*.prev.netcetera-payment.ch

Issued by SwissSign Server Silver CA 2014 - G22

About this certificate

This digital certificate with serial number 30:ae:f8:c7:3f:17:5b:d5:e6:5c:91:d8:cd:04:4f:97:4a:3a:e6:b1 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.prev.netcetera-payment.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 30:ae:f8:c7:3f:17:5b:d5:e6:5c:91:d8:cd:04:4f:97:4a:3a:e6:b1
Serial Number (int): 277933558311053368606102724097799588847051007665
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: da:5d:fa:3d:ac:5c:45:f3:26:41:64:8f:16:5b:22:c1:40:ca:44:6f
AuthorityKeyId: db:bc:bf:82:18:59:dc:69:fa:f8:ab:aa:83:4d:77:1d:0b:b0:8b:d8

Fingerprint (sha1): 9d:3c:f1:70:b1:cb:70:e6:d3:20:80:d3:14:11:d6:73:d4:38:75:51
Fingerprint (sha256): 93:b9:77:fd:0e:0f:c9:99:95:ae:5d:28:70:d7:a0:df:e6:e0:ca:7f:b9:6a:97:75:e6:66:9a:06:c3:90:fa:be

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8

Revocation information

OCSP Server: http://silver-server-g2.ocsp.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8
CRL Distribution Point: http://crl.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8
CRL Distribution Point: ldap://directory.swisssign.net/CN=DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate *.prev.netcetera-payment.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.prev.netcetera-payment.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.prev.netcetera-payment.ch
prev.netcetera-payment.ch

Other certificates including the domain name netcetera-payment.ch

(limited to 100 certificates)
tpet-mc-callin.netcetera-payment.ch
*.test.netcetera-payment.ch
*.prev.netcetera-payment.ch
*.test.netcetera-payment.ch
ps4visa-ds.netcetera-payment.ch
*.netcetera-payment.ch
riskadm.netcetera-payment.ch
*.test.netcetera-payment.ch
*.netcetera-payment.ch
*.netcetera-payment.ch
*.prev.netcetera-payment.ch
*.test.netcetera-payment.ch
ps4visa-ds.netcetera-payment.ch
*.prev.netcetera-payment.ch
*.netcetera-payment.ch
*.prev.netcetera-payment.ch
*.test.netcetera-payment.ch
*.test.netcetera-payment.ch
riskadm.netcetera-payment.ch
tpet-mc-callin.netcetera-payment.ch
*.prev.netcetera-payment.ch
*.prev.netcetera-payment.ch
*.netcetera-payment.ch
riskadm.netcetera-payment.ch
*.prev.netcetera-payment.ch
*.test.netcetera-payment.ch
*.netcetera-payment.ch

Certificate

The complete raw certificate details for *.prev.netcetera-payment.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIDDCCBvSgAwIBAgIUMK74xz8XW9XmXJHYzQRPl0o65rEwDQYJKoZIhvcNAQEL
BQAwVDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEuMCwGA1UE
AxMlU3dpc3NTaWduIFNlcnZlciBTaWx2ZXIgQ0EgMjAxNCAtIEcyMjAeFw0xOTAz
MTQxNDQ1NTFaFw0yMTAzMTQxNDQ1NTFaMCYxJDAiBgNVBAMMGyoucHJldi5uZXRj
ZXRlcmEtcGF5bWVudC5jaDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANUKET1k+ZR2h/+2gnKmdcWNDrerHzF8vtQIat7xxNgaMeLZ0Cj/ZQfksxzxcDcx
cYGhP49NZArX5Hvn1iET241FmUm4/utyRyE256HobvpJZ2u5e5OinZVVE0hQoXmh
JL4ALb5yPs6m/B0AeEcVAy5YXtRScaAZ+MWmrHREiTMnSo8g9V8RIMbCSKMSYgbx
fGf2MqtaGVZmvY8a1L+X7wqwJZ0yv8wm6T4L28Qp+3pJYyUlNLcMVVitqIj8HAKR
y/hQQnvz8HIopIXC8KNFQnc2MVITXa14eEuV/TxUtCJpg+Sc/nmh6qsBZOwKHxeU
liiHZUEbzNBOdi2Xonj5gwcCAwEAAaOCBQIwggT+MEEGA1UdEQQ6MDiCGyoucHJl
di5uZXRjZXRlcmEtcGF5bWVudC5jaIIZcHJldi5uZXRjZXRlcmEtcGF5bWVudC5j
aDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MB0GA1UdDgQWBBTaXfo9rFxF8yZBZI8WWyLBQMpEbzAfBgNVHSMEGDAWgBTbvL+C
GFncafr4q6qDTXcdC7CL2DCB/wYDVR0fBIH3MIH0MEegRaBDhkFodHRwOi8vY3Js
LnN3aXNzc2lnbi5uZXQvREJCQ0JGODIxODU5REM2OUZBRjhBQkFBODM0RDc3MUQw
QkIwOEJEODCBqKCBpaCBooaBn2xkYXA6Ly9kaXJlY3Rvcnkuc3dpc3NzaWduLm5l
dC9DTj1EQkJDQkY4MjE4NTlEQzY5RkFGOEFCQUE4MzRENzcxRDBCQjA4QkQ4JTJD
Tz1Td2lzc1NpZ24lMkNDPUNIP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q/YmFz
ZT9vYmplY3RDbGFzcz1jUkxEaXN0cmlidXRpb25Qb2ludDB1BgNVHSAEbjBsMFYG
CWCFdAFZAQMBCzBJMEcGCCsGAQUFBwIBFjtodHRwOi8vcmVwb3NpdG9yeS5zd2lz
c3NpZ24uY29tL1N3aXNzU2lnbi1TaWx2ZXItQ1AtQ1BTLnBkZjAIBgZngQwBAgEw
CAYGBACPegEGMIHXBggrBgEFBQcBAQSByjCBxzBkBggrBgEFBQcwAoZYaHR0cDov
L3N3aXNzc2lnbi5uZXQvY2dpLWJpbi9hdXRob3JpdHkvZG93bmxvYWQvREJCQ0JG
ODIxODU5REM2OUZBRjhBQkFBODM0RDc3MUQwQkIwOEJEODBfBggrBgEFBQcwAYZT
aHR0cDovL3NpbHZlci1zZXJ2ZXItZzIub2NzcC5zd2lzc3NpZ24ubmV0L0RCQkNC
RjgyMTg1OURDNjlGQUY4QUJBQTgzNEQ3NzFEMEJCMDhCRDgwggH1BgorBgEEAdZ5
AgQCBIIB5QSCAeEB3wB2AESUZS6w7s6vxEAH2Kj+KMDa5oK+2MsxtT/TM5a1toGo
AAABaXyqr2gAAAQDAEcwRQIge3tb5cZ7OnxVQvQynXsPcdPQPVd39SPIemeWIp+K
ESACIQDMp8le8zOwd3Ija/1iYMA4iDLB7H6lt/tmNZel9d4QJAB2AG9Tdqwx8DEZ
2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABaXyqrgIAAAQDAEcwRQIhAM8BSQ/b
H2uzjnDijxaf1hWsXB5PmHWKqxpnCNLCthSyAiBkpuxOMVVbfSr54bUuxMNArldu
Fvq8QgCQ3aKA7cKcEQB2ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGF
AAABaXyqrNAAAAQDAEcwRQIhAOqjsEMZzuQzDUr1OtAojRspyhRhrS1bnIUYsoEK
wBMKAiA6B3ktuZGsCCypvv26mitevyMRQISMfu5PXGXzhw2RngB1AO5Lvbd1zmC6
4UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABaXyqrI0AAAQDAEYwRAIgQQsLEV6f
t3l6YPx/IgcsKwJD/RQYsIjfxBQt1cGkvvsCIChnZdiwAj7Ly86eZGFCnVG8sKAf
rsikaqATBy8KHCQHMA0GCSqGSIb3DQEBCwUAA4IBAQBwECyMg9yyspLKu0ivECQ4
qL7PovMBSL0iAWKPuSuUrYDUTh8if7B2QZClBpaNBa8QDLsFNrY7cfi/7auyY8ck
M63wawI//09+aftNrq5k4XkXYYekdJD/3dXHy/5IgCSw4n7Xs/uvGk10cYD6h3+P
a0EupIyJE81HAs2lixDl+pkXOwqV+FwY3yJmfymoRRT6VOt7D8r4m9FuZxJ1GL06
1aLOVWsdOlUuXbkCNIbqePpwtlZ08SNdEkZEQglo4lmxdLoaqbSX2jrq+9QIWKKl
82h3I2HCw/lLIhfdwy5iTYW1M6LOAbIHS9+J5sX/eJtQq9kdMmcR8Y+qlD89+RuI
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QoRPWT5lHaH/7aCcqZ1
xY0Ot6sfMXy+1Ahq3vHE2Box4tnQKP9lB+SzHPFwNzFxgaE/j01kCtfke+fWIRPb
jUWZSbj+63JHITbnoehu+klna7l7k6KdlVUTSFCheaEkvgAtvnI+zqb8HQB4RxUD
Llhe1FJxoBn4xaasdESJMydKjyD1XxEgxsJIoxJiBvF8Z/Yyq1oZVma9jxrUv5fv
CrAlnTK/zCbpPgvbxCn7ekljJSU0twxVWK2oiPwcApHL+FBCe/PwciikhcLwo0VC
dzYxUhNdrXh4S5X9PFS0ImmD5Jz+eaHqqwFk7AofF5SWKIdlQRvM0E52LZeiePmD
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277933558311053368606102724097799588847051007665
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Silver CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-14 14:45:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-14 14:45:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.prev.netcetera-payment.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26893723349656182062582599763686846367053694021659208596220189988957905910416924869025460286770535116776728911263154537829182027129278291849812389225965615162288013007161520797743444048450092542446570290960944604902854770702777946022741504441243789507869891296685954367456383780658847828476140425355969579930653893157121607656564555589203031858035623300139042872423439843511759095720337188259838727087454125455143120996900230913729390179986128436323046936807643404630166257215403923852409362141813598252038531038585169714645744263036557175812795846423586420165204807620634439822823184316525265644882647507058827035399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prev.netcetera-payment.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prev.netcetera-payment.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da5dfa3dac5c45f32641648f165b22c140ca446f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dbbcbf821859dc69faf8abaa834d771d0bb08bd8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.3.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Silver-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (202 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://silver-server-g2.ocsp.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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