outlook.ibsa.ch

- Swisscom (Schweiz) AG -

Issued by SwissSign Server Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 54:a6:01:b2:71:31:8a:37:68:3b:d6:38:5e:cc:a5:78:05:c1:88:15 was issued on by SwissSign AG.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Swisscom (Schweiz) AG

Organization: Swisscom (Schweiz) AG
State / Province: Bern
Locality: Worblaufen
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 54:a6:01:b2:71:31:8a:37:68:3b:d6:38:5e:cc:a5:78:05:c1:88:15
Serial Number (int): 483257296285165836596468879750908052889625790485
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 38:d2:4c:a9:83:4d:99:5e:87:05:4f:38:13:1a:a3:f3:cb:cd:1d:3b
AuthorityKeyId: e7:f1:e7:fd:2e:53:ad:11:e5:81:1a:57:a4:73:8f:12:7d:98:c8:ae

Fingerprint (sha1): b5:5e:08:22:3e:ea:7f:53:3c:22:d4:54:00:69:07:e5:0f:1b:ca:8c
Fingerprint (sha256): 5e:de:37:7d:5a:a4:0d:bf:76:d9:a3:b2:c1:be:7a:5b:0a:0e:f2:db:a1:a1:23:ce:54:f8:8f:11:31:51:e8:5f

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE

Revocation information

OCSP Server: http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate outlook.ibsa.ch

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for outlook.ibsa.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

outlook.ibsa.ch
sip.ibsa.ch
sip.bouty.it
sip.ch.ibsagroup.com
sip.ibsa.it
sip.ibsagroup.com
sip.it.ibsagroup.com
uccweb-lfe11.ibsa.ch
uccweb-lfe21.ibsa.ch
ucc.ibsa.ch
lyncdiscover.ibsa.ch
lyncdiscover.ibsa.it
lyncdiscover.ibsagroup.com
lyncdiscover.bouty.it
lyncdiscover.it.ibsagroup.com
lyncdiscover.ch.ibsagroup.com
webconf.ibsa.ch
sip.altergon.it
lyncdiscover.altergon.it

Other certificates including the domain name ibsa.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for outlook.ibsa.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtzPAhmmio7BKQk3O5Mb0
6nK2akicCAIXH1IxOcM5IP0X4bQ2halxpi5JleK8lhpk8ga8w8z+pjM1lzX3cRM3
YWaNy0kYWoE2FQi95hmFLJi0x+FndmjpeiyqU5Zc9OhauZTOj/CtACEtVPkEgkQ7
l0hg2kghWT+A0UE0SReB2+oOVAPkqLlbfPhHKBeu3+KZhiuaNMmlK4CLPfWCsD6S
mWNG1cTlk/wndaqFsYRDRx37FLWwACzWtWKX1WD7cpQcnsnNrSZVyw2+4bdLNQ70
IJ+TKh2ugxkFkY2vIC9YdUBLfB4qjK3S4br6qtujktyANBV2uYa+cEm+VoxgJ94c
d+vMVxx3FpWW2ZyYJ0ONfHiy78zynd4CzlO+SeT1fVleA5JzszdXJxbLbo3EnWn+
LWmXLi2UyyGq5YCX+U1l6W77VjrA833UrvoPmCqGJuX+MoaXP8mFRMQ77Kt+0UNt
eDCgmO39dCrTkRFwsgeLnrWTca58jgwT7XEdbSTbeWWqq/1fCYuQ+A0WceTj6i4b
NhpvKgnEl/ncVyLd3Y7vTCNptHqMDrcTai1MT7bzGsec0I/gVosxQ8Ut+V9gK1P6
Z0N51uk0b1YHA0H1PfDW7JRSX8NXofMBOfetWMLvIRTkPIKNJtUqkLPVy+mhVRcN
9TLZGV0OjGxkpjhhvI8185MCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 483257296285165836596468879750908052889625790485
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 11:17:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-11 11:17:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Worblaufen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swisscom (Schweiz) AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'outlook.ibsa.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 747399590806137610340308752128335159891426077531514427982588948552892865270674274700536262412544702552823645496479525020479221401289489583990629068075139956208228816071795347951700389341416637248951239123717668470867105550181798048816205529089283105828777534930027777804505157673129308449939202801931092249280196510619018228217289123031575065535253200459301486323582484453573634281279286187325873381818715247296815686050004727500616902470411936364768636524031719620423078404783763316862095896530543211110533612692491072321372507285426733201704866345122413242384159902469754720281103463165467942674511465045053279361483344630825886685605268004605523662486971431110719181355533223864285110578747533220057934187822750786217625999735896356026925637861904458195671084967436293120167197238175798712548582835309091892215189270619888993682162013648002770862833245017336560447851254221253620505729535743916865302610028242823994938129483430385720596557556429415139749182482878636859080681753668423128241570022296051138679396333824275857386010207833997876388543080014075408524174309794659571063288452531459923514594619258649951764230098911511103401642125339062081619911720455037521296140653207783968831833175481297714728257665082901849955496851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (398 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.bouty.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ch.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ibsa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.it.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uccweb-lfe11.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uccweb-lfe21.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucc.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ibsa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bouty.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.it.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ch.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconf.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.altergon.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.altergon.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							38d24ca9834d995e87054f38131aa3f3cbcd1d3b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e7f1e7fd2e53ad11e5811a57a4738f127d98c8ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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