node2.lb.trid.switch.ch

- SWITCH -

Issued by DigiCert EV RSA CA G2

About this certificate

This digital certificate with serial number 06:70:5d:2c:25:26:1b:76:1d:ab:0c:af:92:cd:bb:6b was issued on by DigiCert Inc.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SWITCH

Company registration number: CHE-101.494.993
Organization: SWITCH
Locality: Zurich
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:70:5d:2c:25:26:1b:76:1d:ab:0c:af:92:cd:bb:6b
Serial Number (int): 8558794984494700392082317186800925547
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 76:7c:41:84:88:46:06:69:d8:8a:8a:0c:e9:c0:b6:c6:3b:c9:53:cf
AuthorityKeyId: 6a:4e:50:bf:98:68:9d:5b:7b:20:75:d4:59:01:79:48:66:92:32:06

Fingerprint (sha1): db:1f:db:a1:0b:3d:21:1a:2a:ee:31:f1:c8:3b:02:0d:b5:b1:3f:7b
Fingerprint (sha256): 64:6a:a9:1b:b1:af:fa:c2:14:ff:5b:c5:3a:ba:54:60:15:43:bb:fa:6f:49:b1:a6:e4:ca:45:61:9a:16:27:c0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertEVRSACAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertEVRSACAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertEVRSACAG2.crl

Check the revocation status for certificate node2.lb.trid.switch.ch

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for node2.lb.trid.switch.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

node2.lb.trid.switch.ch
eduid.ch
www.eduid.ch
edu-id.ch
www.edu-id.ch
test.eduid.ch
www.test.eduid.ch
dev.eduid.ch
static.eduid.ch
mfa.eduid.ch
mfa.test.eduid.ch
mfa.dev.eduid.ch
wayf.switch.ch
wayf-test.switch.ch
attribute-viewer.aai.switch.ch
attribute-viewer-test.aai.switch.ch
attribute-viewer-dev.aai.switch.ch
login.eduid.ch
login.staging.eduid.ch
alumniethz.login.eduid.ch
bfh.login.eduid.ch
ehsm.login.eduid.ch
ethz.login.eduid.ch
ethz.login.staging.eduid.ch
fernuni.login.eduid.ch
ffhs.login.eduid.ch
fh-hwz.login.eduid.ch
fhnw.login.eduid.ch
graduateinstitute.login.eduid.ch
hep-bejune.login.eduid.ch
hepl.login.eduid.ch
hes-so.login.eduid.ch
hfh.login.eduid.ch
hslu.login.eduid.ch
hug.login.eduid.ch
ost.login.eduid.ch
phbern.login.eduid.ch
phgr.login.eduid.ch
phnmsbern.login.eduid.ch
phsg.login.eduid.ch
phsh.login.eduid.ch
phzg.login.eduid.ch
phzh.login.eduid.ch
sfuvet.login.eduid.ch
slsp.login.eduid.ch
switch.login.eduid.ch
switch.login.staging.eduid.ch
unibas.login.eduid.ch
unibe.login.eduid.ch
unifr.login.eduid.ch
unige.login.eduid.ch
unil.login.eduid.ch
unilu.login.eduid.ch
unine.login.eduid.ch
unisg.login.eduid.ch
usb.login.eduid.ch
usi.login.eduid.ch
usz.login.eduid.ch
uzh.login.eduid.ch
zhaw.login.eduid.ch
zhbluzern.login.eduid.ch
zhdk.login.eduid.ch
login.test.eduid.ch
login.idph.test.eduid.ch
login.aaidemo.test.eduid.ch
phnmsbern.azure-login.eduid.ch
phgr.azure-login.eduid.ch
testphgr.azure-login.eduid.ch
hslu.login.test.eduid.ch
uni-demo.login.test.eduid.ch
uni-partner.login.test.eduid.ch
unige.login.test.eduid.ch
uni-demo.azure-login.test.eduid.ch
unidemo.azure-login.test.eduid.ch
kuriotec.azure-login.test.eduid.ch
aai-logon.switch.ch
aai-demo-idp.switch.ch
test.idph.switch.ch
aai-logon.vho-switchaai.ch
switchboard.eduroam.ch
esign.switch.ch
esign-test.switch.ch
login.dev.eduid.ch

Other certificates including the domain name switch.ch

(limited to 100 certificates)
hsr.meet.switch.ch
point.switch.ch
wiki.smap.switch.ch
discourse.toolbox.switch.ch
collab-fms-test.switch.ch
kelimutu.switch.ch
tls.automattic.com
vico.switch.ch
zeus.switch.ch
parma.switch.ch
fl-0-51.zhdk.cloud.switch.ch
ssad.events.switch.ch
placement.api.s2.scloud.switch.ch
evct.ssl.switch.ch
unibas.meet.switch.ch
grafana.int.os-ls.kaas.switch.ch
*.s3-zh.lts.switch.ch
tls.automattic.com
zhaw.meet.switch.ch
neutron.api.s2.scloud.switch.ch
testsp.tw.switch.ch
portal-dev.switch.ch
landingpage.rpz.switch.ch
trust.aviareto.aero
mail.switch.ch
player.cast.switch.ch
test.toolbox.switch.ch
domain-pulse.at
intern.meet.switch.ch
zeus.switch.ch
influxdb.cast-test.switch.ch
glance.api.unil.cloud.switch.ch
producer.cast.switch.ch
filesender.switch.ch
staging.groupie.lard.switch.ch
unili.meet.switch.ch
backend.www.switch.ch
vcregister.switch.ch
kava-admin.cast.switch.ch
worker3.oc-test.switch.ch
alphubel.switch.ch
drive-backup.switch.ch
engines-admin.scloud.switch.ch
*.os.zhdk.cloud.switch.ch
www-test.switch.ch
monitor.switch.ch
wayf.switch.ch
teramac.switch.ch
tls.automattic.com
node21.webauthn.eduid.ch
forge.switch.ch
cast-ng.switch.ch
www.switch.ch
test.id.switch.ch
os.unil.cloud.switch.ch
wayf-test.switch.ch
aai-logon.switch.ch
tls.automattic.com
landingpage.mw.rpz.switch.ch
contracts-test.switch.ch
driveonlyoffice.switch.ch
portfolio.switch.ch
fl-6-178.zhdk.cloud.switch.ch
octavia.api.s1.scloud.switch.ch
cloud-id.switch.ch
compute.api.test1.cloud.switch.ch
portal-dev.switch.ch
status.dilercloud.com
player.cast.switch.ch
bonseyes.zhdk.cloud.switch.ch
cloud-id.switch.ch
tools.aai.switch.ch
download.cast.switch.ch
tools.switch.ch
www-dev.switch.ch
admin.oc-test.switch.ch
www-dev.switch.ch
wayf-test.switch.ch
test.idph.switch.ch
bfh.meet.switch.ch
urlanalyzer-staging-backend.misc01.k8s.cert.switch.ch
password.switch.ch
idp-monitor.aai.switch.ch
saqcnfbe.events.switch.ch
cr.gitlab.switch.ch
*.lts.switch.ch
kava-admin.cast.switch.ch
unibe.meet.switch.ch
domain-pulse.at
bonseyes.zhdk.cloud.switch.ch
wiki.smap.switch.ch
producer.cast.switch.ch
tls.automattic.com
switchnovember.events.switch.ch
*.sandstorm.cloud.switch.ch
portfolio.switch.ch
metadata-test.aai.switch.ch
kelimutu.switch.ch
presentation.cast.switch.ch
mirror.cloud.switch.ch

Certificate

The complete raw certificate details for node2.lb.trid.switch.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fjofvT+jQFkIRi1JbPb
XZCYk0kEnG7nQuaQEkiSK4YeU5VfX0PpUDx90iE0L8AxJRvbvzKhJ33RMIze5XCL
eVN8YH7YH7qdQmJW+d/5fct4YJDCZ2/ZXb4XfW/sFENi/NID6rkVCmOS0pgib1a9
a/0SsgR0Wee5KmSI9p7aMUF9GZiIVBmGK9g8rBzWne2G7HzvyrYhQ+6kxkn6MkS1
gONS+EObPvf8AEXB5jhEpayt/W1K676pmkkfc2mLKreP3LSRM0ueFmzr2D/9hjrC
6mM4oc/oZLWKc9/CH+B9Zfqqsb2lQB5sm8I5+FE8S7HJdwCasGiAxWtXTkzJA8s1
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8558794984494700392082317186800925547
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert EV RSA CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHE-101.494.993'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SWITCH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'node2.lb.trid.switch.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27516453379375318184991432510977927288611205487722859757884962213829067939195912582524597191943122087763506685859689682204203592607959274657471726009878285180953012378859014372216081318530328712287943678095654318824082760532838183159238967282212341617956058288423164702787258059396883439394001753508855274602170950075633775140674135197917421659646148319127642468647310946823647602311477455428828790605759657632186791079754458030066984381748079529006880627961777679699254059877702902007548874867398780845276130236868207959570490669926043984909295088067196812496202720152368359774722536899843346995841365765863861073261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6a4e50bf98689d5b7b2075d45901794866923206
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							767c418488460669d88a8a0ce9c0b6c63bc953cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1912 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'node2.lb.trid.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu-id.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edu-id.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfa.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfa.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfa.dev.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayf.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayf-test.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribute-viewer.aai.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribute-viewer-test.aai.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribute-viewer-dev.aai.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.staging.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniethz.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfh.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehsm.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethz.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethz.login.staging.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fernuni.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffhs.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fh-hwz.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhnw.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graduateinstitute.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hep-bejune.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hepl.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hes-so.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfh.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hslu.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hug.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ost.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phbern.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phgr.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phnmsbern.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phsg.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phsh.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phzg.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phzh.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfuvet.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slsp.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switch.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switch.login.staging.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unibas.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unibe.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unifr.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unige.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unil.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unilu.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unine.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unisg.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usb.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usi.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usz.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uzh.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhaw.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhbluzern.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhdk.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.idph.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.aaidemo.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phnmsbern.azure-login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phgr.azure-login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testphgr.azure-login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hslu.login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni-demo.login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni-partner.login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unige.login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni-demo.azure-login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unidemo.azure-login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuriotec.azure-login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aai-logon.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aai-demo-idp.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.idph.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aai-logon.vho-switchaai.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switchboard.eduroam.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esign.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esign-test.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.dev.eduid.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertEVRSACAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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