNTc1NTkxNjkxMUNDNzA2QTU5Mzg4QThDQUM5QzNEJTJDTz1Td2lzc1NpZ24l MkNDPUNIP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q/YmFzZT9vYmplY3RDbGFz cz1jUkxEaXN0cmlidXRpb25Qb2ludDBvBgNVHSAEaDBmMFAGCGCFdAFZAgECMEQw QgYIKwYBBQUHAgEWNmh0dHBzOi8vcmVwb3NpdG9yeS5zd2lzc3NpZ24uY29tL1N3 aXNzU2lnbl9DUFNfVExTLnBkZjAIBgYEAI96AQcwCAYGZ4EMAQICMIHGBggrBgEF BQcBAQSBuTCBtjBkBggrBgEFBQcwAoZYaHR0cDovL3N3aXNzc2lnbi5uZXQvY2dp LWJpbi9hdXRob3JpdHkvZG93bmxvYWQvQUNEMDNBQzJDMjU3NTU5MTY5MTFDQzcw NkE1OTM4OEE4Q0FDOUMzRDBOBggrBgEFBQcwAYZCaHR0cDovL29jc3Auc3dpc3Nz aWduLm5ldC9BQ0QwM0FDMkMyNTc1NTkxNjkxMUNDNzA2QTU5Mzg4QThDQUM5QzNE MIIB9gYKKwYBBAHWeQIEAgSCAeYEggHiAeAAdgB6MoxU2LcttiDqOOBSHumEFnAy E4VNO9IrwTpXo1LrUgAAAYNGbF8GAAAEAwBHMEUCIH3W42p1qoRD6abMwiGpp9Ao msHC/Bqx8J4/SDhTwB6PAiEAihpijUmyoOJBfhpKmkrPC4yhwtNPjPXgwYmZqdM1 anoAdgCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yCigAAAYNGbGDfAAAE AwBHMEUCIAYX8rR4AC6/Q11BTbYkv0MLr+4zKaWLSFl9sBc0A2DqAiEAvbR3N3gx LGH2PobJFePR23ZpSsEDS5gHrxJDvdbp7gsAdwCzc3cH4YRQ+GOG1gWp3BEJSnkt sWcMC4fc8AMOeTalmgAAAYNGbGGhAAAEAwBIMEYCIQC2C6ycIYnwYcB7tigHYB9Y XMStseQGVcdp/kNHJFke3wIhANmi4OqitwG22zwk7Q9ntZ5tg16qJMRAUiUYN6+f 7b4NAHUA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGDRmxg3QAA BAMARjBEAiBqPi1kQbYvk8WRbM5ExJILBweQCD8QTuK8l/RSlz9EKAIgM+D3cnN1 2KLHlIOB7lEMh6ws1HydJLV6UdjgqgJAS30wDQYJKoZIhvcNAQELBQADggIBAHBA MGkbNWLQ9cn+8DK8rvWfkRIpOu8AhTh9RNvRF/lVcVqjx6yHClPu/cMEbsiDsB4I 3Y6Qq9NIm3M9ubfql/GuKyfKAS8pdvxxYZChOyRuNQLeCBm007bwx1+rrIVbcTap Qk03HWiBUgTpFu9SaK3NCG2YCImp6oZMel2PW9Su0WoiIhRaBJPkNc8KJPgBit2Y 4QfGYX2gUzcOY+mO/EfmBs4qqHn8m3exYAt/noO4dnu2gSkiQBjt28bvYn/yV1G5 5YBEUyjb9EbH2oF6J+SVR0b+RFGyPCtD7L/PE3xZCgVnZ8XK5xq1lQfT3faDY84o fEZemSD5MjDj+myQvdFRmYTA1E1I6MqTs/vTLcJCjtuaHdOFVvNb00gCcK93CnFM uffKUqhMj7NL4T4oGF89HPDdpNp1mNFccmKaFDWSymvYYKmfa8me3m1W1SFAZSdO HXK1jsFSKZM4jiwhZD8+omGbhT1kWJVoOvQ8GXVgUnTnPLyvQ2GXR8gRdzZA9cQ4 sxQFr1Cx/KEnSaDx9f5AzqAMMaaPM/QUH9Y9PomSGCVEE1MweVS/8HC/zSoagiR8 jCuvLAeJBx/cuZo62QGq+42k7Ia2rYg73v27YjiM2i1KWVXFQjN/V3q5CNZoHh6I VK3zJuEcUqmb9Qm6+2PTSW//bgEzI0sfKjloiGEi -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwyWQ1O4VKmAKU0yk+VhF n47WbrclJR+vc6iO7iN6H/Cyp6hhHsYY2kiIdBysLr1EPqBd4ejtgb5si+lWYCE+ Z2kOXLR0teRz/hJMf0/fg44iXplHym3BDDyRp06Qno6vdk+wYFE56i8UCITcL1ci UvZZXR3qlzqLHkojmseTn8bFI/QC/g9oQlp+F2gwxXsTbPQzGYvyS4Aw+5WIHOfb WBYhp2cASq33XcD1w1VGi53FBS2lpRRAbUmhvV6taHXi78qDixYg6sfzzkTU04Tl KhzbjVTNZrD2slgt8FXlj8vqDLEQfbCg9C3UIcsCdBaKlBQrIR70lkj5EWbecmsB IjOP3WmVJY0VFyMev92YUuwKjnwYbAOOsy1l4O4LAJCMu5ImsE247fB2UA/Wi0sq KuJwdqqbe1Mec+kugEHTZBLSbN6N4CV8nsNtqlf6IkjMhy/Rw2QEIQb4NANVNtLS 2FbJhP2ETaxy/B+HjHVsDaEMxnjYW7SmchaNM3G4SPAvb5QEzMy2lZ02JojgBWa9 kSIeQhYc3hwzZsfgVcwDKTncpTuSGYPm9vNbOpzebdQOXUGVIGCZ4AvFgzn29KSy 7PJ1ZlxMuwssLNYsxg7nkC0qwf4nUAXDn8upUjyKM/d2pekW+FUUWWzybX6u/SV3 o4FZuZ9o54DTb9Ho3x2bG/cCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 182654644527698074932320596915014741684212800535 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-16 13:10:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-16 13:10:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Geneve' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Republique et Canton de Geneve' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ge.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796129245159586291000630467648030493161925133924382610509976863954623812041160165821141809368831761627837668124126970802632645691089519934136497434693122974252456966538370257053848020594937009502104414812804174334970810556515164412727266828739505190697207504523025896229619675489838231629129187299920004427963171275396940143552301395772126391757956037829012002066213570694829739458063643022239791917573635789135340224647746005476173032306170956909397440342332160954411851050110387892723655169212274907217461063955305111212410791334614530775508351230990350127939516460008400290141963797752285379036214171659750911980539650445134833801411356201726681909160308771298834882943311728636688430502509335828504855705558663272001854260168165137492208704047403714154828324809034011528294709416357143405568950013199385102312553310823367457429803082272577242621684010363362640920225692125678790027023961893923984282143578525199412061259516450955874229479840645216345402726428041958187995607150529014740364403095231605880649272380051079076251961057137407752876626052334394614599509694596229019219760143902465490460814420050981156094896043631332643863358793583377867285030157368222052832748505421948673765934373966872352962821135884852748061711351 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ge.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8f6b135e3d47c0a7b9c0cc96fb3a0c82b13666d6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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