node2.lb.trid.switch.ch

- SWITCH -

Issued by DigiCert EV RSA CA G2

About this certificate

This digital certificate with serial number 01:62:94:b1:19:7f:90:80:66:2a:a4:72:43:7c:27:cc was issued on by DigiCert Inc.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SWITCH

Company registration number: CHE-101.494.993
Organization: SWITCH
Locality: Zurich
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:62:94:b1:19:7f:90:80:66:2a:a4:72:43:7c:27:cc
Serial Number (int): 1841088915818775666453630589609977804
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 76:7c:41:84:88:46:06:69:d8:8a:8a:0c:e9:c0:b6:c6:3b:c9:53:cf
AuthorityKeyId: 6a:4e:50:bf:98:68:9d:5b:7b:20:75:d4:59:01:79:48:66:92:32:06

Fingerprint (sha1): 49:f9:04:d4:65:d6:25:37:17:00:f3:fc:15:9a:d2:ed:79:1c:b6:6b
Fingerprint (sha256): 86:c0:3a:3b:2f:05:dc:2d:e2:f0:30:31:1a:d0:c6:f1:8d:e6:4d:3d:8d:07:50:45:d9:33:23:fc:df:7f:f1:43

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertEVRSACAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertEVRSACAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertEVRSACAG2.crl

Check the revocation status for certificate node2.lb.trid.switch.ch

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for node2.lb.trid.switch.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

node2.lb.trid.switch.ch
eduid.ch
www.eduid.ch
edu-id.ch
www.edu-id.ch
test.eduid.ch
www.test.eduid.ch
dev.eduid.ch
static.eduid.ch
mfa.eduid.ch
mfa.test.eduid.ch
mfa.dev.eduid.ch
webauthn.test.eduid.ch
webauthn.eduid.ch
wayf.switch.ch
wayf-test.switch.ch
attribute-viewer.aai.switch.ch
attribute-viewer-test.aai.switch.ch
attribute-viewer-dev.aai.switch.ch
login.eduid.ch
login.staging.eduid.ch
alumniethz.login.eduid.ch
bfh.login.eduid.ch
careum.login.eduid.ch
ehsm.login.eduid.ch
ethz.login.eduid.ch
ethz.login.staging.eduid.ch
fernuni.login.eduid.ch
ffhs.login.eduid.ch
fh-hwz.login.eduid.ch
fhnw.login.eduid.ch
graduateinstitute.login.eduid.ch
hep-bejune.login.eduid.ch
hepl.login.eduid.ch
hepvs.login.eduid.ch
hes-so.login.eduid.ch
hfh.login.eduid.ch
hslu.login.eduid.ch
hug.login.eduid.ch
ost.login.eduid.ch
phbern.login.eduid.ch
phgr.login.eduid.ch
phnmsbern.login.eduid.ch
phsg.login.eduid.ch
phsh.login.eduid.ch
phzg.login.eduid.ch
phzh.login.eduid.ch
psi.login.eduid.ch
sfuvet.login.eduid.ch
slsp.login.eduid.ch
switch.login.eduid.ch
switch.login.staging.eduid.ch
unibas.login.eduid.ch
unibe.login.eduid.ch
unifr.login.eduid.ch
unige.login.eduid.ch
unil.login.eduid.ch
unilu.login.eduid.ch
unine.login.eduid.ch
unisg.login.eduid.ch
usb.login.eduid.ch
usi.login.eduid.ch
usz.login.eduid.ch
uzh.login.eduid.ch
zhaw.login.eduid.ch
zhbluzern.login.eduid.ch
zhdk.login.eduid.ch
login.test.eduid.ch
login.idph.test.eduid.ch
login.aaidemo.test.eduid.ch
phnmsbern.azure-login.eduid.ch
phgr.azure-login.eduid.ch
testphgr.azure-login.eduid.ch
unils.azure-login.eduid.ch
hslu.login.test.eduid.ch
uni-demo.login.test.eduid.ch
uni-partner.login.test.eduid.ch
unige.login.test.eduid.ch
uni-demo.azure-login.test.eduid.ch
unidemo.azure-login.test.eduid.ch
kuriotec.azure-login.test.eduid.ch
aai-logon.switch.ch
aai-demo-idp.switch.ch
aai-logon.vho-switchaai.ch
switchboard.eduroam.ch
esign.switch.ch
esign-test.switch.ch
login.dev.eduid.ch

Other certificates including the domain name switch.ch

(limited to 100 certificates)
hsr.meet.switch.ch
point.switch.ch
wiki.smap.switch.ch
discourse.toolbox.switch.ch
collab-fms-test.switch.ch
kelimutu.switch.ch
tls.automattic.com
vico.switch.ch
zeus.switch.ch
parma.switch.ch
fl-0-51.zhdk.cloud.switch.ch
ssad.events.switch.ch
placement.api.s2.scloud.switch.ch
evct.ssl.switch.ch
unibas.meet.switch.ch
grafana.int.os-ls.kaas.switch.ch
*.s3-zh.lts.switch.ch
tls.automattic.com
zhaw.meet.switch.ch
neutron.api.s2.scloud.switch.ch
testsp.tw.switch.ch
portal-dev.switch.ch
landingpage.rpz.switch.ch
trust.aviareto.aero
mail.switch.ch
player.cast.switch.ch
test.toolbox.switch.ch
domain-pulse.at
intern.meet.switch.ch
zeus.switch.ch
influxdb.cast-test.switch.ch
glance.api.unil.cloud.switch.ch
producer.cast.switch.ch
filesender.switch.ch
staging.groupie.lard.switch.ch
unili.meet.switch.ch
backend.www.switch.ch
vcregister.switch.ch
kava-admin.cast.switch.ch
worker3.oc-test.switch.ch
alphubel.switch.ch
drive-backup.switch.ch
engines-admin.scloud.switch.ch
*.os.zhdk.cloud.switch.ch
www-test.switch.ch
monitor.switch.ch
wayf.switch.ch
teramac.switch.ch
tls.automattic.com
node21.webauthn.eduid.ch
forge.switch.ch
cast-ng.switch.ch
www.switch.ch
test.id.switch.ch
os.unil.cloud.switch.ch
wayf-test.switch.ch
aai-logon.switch.ch
tls.automattic.com
landingpage.mw.rpz.switch.ch
contracts-test.switch.ch
driveonlyoffice.switch.ch
portfolio.switch.ch
fl-6-178.zhdk.cloud.switch.ch
octavia.api.s1.scloud.switch.ch
cloud-id.switch.ch
compute.api.test1.cloud.switch.ch
portal-dev.switch.ch
status.dilercloud.com
player.cast.switch.ch
bonseyes.zhdk.cloud.switch.ch
cloud-id.switch.ch
tools.aai.switch.ch
download.cast.switch.ch
tools.switch.ch
www-dev.switch.ch
admin.oc-test.switch.ch
www-dev.switch.ch
wayf-test.switch.ch
test.idph.switch.ch
bfh.meet.switch.ch
urlanalyzer-staging-backend.misc01.k8s.cert.switch.ch
password.switch.ch
idp-monitor.aai.switch.ch
saqcnfbe.events.switch.ch
cr.gitlab.switch.ch
*.lts.switch.ch
kava-admin.cast.switch.ch
unibe.meet.switch.ch
domain-pulse.at
bonseyes.zhdk.cloud.switch.ch
wiki.smap.switch.ch
producer.cast.switch.ch
tls.automattic.com
switchnovember.events.switch.ch
*.sandstorm.cloud.switch.ch
portfolio.switch.ch
metadata-test.aai.switch.ch
kelimutu.switch.ch
presentation.cast.switch.ch
mirror.cloud.switch.ch

Certificate

The complete raw certificate details for node2.lb.trid.switch.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fjofvT+jQFkIRi1JbPb
XZCYk0kEnG7nQuaQEkiSK4YeU5VfX0PpUDx90iE0L8AxJRvbvzKhJ33RMIze5XCL
eVN8YH7YH7qdQmJW+d/5fct4YJDCZ2/ZXb4XfW/sFENi/NID6rkVCmOS0pgib1a9
a/0SsgR0Wee5KmSI9p7aMUF9GZiIVBmGK9g8rBzWne2G7HzvyrYhQ+6kxkn6MkS1
gONS+EObPvf8AEXB5jhEpayt/W1K676pmkkfc2mLKreP3LSRM0ueFmzr2D/9hjrC
6mM4oc/oZLWKc9/CH+B9Zfqqsb2lQB5sm8I5+FE8S7HJdwCasGiAxWtXTkzJA8s1
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1841088915818775666453630589609977804
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert EV RSA CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHE-101.494.993'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SWITCH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'node2.lb.trid.switch.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27516453379375318184991432510977927288611205487722859757884962213829067939195912582524597191943122087763506685859689682204203592607959274657471726009878285180953012378859014372216081318530328712287943678095654318824082760532838183159238967282212341617956058288423164702787258059396883439394001753508855274602170950075633775140674135197917421659646148319127642468647310946823647602311477455428828790605759657632186791079754458030066984381748079529006880627961777679699254059877702902007548874867398780845276130236868207959570490669926043984909295088067196812496202720152368359774722536899843346995841365765863861073261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6a4e50bf98689d5b7b2075d45901794866923206
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							767c418488460669d88a8a0ce9c0b6c63bc953cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2027 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'node2.lb.trid.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu-id.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edu-id.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfa.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfa.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfa.dev.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webauthn.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webauthn.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayf.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayf-test.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribute-viewer.aai.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribute-viewer-test.aai.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribute-viewer-dev.aai.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.staging.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniethz.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfh.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careum.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehsm.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethz.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethz.login.staging.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fernuni.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffhs.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fh-hwz.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhnw.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graduateinstitute.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hep-bejune.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hepl.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hepvs.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hes-so.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfh.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hslu.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hug.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ost.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phbern.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phgr.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phnmsbern.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phsg.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phsh.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phzg.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phzh.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psi.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfuvet.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slsp.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switch.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switch.login.staging.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unibas.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unibe.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unifr.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unige.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unil.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unilu.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unine.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unisg.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usb.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usi.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usz.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uzh.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhaw.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhbluzern.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhdk.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.idph.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.aaidemo.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phnmsbern.azure-login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phgr.azure-login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testphgr.azure-login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unils.azure-login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hslu.login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni-demo.login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni-partner.login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unige.login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni-demo.azure-login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unidemo.azure-login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuriotec.azure-login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aai-logon.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aai-demo-idp.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aai-logon.vho-switchaai.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switchboard.eduroam.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esign.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esign-test.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.dev.eduid.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertEVRSACAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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