node2.lb.trid.switch.ch

- SWITCH -

Issued by DigiCert EV RSA CA G2

About this certificate

This digital certificate with serial number 02:7c:f0:46:6b:0f:cd:98:ec:2e:74:79:bd:a5:73:86 was issued on by DigiCert Inc.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SWITCH

Company registration number: CHE-101.494.993
Organization: SWITCH
Locality: Zurich
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:7c:f0:46:6b:0f:cd:98:ec:2e:74:79:bd:a5:73:86
Serial Number (int): 3307174159438403615381671934163252102
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 76:7c:41:84:88:46:06:69:d8:8a:8a:0c:e9:c0:b6:c6:3b:c9:53:cf
AuthorityKeyId: 6a:4e:50:bf:98:68:9d:5b:7b:20:75:d4:59:01:79:48:66:92:32:06

Fingerprint (sha1): 37:9e:b2:44:fb:57:e6:8e:3d:d4:b7:6a:30:e0:6c:b2:be:85:52:99
Fingerprint (sha256): 65:ba:df:af:cb:16:23:3f:25:8a:3d:39:3d:a6:b2:2a:a1:b0:b1:fe:74:7a:8e:b0:f0:e2:cc:fa:61:7b:9a:8e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertEVRSACAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertEVRSACAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertEVRSACAG2.crl

Check the revocation status for certificate node2.lb.trid.switch.ch

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for node2.lb.trid.switch.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

node2.lb.trid.switch.ch
eduid.ch
www.eduid.ch
edu-id.ch
www.edu-id.ch
test.eduid.ch
www.test.eduid.ch
dev.eduid.ch
static.eduid.ch
mfa.eduid.ch
mfa.test.eduid.ch
mfa.dev.eduid.ch
wayf.switch.ch
wayf-test.switch.ch
attribute-viewer.aai.switch.ch
attribute-viewer-test.aai.switch.ch
attribute-viewer-dev.aai.switch.ch
login.eduid.ch
login.staging.eduid.ch
alumniethz.login.eduid.ch
bfh.login.eduid.ch
ehsm.login.eduid.ch
ethz.login.eduid.ch
ethz.login.staging.eduid.ch
fernuni.login.eduid.ch
ffhs.login.eduid.ch
fh-hwz.login.eduid.ch
fhnw.login.eduid.ch
graduateinstitute.login.eduid.ch
hep-bejune.login.eduid.ch
hepl.login.eduid.ch
hes-so.login.eduid.ch
hfh.login.eduid.ch
hslu.login.eduid.ch
hug.login.eduid.ch
ost.login.eduid.ch
phbern.login.eduid.ch
phgr.login.eduid.ch
phnmsbern.login.eduid.ch
phsg.login.eduid.ch
phsh.login.eduid.ch
phzg.login.eduid.ch
phzh.login.eduid.ch
sfuvet.login.eduid.ch
slsp.login.eduid.ch
switch.login.eduid.ch
switch.login.staging.eduid.ch
unibas.login.eduid.ch
unibe.login.eduid.ch
unifr.login.eduid.ch
unige.login.eduid.ch
unil.login.eduid.ch
unilu.login.eduid.ch
unine.login.eduid.ch
unisg.login.eduid.ch
usb.login.eduid.ch
usi.login.eduid.ch
usz.login.eduid.ch
uzh.login.eduid.ch
zhaw.login.eduid.ch
zhbluzern.login.eduid.ch
zhdk.login.eduid.ch
login.test.eduid.ch
login.idph.test.eduid.ch
login.aaidemo.test.eduid.ch
phnmsbern.azure-login.eduid.ch
phgr.azure-login.eduid.ch
testphgr.azure-login.eduid.ch
unils.azure-login.eduid.ch
hslu.login.test.eduid.ch
uni-demo.login.test.eduid.ch
uni-partner.login.test.eduid.ch
unige.login.test.eduid.ch
uni-demo.azure-login.test.eduid.ch
unidemo.azure-login.test.eduid.ch
kuriotec.azure-login.test.eduid.ch
aai-logon.switch.ch
aai-demo-idp.switch.ch
aai-logon.vho-switchaai.ch
switchboard.eduroam.ch
esign.switch.ch
esign-test.switch.ch
login.dev.eduid.ch

Other certificates including the domain name switch.ch

(limited to 100 certificates)
hsr.meet.switch.ch
point.switch.ch
wiki.smap.switch.ch
discourse.toolbox.switch.ch
collab-fms-test.switch.ch
kelimutu.switch.ch
tls.automattic.com
vico.switch.ch
zeus.switch.ch
parma.switch.ch
fl-0-51.zhdk.cloud.switch.ch
ssad.events.switch.ch
placement.api.s2.scloud.switch.ch
evct.ssl.switch.ch
unibas.meet.switch.ch
grafana.int.os-ls.kaas.switch.ch
*.s3-zh.lts.switch.ch
tls.automattic.com
zhaw.meet.switch.ch
neutron.api.s2.scloud.switch.ch
testsp.tw.switch.ch
portal-dev.switch.ch
landingpage.rpz.switch.ch
trust.aviareto.aero
mail.switch.ch
player.cast.switch.ch
test.toolbox.switch.ch
domain-pulse.at
intern.meet.switch.ch
zeus.switch.ch
influxdb.cast-test.switch.ch
glance.api.unil.cloud.switch.ch
producer.cast.switch.ch
filesender.switch.ch
staging.groupie.lard.switch.ch
unili.meet.switch.ch
backend.www.switch.ch
vcregister.switch.ch
kava-admin.cast.switch.ch
worker3.oc-test.switch.ch
alphubel.switch.ch
drive-backup.switch.ch
engines-admin.scloud.switch.ch
*.os.zhdk.cloud.switch.ch
www-test.switch.ch
monitor.switch.ch
wayf.switch.ch
teramac.switch.ch
tls.automattic.com
node21.webauthn.eduid.ch
forge.switch.ch
cast-ng.switch.ch
www.switch.ch
test.id.switch.ch
os.unil.cloud.switch.ch
wayf-test.switch.ch
aai-logon.switch.ch
tls.automattic.com
landingpage.mw.rpz.switch.ch
contracts-test.switch.ch
driveonlyoffice.switch.ch
portfolio.switch.ch
fl-6-178.zhdk.cloud.switch.ch
octavia.api.s1.scloud.switch.ch
cloud-id.switch.ch
compute.api.test1.cloud.switch.ch
portal-dev.switch.ch
status.dilercloud.com
player.cast.switch.ch
bonseyes.zhdk.cloud.switch.ch
cloud-id.switch.ch
tools.aai.switch.ch
download.cast.switch.ch
tools.switch.ch
www-dev.switch.ch
admin.oc-test.switch.ch
www-dev.switch.ch
wayf-test.switch.ch
test.idph.switch.ch
bfh.meet.switch.ch
urlanalyzer-staging-backend.misc01.k8s.cert.switch.ch
password.switch.ch
idp-monitor.aai.switch.ch
saqcnfbe.events.switch.ch
cr.gitlab.switch.ch
*.lts.switch.ch
kava-admin.cast.switch.ch
unibe.meet.switch.ch
domain-pulse.at
bonseyes.zhdk.cloud.switch.ch
wiki.smap.switch.ch
producer.cast.switch.ch
tls.automattic.com
switchnovember.events.switch.ch
*.sandstorm.cloud.switch.ch
portfolio.switch.ch
metadata-test.aai.switch.ch
kelimutu.switch.ch
presentation.cast.switch.ch
mirror.cloud.switch.ch

Certificate

The complete raw certificate details for node2.lb.trid.switch.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOTTCCDTWgAwIBAgIQAnzwRmsPzZjsLnR5vaVzhjANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE
aWdpQ2VydCBFViBSU0EgQ0EgRzIwHhcNMjMwNjE5MDAwMDAwWhcNMjQwNjE4MjM1
OTU5WjCBtjETMBEGCysGAQQBgjc8AgEDEwJDSDEVMBMGCysGAQQBgjc8AgECEwRC
ZXJuMR0wGwYDVQQPDBRQcml2YXRlIE9yZ2FuaXphdGlvbjEYMBYGA1UEBRMPQ0hF
LTEwMS40OTQuOTkzMQswCQYDVQQGEwJDSDEPMA0GA1UEBxMGWnVyaWNoMQ8wDQYD
VQQKEwZTV0lUQ0gxIDAeBgNVBAMTF25vZGUyLmxiLnRyaWQuc3dpdGNoLmNoMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fjofvT+jQFkIRi1JbPbXZCY
k0kEnG7nQuaQEkiSK4YeU5VfX0PpUDx90iE0L8AxJRvbvzKhJ33RMIze5XCLeVN8
YH7YH7qdQmJW+d/5fct4YJDCZ2/ZXb4XfW/sFENi/NID6rkVCmOS0pgib1a9a/0S
sgR0Wee5KmSI9p7aMUF9GZiIVBmGK9g8rBzWne2G7HzvyrYhQ+6kxkn6MkS1gONS
+EObPvf8AEXB5jhEpayt/W1K676pmkkfc2mLKreP3LSRM0ueFmzr2D/9hjrC6mM4
oc/oZLWKc9/CH+B9Zfqqsb2lQB5sm8I5+FE8S7HJdwCasGiAxWtXTkzJA8s1bQID
AQABo4IKxjCCCsIwHwYDVR0jBBgwFoAUak5Qv5honVt7IHXUWQF5SGaSMgYwHQYD
VR0OBBYEFHZ8QYSIRgZp2IqKDOnAtsY7yVPPMIIHiAYDVR0RBIIHfzCCB3uCF25v
ZGUyLmxiLnRyaWQuc3dpdGNoLmNogghlZHVpZC5jaIIMd3d3LmVkdWlkLmNoggll
ZHUtaWQuY2iCDXd3dy5lZHUtaWQuY2iCDXRlc3QuZWR1aWQuY2iCEXd3dy50ZXN0
LmVkdWlkLmNoggxkZXYuZWR1aWQuY2iCD3N0YXRpYy5lZHVpZC5jaIIMbWZhLmVk
dWlkLmNoghFtZmEudGVzdC5lZHVpZC5jaIIQbWZhLmRldi5lZHVpZC5jaIIOd2F5
Zi5zd2l0Y2guY2iCE3dheWYtdGVzdC5zd2l0Y2guY2iCHmF0dHJpYnV0ZS12aWV3
ZXIuYWFpLnN3aXRjaC5jaIIjYXR0cmlidXRlLXZpZXdlci10ZXN0LmFhaS5zd2l0
Y2guY2iCImF0dHJpYnV0ZS12aWV3ZXItZGV2LmFhaS5zd2l0Y2guY2iCDmxvZ2lu
LmVkdWlkLmNoghZsb2dpbi5zdGFnaW5nLmVkdWlkLmNoghlhbHVtbmlldGh6Lmxv
Z2luLmVkdWlkLmNoghJiZmgubG9naW4uZWR1aWQuY2iCE2Voc20ubG9naW4uZWR1
aWQuY2iCE2V0aHoubG9naW4uZWR1aWQuY2iCG2V0aHoubG9naW4uc3RhZ2luZy5l
ZHVpZC5jaIIWZmVybnVuaS5sb2dpbi5lZHVpZC5jaIITZmZocy5sb2dpbi5lZHVp
ZC5jaIIVZmgtaHd6LmxvZ2luLmVkdWlkLmNoghNmaG53LmxvZ2luLmVkdWlkLmNo
giBncmFkdWF0ZWluc3RpdHV0ZS5sb2dpbi5lZHVpZC5jaIIZaGVwLWJlanVuZS5s
b2dpbi5lZHVpZC5jaIITaGVwbC5sb2dpbi5lZHVpZC5jaIIVaGVzLXNvLmxvZ2lu
LmVkdWlkLmNoghJoZmgubG9naW4uZWR1aWQuY2iCE2hzbHUubG9naW4uZWR1aWQu
Y2iCEmh1Zy5sb2dpbi5lZHVpZC5jaIISb3N0LmxvZ2luLmVkdWlkLmNoghVwaGJl
cm4ubG9naW4uZWR1aWQuY2iCE3BoZ3IubG9naW4uZWR1aWQuY2iCGHBobm1zYmVy
bi5sb2dpbi5lZHVpZC5jaIITcGhzZy5sb2dpbi5lZHVpZC5jaIITcGhzaC5sb2dp
bi5lZHVpZC5jaIITcGh6Zy5sb2dpbi5lZHVpZC5jaIITcGh6aC5sb2dpbi5lZHVp
ZC5jaIIVc2Z1dmV0LmxvZ2luLmVkdWlkLmNoghNzbHNwLmxvZ2luLmVkdWlkLmNo
ghVzd2l0Y2gubG9naW4uZWR1aWQuY2iCHXN3aXRjaC5sb2dpbi5zdGFnaW5nLmVk
dWlkLmNoghV1bmliYXMubG9naW4uZWR1aWQuY2iCFHVuaWJlLmxvZ2luLmVkdWlk
LmNoghR1bmlmci5sb2dpbi5lZHVpZC5jaIIUdW5pZ2UubG9naW4uZWR1aWQuY2iC
E3VuaWwubG9naW4uZWR1aWQuY2iCFHVuaWx1LmxvZ2luLmVkdWlkLmNoghR1bmlu
ZS5sb2dpbi5lZHVpZC5jaIIUdW5pc2cubG9naW4uZWR1aWQuY2iCEnVzYi5sb2dp
bi5lZHVpZC5jaIISdXNpLmxvZ2luLmVkdWlkLmNoghJ1c3oubG9naW4uZWR1aWQu
Y2iCEnV6aC5sb2dpbi5lZHVpZC5jaIITemhhdy5sb2dpbi5lZHVpZC5jaIIYemhi
bHV6ZXJuLmxvZ2luLmVkdWlkLmNoghN6aGRrLmxvZ2luLmVkdWlkLmNoghNsb2dp
bi50ZXN0LmVkdWlkLmNoghhsb2dpbi5pZHBoLnRlc3QuZWR1aWQuY2iCG2xvZ2lu
LmFhaWRlbW8udGVzdC5lZHVpZC5jaIIecGhubXNiZXJuLmF6dXJlLWxvZ2luLmVk
dWlkLmNoghlwaGdyLmF6dXJlLWxvZ2luLmVkdWlkLmNogh10ZXN0cGhnci5henVy
ZS1sb2dpbi5lZHVpZC5jaIIadW5pbHMuYXp1cmUtbG9naW4uZWR1aWQuY2iCGGhz
bHUubG9naW4udGVzdC5lZHVpZC5jaIIcdW5pLWRlbW8ubG9naW4udGVzdC5lZHVp
ZC5jaIIfdW5pLXBhcnRuZXIubG9naW4udGVzdC5lZHVpZC5jaIIZdW5pZ2UubG9n
aW4udGVzdC5lZHVpZC5jaIIidW5pLWRlbW8uYXp1cmUtbG9naW4udGVzdC5lZHVp
ZC5jaIIhdW5pZGVtby5henVyZS1sb2dpbi50ZXN0LmVkdWlkLmNogiJrdXJpb3Rl
Yy5henVyZS1sb2dpbi50ZXN0LmVkdWlkLmNoghNhYWktbG9nb24uc3dpdGNoLmNo
ghZhYWktZGVtby1pZHAuc3dpdGNoLmNoghphYWktbG9nb24udmhvLXN3aXRjaGFh
aS5jaIIWc3dpdGNoYm9hcmQuZWR1cm9hbS5jaIIPZXNpZ24uc3dpdGNoLmNoghRl
c2lnbi10ZXN0LnN3aXRjaC5jaIISbG9naW4uZGV2LmVkdWlkLmNoMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4w
bDA0oDKgMIYuaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0RVZSU0FD
QUcyLmNybDA0oDKgMIYuaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0
RVZSU0FDQUcyLmNybDBKBgNVHSAEQzBBMAsGCWCGSAGG/WwCATAyBgVngQwBATAp
MCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwcwYIKwYB
BQUHAQEEZzBlMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20w
PQYIKwYBBQUHMAKGMWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2Vy
dEVWUlNBQ0FHMi5jcnQwCQYDVR0TBAIwADCCAYAGCisGAQQB1nkCBAIEggFwBIIB
bAFqAHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGI1CJWqwAA
BAMASDBGAiEAmbm4qxLEUN85LxBBppDKBRYdTn+aVUXcC9E7CsKeaHkCIQDv6od/
0+nzC0Lb5SHXMBOX790+rk4OxtYfu+cKaDA7mwB2AEiw42vapkc0D+VqAvqdMOsc
UgHLVt0sgdm7v6s52IRzAAABiNQiVkgAAAQDAEcwRQIhAJANfsFmTP/WlVDqUuxP
WBFxhzB/Lnhh7+asZVMFIgyyAiAvVy4OAXbH/vNHCseYotm/KuZcXA5Sf3i3LDwJ
dd377gB3ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABiNQiVegA
AAQDAEgwRgIhANtDmv4wLmcoeQt4qLLZXKRrz/P03frpFjXivO1MFlAFAiEAq0P3
Gw1W+32Ets01t0Obu3ivnay0+WvatfwRiWbm/owwDQYJKoZIhvcNAQELBQADggEB
AFr4flI628uOAkEDqngGbxkNOzALNh9yN7Vz/i7c2Z1hDUa6+//78cz3990/jsMa
CEZm1NhDFCwLkXv1SvUnf9uzv0NClO2blX6X2Qi9BbHc5Hza6tfhP70hoRmzUmc2
9pF0qA1fXzOeyXpiDaf1T24TWC3YXgyVWXklQ4ZlOsJtckjuz+sdZOId6bIknyGV
6alNz8HQISasj6kMbYx9RjLv8vATI58uAe95u45pwP1Xpluwgq+cXnIFnwJyOpsl
eiW4qmX5ysi3yxNJUs2egAUpwdIqqHnxA8v7kS+/s26cNhQ1CSfoTZXndo52YqjJ
/zZBXY0KNq98g6Cgzi9hdIU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fjofvT+jQFkIRi1JbPb
XZCYk0kEnG7nQuaQEkiSK4YeU5VfX0PpUDx90iE0L8AxJRvbvzKhJ33RMIze5XCL
eVN8YH7YH7qdQmJW+d/5fct4YJDCZ2/ZXb4XfW/sFENi/NID6rkVCmOS0pgib1a9
a/0SsgR0Wee5KmSI9p7aMUF9GZiIVBmGK9g8rBzWne2G7HzvyrYhQ+6kxkn6MkS1
gONS+EObPvf8AEXB5jhEpayt/W1K676pmkkfc2mLKreP3LSRM0ueFmzr2D/9hjrC
6mM4oc/oZLWKc9/CH+B9Zfqqsb2lQB5sm8I5+FE8S7HJdwCasGiAxWtXTkzJA8s1
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3307174159438403615381671934163252102
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert EV RSA CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHE-101.494.993'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SWITCH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'node2.lb.trid.switch.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27516453379375318184991432510977927288611205487722859757884962213829067939195912582524597191943122087763506685859689682204203592607959274657471726009878285180953012378859014372216081318530328712287943678095654318824082760532838183159238967282212341617956058288423164702787258059396883439394001753508855274602170950075633775140674135197917421659646148319127642468647310946823647602311477455428828790605759657632186791079754458030066984381748079529006880627961777679699254059877702902007548874867398780845276130236868207959570490669926043984909295088067196812496202720152368359774722536899843346995841365765863861073261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6a4e50bf98689d5b7b2075d45901794866923206
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							767c418488460669d88a8a0ce9c0b6c63bc953cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1919 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'node2.lb.trid.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu-id.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edu-id.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfa.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfa.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfa.dev.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayf.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayf-test.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribute-viewer.aai.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribute-viewer-test.aai.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribute-viewer-dev.aai.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.staging.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniethz.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfh.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehsm.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethz.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethz.login.staging.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fernuni.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffhs.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fh-hwz.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhnw.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graduateinstitute.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hep-bejune.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hepl.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hes-so.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfh.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hslu.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hug.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ost.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phbern.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phgr.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phnmsbern.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phsg.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phsh.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phzg.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phzh.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfuvet.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slsp.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switch.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switch.login.staging.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unibas.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unibe.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unifr.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unige.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unil.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unilu.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unine.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unisg.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usb.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usi.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usz.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uzh.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhaw.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhbluzern.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhdk.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.idph.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.aaidemo.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phnmsbern.azure-login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phgr.azure-login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testphgr.azure-login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unils.azure-login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hslu.login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni-demo.login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni-partner.login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unige.login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni-demo.azure-login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unidemo.azure-login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuriotec.azure-login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aai-logon.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aai-demo-idp.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aai-logon.vho-switchaai.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switchboard.eduroam.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esign.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esign-test.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.dev.eduid.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertEVRSACAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN asn1: syntax error: invalid boolean
false
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:3|t:29|false]  
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65156894041915410746098171976242611374323829236644738428965021442152109051058
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21412737435974621453392489772838125883446679436829932368773683197959158496238
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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