rastest.snb.ch

- Schweizerische Nationalbank -

Issued by SwissSign RSA TLS EV ICA 2021 - 1

About this certificate

This digital certificate with serial number 12:6c:e0:b2:c3:d7:02:d0:9e:70:be:57:0f:63:d5:43:a2:ed:22:09 was issued on by SwissSign AG.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Schweizerische Nationalbank

Company registration number: CHE-105.944.570
Organization: Schweizerische Nationalbank
Address: Börsenstrasse 15
Postal code: 8001
State / Province: ZH
Locality: Zurich
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 12:6c:e0:b2:c3:d7:02:d0:9e:70:be:57:0f:63:d5:43:a2:ed:22:09
Serial Number (int): 105189888338896305053733311133854667241497109001
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: ca:b4:f9:d3:2c:85:68:4d:a6:cb:5f:1a:4f:4c:1d:04:75:82:7a:6d
AuthorityKeyId: da:34:d4:8e:10:23:f4:6a:2d:6c:b4:1f:f3:28:11:de:5e:01:c4:de

Fingerprint (sha1): 93:5a:78:c2:27:40:78:ad:82:12:d7:9d:fa:e9:31:61:33:40:d8:59
Fingerprint (sha256): 49:15:63:9c:89:58:c0:ec:32:6c:f0:97:b0:0b:4c:1e:ac:d8:45:29:5a:63:4e:ca:bc:79:7c:48:ce:16:a8:ea

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE

Revocation information

OCSP Server: http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate rastest.snb.ch

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rastest.snb.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rastest.snb.ch
ras-betest.snb.ch
ras-supporttest.snb.ch
ras-betest1.snb.ch
ras-betest2.snb.ch
ras-supportbetest1.snb.ch
ras-supportbetest2.snb.ch
rastest.sec.snb.ch
ras-betest.sec.snb.ch
ras-supporttest.sec.snb.ch
ras-betest1.sec.snb.ch
ras-betest2.sec.snb.ch

Other certificates including the domain name snb.ch

(limited to 100 certificates)
remotemail.snb.ch
bbuem.snb.ch
mailb.snb.ch
ras.snb.ch
ras.snb.ch
ras.snb.ch
surveys.snb.ch
mailz.snb.ch
sip.snb.ch
mailz.snb.ch
rastest.snb.ch
ras.snb.ch
meet.snb.ch
datasharedev.snb.ch
vcse.snb.ch
ras.snb.ch
data.snb.ch
recruiting.snb.ch
rastest.snb.ch
ras.snb.ch
surveys.snb.ch
sip.snb.ch
ras.snb.ch
sip.snb.ch
ras.snb.ch
testgold.snb.ch
remotemail.snb.ch
testgold.snb.ch
ras2.snb.ch
wlanportal1.snb.ch
data.test.snb.ch
sip.snb.ch
testswiss.snb.ch
testgold.snb.ch
surveys-usertest.snb.ch
secmail.snb.ch
surveys.snb.ch
wlanportal1.snb.ch
mailb.snb.ch
snb.ch
surveys.snb.ch
datashare.snb.ch
alert.snb.ch
data.snb.ch
secmail.snb.ch
rastest.snb.ch
secmail.snb.ch
sip3.snb.ch
remotez.snb.ch
snb.ch
testgold.snb.ch
testgold.snb.ch
datasharedev.snb.ch
vcse.snb.ch
bbuem.snb.ch
secmail.snb.ch
ras.snb.ch
ras.snb.ch
sip3.snb.ch
remote.snb.ch
vcse.snb.ch
securemail.snb.ch
ras.snb.ch
surveys.snb.ch
testgold.snb.ch
webstats.snb.ch
securemail.snb.ch
surveys-usertest.snb.ch
snb.ch
careers.snb.ch
ras2.snb.ch
datasharedev.snb.ch
testgold.snb.ch
datasharedev.snb.ch
alert.snb.ch
snb.ch
remotez.snb.ch
data.snb.ch
surveys.snb.ch
datashare.snb.ch
data.snb.ch
testserver.snb.ch
ras-betest1.snb.ch
remoteb.snb.ch
datashare.snb.ch
rastest.snb.ch
rastest.snb.ch
testswiss.snb.ch
securemail.snb.ch
snb.ch
sip.snb.ch
mailb.snb.ch
testgold.snb.ch
bbuem.snb.ch
alert.snb.ch
bbuem.snb.ch
ras.snb.ch
data.test.snb.ch
bbuem.snb.ch
snb.ch

Certificate

The complete raw certificate details for rastest.snb.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiGYHdmQ+Aj8j9E3hkzm
LUuA2EGzXwINCGA5SmhbwD3GyXpkwXdAq1OV+PWyp7rBTV/jIKL45zs7zyIJ8RT9
uj0OlDHuJHyEZDWe92wWSav1ZbkG1FHeK7CzdhXBPAqGLMH5Of0JaU+xfbcmNwBJ
zB4EUye7yvqsiaOEJeyPWVwRep83fepNEXFE0Do4PFNjK6S05WuoxpD6pnedsNzT
Ms8SCdXPdyUhzAq3wfTU6dXZbV6tgab2jVEwMJ/iQ57gVNUIWuptVoeMgOXHmUgG
H2/pmlDq6XKLANVyDRvhHuxye0QsqRPrASUkrHPilhsCMOj7ApP6z6fLCBkZ/58i
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 105189888338896305053733311133854667241497109001
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-20 11:47:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-20 11:47:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHE-105.944.570'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '8001'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Börsenstrasse 15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schweizerische Nationalbank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rastest.snb.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25516703523282799930212997839107102463683276002456582177650884362326074140212405625224683653521282485770531149701249502922361141221394034762256707556263135369212303013401262359633534414193455748199782175464503368673286980695272536805163766395346215126598666078095507445062414370050783681059577440762196676299424522516271704871131509991214342297986743012452723441844431389924485801330525500051772381909865372405919721853576838121255843733354098462042236313101028319590390524119736736696103298833651526473627248362819121316803970207684879942366461792389656436233451443283728963838579909086733995386316720608501196333731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rastest.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-betest.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-supporttest.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-betest1.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-betest2.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-supportbetest1.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-supportbetest2.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rastest.sec.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-betest.sec.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-supporttest.sec.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-betest1.sec.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras-betest2.sec.snb.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cab4f9d32c85684da6cb5f1a4f4c1d0475827a6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da34d48e1023f46a2d6cb41ff32811de5e01c4de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (725 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (721 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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