*.hrm-systems.ch

- HRM Systems AG -

Issued by SwissSign Server Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 4b:5c:00:99:c7:76:02:f4:be:35:3d:a8:92:aa:d5:9c:ab:b6:fb:7c was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HRM Systems AG

Organization: HRM Systems AG
Organization unit: IT Operations
State / Province: Zurich
Locality: Winterthur
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 4b:5c:00:99:c7:76:02:f4:be:35:3d:a8:92:aa:d5:9c:ab:b6:fb:7c
Serial Number (int): 430226028698384042695954732072582643695754869628
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 39:ec:92:19:10:21:77:7a:c5:31:b6:df:0c:62:3b:f8:38:8f:5f:d7
AuthorityKeyId: e7:f1:e7:fd:2e:53:ad:11:e5:81:1a:57:a4:73:8f:12:7d:98:c8:ae

Fingerprint (sha1): 54:4f:bd:f9:22:8f:e7:5f:8b:00:49:c2:2c:3e:56:36:2e:07:6c:06
Fingerprint (sha256): 93:0d:31:f6:82:d2:61:47:fd:07:95:a1:af:17:e0:46:03:1a:7c:6b:53:04:e3:6e:de:ba:c4:5b:82:2b:ef:5e

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE

Revocation information

OCSP Server: http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate *.hrm-systems.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.hrm-systems.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.hrm-systems.ch
hrm-systems.ch

Other certificates including the domain name hrm-systems.ch

(limited to 100 certificates)
hrm-systems.ch
www.hrm-systems.ch
huv.ch
*.uka.swiss
hrm-systems.swiss
hrm-systems.swiss
ideas-uka.hrm-systems.ch
www.hrm-systems.ch
*.hrm-systems.ch
hrm-systems.ch
*.hrm-reports.ch
staging.hrm-systems.ch
www.hrm-systems.ch
www.hrm-systems.ch
www.helptest.hrm-systems.ch
*.hrm-systems.ch
*.hrm-systems.ch
*.hrm-systems.ch
hrm-reports.ch
*.hrm-reports.ch
helptest.hrm-systems.ch
www.hilfe.hrm-systems.ch
status.hrm-systems.ch
www.hrm-systems.ch
hrm-systems.ch
hrm-systems.ch
*.hrm-systems.ch
hrm-systems.ch
hrm-systems.swiss
www.carema.ch
webmail.hrm-systems.ch
*.hrm-systems.ch
hilfe.hrm-systems.ch
www.hrm-systems.ch
www.hrm-systems.ch
hilfe.hrm-systems.ch
*.hrm-systems.ch
hrm-systems.ch
hrm-systems.ch
hrm-systems.ch
hrm-systems.ch
*.hrm-systems.ch
hrm-systems.ch
hrm-systems.ch
hrm-systems.ch
www.carema.ch

Certificate

The complete raw certificate details for *.hrm-systems.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHZTCCBk2gAwIBAgIUS1wAmcd2AvS+NT2okqrVnKu2+3wwDQYJKoZIhvcNAQEL
BQAwUjELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEsMCoGA1UE
AxMjU3dpc3NTaWduIFNlcnZlciBHb2xkIENBIDIwMTQgLSBHMjIwHhcNMTgxMDE3
MTMwNDQzWhcNMjAxMDE3MTMwNDQzWjB/MQswCQYDVQQGEwJDSDEPMA0GA1UECBMG
WnVyaWNoMRMwEQYDVQQHEwpXaW50ZXJ0aHVyMRcwFQYDVQQKEw5IUk0gU3lzdGVt
cyBBRzEWMBQGA1UECxMNSVQgT3BlcmF0aW9uczEZMBcGA1UEAwwQKi5ocm0tc3lz
dGVtcy5jaDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKUQ2h9GLF3z
Mbm6qO+0tEG4brR/17AKOqr6ZWzL28rE+yIoEWjfhpIAaGSdu0xTobCXfvjf419c
RiNxYhdM5budFdi5qyPVXpuVktwrvcxPnq2yxyd7nJjSyWUkEXW+ImweAB7tbeUq
A83IfZxg3G8n2qEMrEEctR5JO/7BVo0h8KaA8tv4dyhsYtoQPE2c3KNcqCVVRQX6
AP36XKP15Q+1SNXpL9LcxArnI0H4mRtjILOIjx3xPPXIECOmIJBWq5Er/Vd1fNKa
YfKPrKztlF7ao8LluLjry1frxD+ggIgbPSnJ9KUUfsGntk4jTvZjwGAGREZ39qAm
QT9vdjNZi3sSjsVXU5t61bliB5fPXUWY7UChDD+WLalFF7NIjwOR26lXa93ouXK9
gK7Sk0hiPgVyFRPqM1KjrfuWTVzP5KNSmNRteHHKusuUQ/vcP4hdoGpxYEJHyjX2
Bxucj+MHreEYsjXf7WxtmRRhNfxnmda0HdiQqKe+AOxI3tocyQ4xwr3pxuS5e/+S
AnbCutsxDHAw3o8sBcuZz4CsavgAZw4vsHZNJjEEmMpVWn9hixjqZs8nz4IvWtNT
lNCMfaUbMg0vG0bc8jUq8drOgYAxLZbsXzi+g28Vyxw1O9ht0Qvq8Y8W5dQ8x66J
0d1n4NwxZ5e9SrCBuW7/vISW7I+oOLf3AgMBAAGjggMEMIIDADArBgNVHREEJDAi
ghAqLmhybS1zeXN0ZW1zLmNogg5ocm0tc3lzdGVtcy5jaDAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBQ57JIZ
ECF3esUxtt8MYjv4OI9f1zAfBgNVHSMEGDAWgBTn8ef9LlOtEeWBGlekc48SfZjI
rjCB/wYDVR0fBIH3MIH0MEegRaBDhkFodHRwOi8vY3JsLnN3aXNzc2lnbi5uZXQv
RTdGMUU3RkQyRTUzQUQxMUU1ODExQTU3QTQ3MzhGMTI3RDk4QzhBRTCBqKCBpaCB
ooaBn2xkYXA6Ly9kaXJlY3Rvcnkuc3dpc3NzaWduLm5ldC9DTj1FN0YxRTdGRDJF
NTNBRDExRTU4MTFBNTdBNDczOEYxMjdEOThDOEFFJTJDTz1Td2lzc1NpZ24lMkND
PUNIP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q/YmFzZT9vYmplY3RDbGFzcz1j
UkxEaXN0cmlidXRpb25Qb2ludDBzBgNVHSAEbDBqMFQGCWCFdAFZAQIBCTBHMEUG
CCsGAQUFBwIBFjlodHRwOi8vcmVwb3NpdG9yeS5zd2lzc3NpZ24uY29tL1N3aXNz
U2lnbi1Hb2xkLUNQLUNQUy5wZGYwCAYGBACPegEHMAgGBmeBDAECAjCB1QYIKwYB
BQUHAQEEgcgwgcUwZAYIKwYBBQUHMAKGWGh0dHA6Ly9zd2lzc3NpZ24ubmV0L2Nn
aS1iaW4vYXV0aG9yaXR5L2Rvd25sb2FkL0U3RjFFN0ZEMkU1M0FEMTFFNTgxMUE1
N0E0NzM4RjEyN0Q5OEM4QUUwXQYIKwYBBQUHMAGGUWh0dHA6Ly9nb2xkLXNlcnZl
ci1nMi5vY3NwLnN3aXNzc2lnbi5uZXQvRTdGMUU3RkQyRTUzQUQxMUU1ODExQTU3
QTQ3MzhGMTI3RDk4QzhBRTATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0B
AQsFAAOCAQEAvfb843K1pSpnCcGKX3WOcD8D0wz591qDiXw1p+wgPY/DKXYiAN5E
EsitN6nCq8V0C49W5jc1LnXQp0fFMrP/cQVTiZRTEesbUsOf6kwCtKvD8p4PE/1Q
PvLtpKsid8trXiJKWMbXrMRuCjMXPyt5a81x4AxsUW0vUby0uwiOSuqg+r0zPmn5
Iap4vnqdUsosqbxuBTnnGQUs9skoR4pXq+OuHNS1rxeY9nsjPxaVTYAwV/QJjQ85
bKqRnzqAA8HRQ8L3Wpi9VUXj2Nm1djIEVZoeLFj1Z+3gavScv8vbmu+X2sSph7FY
qi/avzGhGXK1irYamiiNwwI3ldsm+y0wZw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 430226028698384042695954732072582643695754869628
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-17 13:04:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-17 13:04:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Winterthur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRM Systems AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hrm-systems.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 673409827175731171942222010071008285340639817448645638500323637793159100822183592603781128328057654438063157352274920443526284152667779272194220628467558169592901681672580365720076115760756730451419082827987121630813944153449089186466620561379064481977736584934209596712311708587892096781035177510486953174204932051636037449320993249247383764616600339053315066219648002542692144787382681045601152089667123636363788950327775035697888251279969169047352275453540044777252569456441834563810925112169741110328461804619210926590368122508244139785422979806912148780659744010000765198866007679849048184428934763229512437895402318731692351109338732291675487758536258201063517605631781298424928431235681665563470620670299057030984767244484048122590228714251225975236427085938757944121066741966904256515047907931052538332498701990837544845416502067828272611290681531815583567465135159586870916786261230432723148815137989846277262536193295249085970226981190546928936646545836991205616400554470472070671615646191100019823912421428749098369164564381890131968043052410459951114069255045177014353809799891988299018601795741881374506619761305193771210434031941215488838784657047906316656935620787876567983508796832086809278478284025006824713904240631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hrm-systems.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrm-systems.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39ec92191021777ac531b6df0c623bf8388f5fd7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e7f1e7fd2e53ad11e5811a57a4738f127d98c8ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.9
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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