sip3.snb.ch

- Schweizerische Nationalbank -

Issued by SwissSign RSA TLS EV ICA 2021 - 1

About this certificate

This digital certificate with serial number 5d:6d:73:ae:4e:45:42:fe:45:0c:15:45:f2:ca:a0:e1:65:08:ad:4b was issued on by SwissSign AG.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Schweizerische Nationalbank

Company registration number: CHE-105.944.570
Organization: Schweizerische Nationalbank
Address: Börsenstrasse 15
Postal code: 8001
State / Province: ZH
Locality: Zurich
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 5d:6d:73:ae:4e:45:42:fe:45:0c:15:45:f2:ca:a0:e1:65:08:ad:4b
Serial Number (int): 533377000139310321286585312376335269982691175755
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 90:cc:9c:90:e7:76:1a:8c:27:27:61:1e:be:29:36:d6:3a:5d:2d:72
AuthorityKeyId: da:34:d4:8e:10:23:f4:6a:2d:6c:b4:1f:f3:28:11:de:5e:01:c4:de

Fingerprint (sha1): 51:7a:9f:8a:86:9f:99:16:fc:7a:14:29:52:ee:84:7c:f8:8a:56:04
Fingerprint (sha256): 58:1f:91:ec:56:9f:09:89:bf:f7:f9:8e:65:7e:6d:e7:4a:ac:fc:d5:0b:0e:51:5c:d5:9c:fa:cf:94:6e:30:8e

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE

Revocation information

OCSP Server: http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate sip3.snb.ch

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sip3.snb.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sip3.snb.ch
sip.snb.ch
webconf4.snb.ch

Other certificates including the domain name snb.ch

(limited to 100 certificates)
remotemail.snb.ch
bbuem.snb.ch
mailb.snb.ch
ras.snb.ch
ras.snb.ch
ras.snb.ch
surveys.snb.ch
mailz.snb.ch
sip.snb.ch
mailz.snb.ch
rastest.snb.ch
ras.snb.ch
meet.snb.ch
datasharedev.snb.ch
vcse.snb.ch
ras.snb.ch
data.snb.ch
recruiting.snb.ch
rastest.snb.ch
ras.snb.ch
surveys.snb.ch
sip.snb.ch
ras.snb.ch
sip.snb.ch
ras.snb.ch
testgold.snb.ch
remotemail.snb.ch
testgold.snb.ch
ras2.snb.ch
wlanportal1.snb.ch
data.test.snb.ch
sip.snb.ch
testswiss.snb.ch
testgold.snb.ch
surveys-usertest.snb.ch
secmail.snb.ch
surveys.snb.ch
wlanportal1.snb.ch
mailb.snb.ch
snb.ch
surveys.snb.ch
datashare.snb.ch
alert.snb.ch
data.snb.ch
secmail.snb.ch
rastest.snb.ch
secmail.snb.ch
sip3.snb.ch
remotez.snb.ch
snb.ch
testgold.snb.ch
testgold.snb.ch
datasharedev.snb.ch
vcse.snb.ch
bbuem.snb.ch
secmail.snb.ch
ras.snb.ch
ras.snb.ch
sip3.snb.ch
remote.snb.ch
vcse.snb.ch
securemail.snb.ch
ras.snb.ch
surveys.snb.ch
testgold.snb.ch
webstats.snb.ch
securemail.snb.ch
surveys-usertest.snb.ch
snb.ch
careers.snb.ch
ras2.snb.ch
datasharedev.snb.ch
testgold.snb.ch
datasharedev.snb.ch
alert.snb.ch
snb.ch
remotez.snb.ch
data.snb.ch
surveys.snb.ch
datashare.snb.ch
data.snb.ch
testserver.snb.ch
ras-betest1.snb.ch
remoteb.snb.ch
datashare.snb.ch
rastest.snb.ch
rastest.snb.ch
testswiss.snb.ch
securemail.snb.ch
snb.ch
sip.snb.ch
mailb.snb.ch
testgold.snb.ch
bbuem.snb.ch
alert.snb.ch
bbuem.snb.ch
ras.snb.ch
data.test.snb.ch
bbuem.snb.ch
snb.ch

Certificate

The complete raw certificate details for sip3.snb.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7e7ZIJS37b4yDZL5GNX
XuB2+893wwGqS3AdL6HqVW6U2EfI+a8Gah9zwNU8Eb7sWHaYVEDBAjH+vy/JY5Ll
uscomShj/1hMiSmvd2eWuxSuCrub+H815hGJm6qIFRB8jchRboNpk4as5osYegUL
X26q2B+hZEM6nh5dBF/kQfQiZSnDf22r25Yv0Yc1xifw6d6gLld8/wU2e30KvKPj
lKD27MFTwGPzdM2nKhkrlJcp3fwBhHml5hNDOBpf6tRSQvmWj6UTVLdTMLgMqtWJ
kRVp3fBnlL4zgD9DOKTctQFSESwULU1dArcVmdx2xSVIRMIQlCpKMKi43VFyZUzM
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 533377000139310321286585312376335269982691175755
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-18 06:41:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-18 06:41:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHE-105.944.570'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '8001'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Börsenstrasse 15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schweizerische Nationalbank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sip3.snb.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23697164655803714573159030610964917571336278633178591227040630553203757956626099940404136314945364833623796066601062174932561616379037734469866057551203501007905271588444224059005389104459348298772403753973036811648016844592575019386020871601336930476903851425814671892634119542454835543632450350543031851316406693814147962993395200233738103622088173817079970573804172664133253480223776050459730833016012736700364248304381924649086867357222655818929913516251821294162475714853822657396247880535457525779089208319506720390461985448393978677554184599097121003999680226956631997221539798274643838869967702016442462162117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip3.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.snb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconf4.snb.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							90cc9c90e7761a8c2727611ebe2936d63a5d2d72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da34d48e1023f46a2d6cb41ff32811de5e01c4de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (844 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (840 bytes)
							03460076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000183e9d2fb9c0000040300473045022100beb10c84e9ba3eaa49bd99585c99b4517d487370fa3359812960c05c0a7985dd022049ee5fdbbde6ed7de33f2836ca11a9b91292e4d893b55e9919bfef50ec728b0c0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000183e9d2f81b00000403004630440220241f381859f3ed5de3bc3775eef2958f9a805370d03a8c6fdbc9feb7c67a99170220302909432ede78435f56129c1dd72ab86001a4e1c1263c3469035070aeaec3ea0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000183e9d2f88d00000403004630440220053b3abb949d49a35b83bee318910222aca4f0724a3b0150aec679f0106b67140220036e465af8011cb22ed82d2b2227b9fdf6da52421bb46bbae3a4c2ea911d91f7007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000183e9d2f852000004030047304502201a96a03f28bdf8b3e70f541aab9972c2783541aaab52ce263e31cf6a23f7571502210089b30e8619f9a28935421d3b6a81e08a8a0e6bdc118e499e35e781883c8a6371007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000183e9d2fafc00000403004830460221009e74404b8184a3ab387ac2969a03f929dd579af289dd0c684db9028484ef20be022100a0b3ab7d999f3c2bc90766cb4fab97b36eb95de57b0a07c02f9ce490e1118f61007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000183e9d2fa53000004030047304502204f3898989fad63924a2a0143cbf935d081264509c12506515b1300fbacb9fca0022100be7ab731852e136534a36af1c51edcd25ac925d94b887a23f9a91298f4549f1a007500e87ea7660bc26cf6002ef5725d3fe0e331b9393bb92fbf58eb3b9049daf5435a00000183e9d2fc25000004030046304402200bed2b68f16365b2672e53ab1957ef63916ca972485f44e8c0328fbdd43c121902203a290436b51d91c320cc467a113d1e293b8c74d593d4929fbefc0268cc971823
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		009262acfd8a0d5e9a494fee5b99743bbaade0c495e156e7dab522601c2da78e1ea9468ba17e7d04105372eb5da421d4b6a198a8c49f6464aef70ea2849930f024eb163b3728d342dd566157f14dc657c0ebe4635eb1d79bdbb1b2277d620e58e412b809c3de46ccc7bb58c7fcd2883793e62033378e31d76b80527398f8fdec838d7499205876285f867cd84c53e9223e08db03ba100a90f7bbfaa176fdfee7a3d6bf28edeadd56ca8af47b4e2a1cd74b8811486b7ed77dce3da00bf74494323cc3834e17107330b2865fb9993cf7ed363f7093b20e7b05bfb064cfa924c27de557a740a47057c5bbf66e122515e67fb3ecf6d0b6db5c211ee835a8f9ac3b7d7f6f814e8755ab0071e18c6dc1aafcb8f8469608cfd5e07f356c292bfde9e4bd2fc06188e9fb0da2ec87d99af0f5fcefc6a906069f58bb4295d93fdedaef4c451069ead1cedc1c9c79b32fc74cdf64647923bcfd0bf622ef931cca73018e865f32ccd5ea187aada4099f608d774c534c8107f46a909687e95dca787a0b0836f6f78802ab9adf6b8a52628c5c693d7d36166043065f096bf367fad7ef4fe2f00e3bd82b231a74e37f47e65572e3fe7687b11dd6786ef28ad5637c538972db4f94a04adeeedd55b8a08b595d194323835c7347f18382f31e9cc9db1ef91e038201ff4cfbc3c7d77e41d1eb62fac7a5006e469f170c14fd15c0e45327c61790e3d2b2