ras.snb.ch

- Schweizerische Nationalbank -

Issued by SwissSign RSA TLS EV ICA 2022 - 1

About this certificate

This digital certificate with serial number 7d:6e:63:e1:2c:5a:09:65:f5:5b:9a:aa:3b:bb:ad:6b:7f:19:31:8e was issued on by SwissSign AG.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Schweizerische Nationalbank

Company registration number: CHE-105.944.570
Organization: Schweizerische Nationalbank
Address: Börsenstrasse 15
Postal code: 8001
State / Province: ZH
Locality: Zurich
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 7d:6e:63:e1:2c:5a:09:65:f5:5b:9a:aa:3b:bb:ad:6b:7f:19:31:8e
Serial Number (int): 716085629063611639701754058500647030728139813262
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: f4:71:27:01:98:81:c1:4e:a5:b1:c7:84:20:b9:f1:38:53:45:d3:ab
AuthorityKeyId: 49:52:df:30:86:92:59:5f:34:9c:25:48:24:ab:c0:eb:d1:06:f2:d6

Fingerprint (sha1): dd:f1:e5:ff:f6:8c:7e:f5:66:5d:bc:82:df:15:66:78:7e:00:fa:1a
Fingerprint (sha256): 41:c4:59:e2:d8:23:62:63:90:39:1d:15:45:1a:23:23:c5:e6:e4:2b:86:4a:08:d7:59:e3:10:38:6d:32:5c:18

Issuing Certificate URL: http://aia.swisssign.ch/air-20350159-813d-4532-b988-8519eca57650

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-9fdd910e-b9ff-4b2f-be38-2e93708c1b36

Check the revocation status for certificate ras.snb.ch

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ras.snb.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ras-be.snb.ch
ras-tobe31.snb.ch
ras-be32.snb.ch
ras-tobe32.snb.ch
ras-tobe31.sec.snb.ch
ras.sec.snb.ch
ras-be32.sec.snb.ch
ras-supportbe32.snb.ch
ras-to.sec.snb.ch
ras-support.snb.ch
ras-supportbe32.sec.snb.ch
ras-tobe32.sec.snb.ch
ras-zh.sec.snb.ch
ras.snb.ch
ras-supportbe31.snb.ch
ras-support.sec.snb.ch
ras-be31.sec.snb.ch
ras-be.sec.snb.ch
ras-supportbe31.sec.snb.ch
ras-be31.snb.ch
ras-zh.snb.ch
ras-to.snb.ch

Other certificates including the domain name snb.ch

(limited to 100 certificates)
remotemail.snb.ch
bbuem.snb.ch
mailb.snb.ch
ras.snb.ch
rastest.snb.ch
rastest.snb.ch
ras.snb.ch
ras.snb.ch
ras.snb.ch
surveys.snb.ch
rastest.snb.ch
rastest.snb.ch
sip3.snb.ch
mailz.snb.ch
bbuem.snb.ch
sip.snb.ch
mailz.snb.ch
rastest.snb.ch
ras.snb.ch
meet.snb.ch
datasharedev.snb.ch
vcse.snb.ch
ras.snb.ch
data.snb.ch
recruiting.snb.ch
ras-betest.snb.ch
rastest.snb.ch
ras.snb.ch
sip3.snb.ch
surveys.snb.ch
sip.snb.ch
ras.snb.ch
sip.snb.ch
ras.snb.ch
testgold.snb.ch
remotemail.snb.ch
testgold.snb.ch
sip3.snb.ch
vcse.snb.ch
ras2.snb.ch
wlanportal1.snb.ch
data.test.snb.ch
sip.snb.ch
vcse.snb.ch
testswiss.snb.ch
testgold.snb.ch
bbuem.snb.ch
data.snb.ch
surveys-usertest.snb.ch
wlanportal1.snb.ch
secmail.snb.ch
ras.snb.ch
surveys.snb.ch
wlanportal1.snb.ch
mailb.snb.ch
snb.ch
surveys.snb.ch
datashare.snb.ch
ras.snb.ch
alert.snb.ch
ras.snb.ch
data.snb.ch
secmail.snb.ch
sip2.snb.ch
rastest.snb.ch
secmail.snb.ch
rastest.snb.ch
sip3.snb.ch
remotez.snb.ch
snb.ch
testgold.snb.ch
testgold.snb.ch
datasharedev.snb.ch
vcse.snb.ch
bbuem.snb.ch
secmail.snb.ch
mailz.snb.ch
rastest.snb.ch
ras.snb.ch
ras.snb.ch
sip3.snb.ch
remote.snb.ch
vcse.snb.ch
securemail.snb.ch
ras.snb.ch
surveys.snb.ch
rastest.snb.ch
ras.snb.ch
testgold.snb.ch
webstats.snb.ch
securemail.snb.ch
surveys-usertest.snb.ch
snb.ch
careers.snb.ch
ras2.snb.ch
datasharedev.snb.ch
testgold.snb.ch
datasharedev.snb.ch
alert.snb.ch
snb.ch

Certificate

The complete raw certificate details for ras.snb.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMO0aycMUx+N5KdgzLM4
4TpTGVW+QLd1R8jSERIxId6c7svKCFK2uHbqtJubzBG9S+SzPxORqv+15nIQvI37
3vsU4cQb51XHFmPuXG194yb/gNavaqg85aJ2S0dmBJk61ZOpJhuBeb/9WVhR6CBu
Gsg6m+KaRt+un0+YT8FrML3fx/OdTwgbM2632bb/LA0Ff1F97rblb62ihNvoinjn
Dq0OVyKy+/YxPTY5F8UpwjwW2aXR90fpjRe1L5kvCJDSIXdhek9wJlHR2/K9rcGz
jo9J2bHo6dpjNoa7jH9e7TQZMohgV/hR8R/zc1z8yDJVDqP5lk83Cu6EEuAMQ2sk
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 716085629063611639701754058500647030728139813262
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-23 11:11:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-23 11:11:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ZH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ZH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '8001'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Börsenstrasse 15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Schweizerische Nationalbank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHE-105.944.570'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ras.snb.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24334260167461562125577383408001555809464893464254706521020213346143724903597433706388568446922358881105734426598700720206919494560324949974585854026653050905861057601021155581113892575452986822640019415421218777643777323362640269388568777429660811451820412192686319222392201188660667130449271849475624947269706482485956059953892825792569162138056148514362425672397823267221366629963478995349968038153972108823722515537226276861948029960791149368803436875119594525645491222652106633095526523057585106260099923325868319810464590383672901440823663698297667859708424800091090479624109962887670788000094677368647910630587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-20350159-813d-4532-b988-8519eca57650'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-9fdd910e-b9ff-4b2f-be38-2e93708c1b36'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (442 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-be.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-tobe31.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-be32.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-tobe32.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-tobe31.sec.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras.sec.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-be32.sec.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-supportbe32.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-to.sec.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-support.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-supportbe32.sec.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-tobe32.sec.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-zh.sec.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-supportbe31.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-support.sec.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-be31.sec.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-be.sec.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-supportbe31.sec.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-be31.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-zh.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-to.snb.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f47127019881c14ea5b1c78420b9f1385345d3ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4952df308692595f349c254824abc0ebd106f2d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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