kabaapp.ebs.swiss
Issued by SwissSign RSA TLS DV ICA 2022 - 1
About this certificate
This digital certificate with serial number 53:f0:fd:b4:f1:c5:87:40:24:79:2b:9d:1a:ad:5c:c5:8f:36:34:45 was issued on by SwissSign AG.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=kabaapp.ebs.swiss
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate will expire on
Certificate Details
Serial Number (hex): 53:f0:fd:b4:f1:c5:87:40:24:79:2b:9d:1a:ad:5c:c5:8f:36:34:45Serial Number (int): 479220513806562383849127460135295988883374093381
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: ee:6b:71:a5:e5:df:a5:11:9e:84:93:9f:8b:ec:9e:86:11:96:0c:fc
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de
Fingerprint (sha1): 71:b8:e0:c0:4f:42:a0:c1:5e:dd:85:9a:67:67:01:7c:f2:5e:54:b5
Fingerprint (sha256): 47:c4:3c:2a:e0:4c:d8:73:2f:52:96:b5:62:9a:e6:68:c0:60:58:e7:32:11:24:09:c4:df:24:71:81:42:e3:92
Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167
Revocation information
OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efecCRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba
Check the revocation status for certificate kabaapp.ebs.swiss
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kabaapp.ebs.swiss
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kabaapp.ebs.swiss
www.kabaapp.ebs.swiss
www.kabaapp.ebs.swiss
Other certificates including the domain name ebs.swiss
(limited to 100 certificates)
connector.ebs.swiss
stecker.ebs.swiss
sso.ebs.swiss
hybridex.ebs.swiss
testsalary.ebs.swiss
www.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
*.ebs.swiss
sso.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
www.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
ebs.swiss
abacus.ebs.swiss
geoportal.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
elektroform.ebs.swiss
geoportal.ebs.swiss
geoportal.ebs.swiss
kabaapp.ebs.swiss
sftp.ebs.swiss
salary.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
hybridex.ebs.swiss
mdm.ebs.swiss
www.ebs.swiss
abacustest.ebs.swiss
ebs.swiss
ebs.swiss
lora.ebs.swiss
asset.ebs.swiss
connector.ebs.swiss
qmtest.ebs.swiss
ebs.swiss
testsalary.ebs.swiss
testsalary.ebs.swiss
kaba.ebs.swiss
www.ebs.swiss
salary.ebs.swiss
connector.ebs.swiss
www.ebs.swiss
*.ebs.swiss
lora.ebs.swiss
qmtest.ebs.swiss
geoportal.ebs.swiss
lora.ebs.swiss
www.ebs.swiss
my.ebs.swiss
stecker.ebs.swiss
asset.ebs.swiss
lora.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
salary.ebs.swiss
*.ebs.swiss
ebs.swiss
ebs.swiss
my.ebs.swiss
abacustest.ebs.swiss
www.ebs.swiss
asset.ebs.swiss
infoscreen.ebs.swiss
infoscreen.ebs.swiss
salary.ebs.swiss
ebs.swiss
sftp.ebs.swiss
sftp.ebs.swiss
energieportal.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
mydata.ebs.swiss
ebs.swiss
mdm.ebs.swiss
sftp.ebs.swiss
infoscreen.ebs.swiss
qm.ebs.swiss
geoportal.ebs.swiss
abacus.ebs.swiss
kabaapp.ebs.swiss
sftp.ebs.swiss
betrieb.ebs.swiss
betrieb.ebs.swiss
energieportal.ebs.swiss
ebs.swiss
infoscreen.ebs.swiss
testsalary.ebs.swiss
stecker.ebs.swiss
sso.ebs.swiss
hybridex.ebs.swiss
testsalary.ebs.swiss
www.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
*.ebs.swiss
sso.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
www.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
ebs.swiss
abacus.ebs.swiss
geoportal.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
elektroform.ebs.swiss
geoportal.ebs.swiss
geoportal.ebs.swiss
kabaapp.ebs.swiss
sftp.ebs.swiss
salary.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
hybridex.ebs.swiss
mdm.ebs.swiss
www.ebs.swiss
abacustest.ebs.swiss
ebs.swiss
ebs.swiss
lora.ebs.swiss
asset.ebs.swiss
connector.ebs.swiss
qmtest.ebs.swiss
ebs.swiss
testsalary.ebs.swiss
testsalary.ebs.swiss
kaba.ebs.swiss
www.ebs.swiss
salary.ebs.swiss
connector.ebs.swiss
www.ebs.swiss
*.ebs.swiss
lora.ebs.swiss
qmtest.ebs.swiss
geoportal.ebs.swiss
lora.ebs.swiss
www.ebs.swiss
my.ebs.swiss
stecker.ebs.swiss
asset.ebs.swiss
lora.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
salary.ebs.swiss
*.ebs.swiss
ebs.swiss
ebs.swiss
my.ebs.swiss
abacustest.ebs.swiss
www.ebs.swiss
asset.ebs.swiss
infoscreen.ebs.swiss
infoscreen.ebs.swiss
salary.ebs.swiss
ebs.swiss
sftp.ebs.swiss
sftp.ebs.swiss
energieportal.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
mydata.ebs.swiss
ebs.swiss
mdm.ebs.swiss
sftp.ebs.swiss
infoscreen.ebs.swiss
qm.ebs.swiss
geoportal.ebs.swiss
abacus.ebs.swiss
kabaapp.ebs.swiss
sftp.ebs.swiss
betrieb.ebs.swiss
betrieb.ebs.swiss
energieportal.ebs.swiss
ebs.swiss
infoscreen.ebs.swiss
testsalary.ebs.swiss
Certificate
The complete raw certificate details for kabaapp.ebs.swiss in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJkjCCB3qgAwIBAgIUU/D9tPHFh0AkeSudGq1cxY82NEUwDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDQxNTEz MjAyMloXDTI1MDQxNTEzMjAyMlowHDEaMBgGA1UEAxMRa2FiYWFwcC5lYnMuc3dp c3MwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDU8zUwxXTjibV7bydK PYlPb0nJIGN6lpvHEU3O+wv7TnR44Wywu+9M0W9UuEzRu5tMIuO5fHRcq7+gh3S+ Rq1u7CgwwCKCHdvjP8IkZ0cfL1kQSKIkNZFQfk5acpXSSz20fLAi1uiB3pOE7Xk9 +5cBEUK+XOA9Y2mdqnaQk39hPuRi7IK4dJ+8dOGKIMEj37Kev335Uur4LOsrMZLh CHY/LelN2eIFXWN0u/Uts/EEFB2YXQtJ4rrBkzLn646Cwhqs2cccBj+5X4/2ZUGF xvA1vjgezppzH4ntR2iABDk+ZXVLCKJ8xo+80SgOpVu4G5o1QS+60OjHea7udNas i9TwUSTa3jdfd1AtsaxLOFJTvBUpFWRtfkIva0s0Di9xmd76AWzdR3y5hhRResUy wH3DQICNuhlAmAKfeEqB0h2yW1ZAVUjmrzIIWtzoc7viLXI6Z25HZBECCihKRVR7 hxF1ibjpCcoKnQ4kYy3q4UvPhZ9IY298ZFXPaOJuwo7n4BOKr30WVHSNF45LhfGv zIwrK2z/hrif6O2ehCoAR7XEharxPTtyALDMOeHJCvuS1rLtI1Xe1D8VPJ5MyELK 6n2GChpnASTmid4y3dV1r2BKwZpqcPo6NdaNJ3m7BDTCBhvyjFjsVSD+OA4ZSq35 OSqMU2wg/I9pOBNpnFDXfqcIhQIDAQABo4IEljCCBJIwgbIGCCsGAQUFBwEBBIGl MIGiMEwGCCsGAQUFBzAChkBodHRwOi8vYWlhLnN3aXNzc2lnbi5jaC9haXItMWI4 NjMzODUtZjRhOS00N2ZhLTg4YTUtMmE1YWJmZDRhMTY3MFIGCCsGAQUFBzABhkZo dHRwOi8vb2NzcC5zd2lzc3NpZ24uY2gvc2lnbi9vY3MtYWFjY2NlZDUtNjZlOC00 MDY5LTliMWItZmQyOWFiNzNlZmVjMG8GA1UdIARoMGYwCAYGZ4EMAQIBMAgGBgQA j3oBBjBQBghghXQBWQIBATBEMEIGCCsGAQUFBwIBFjZodHRwczovL3JlcG9zaXRv cnkuc3dpc3NzaWduLmNvbS9Td2lzc1NpZ25fQ1BTX1RMUy5wZGYwUQYDVR0fBEow SDBGoESgQoZAaHR0cDovL2NybC5zd2lzc3NpZ24uY2gvY2RwLTY3OTcyM2IyLTg2 NDEtNDY0Mi04NTAwLWY2ZDJmZjM3ZTZiYTAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDMGA1UdEQQsMCqCEWthYmFhcHAuZWJz LnN3aXNzghV3d3cua2FiYWFwcC5lYnMuc3dpc3MwHQYDVR0OBBYEFO5rcaXl36UR noSTn4vsnoYRlgz8MB8GA1UdIwQYMBaAFOu9f0mTjMnu7KK69xzSZ/CDsereMIIC cQYKKwYBBAHWeQIEAgSCAmEEggJdAlsAdwBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAl CBcvo6odBxPTDAAAAY7h6nTwAAAEAwBIMEYCIQDZH/EqGM5q5dEKJKX6FlNCcU48 jHorWyI3E/D03Nc2WgIhAJiU8bvQAkcOPjozgB8nPJ9Lzlxc/UzQjSU0xWxsNamW AHcAKOKBOP2DIUXpqdaqdTdtg3eohRKzwH9yQUgh3L3pjGYAAAGO4ep/oAAABAMA SDBGAiEAuGgDe0ew6Yv/n76Jg9qSZH5V2diaHHNIEUhFpW3Ck3wCIQCpb8ThUZxG tKS2jYzbHneau+yGOKZ/TA6xckFVdxaYYgB2AM8RVu7VLnyv84db2Wkum+kacWdK sBfsrAHSW3fOzDsIAAABjuHqc9kAAAQDAEcwRQIhAN74I3hhG+DevFGN18dJaetB kBSMc+Q8qQwK9Vs4r+4KAiACoVruLRs56A+yjbF70X9WktIwcTaIyp1hynVHKTaP AwB3AMz7D2qFcQll/pWbU87psnwi6YVcDZeNtql+VMD+TA2wAAABjuHqdfYAAAQD AEgwRgIhAOf1m8ulkWABYWewLYqW8HsoZzPvQJgX2hPHUsqqgcLPAiEA6gCE1F54 rlhXDjYj7u8QtFRtzLO5UvJ/YJy3XAEPzgUAdgBOdaMnXJoQwzhbbNTfP1LrHfDg jhuNacCx+mSxYpo53wAAAY7h6nQkAAAEAwBHMEUCIAvtNOLj6e1eDUrO30kUSksq Y0S7xQ9VrnkxmWPlYHaUAiEAm1ODFsiXYSoL010qojyjoAQ9Fsz2vP1gdS2TsjHn tqIwDQYJKoZIhvcNAQELBQADggIBACiFjhvu5K+RpxxFYn+ssxNWVSKuOpMaWDS8 xLsPS515nAt7wqAdUphuwIIMJKaXL/W8dZJQ2KwSZ58HCJBuGHAus03/J7BOsaFx SwXbqM8LWRFtZk58V2aIofsWrIqc2K/dzCPO2NNwo24uOu2HXHfr2rgIv1hXTbBI v0czHYJytNc/LtZ2T2iJnUJz4jcT7e/37J54O8QhZqhXSO8J6G0zzEuOl7T/fngw 8Ybb91FiK7tKpO9fhgRqwmV1bPeA27YzZCfFWU8y6AdDswd/9tEv5BAiLxwQywzh AI6Hb9eh4Hhz9QE2BNYsIwDWSyiIFPE9D2L7REMd4YAW3oSAAfSNGMNiFhGNqJZR iKfaIp0VC8i98L2+AMfowPWRr49/sSPfZgyS5ZsQTLcaCzeip+oaJnhuJGlYcnQd Qi52nn8P/c6tpU4JAzGHHrkVnt4lvTmd2S6w86obQ7EMXigLtOv/mGrivSkU8hfX 9o8M8KFoifAwf/dqCom99vXa0S+nGvOrI+mnTsdLVj1Enc7e5IQzLCb4U62zISSf UcweFrFPRNANdu7aTMQjMG1nbyZxEWXTLA9fdlpb7qHf4aICyA5qJsr8FVM3SvS4 YetoO5X4YQTiS6YzbmXGExTJSd/7RprvDcR7c2muu/Axqp2mmIQ3tuHHmIOXR7+8 SaI7udEb -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1PM1MMV044m1e28nSj2J T29JySBjepabxxFNzvsL+050eOFssLvvTNFvVLhM0bubTCLjuXx0XKu/oId0vkat buwoMMAigh3b4z/CJGdHHy9ZEEiiJDWRUH5OWnKV0ks9tHywItbogd6ThO15PfuX ARFCvlzgPWNpnap2kJN/YT7kYuyCuHSfvHThiiDBI9+ynr99+VLq+CzrKzGS4Qh2 Py3pTdniBV1jdLv1LbPxBBQdmF0LSeK6wZMy5+uOgsIarNnHHAY/uV+P9mVBhcbw Nb44Hs6acx+J7UdogAQ5PmV1SwiifMaPvNEoDqVbuBuaNUEvutDox3mu7nTWrIvU 8FEk2t43X3dQLbGsSzhSU7wVKRVkbX5CL2tLNA4vcZne+gFs3Ud8uYYUUXrFMsB9 w0CAjboZQJgCn3hKgdIdsltWQFVI5q8yCFrc6HO74i1yOmduR2QRAgooSkVUe4cR dYm46QnKCp0OJGMt6uFLz4WfSGNvfGRVz2jibsKO5+ATiq99FlR0jReOS4Xxr8yM Kyts/4a4n+jtnoQqAEe1xIWq8T07cgCwzDnhyQr7ktay7SNV3tQ/FTyeTMhCyup9 hgoaZwEk5oneMt3Vda9gSsGaanD6OjXWjSd5uwQ0wgYb8oxY7FUg/jgOGUqt+Tkq jFNsIPyPaTgTaZxQ136nCIUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 479220513806562383849127460135295988883374093381 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 13:20:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-15 13:20:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kabaapp.ebs.swiss' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 868760328195169593057902404880485737069714231970026589372170928931632795836735646376364112728733500514279283661687517315213275249276671965509215365582058097405139762425991441972231846343022037473342992461677992271399339281889440968088123057670526209862034465412540724970194029742984302870756542421719600266129206593507441890348018996575535503608434097206794856480855656505539583852098763809441549295356531377428404144003220386792873104335351878104767494015342288790771857750683367138498807934289326009496584409098979507559541579979955931097007002066578913356456676159227391804796661801262280040476256869494934812447187680171908194460200306367392713208662222666045950662071700357834925070294521660786757703180664418977338556738812993334680854905280326373937225173938386456738003244858085202762184424748466140443994809723913444825230545243162357414201202952652292179694133201812243783948420365619112372635824832159722582140022861880084942489895465118852071192094747236223140495313990139288174086199017902635196710131919377157503987522104855628903679418845128601461594518367055263212110340681084835170980885822281250777612903122299263646808703307734740505240351203724128556694386034476715010979528727701420915812240665543398549625440389 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kabaapp.ebs.swiss' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kabaapp.ebs.swiss' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ee6b71a5e5dfa5119e84939f8bec9e8611960cfc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (609 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 0028858e1beee4af91a71c45627facb313565522ae3a931a5834bcc4bb0f4b9d799c0b7bc2a01d52986ec0820c24a6972ff5bc759250d8ac12679f0708906e18702eb34dff27b04eb1a1714b05dba8cf0b59116d664e7c576688a1fb16ac8a9cd8afddcc23ced8d370a36e2e3aed875c77ebdab808bf58574db048bf47331d8272b4d73f2ed6764f68899d4273e23713edeff7ec9e783bc42166a85748ef09e86d33cc4b8e97b4ff7e7830f186dbf751622bbb4aa4ef5f86046ac265756cf780dbb6336427c5594f32e80743b3077ff6d12fe410222f1c10cb0ce1008e876fd7a1e07873f5013604d62c2300d64b288814f13d0f62fb44431de18016de848001f48d18c36216118da8965188a7da229d150bc8bdf0bdbe00c7e8c0f591af8f7fb123df660c92e59b104cb71a0b37a2a7ea1a26786e24695872741d422e769e7f0ffdceada54e090331871eb9159ede25bd399dd92eb0f3aa1b43b10c5e280bb4ebff986ae2bd2914f217d7f68f0cf0a16889f0307ff76a0a89bdf6f5dad12fa71af3ab23e9a74ec74b563d449dcedee484332c26f853adb321249f51cc1e16b14f44d00d76eeda4cc423306d676f26711165d32c0f5f765a5beea1dfe1a202c80e6a26cafc1553374af4b861eb683b95f86104e24ba6336e65c61314c949dffb469aef0dc47b7369aebbf031aa9da6988437b6e1c798839747bfbc49a23bb9d11b