www.hrm-systems.ch

- HRM Systems AG -

Issued by SwissSign Server Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 71:57:14:d1:1b:3a:86:9b:20:28:60:47:c1:56:08:e4:05:19:27:ff was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HRM Systems AG

Organization: HRM Systems AG
Organization unit: IT Ops
Organization unit: HRM Systems AG
State / Province: Zürich
Locality: Winterthur
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 71:57:14:d1:1b:3a:86:9b:20:28:60:47:c1:56:08:e4:05:19:27:ff
Serial Number (int): 647057935336292391369922821627742052692717545471
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: b7:f6:1b:84:53:ee:3d:00:cf:0e:16:e5:88:36:35:ce:30:20:b9:d8
AuthorityKeyId: e7:f1:e7:fd:2e:53:ad:11:e5:81:1a:57:a4:73:8f:12:7d:98:c8:ae

Fingerprint (sha1): 9c:88:b4:10:a9:7e:28:de:05:2e:af:7f:18:29:60:6a:86:da:26:01
Fingerprint (sha256): 41:51:d5:bd:e0:4d:a5:c2:b7:96:1b:93:94:de:ed:34:c3:0b:dc:18:83:61:2a:42:6d:3c:f0:0d:b8:e9:b0:fb

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE

Revocation information

OCSP Server: http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate www.hrm-systems.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hrm-systems.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.hrm-systems.ch
hrm-systems.ch

Other certificates including the domain name hrm-systems.ch

(limited to 100 certificates)
hrm-systems.ch
www.hrm-systems.ch
huv.ch
*.uka.swiss
hrm-systems.swiss
hrm-systems.swiss
ideas-uka.hrm-systems.ch
www.hrm-systems.ch
*.hrm-systems.ch
hrm-systems.ch
*.hrm-reports.ch
staging.hrm-systems.ch
www.hrm-systems.ch
www.hrm-systems.ch
www.helptest.hrm-systems.ch
*.hrm-systems.ch
*.hrm-systems.ch
*.hrm-systems.ch
hrm-reports.ch
*.hrm-reports.ch
helptest.hrm-systems.ch
www.hilfe.hrm-systems.ch
status.hrm-systems.ch
www.hrm-systems.ch
hrm-systems.ch
hrm-systems.ch
*.hrm-systems.ch
hrm-systems.ch
hrm-systems.swiss
www.carema.ch
webmail.hrm-systems.ch
*.hrm-systems.ch
hilfe.hrm-systems.ch
www.hrm-systems.ch
www.hrm-systems.ch
hilfe.hrm-systems.ch
*.hrm-systems.ch
hrm-systems.ch
hrm-systems.ch
hrm-systems.ch
hrm-systems.ch
*.hrm-systems.ch
hrm-systems.ch
hrm-systems.ch
hrm-systems.ch
www.carema.ch

Certificate

The complete raw certificate details for www.hrm-systems.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIITzCCBzegAwIBAgIUcVcU0Rs6hpsgKGBHwVYI5AUZJ/8wDQYJKoZIhvcNAQEL
BQAwUjELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEsMCoGA1UE
AxMjU3dpc3NTaWduIFNlcnZlciBHb2xkIENBIDIwMTQgLSBHMjIwHhcNMTgwNTI5
MTM1NjUyWhcNMjAwNTI5MTM1NjUyWjCBlDELMAkGA1UEBhMCQ0gxEDAOBgNVBAgM
B1rDvHJpY2gxEzARBgNVBAcTCldpbnRlcnRodXIxFzAVBgNVBAoTDkhSTSBTeXN0
ZW1zIEFHMQ8wDQYDVQQLEwZJVCBPcHMxFzAVBgNVBAsTDkhSTSBTeXN0ZW1zIEFH
MRswGQYDVQQDExJ3d3cuaHJtLXN5c3RlbXMuY2gwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDhZdcefG9HpDCoKjAAY7B1vJU5CaIpMBmx78D2kpa9nJR3
Ngw6jVp7aRrQFYpmpd/6C7QX0dE5WVFYWqiIYHmBhzn4tVuPcTEUhCHxBaHArMFG
eb0SDDMq0RcDrIBTjy8FEp23fI7rG9a29/X/ICW1d2ln4wMtg8jQxAcG6n3LHylO
k7Y04L+2CPM3G827oj6unL7Lb7Uf+wGn2yuYjVOPYcsOkGDwUaqJ6kUVWX0oY4Vx
ldOlQ3a7GRvJEpIdFSsagwTVi8Mn1tm8rkTLIBI/0zwO7yeph+lCA6b1yqMIYkOz
dvJ3Wn/BCSJ1eZvo/toIQRTNgamf0gTqlN0j7jRlAgMBAAGjggTYMIIE1DAtBgNV
HREEJjAkghJ3d3cuaHJtLXN5c3RlbXMuY2iCDmhybS1zeXN0ZW1zLmNoMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0O
BBYEFLf2G4RT7j0Azw4W5Yg2Nc4wILnYMB8GA1UdIwQYMBaAFOfx5/0uU60R5YEa
V6RzjxJ9mMiuMIH/BgNVHR8EgfcwgfQwR6BFoEOGQWh0dHA6Ly9jcmwuc3dpc3Nz
aWduLm5ldC9FN0YxRTdGRDJFNTNBRDExRTU4MTFBNTdBNDczOEYxMjdEOThDOEFF
MIGooIGloIGihoGfbGRhcDovL2RpcmVjdG9yeS5zd2lzc3NpZ24ubmV0L0NOPUU3
RjFFN0ZEMkU1M0FEMTFFNTgxMUE1N0E0NzM4RjEyN0Q5OEM4QUUlMkNPPVN3aXNz
U2lnbiUyQ0M9Q0g/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdD9iYXNlP29iamVj
dENsYXNzPWNSTERpc3RyaWJ1dGlvblBvaW50MF8GA1UdIARYMFYwVAYJYIV0AVkB
AgEGMEcwRQYIKwYBBQUHAgEWOWh0dHA6Ly9yZXBvc2l0b3J5LnN3aXNzc2lnbi5j
b20vU3dpc3NTaWduLUdvbGQtQ1AtQ1BTLnBkZjCB1QYIKwYBBQUHAQEEgcgwgcUw
ZAYIKwYBBQUHMAKGWGh0dHA6Ly9zd2lzc3NpZ24ubmV0L2NnaS1iaW4vYXV0aG9y
aXR5L2Rvd25sb2FkL0U3RjFFN0ZEMkU1M0FEMTFFNTgxMUE1N0E0NzM4RjEyN0Q5
OEM4QUUwXQYIKwYBBQUHMAGGUWh0dHA6Ly9nb2xkLXNlcnZlci1nMi5vY3NwLnN3
aXNzc2lnbi5uZXQvRTdGMUU3RkQyRTUzQUQxMUU1ODExQTU3QTQ3MzhGMTI3RDk4
QzhBRTCCAfcGCisGAQQB1nkCBAIEggHnBIIB4wHhAHcAb1N2rDHwMRnYmQCkURX/
dxUcEdkCwQApBo2yCJo32RMAAAFjrC/wrAAABAMASDBGAiEAt4Mu+/JDAaZj+BFk
sZ/qoEKuMmgxlahD4FUqNNgWH/8CIQCB3uDWKTLiojL2jXNy8i6szgOXQaPeCIb3
xrAYYej7uQB2ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABY6wv
8lYAAAQDAEcwRQIgS9IQWze3zhJN+1EDfQOGO/mIdhe3lyj+j3tg3bN7LOACIQC3
9jM0UvX0mL1u3J70cFPpssHgrhiH7k9BpD9I4ULn7QB2AN3rHSt6DU+mIIuBrYFo
cH4ujp0B1VyIjT0RxM227L7MAAABY6wv8s0AAAQDAEcwRQIhANLS+Oy5oa7omIYh
xw/uW0BVnjXtkn/tHi54Cl8kXhlWAiBrLLamDW+dNPHBGHlNyOwmVh6Hvco+yC+J
YYquWgCX9wB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABY6wv
8BwAAAQDAEcwRQIhAOLR70KxWS0i0XrdcZ12PrtSxk0iGWtinfxpYcdCJeDWAiAv
D3yXIHCGIU+EdkZRLyZEBlRskXHbSKEiIUIL97qr8TANBgkqhkiG9w0BAQsFAAOC
AQEAXS9eMHt9tC0zg0G6Yobflks21vxtwlX8R6mIUMZloNokESBKdTzTVRPdrDCU
CUlxHczJ3tV7KCft9vVpG45r/RwVIRkWXLD+GncFojmOwwRytt0qHGFJq1YzvEmG
aH2/8GjNGFCHcy837Wtn64WDTpv8CUvEMIbcl/FyMtwuguIjr5+2xZ45O4uQSnCo
cIN3M8pL3824nqlmI7lUnr5fEFmawr7XHWc14LmVPD/z6/etl/5FrN+n12L+Dcm9
E+8AO1jSE8VL/cXMSRpd2PeY8HkWvK4RQ+UR6VkWSVz2c8w25XiqBqxfz09z4o4y
hPzBwFcRbf5LEcbuMtRjg3dYug==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WXXHnxvR6QwqCowAGOw
dbyVOQmiKTAZse/A9pKWvZyUdzYMOo1ae2ka0BWKZqXf+gu0F9HROVlRWFqoiGB5
gYc5+LVbj3ExFIQh8QWhwKzBRnm9EgwzKtEXA6yAU48vBRKdt3yO6xvWtvf1/yAl
tXdpZ+MDLYPI0MQHBup9yx8pTpO2NOC/tgjzNxvNu6I+rpy+y2+1H/sBp9srmI1T
j2HLDpBg8FGqiepFFVl9KGOFcZXTpUN2uxkbyRKSHRUrGoME1YvDJ9bZvK5EyyAS
P9M8Du8nqYfpQgOm9cqjCGJDs3byd1p/wQkidXmb6P7aCEEUzYGpn9IE6pTdI+40
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 647057935336292391369922821627742052692717545471
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-29 13:56:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-29 13:56:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zürich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Winterthur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRM Systems AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Ops'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRM Systems AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hrm-systems.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28453837945396835719289680259637785957024679693947192835397862304107246897077420719780996752835366460101902543911947374110511751805366285655430632140036342093049398250589500302314580750136330559637041689154932948788877520629792644744538630361225670588236429507468706454546290125238732876048033835229394283444878203743615094140257748141108334437920667027549055807366176111875640183792382091628115884888633770793821680252564400199619409272107401190377147294207395773626385081251351388502311304522538245179483079638917931221801604737721711525414181931417955180880291198804505790382950054911247112089885184018874685600869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hrm-systems.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrm-systems.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7f61b8453ee3d00cf0e16e5883635ce3020b9d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e7f1e7fd2e53ad11e5811a57a4738f127d98c8ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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