swisstopo.admin.ch

- Bundesamt fuer Informatik und Telekommunikation -

Issued by Swiss Government Public Trust Standard CA 02

About this certificate

This digital certificate with serial number 73:71:c5:1b:c8:4b:8c:a2:b5:89:df:8b:e8:1f:cf:32 was issued on by Swiss Government PKI.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)

Bundesamt fuer Informatik und Telekommunikation

Organization: Bundesamt fuer Informatik und Telekommunikation
Organization unit: COSIG
State / Province: BE
Locality: Bern
Country: CH

Swiss Government PKI

Organization: Swiss Government PKI
Organization unit: Services
Organization unit: Certification Authorities
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 73:71:c5:1b:c8:4b:8c:a2:b5:89:df:8b:e8:1f:cf:32
Serial Number (int): 153451946896120403703673875660630118194
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c1:73:40:fb:f0:ab:e2:93:50:9e:70:fb:88:ce:0d:03:c6:90:8f:9b
AuthorityKeyId: 84:58:4e:87:2d:a5:b0:4e:49:85:bb:bc:01:71:e6:b4:c7:55:ff:10

Fingerprint (sha1): 4b:99:b2:fe:6d:6d:53:95:86:d8:42:16:7e:51:c9:50:9f:27:71:a3
Fingerprint (sha256): 7d:e3:2b:b8:18:96:78:3d:e1:66:e1:1e:21:18:c5:2e:99:9f:5e:d6:d8:2c:67:3c:8c:1f:2d:cb:28:73:66:b5

Issuing Certificate URL: http://www.pki.admin.ch/aia/PTSTCA02BC.crt

Revocation information

OCSP Server: http://www.pki.admin.ch/aia/bcocsp
CRL Distribution Point: http://www.pki.admin.ch/crl/PTSTCA02.crl
CRL Distribution Point: ldap://admindir.admin.ch:389/cn=Swiss%20Government%20Public%20Trust%20Standard%20CA%2002,ou=Certification%20Authorities,ou=Services,o=Admin,c=CH

Check the revocation status for certificate swisstopo.admin.ch

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for swisstopo.admin.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

swisstopo.admin.ch
wms.swisstopo.admin.ch
shop.swisstopo.ch
shop.swisstopo.admin.ch
map.swisstopo.admin.ch
wms.swisstopo.ch
map.swisstopo.ch

Other certificates including the domain name admin.ch

(limited to 100 certificates)
www.blw.admin.ch
www.gate.bav.admin.ch
www.jira-a.estv.admin.ch
www.cmsp4-a.admin.ch
appint.naz.admin.ch
www.staatskalender.admin.ch
*.geo.admin.ch
www.suissetax-r.estv.admin.ch
help.geo.admin.ch
int.translation.eda.admin.ch
www.portal.bsv.admin.ch
viaduc.sfa-laboratory.ch
www.tacho-en.admin.ch
e-dec-web-a.ezv.admin.ch
ncts-formular.ezv.admin.ch
trifid-lindas.int.cluster.ldbar.ch
ws.inar-r.zas.admin.ch
rp-eda01.eda.admin.ch
apis.sem.admin.ch
ws.seodor.zas.admin.ch
www.sust.admin.ch
www.edb.admin.ch
www.sib.admin.ch
www.apistore.estv.admin.ch
www.xmlns.bfs.admin.ch
www.logixs.eda.admin.ch
www.esti.admin.ch
nd8.li.admin.ch
www.bar.admin.ch
sts003-r.gever.admin.ch
www-tmp-a.ekf.admin.ch
www.cfig.admin.ch
adonis.ezv.admin.ch
www.bag.admin.ch
key-recovery.a-pki.admin.ch
Int.ex4.lmsvbs.admin.ch
toolchain-selfservice.bit.admin.ch
s001047a.adr.admin.ch
rio-a.ssl.admin.ch
www.portal-a.eiam.admin.ch
www.ekff.admin.ch
www.cms-a1.admin.ch
ws.lsvastammdaten-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
www.sonderbewilligungen.admin.ch
intranet.sibad.vbs.admin.ch
storme-r.bafu.admin.ch
intranet.gate-r.bar.admin.ch
idp-base.gate-r.eiam.admin.ch
tokenunseal.a-pki.admin.ch
www.e-cites-a2.admin.ch
www.regress.admin.ch
intranet.vbs.admin.ch
www.oscitv-gw-a.admin.ch
epo.ejpd.admin.ch
test2.gate-a.bit.admin.ch
www.etv.blv.admin.ch
www.bestellung-k.admin.ch
www.pxweb-admin-a.bfs.admin.ch
www.widget.e-portal.admin.ch
www.ausbildung.eur-med.bazg.admin.ch
ebd.abn.ezv.admin.ch
www.cmsp8-a.admin.ch
www.b2cshop-i.admin.ch
idp-egov-federal.gate-d.eiam.admin.ch
flrt.bazl.admin.ch
www.b2cshop.admin.ch
www.coff-ekff.admin.ch
sanadress.vbs.admin.ch
www.medregom-r.admin.ch
transfer-pr.wbf.admin.ch
cmc.a-pki.admin.ch
www.g2020-info.admin.ch
www.eofcom-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
ww2.elic-en.admin.ch
ws.quattrop-r.admin.ch
wwwt.interruptio-ges.bfs.admin.ch
www-tmp.roemerholz.admin.ch
www.aramis.admin.ch
survey.efk.admin.ch
uat-publish-internet-vbs.vbs.admin.ch
www.infoafam-a.zas.admin.ch
www.sust.admin.ch
www.plugins.aramis-a.admin.ch
www.pxweb-a.bfs.admin.ch
www.openegov.admin.ch
www.cms-t2.admin.ch
www.psyreg-k.admin.ch
www.cfej.admin.ch
www.cfig.admin.ch
pin-reset.a-pki.admin.ch
gpv.astra.admin.ch
sts.bit.admin.ch
www.cmsp1-r.admin.ch
www-tmp-a.bit.admin.ch
entsendung.admin.ch
www.outlook.admin.ch

Certificate

The complete raw certificate details for swisstopo.admin.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXa83GZRv2YU5+CnXWqO
Ued8FIFOsKJbI0pg4ToikHo9mQC2s4HGEeyQZ40TPRltLi1i/jYCw54KHOdcGyoD
3RYg1qg7112UTnxXfr3yITFr9ap49KNd2WnVnVCBa4WVQW88M+zCtmuRu2CLkyAm
y4sCu5/Yg3TWC/bNF2pGaENMonPn2ioMTn+t3sJcq6dGelT44IiBRXifX8gd6lQv
z+CtNnWc8bw5ePfP1v/sia0XoEYHOKZysZ5TIIP6Q3hQOin9jq1mGK0S+MwMMsDK
VgMdrJSgQp3V7FdbGFmGBXTlyMu6v7+expnr3kvMSUw1naqF1FRQSksSiyNFdE+F
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 153451946896120403703673875660630118194
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Swiss Government PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Certification Authorities'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Swiss Government Public Trust Standard CA 02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-01 12:34:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-01 12:34:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bundesamt fuer Informatik und Telekommunikation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'COSIG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'swisstopo.admin.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18363105980956240757594505275517549701516011403757448042005554103638898766517553976246280773658690433277134723305587332048434879651304047584904609583757656873731175717265526914644749173842548198271257682582678433388086285361252888564126946981643972634349027121424153782464941652755908338985001137037030092153581404899839970535978243285627077165924996041026046187960848909011631678541552241045952314719937657215033968232777533838065819547851543308871812652371712298216822215501376948917029705294191368854650869854620213508795263664801293567425516409979514195024666188879879960528694456025400133924031020991486240982443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swisstopo.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wms.swisstopo.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.swisstopo.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.swisstopo.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'map.swisstopo.admin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wms.swisstopo.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'map.swisstopo.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (271 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.17.3.62.15
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.pki.admin.ch/cps/CPS_2_16_756_1_17_3_61_0.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [82 101 108 105 97 110 99 101 32 111 110 32 116 104 101 32 83 71 32 82 111 111 116 32 67 65 32 73 73 73 32 67 101 114 116 105 102 105 99 97 116 101 32 98 121 32 97 110 121 32 112 97 114 116 121 32 97 115 115 117 109 101 115 32 97 99 99 101 112 116 97 110 99 101 32 111 102 32 116 104 101 32 116 104 101 110 32 97 112 112 108 105 99 97 98 108 101 32 115 116 97 110 100 97 114 100 32 116 101 114 109 115 32 97 110 100 32 99 111 110 100 105 116 105 111 110 115 32 111 102 32 117 115 101 32 97 110 100 32 116 104 101 32 83 71 32 82 111 111 116 32 67 65 32 73 73 73 32 67 80 83]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.pki.admin.ch/aia/PTSTCA02BC.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.pki.admin.ch/aia/bcocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (207 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.pki.admin.ch/crl/PTSTCA02.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://admindir.admin.ch:389/cn=Swiss%20Government%20Public%20Trust%20Standard%20CA%2002,ou=Certification%20Authorities,ou=Services,o=Admin,c=CH'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 84584e872da5b04e4985bbbc0171e6b4c755ff10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c17340fbf0abe293509e70fb88ce0d03c6908f9b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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