geoportal.ebs.swiss

Issued by SwissSign RSA TLS DV ICA 2021 - 1

About this certificate

This digital certificate with serial number 3e:72:3b:33:97:0a:44:dd:9e:27:00:a8:0e:1f:7f:09:77:0a:b3:65 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=geoportal.ebs.swiss

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 3e:72:3b:33:97:0a:44:dd:9e:27:00:a8:0e:1f:7f:09:77:0a:b3:65
Serial Number (int): 356504869923747975457334171558308110632743514981
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: e7:50:7f:68:ee:b2:e6:6e:33:62:56:da:8c:02:e0:77:32:17:f0:3e
AuthorityKeyId: 3c:9e:52:79:03:63:6f:4f:9c:81:1b:d3:28:70:0c:24:5a:ea:a5:87

Fingerprint (sha1): 77:1c:a5:fb:c9:8f:02:b9:29:19:98:98:11:6d:14:55:36:b6:f7:8b
Fingerprint (sha256): 8e:f1:37:9e:d2:0a:f2:a1:62:b3:b8:50:74:04:d4:1d:d5:4f:f7:bc:5b:27:fd:00:a2:d8:7b:a2:e4:40:3b:82

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587

Revocation information

OCSP Server: http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate geoportal.ebs.swiss

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for geoportal.ebs.swiss

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

geoportal.ebs.swiss
www.geoportal.ebs.swiss

Other certificates including the domain name ebs.swiss

(limited to 100 certificates)
connector.ebs.swiss
stecker.ebs.swiss
sso.ebs.swiss
hybridex.ebs.swiss
testsalary.ebs.swiss
www.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
*.ebs.swiss
sso.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
www.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
ebs.swiss
geoportal.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
geoportal.ebs.swiss
geoportal.ebs.swiss
sftp.ebs.swiss
salary.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
hybridex.ebs.swiss
mdm.ebs.swiss
www.ebs.swiss
ebs.swiss
ebs.swiss
lora.ebs.swiss
asset.ebs.swiss
connector.ebs.swiss
ebs.swiss
testsalary.ebs.swiss
www.ebs.swiss
salary.ebs.swiss
connector.ebs.swiss
www.ebs.swiss
*.ebs.swiss
lora.ebs.swiss
geoportal.ebs.swiss
lora.ebs.swiss
www.ebs.swiss
my.ebs.swiss
stecker.ebs.swiss
asset.ebs.swiss
lora.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
*.ebs.swiss
ebs.swiss
ebs.swiss
my.ebs.swiss
www.ebs.swiss
infoscreen.ebs.swiss
ebs.swiss
sftp.ebs.swiss
energieportal.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
mydata.ebs.swiss
ebs.swiss
mdm.ebs.swiss
infoscreen.ebs.swiss
qm.ebs.swiss
geoportal.ebs.swiss
sftp.ebs.swiss
energieportal.ebs.swiss
ebs.swiss
connector.ebs.swiss
sftp.ebs.swiss
mydata.ebs.swiss
qm.ebs.swiss

Certificate

The complete raw certificate details for geoportal.ebs.swiss in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH+zCCBeOgAwIBAgIUPnI7M5cKRN2eJwCoDh9/CXcKs2UwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjEgLSAxMB4XDTIyMDEyNTA3
MTMyOVoXDTIzMDEyNTA3MTMyOVowHjEcMBoGA1UEAxMTZ2VvcG9ydGFsLmVicy5z
d2lzczCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOSf+oEb0u+jiwgm
XZpQ0IYyzP0ZKHuQLknHg8rn4pun5s+a9+isnxh8N36IcoTakkkRbjSJeH52yw70
qsxmvadqrZsVgblTs18BI9SJ135k3dkcwf2m54223PYqpUvwefmiV4cZBGZi8zpY
PtXFVWKzxPCbQZfy1dH8ItjeVYV8+l3ye3y4ekhfp3fLx9kPlH7Q4otEaYlqECTR
0mITu5UhgSbKF6GnZ9FhzY5lJUBdq6sB744UOx8Tn6qFLI4gsLdSZuxzB/JgMTeV
r7iQS0AgbknvtE17RndPclJJ3PbNa8IMM6Do6XVfVVIVoZiJNR0SfQC49CpVJL0l
xbxg0pFtTKdWU9eO2IyS4KmEbEMA3KayzaTwibilH1drmotdyNTNNjV21d6Hd49c
pQJlFG21vMp/tdCQN5SrRDtPSvwufBsv73XRKqgahNgpaoALRF42rAlwjH+D9ciF
l73QMWL10reujWEDiNBrl22maU/98OyveeaF+fs50utmqv4Q1qUfWOzDV9pYstW/
dRe6BplFd1r09tOdYIvEMn8QtANbnAVOJ30vpu50DXS0lJ2dAd1udofEJI/u5n/o
6bboUf/9R7QiWHkRoviuSjNaNAOfC1NcRYwvLtFZXExihawJmhmdV/nwpy4bq/vn
rTipFkU5dp4uKMJ+1KDf0qND3NrFAgMBAAGjggL9MIIC+TA3BgNVHREEMDAughNn
ZW9wb3J0YWwuZWJzLnN3aXNzghd3d3cuZ2VvcG9ydGFsLmVicy5zd2lzczAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1Ud
DgQWBBTnUH9o7rLmbjNiVtqMAuB3MhfwPjAfBgNVHSMEGDAWgBQ8nlJ5A2NvT5yB
G9MocAwkWuqlhzCB/wYDVR0fBIH3MIH0MEegRaBDhkFodHRwOi8vY3JsLnN3aXNz
c2lnbi5uZXQvM0M5RTUyNzkwMzYzNkY0RjlDODExQkQzMjg3MDBDMjQ1QUVBQTU4
NzCBqKCBpaCBooaBn2xkYXA6Ly9kaXJlY3Rvcnkuc3dpc3NzaWduLm5ldC9DTj0z
QzlFNTI3OTAzNjM2RjRGOUM4MTFCRDMyODcwMEMyNDVBRUFBNTg3JTJDTz1Td2lz
c1NpZ24lMkNDPUNIP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q/YmFzZT9vYmpl
Y3RDbGFzcz1jUkxEaXN0cmlidXRpb25Qb2ludDBvBgNVHSAEaDBmMFAGCGCFdAFZ
AgEBMEQwQgYIKwYBBQUHAgEWNmh0dHBzOi8vcmVwb3NpdG9yeS5zd2lzc3NpZ24u
Y29tL1N3aXNzU2lnbl9DUFNfVExTLnBkZjAIBgYEAI96AQYwCAYGZ4EMAQIBMIHG
BggrBgEFBQcBAQSBuTCBtjBkBggrBgEFBQcwAoZYaHR0cDovL3N3aXNzc2lnbi5u
ZXQvY2dpLWJpbi9hdXRob3JpdHkvZG93bmxvYWQvM0M5RTUyNzkwMzYzNkY0RjlD
ODExQkQzMjg3MDBDMjQ1QUVBQTU4NzBOBggrBgEFBQcwAYZCaHR0cDovL29jc3Au
c3dpc3NzaWduLm5ldC8zQzlFNTI3OTAzNjM2RjRGOUM4MTFCRDMyODcwMEMyNDVB
RUFBNTg3MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4ICAQCx
7Ff89rSVIYip8E3u+FypQQ/AFQ/k9IleE78W+DiDmsBvsB7nnXoLE1X70j4AAvh0
rRmKyOI7crsxTZXctWYPqPA5Z1j5p9V1QTl5PC0XSzYUalegswRfUMG7wjkfRpFa
ZFq3o4AdSKHKxhOup7tULeoPIDt2OgqKAhfsofBpEQwIse92p44HvZ5rqKVSieZF
7e20bZ6TMJkJBK+DrLEKwt5gls89qd4EIhEgr33nih4xbcfV3AKIyecuG3Rf+2dL
mLtfu23Da46Bpl+2rXeDYbVyJTZCK9ncJ7ehDdHcRaQNloVA4d8l7BcSMixsKsNA
cDVJo+GUAXF8dx0zIgQzJINFD3X5hs5rERwhpcNEeDHktPCBEuPqGQPN/LzdUPUb
VjKjSBbL9cJfytRa/4hS6doB+nVRluyxYZS+I0TOWUApfbIT1rA5UwPAYdpWwHo+
9/7n6F4wKAFhsqso03bS6CRjid3ioPU37Yc9o76ZSbF/AbCr9xmXHglGGbQTLZj+
F6FLuJUxK4MOpWJORVJNs1gvaG/70g4LrO6nqc7cmnWxUIi1b59tczPrdJbY/Vtc
br83nrlRmphSxFXX5T1FKIq5mzpEQivR5Md/y1rpldtj/j0WSTPjfuoO/AJQcePz
T2VGk1BdfRn3R/OTTjoSYPucij4EvzIJRUunW8+Wcg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356504869923747975457334171558308110632743514981
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-25 07:13:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-25 07:13:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'geoportal.ebs.swiss'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 932708282943340750650075815671760441938620080583096748933674217214494448193824515348757408717643311046959414620133601326581072671339538273118533788304480558250176590878004850008042775350642902391593691872428025794381811136827496124488942895238123463951021940006864178893111565882078092221138369301625475325772743760120803539788646581779481338959311008908138352582762540125672827460903789498465647871923537510994026935478834992719028541109995394825357680318382196905070141993718301164835743783504637713669187675292581025237449345865204332327977490238163530488284314916124435977361970027571743063690198871772764885515252750316867094429989071782503719416334289613033595522172355184443347216134780671761595960158321443799955246178068806517706503874041819409620929755378686711307559410318073269525053297903921824279398529588418270817436752858324178011579348599855469807127944232426165531057852044118343586058822674619418166447027092572028414335321750502362265290007616724725705051756980931950912167319194126007499322445088578811356504110019412103731292852570813276827647296871308110881489791175181851320620897844593173532769240708628827572263052909510429210734770067653244869757548038261632167833180785802849889689620117384924720231406277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geoportal.ebs.swiss'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geoportal.ebs.swiss'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7507f68eeb2e66e336256da8c02e0773217f03e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3c9e527903636f4f9c811bd328700c245aeaa587
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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