wwwsec.ukb.ch
- Urner Kantonalbank -
Issued by SwissSign EV Gold CA 2014 - G22
About this certificate
This digital certificate with serial number 2d:60:2c:c1:ce:66:94:c0:f7:3b:c6:9d:dd:b6:55:9c:3b:16:b5:dc was issued on by SwissSign AG.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Urner Kantonalbank
Company registration number:
CHE-108.954.665
Organization: Urner Kantonalbank
Organization: Urner Kantonalbank
State / Province:
Uri
Locality: Altdorf
Country: CH
Locality: Altdorf
Country: CH
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate has expire since
Certificate Details
Serial Number (hex): 2d:60:2c:c1:ce:66:94:c0:f7:3b:c6:9d:dd:b6:55:9c:3b:16:b5:dcSerial Number (int): 259049355115563130100261630750138613934945908188
Serial Number lenght: 158 bits, 20 octets
SubjectKeyId: f8:e7:c5:73:9f:84:71:0d:b2:11:c8:0b:e2:c4:b7:63:09:ac:a4:e0
AuthorityKeyId: ee:fd:46:ca:f7:27:5e:91:bc:5a:b6:e7:87:cd:0a:fa:55:0a:26:42
Fingerprint (sha1): b8:8b:4f:d4:9b:eb:17:54:5d:2f:55:5f:f8:94:68:2f:af:0c:11:85
Fingerprint (sha256): 90:61:ea:1e:2f:ee:b7:e2:b5:47:41:df:f5:ca:07:3c:79:5c:9d:9e:66:5f:fd:87:af:5e:43:be:98:4b:b6:00
Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642
Revocation information
OCSP Server: http://gold-ev-g2.ocsp.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642CRL Distribution Point: http://crl.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642
CRL Distribution Point: ldap://directory.swisssign.net/CN=EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint
Check the revocation status for certificate wwwsec.ukb.ch
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for wwwsec.ukb.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
wwwsec.ukb.ch
wwwsec.urkb.ch
mobilebanking.ukb.ch
mobilebanking.urkb.ch
activation.ukb.ch
activation.urkb.ch
cronto.ukb.ch
cronto.urkb.ch
wwwsec.urkb.ch
mobilebanking.ukb.ch
mobilebanking.urkb.ch
activation.ukb.ch
activation.urkb.ch
cronto.ukb.ch
cronto.urkb.ch
Other certificates including the domain name ukb.ch
(limited to 100 certificates)
www.ukb.ch
fintest-wwwsec.ukb.ch
gast.ukb.ch
fintest-dev-wwwsec.ukb.ch
www.privasphere.com
twint-test.ukb.ch
www.ukb.ch
fintest-e-banking.ukb.ch
ukb00ncs104-e.ukb.ch
satellite-test.ukb.ch
gast.ukb.ch
twint-test.ukb.ch
fintest-e-banking.ukb.ch
dialog.sbb.ch
www.privasphere.com
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ot.ukb.ch
ssl.ukb.ch
ot.ukb.ch
ukb00ucc114.ukb.ch
securemail.ukb.ch
eroeffnung-test.ukb.ch
satellite.ukb.ch
www.privasphere.com
ukb00ncs106-e.ukb.ch
securemail.ukb.ch
www.privasphere.com
gast.ukb.ch
www.ukb.ch
autodiscover.ukb.ch
ot.ukb.ch
autodiscover.ukb.ch
eroeffnung-test.ukb.ch
dialog.sbb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-e-banking.ukb.ch
www.privasphere.com
www.ukb.ch
wwwsec.ukb.ch
www.ukb.ch
ssl.ukb.ch
ukb00ncs104-e.ukb.ch
gast.ukb.ch
wwwsec.ukb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
eroeffnung.ukb.ch
wwwsec.ukb.ch
wwwsec.urkb.ch
ukb00ucc114.ukb.ch
twint.ukb.ch
www.privasphere.com
www.ukb.ch
identifikation-test.ukb.ch
twint-test.ukb.ch
www.privasphere.com
dialog.sbb.ch
gast.ukb.ch
dialog.sbb.ch
ukbhb01mx01-e.urkb.ch
ukb00ucc114.ukb.ch
fintest-dev-wwwsec.ukb.ch
ssl.ukb.ch
satellite-test.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-wwwsec.ukb.ch
wwwsec.ukb.ch
www.privasphere.com
ssl.ukb.ch
autodiscover.ukb.ch
www.ukb.ch
gast.ukb.ch
ukbhb01mx01-e.urkb.ch
identifikation-test.ukb.ch
autodiscover.ukb.ch
fintest-e-banking.ukb.ch
twint.ukb.ch
wwwsec.ukb.ch
ukbhb01mx01-e.urkb.ch
zukunftsbild.ukb.ch
zukunftsbild.ukb.ch
eroeffnung.ukb.ch
www.ukb.ch
fintest-wwwsec.ukb.ch
ukb00ucc114.ukb.ch
ssl.ukb.ch
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ukb00ncs106-e.ukb.ch
ukb00ucc114.ukb.ch
ukb00ncs106-e.ukb.ch
www.privasphere.com
satellite.ukb.ch
ukb00ncs104-e.ukb.ch
ukbhb01mx01-e.urkb.ch
fintest-wwwsec.ukb.ch
www.ukb.ch
fintest-wwwsec.ukb.ch
gast.ukb.ch
fintest-dev-wwwsec.ukb.ch
www.privasphere.com
twint-test.ukb.ch
www.ukb.ch
fintest-e-banking.ukb.ch
ukb00ncs104-e.ukb.ch
satellite-test.ukb.ch
gast.ukb.ch
twint-test.ukb.ch
fintest-e-banking.ukb.ch
dialog.sbb.ch
www.privasphere.com
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ot.ukb.ch
ssl.ukb.ch
ot.ukb.ch
ukb00ucc114.ukb.ch
securemail.ukb.ch
eroeffnung-test.ukb.ch
satellite.ukb.ch
www.privasphere.com
ukb00ncs106-e.ukb.ch
securemail.ukb.ch
www.privasphere.com
gast.ukb.ch
www.ukb.ch
autodiscover.ukb.ch
ot.ukb.ch
autodiscover.ukb.ch
eroeffnung-test.ukb.ch
dialog.sbb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-e-banking.ukb.ch
www.privasphere.com
www.ukb.ch
wwwsec.ukb.ch
www.ukb.ch
ssl.ukb.ch
ukb00ncs104-e.ukb.ch
gast.ukb.ch
wwwsec.ukb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
eroeffnung.ukb.ch
wwwsec.ukb.ch
wwwsec.urkb.ch
ukb00ucc114.ukb.ch
twint.ukb.ch
www.privasphere.com
www.ukb.ch
identifikation-test.ukb.ch
twint-test.ukb.ch
www.privasphere.com
dialog.sbb.ch
gast.ukb.ch
dialog.sbb.ch
ukbhb01mx01-e.urkb.ch
ukb00ucc114.ukb.ch
fintest-dev-wwwsec.ukb.ch
ssl.ukb.ch
satellite-test.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-wwwsec.ukb.ch
wwwsec.ukb.ch
www.privasphere.com
ssl.ukb.ch
autodiscover.ukb.ch
www.ukb.ch
gast.ukb.ch
ukbhb01mx01-e.urkb.ch
identifikation-test.ukb.ch
autodiscover.ukb.ch
fintest-e-banking.ukb.ch
twint.ukb.ch
wwwsec.ukb.ch
ukbhb01mx01-e.urkb.ch
zukunftsbild.ukb.ch
zukunftsbild.ukb.ch
eroeffnung.ukb.ch
www.ukb.ch
fintest-wwwsec.ukb.ch
ukb00ucc114.ukb.ch
ssl.ukb.ch
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ukb00ncs106-e.ukb.ch
ukb00ucc114.ukb.ch
ukb00ncs106-e.ukb.ch
www.privasphere.com
satellite.ukb.ch
ukb00ncs104-e.ukb.ch
ukbhb01mx01-e.urkb.ch
fintest-wwwsec.ukb.ch
www.ukb.ch
Certificate
The complete raw certificate details for wwwsec.ukb.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKdTCCCV2gAwIBAgIULWAswc5mlMD3O8ad3bZVnDsWtdwwDQYJKoZIhvcNAQEL BQAwTjELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEoMCYGA1UE AxMfU3dpc3NTaWduIEVWIEdvbGQgQ0EgMjAxNCAtIEcyMjAeFw0xOTAyMDQxMDAx NTlaFw0yMTAyMDQxMDAxNTlaMIHGMRMwEQYLKwYBBAGCNzwCAQMTAkNIMRQwEgYL KwYBBAGCNzwCAQITA1VyaTEYMBYGA1UEBRMPQ0hFLTEwOC45NTQuNjY1MR0wGwYD VQQPExRQcml2YXRlIE9yZ2FuaXphdGlvbjELMAkGA1UEBhMCQ0gxDDAKBgNVBAgT A1VyaTEQMA4GA1UEBxMHQWx0ZG9yZjEbMBkGA1UEChMSVXJuZXIgS2FudG9uYWxi YW5rMRYwFAYDVQQDEw13d3dzZWMudWtiLmNoMIICIjANBgkqhkiG9w0BAQEFAAOC Ag8AMIICCgKCAgEA1n4ZhhCUWrkp/6NmCJ8M4SPhyGVnlAmxwvRZrKfr4PyammKa qwNFp+gEAg+L+Hcdb4Sci1NbR7UwAcPG+nnuKvlpTxQw3ZU75loSJYQQWjUTqP0w fE4P6LmHxpUyOp5E1BgLwW6PVku98llAsOwbPl5MrP21vTCnPgcfZE9kXD9n3u0O 8O6Ji34JYEHCHOlHAoaHEA3O3MiqXpH659Lw9S36OM8MzegVKY2dFuBf/2D3TKrT lALELOutJGa2n2F8RyA5Rcs23tKKwUC1uFvIKUyQj3fVNgAOd7vqSu8Y2EIR7OF9 gHEs/K7BYf3xO/DqXXlkzCsvHnHMi0q24Z4fhKTJqg1h9p3kTNWt2brZFq0+WcKI S/xalbpRBeNwh+Fo408rGMOFJomIp9ywMWMbIV2mmckAGX01i6fCVi34zG7TGLZc GNWwUzMCCmUkNC71vpsETQwgq6WT5f9c/J3slqDoVMe4VW31awtrvFApwOj1JFhc 0fwWdVjNntvkKd1XMPranNNh0YYc6Ki7SrYkmWbrcR/Qa4FCiQ0Jv0GI3a7bN4Nn vqMUnJd0dfWsGkXCuwB254z4CS+3NJ0geouQjGP5QI0P4Ez7oDqpDPLfFzkDn3ch +a63Ih9OfX1K91/ciozrPY905bJBVrKg+0tLe0NdSPB5EjkVUTJc3OX8YuUCAwEA AaOCBdAwggXMMIGdBgNVHREEgZUwgZKCDXd3d3NlYy51a2IuY2iCDnd3d3NlYy51 cmtiLmNoghRtb2JpbGViYW5raW5nLnVrYi5jaIIVbW9iaWxlYmFua2luZy51cmti LmNoghFhY3RpdmF0aW9uLnVrYi5jaIISYWN0aXZhdGlvbi51cmtiLmNogg1jcm9u dG8udWtiLmNogg5jcm9udG8udXJrYi5jaDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBT458Vzn4RxDbIRyAvi xLdjCayk4DAfBgNVHSMEGDAWgBTu/UbK9ydekbxatueHzQr6VQomQjCB/wYDVR0f BIH3MIH0MEegRaBDhkFodHRwOi8vY3JsLnN3aXNzc2lnbi5uZXQvRUVGRDQ2Q0FG NzI3NUU5MUJDNUFCNkU3ODdDRDBBRkE1NTBBMjY0MjCBqKCBpaCBooaBn2xkYXA6 Ly9kaXJlY3Rvcnkuc3dpc3NzaWduLm5ldC9DTj1FRUZENDZDQUY3Mjc1RTkxQkM1 QUI2RTc4N0NEMEFGQTU1MEEyNjQyJTJDTz1Td2lzc1NpZ24lMkNDPUNIP2NlcnRp ZmljYXRlUmV2b2NhdGlvbkxpc3Q/YmFzZT9vYmplY3RDbGFzcz1jUkxEaXN0cmli dXRpb25Qb2ludDByBgNVHSAEazBpMFQGCWCFdAFZAQIBATBHMEUGCCsGAQUFBwIB FjlodHRwOi8vcmVwb3NpdG9yeS5zd2lzc3NpZ24uY29tL1N3aXNzU2lnbi1Hb2xk LUNQLUNQUy5wZGYwBwYFZ4EMAQEwCAYGBACPegEEMIHRBggrBgEFBQcBAQSBxDCB wTBkBggrBgEFBQcwAoZYaHR0cDovL3N3aXNzc2lnbi5uZXQvY2dpLWJpbi9hdXRo b3JpdHkvZG93bmxvYWQvRUVGRDQ2Q0FGNzI3NUU5MUJDNUFCNkU3ODdDRDBBRkE1 NTBBMjY0MjBZBggrBgEFBQcwAYZNaHR0cDovL2dvbGQtZXYtZzIub2NzcC5zd2lz c3NpZ24ubmV0L0VFRkQ0NkNBRjcyNzVFOTFCQzVBQjZFNzg3Q0QwQUZBNTUwQTI2 NDIwggJvBgorBgEEAdZ5AgQCBIICXwSCAlsCWQB3AESUZS6w7s6vxEAH2Kj+KMDa 5oK+2MsxtT/TM5a1toGoAAABaLf1H50AAAQDAEgwRgIhAK9zZRFF7UCV8avS40Jx CZe91joZuNnD0j4mGkTVUB35AiEAjQnUUZXjwcVLUc5Jeikjzw0i5YCdFOG53GQz 44D6vlgAdQBc3EOS/uarRUSxXprUVuYQN/vV+kfcoXOUsl7m9scOygAAAWi39SA0 AAAEAwBGMEQCIBYEBBK6If/pcyPlR39la7iIp8xLT2Tcol/aS+M0qLnWAiAhc1PQ +vONbEnAzNkLSkkt9zCmXwnYYmOaEfTcl+V8swB2AG9Tdqwx8DEZ2JkApFEV/3cV HBHZAsEAKQaNsgiaN9kTAAABaLf1HFIAAAQDAEcwRQIhAJuJ/PiLTP7t3UfTVSyS mi4jGgxt9eClBRqRULQbUjgEAiBTIu6Hdq8PL8rz6ZXzWeOubGHqXuMfsLzX7+zn 8uTUyAB3ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABaLf1G/IA AAQDAEgwRgIhAOhpKrHIPXbBXei+xyYJzTehdDk1DjJH1xG+LE0bfaX8AiEA+97s PiJsLvSxd5vmsm8KtGwcQbkE3WwTNc/9zRBSfz0AdgDuS723dc5guuFCaR+r4Z5m ow9+X7By2IMAxHuJeqj9ywAAAWi39R0+AAAEAwBHMEUCIEA0EnGJac9TN525ZH16 AmmI3nI6lin1ur7tZlXytct6AiEAs11WC51Z1Q3/iyB0neEHXT/SRj+cbR1r7w3/ Ywtwd0EwDQYJKoZIhvcNAQELBQADggEBABMPT+r+jPW67WV+Gtca4b6v7JTD7pmi irTO9EGUKdKnb305Qq9J0AyNCW/8Y/LbnhU/cRvfNoX0VUrAZKLyJEFPOVD0yJ6E +X3FdG0hXDLQxcz7KcKYaYj04qRm20g565lF8wsVjKjhgPisMvbEMsGvZHU/O0zM aGrpGMLMLc5dMI+Z7xoJPtFvvi1KCos4gdNOpXIu/JbMtzk+GbGHnn9gbhiwlfYG FDdz3vRqdqMHt9Zhd9pRq8a4pB2zF/uI+ZD22JRJJ7/LdMBtqRc5Vn5FBHo9ZNgv X86uzTlSoYd41aWJ3f+LuDVdUyoIYRXft4pL5yrS5w1nQRWLpfXYQK0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1n4ZhhCUWrkp/6NmCJ8M 4SPhyGVnlAmxwvRZrKfr4PyammKaqwNFp+gEAg+L+Hcdb4Sci1NbR7UwAcPG+nnu KvlpTxQw3ZU75loSJYQQWjUTqP0wfE4P6LmHxpUyOp5E1BgLwW6PVku98llAsOwb Pl5MrP21vTCnPgcfZE9kXD9n3u0O8O6Ji34JYEHCHOlHAoaHEA3O3MiqXpH659Lw 9S36OM8MzegVKY2dFuBf/2D3TKrTlALELOutJGa2n2F8RyA5Rcs23tKKwUC1uFvI KUyQj3fVNgAOd7vqSu8Y2EIR7OF9gHEs/K7BYf3xO/DqXXlkzCsvHnHMi0q24Z4f hKTJqg1h9p3kTNWt2brZFq0+WcKIS/xalbpRBeNwh+Fo408rGMOFJomIp9ywMWMb IV2mmckAGX01i6fCVi34zG7TGLZcGNWwUzMCCmUkNC71vpsETQwgq6WT5f9c/J3s lqDoVMe4VW31awtrvFApwOj1JFhc0fwWdVjNntvkKd1XMPranNNh0YYc6Ki7SrYk mWbrcR/Qa4FCiQ0Jv0GI3a7bN4NnvqMUnJd0dfWsGkXCuwB254z4CS+3NJ0geouQ jGP5QI0P4Ez7oDqpDPLfFzkDn3ch+a63Ih9OfX1K91/ciozrPY905bJBVrKg+0tL e0NdSPB5EjkVUTJc3OX8YuUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 259049355115563130100261630750138613934945908188 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign EV Gold CA 2014 - G22' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-04 10:01:59 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-04 10:01:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Uri' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHE-108.954.665' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Uri' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Altdorf' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Urner Kantonalbank' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wwwsec.ukb.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 875053369231699799442883534243193468941679084884031609880741901446737307981804487519164566095231089347522473661362906742364788862960504459975772091130000636409431991127069284259531725907324875027250046782831835900368885214677434389598237136613274688205045074359352429049484524518467458184538733620674724794112674098036902114128278450344631885998539094871737491515539081287499591340767831645741394890761031102662619481787631919230435831239379693708743793739889736366132898161288120659841679242148530461780973473137293870712489136687702977580977957500712377008128523318193918808081639680712050298580217678483391314232605421419194098403878833437217990751902393349051911948115057088671790496024814096743619172885349713650534632933975798384861737265972630990693849956026015884974045833439556848780550780546787044487044435317099681537464353262310382018504143877358022497865211875937020728271722426486660634999291543841514186730691860873981356976022780377722412368846147905850300903693125300134829157990354111884173369336297933255366258727544658401118101050301254834674790636008815439300869027982161957195676586583255140296090485249965015919846253901942575480007662337111459987603071005723623709283356537846160799244055996410944434831385317 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwsec.ukb.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwsec.urkb.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilebanking.ukb.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilebanking.urkb.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activation.ukb.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activation.urkb.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cronto.ukb.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cronto.urkb.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f8e7c5739f84710db211c80be2c4b76309aca4e0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eefd46caf7275e91bc5ab6e787cd0afa550a2642 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.1 (SwissSign EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (196 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-ev-g2.ocsp.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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