wwwsec.urkb.ch
- Urner Kantonalbank -
Issued by SwissSign RSA TLS EV ICA 2021 - 1
About this certificate
This digital certificate with serial number 3e:b8:7d:2c:61:92:21:76:0c:fd:e6:1b:88:a4:79:83:9c:84:56:e6 was issued on by SwissSign AG.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Urner Kantonalbank
Company registration number:
CHE-108.954.665
Organization: Urner Kantonalbank
Organization: Urner Kantonalbank
Address:
Bahnhofstrasse 1
Postal code: 6460
State / Province: UR
Locality: Altdorf
Country: CH
Postal code: 6460
State / Province: UR
Locality: Altdorf
Country: CH
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate has expire since
Certificate Details
Serial Number (hex): 3e:b8:7d:2c:61:92:21:76:0c:fd:e6:1b:88:a4:79:83:9c:84:56:e6Serial Number (int): 358071669045467169317564499657731119835295012582
Serial Number lenght: 158 bits, 20 octets
SubjectKeyId: 38:4e:10:7d:e2:3e:62:2b:cd:e8:38:c6:14:dc:64:24:cf:0c:5e:cd
AuthorityKeyId: da:34:d4:8e:10:23:f4:6a:2d:6c:b4:1f:f3:28:11:de:5e:01:c4:de
Fingerprint (sha1): 9c:88:2e:67:8e:45:d8:65:c3:13:68:9c:0e:f8:31:a2:88:c2:fe:39
Fingerprint (sha256): 6e:ae:82:2d:f0:10:68:6b:fe:56:26:0a:6d:1f:2a:55:7f:23:44:6b:f5:c5:e3:24:3f:a4:6a:a8:0a:1e:2f:a3
Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
Revocation information
OCSP Server: http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DECRL Distribution Point: http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint
Check the revocation status for certificate wwwsec.urkb.ch
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for wwwsec.urkb.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
wwwsec.urkb.ch
e-banking.ukb.ch
mobilebanking.ukb.ch
mobilebanking.urkb.ch
activation.ukb.ch
activation.urkb.ch
cronto.ukb.ch
cronto.urkb.ch
e-banking.ukb.ch
mobilebanking.ukb.ch
mobilebanking.urkb.ch
activation.ukb.ch
activation.urkb.ch
cronto.ukb.ch
cronto.urkb.ch
Other certificates including the domain name urkb.ch
(limited to 100 certificates)
www.ukb.ch
fintest-wwwsec.ukb.ch
fintest-dev-wwwsec.ukb.ch
www.ukb.ch
fintest-e-banking.ukb.ch
fintest-e-banking.ukb.ch
ukbhb01mx01-e.urkb.ch
www.privasphere.com
wwwsec.urkb.ch
www.ukb.ch
www.urkb.ch
www.ukb.ch
fintest-e-banking.ukb.ch
www.ukb.ch
wwwsec.ukb.ch
www.ukb.ch
wwwsec.ukb.ch
ibdemo.urkb.ch
www.ukb.ch
wwwsec.ukb.ch
wwwsec.urkb.ch
www.ukb.ch
ukbhb01mx01-e.urkb.ch
fintest-dev-wwwsec.ukb.ch
fintest-wwwsec.ukb.ch
wwwsec.ukb.ch
www.urkb.ch
www.ukb.ch
ukbhb01mx01-e.urkb.ch
fintest-e-banking.ukb.ch
wwwsec.ukb.ch
ukbhb01mx01-e.urkb.ch
mobilebanking.urkb.ch
www.ukb.ch
fintest-wwwsec.ukb.ch
wwwsec.urkb.ch
ukbhb01mx01-e.urkb.ch
www.ukb.ch
www.privasphere.com
ukbhb01mx01-e.urkb.ch
fintest-wwwsec.ukb.ch
www.ukb.ch
www.ukb.ch
ukbhb01mx01-e.urkb.ch
www.urkb.ch
ssl.urkb.ch
fintest-wwwsec.ukb.ch
fintest-e-banking.ukb.ch
wwwsec.urkb.ch
www.privasphere.com
wwwsec.urkb.ch
www.ukb.ch
fintest-wwwsec.ukb.ch
fintest-dev-wwwsec.ukb.ch
www.ukb.ch
fintest-e-banking.ukb.ch
fintest-e-banking.ukb.ch
ukbhb01mx01-e.urkb.ch
www.privasphere.com
wwwsec.urkb.ch
www.ukb.ch
www.urkb.ch
www.ukb.ch
fintest-e-banking.ukb.ch
www.ukb.ch
wwwsec.ukb.ch
www.ukb.ch
wwwsec.ukb.ch
ibdemo.urkb.ch
www.ukb.ch
wwwsec.ukb.ch
wwwsec.urkb.ch
www.ukb.ch
ukbhb01mx01-e.urkb.ch
fintest-dev-wwwsec.ukb.ch
fintest-wwwsec.ukb.ch
wwwsec.ukb.ch
www.urkb.ch
www.ukb.ch
ukbhb01mx01-e.urkb.ch
fintest-e-banking.ukb.ch
wwwsec.ukb.ch
ukbhb01mx01-e.urkb.ch
mobilebanking.urkb.ch
www.ukb.ch
fintest-wwwsec.ukb.ch
wwwsec.urkb.ch
ukbhb01mx01-e.urkb.ch
www.ukb.ch
www.privasphere.com
ukbhb01mx01-e.urkb.ch
fintest-wwwsec.ukb.ch
www.ukb.ch
www.ukb.ch
ukbhb01mx01-e.urkb.ch
www.urkb.ch
ssl.urkb.ch
fintest-wwwsec.ukb.ch
fintest-e-banking.ukb.ch
wwwsec.urkb.ch
www.privasphere.com
wwwsec.urkb.ch
www.ukb.ch
Certificate
The complete raw certificate details for wwwsec.urkb.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIILgzCCCWugAwIBAgIUPrh9LGGSIXYM/eYbiKR5g5yEVuYwDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRVYgSUNBIDIwMjEgLSAxMB4XDTIyMDQyMDA4 NDMxNloXDTIzMDQyMDA4NDMxNlowge8xEzARBgsrBgEEAYI3PAIBAxMCQ0gxEzAR BgsrBgEEAYI3PAIBAhMCVVIxGDAWBgNVBAUTD0NIRS0xMDguOTU0LjY2NTEdMBsG A1UEDxMUUHJpdmF0ZSBPcmdhbml6YXRpb24xCzAJBgNVBAYTAkNIMQswCQYDVQQI EwJVUjEQMA4GA1UEBxMHQWx0ZG9yZjENMAsGA1UEERMENjQ2MDEZMBcGA1UECRMQ QmFobmhvZnN0cmFzc2UgMTEbMBkGA1UEChMSVXJuZXIgS2FudG9uYWxiYW5rMRcw FQYDVQQDEw53d3dzZWMudXJrYi5jaDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAKueVmuDp88MlBM7Ve/eid4F7OnySp8Jh8XNWWkMnShXy1as2UtPnDvL 7D0M2za2/uHIi3m/g81SB8ETMw0PEgASf/kCwkW1h/Elze3sUjXeepHYWqt7Ap/b ugpLbsNWUnszc+kDeAe+kScLVPz+fCfB3DkdWQaih5w7t5wSsbPAn5SEsaRpWLvg A/5nd4SQHeTrgDOSk64gItzSDAD1HFdqoOQwZQut2vOIRIKR3S4+xPvSsu7PFkAf dW7XdGvHbEgRpNKRIaKZgHohybc8YcM7+SrvALbxqAnyh87qrj4iXwuqxfnEGzoW XDmTpZZ+fgomshxHyMf9iaqoTDjMQskCAwEAAaOCBrMwggavMIGgBgNVHREEgZgw gZWCDnd3d3NlYy51cmtiLmNoghBlLWJhbmtpbmcudWtiLmNoghRtb2JpbGViYW5r aW5nLnVrYi5jaIIVbW9iaWxlYmFua2luZy51cmtiLmNoghFhY3RpdmF0aW9uLnVr Yi5jaIISYWN0aXZhdGlvbi51cmtiLmNogg1jcm9udG8udWtiLmNogg5jcm9udG8u dXJrYi5jaDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMB0GA1UdDgQWBBQ4ThB94j5iK83oOMYU3GQkzwxezTAfBgNVHSMEGDAW gBTaNNSOECP0ai1stB/zKBHeXgHE3jCB/wYDVR0fBIH3MIH0MEegRaBDhkFodHRw Oi8vY3JsLnN3aXNzc2lnbi5uZXQvREEzNEQ0OEUxMDIzRjQ2QTJENkNCNDFGRjMy ODExREU1RTAxQzRERTCBqKCBpaCBooaBn2xkYXA6Ly9kaXJlY3Rvcnkuc3dpc3Nz aWduLm5ldC9DTj1EQTM0RDQ4RTEwMjNGNDZBMkQ2Q0I0MUZGMzI4MTFERTVFMDFD NERFJTJDTz1Td2lzc1NpZ24lMkNDPUNIP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxp c3Q/YmFzZT9vYmplY3RDbGFzcz1jUkxEaXN0cmlidXRpb25Qb2ludDBuBgNVHSAE ZzBlMFAGCGCFdAFZAgEDMEQwQgYIKwYBBQUHAgEWNmh0dHBzOi8vcmVwb3NpdG9y eS5zd2lzc3NpZ24uY29tL1N3aXNzU2lnbl9DUFNfVExTLnBkZjAIBgYEAI96AQQw BwYFZ4EMAQEwgcYGCCsGAQUFBwEBBIG5MIG2MGQGCCsGAQUFBzAChlhodHRwOi8v c3dpc3NzaWduLm5ldC9jZ2ktYmluL2F1dGhvcml0eS9kb3dubG9hZC9EQTM0RDQ4 RTEwMjNGNDZBMkQ2Q0I0MUZGMzI4MTFERTVFMDFDNERFME4GCCsGAQUFBzABhkJo dHRwOi8vb2NzcC5zd2lzc3NpZ24ubmV0L0RBMzRENDhFMTAyM0Y0NkEyRDZDQjQx RkYzMjgxMURFNUUwMUM0REUwggNeBgorBgEEAdZ5AgQCBIIDTgSCA0oDSAB2AFWB 1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABgEYj3rIAAAQDAEcwRQIg S0fP3xsueRlKB7FYp/H0hN5+9LJa6RQ1MK3U588XppACIQDTaGpfkiD7NmHqtrSK zUTXqKd9ePuu287CfbBtUFUfbQB1AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaN sgiaN9kTAAABgEYj3k4AAAQDAEYwRAIgU7XSPPNK4bmEOyMrYvZ3OEAUhrnpgCiv jpCM/G+H4wUCIG8h4DuXHVJ5sizniLz84UL/f/zVOx4NeyB8LEq8ZXFTAHYAejKM VNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGARiPfVQAABAMARzBFAiBB E1NpChkH400cTfkV2zPskVH0pObf/8QYyZG6XjOywwIhAP02Wdaew12w/JvM54KG 9aiM4/K3JFp+4Njn482h391+AHcArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWG NOvcgooAAAGARiPdiAAABAMASDBGAiEA8rmzEolQQTZ3mR4w7BDiuJrg/Mo3lZ+T STDjFNJkhJYCIQD0hkpbPcz2gNDI24pygzvTDyFd0t2QgUGowsGERfFt2QB3ALNz dwfhhFD4Y4bWBancEQlKeS2xZwwLh9zwAw55NqWaAAABgEYj34oAAAQDAEgwRgIh AIc0RBm7KgDiu+rTwzLMkAvd+6PE+J0ZqEzjtKAaZ3e1AiEAgE6o9ANTyjyeITsx xVQC6MExpvOvO/t4PActUJcw3fEAdgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp 4Xd9bQa9bgAAAYBGI92kAAAEAwBHMEUCIBLQis/5rJyajhQ2/Q4hOItAoCyljT5U 3jLG7R9LkPXZAiEAjRZ0vcOCV+9YLK09qOte2E5Lndj250x3OyHdPcoatQ0AdQDo fqdmC8Js9gAu9XJdP+DjMbk5O7kvv1jrO5BJ2vVDWgAAAYBGI+HbAAAEAwBGMEQC IGURrPLgw0gMTmg7kPlZpa/jPxqXHY3mQ7irp1DyzIuKAiBfDeicKqvO4jBFJI64 GRVcm/yQ7rPSqGLp+FTMV0okJjANBgkqhkiG9w0BAQsFAAOCAgEAXHofFBa0g/hh MaT8pPNTU0y2KUn3o8dZiN7ALSHv79zUhIUisEqROMDLVBPTmlbFucFD0vgJ9Gmm vTfmheZniH+TDvg7FhhedjAXicreCtqaK+yLFqtkwNkL9q3dYObw3/yUXGGAHqAo G8JyyRJIATU0RGDz94TJ+sfOIakud4RftICMTHU3dmCCnVl+eKMVgj4Fr33jaiuA +kZH1gJSnJs2FHY0bxUislgb4o+BL/QcdTUGtRFBUxcRXIhQ17bgO7Z3rQoRL8Ys l+Y3IKpLjwFPed857GosfA4oAuhwucAC75boVPdQiS3ytlz0hZ5zUjy9I1CFhKEU bacsfygmBTJTxOGglO4EYoa9TFVskcfHzhtDumegi7GcaHpdWgcDl+cQ3zBRD+R9 t9ugn0bdUq5I4FB3JsE8wijmrR12+ZElsk/qKeZGnUocJWbedbyBiQZoEYgEDWa9 hAbtYZpAWV/LYTf4hz1iwpnODRvibU6gyD8F7yWD+Jtq07jwG2+3creJ4ZIZhn3q IwSjUZSl4swN+RQJcJaQl38rIHV0DgWW5Cwg1piBBxhg3Ebpkdyn+1G8TFb8Ht9G +JRTBwSfi84+eb+7z0sxMZGxh0Hvqnq7Zox/NWM+3Xs6f9fEr745T2BLTAge0yx1 x9LhtDef5Ql4S0xoA1BfkBrlXQCq730= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq55Wa4OnzwyUEztV796J 3gXs6fJKnwmHxc1ZaQydKFfLVqzZS0+cO8vsPQzbNrb+4ciLeb+DzVIHwRMzDQ8S ABJ/+QLCRbWH8SXN7exSNd56kdhaq3sCn9u6Cktuw1ZSezNz6QN4B76RJwtU/P58 J8HcOR1ZBqKHnDu3nBKxs8CflISxpGlYu+AD/md3hJAd5OuAM5KTriAi3NIMAPUc V2qg5DBlC63a84hEgpHdLj7E+9Ky7s8WQB91btd0a8dsSBGk0pEhopmAeiHJtzxh wzv5Ku8AtvGoCfKHzuquPiJfC6rF+cQbOhZcOZOlln5+CiayHEfIx/2JqqhMOMxC yQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 358071669045467169317564499657731119835295012582 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2021 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-20 08:43:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-20 08:43:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHE-108.954.665' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Altdorf' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '6460' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bahnhofstrasse 1' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Urner Kantonalbank' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wwwsec.urkb.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21664829318976928460648672110316657151845466043583978844783168563915272677954809313261895497668587732365879668195116833508615078697503502374667925310239180823188745505211530952259067108643669121635727673336895792526516473040351090018067183689316819018000091342375818931829268246815636512651557769034530804605723970261902190548155202259601092070959650145745098270598235216480196256312600832198432171303697121676478773434269713145900495660836018091091597436093142656984080729485457196522333917941420886941122675238773385645653021685635905322098032685698899825095905774323131692410538332749642165971711067351645955048137 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwsec.urkb.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-banking.ukb.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilebanking.ukb.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilebanking.urkb.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activation.ukb.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activation.urkb.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cronto.ukb.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cronto.urkb.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 384e107de23e622bcde838c614dc6424cf0c5ecd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da34d48e1023f46a2d6cb41ff32811de5e01c4de . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (846 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (842 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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