*.bl.ch

Issued by SwissSign Server Gold CA 2008 - G2

About this certificate


This digital certificate with serial number 4c:6e:ee:6e:ca:41:02:7b:50:4c:99:71:37:96:d3 was issued on by SwissSign AG .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • WARNING: Using depricated TeletexString for '[*.bl.ch]'
  • ERROR: Certificate contains a key usage different from ClientAuth or EmailProtection
  • ERROR: Certificate contains a CRL with an non-preferred scheme ([ldap])

Kanton Basel-Landschaft

Organization: Kanton Basel-Landschaft
Organization unit: Zentrale Informatikdienste
State / Province: Basel-Landschaft
Locality: Liestal
Country: CH

SwissSign AG

Organization: SwissSign AG
State / Province: Basel-Landschaft
Locality: Liestal
Country: CH

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 4c:6e:ee:6e:ca:41:02:7b:50:4c:99:71:37:96:d3
Serial Number (int): 396864516895588073937972796212090579
Serial Number lenght: 119 bits, 15 octets

SubjectKeyId: e0:2e:58:b3:2c:b3:b9:06:70:ae:7b:44:2e:81:ff:3d:ef:98:a2:69
AuthorityKeyId: 97:76:de:0a:34:e5:10:9a:40:c4:eb:d8:9d:5a:53:7b:21:cc:47:3e

Fingerprint (sha1): 15:53:27:86:ee:c5:04:93:88:c8:a1:e6:7e:28:b1:cb:a0:27:e3:78
Fingerprint (sha256): e5:e3:3d:b3:df:76:ee:4b:01:51:7a:15:59:0c:33:ea:75:5e:a9:66:06:d7:c3:ef:1b:22:1a:2e:ef:7a:78:ba

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/9776DE0A34E5109A40C4EBD89D5A537B21CC473E

Revocation information

OCSP Server: http://gold-server-g2.ocsp.swisssign.net/9776DE0A34E5109A40C4EBD89D5A537B21CC473E
CRL Distribution Point: http://crl.swisssign.net/9776DE0A34E5109A40C4EBD89D5A537B21CC473E
CRL Distribution Point: ldap://directory.swisssign.net/CN=9776DE0A34E5109A40C4EBD89D5A537B21CC473E%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for the current certificate on *.bl.ch
2
DNS Names
1
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bl.ch
bl.ch
[email protected]

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGeTCCBWGgAwIBAgIPTG7ubspBAntQTJlxN5bTMA0GCSqGSIb3DQEBBQUAMFEx CzAJBgNVBAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxKzApBgNVBAMTIlN3 aXNzU2lnbiBTZXJ2ZXIgR29sZCBDQSAyMDA4IC0gRzIwHhcNMTQwNjMwMDg1NDMz WhcNMTcwNjMwMDg1NDMzWjCBuTELMAkGA1UEBhMCQ0gxGTAXBgNVBAgTEEJhc2Vs LUxhbmRzY2hhZnQxEDAOBgNVBAcTB0xpZXN0YWwxIDAeBgNVBAoTF0thbnRvbiBC YXNlbC1MYW5kc2NoYWZ0MSMwIQYDVQQLExpaZW50cmFsZSBJbmZvcm1hdGlrZGll bnN0ZTEQMA4GA1UEAxQHKi5ibC5jaDEkMCIGCSqGSIb3DQEJARYVemlkLnplcnRp ZmlrYXRlQGJsLmNoMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumth mOZVBeRoLV+DZ1fwxht6SruHu538nV5xp9w2YbosMYTzbVxql0tuo+6221IbQE+7 3KeO5V8Zgr/uMWekXL3MpVijwPjeb3B0VhGS8nYaEMJAnUmMECjgbko6AwnzWLMO nMqB7yd5Wk/Up53zI6dnHp+YaRK+L24ToigsPXjPunkEiVGat3Z/kU2HD7MzFUmg nuNt9AFfhu/vPGHmDj7y3CLr1SE/4cMmt5aR72xA4TYAfT5YRxr1Ci4FN1u9Yhd7 u0a4tBRAX0YF0IsiFADFBuzrbSbXHxvWASuzD4h66+mBwtYa7aiOLUDwWtSTT5ce qmzDnyHt1vfgB29HeQIDAQABo4IC4zCCAt8wMAYDVR0RBCkwJ4EVemlkLnplcnRp ZmlrYXRlQGJsLmNoggcqLmJsLmNoggVibC5jaDAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBTgLlizLLO5BnCu e0Qugf8975iiaTAfBgNVHSMEGDAWgBSXdt4KNOUQmkDE69idWlN7IcxHPjCB/wYD VR0fBIH3MIH0MEegRaBDhkFodHRwOi8vY3JsLnN3aXNzc2lnbi5uZXQvOTc3NkRF MEEzNEU1MTA5QTQwQzRFQkQ4OUQ1QTUzN0IyMUNDNDczRTCBqKCBpaCBooaBn2xk YXA6Ly9kaXJlY3Rvcnkuc3dpc3NzaWduLm5ldC9DTj05Nzc2REUwQTM0RTUxMDlB NDBDNEVCRDg5RDVBNTM3QjIxQ0M0NzNFJTJDTz1Td2lzc1NpZ24lMkNDPUNIP2Nl cnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q/YmFzZT9vYmplY3RDbGFzcz1jUkxEaXN0 cmlidXRpb25Qb2ludDBiBgNVHSAEWzBZMFcGCWCFdAFZAQIBBTBKMEgGCCsGAQUF BwIBFjxodHRwOi8vcmVwb3NpdG9yeS5zd2lzc3NpZ24uY29tL1N3aXNzU2lnbi1H b2xkLUNQLUNQUy1SNS5wZGYwgdUGCCsGAQUFBwEBBIHIMIHFMGQGCCsGAQUFBzAC hlhodHRwOi8vc3dpc3NzaWduLm5ldC9jZ2ktYmluL2F1dGhvcml0eS9kb3dubG9h ZC85Nzc2REUwQTM0RTUxMDlBNDBDNEVCRDg5RDVBNTM3QjIxQ0M0NzNFMF0GCCsG AQUFBzABhlFodHRwOi8vZ29sZC1zZXJ2ZXItZzIub2NzcC5zd2lzc3NpZ24ubmV0 Lzk3NzZERTBBMzRFNTEwOUE0MEM0RUJEODlENUE1MzdCMjFDQzQ3M0UwDQYJKoZI hvcNAQEFBQADggEBABofUxz2YRFGcIVqxqgkLgz00RPNa+F0xkl9tEPmDsj5BtZ7 bg20Gjtf54UqwqYfvoshVc52klVSwl1J7IXG3Rdox+i/f7gfxOaBrfzBpX6rsm1Y +dL9hnIPuL2b6OhObZUTNf1IOLYIq2B3xa+q9nCVQctzYUqXmjpLx+K0xQymYd5t 3sEZSyuPmjGwnPRso+l1TYZp5sH4ZOVI31Yu1ibqyL7zVCHVhwQJHJox09DPT66B E3UImMc+8Eb5h4dQkHLZRHeRpiZt8QusbW8DftszD3kWTNmGrL3Vev5j0tl5U77n bQp/dajOcvOhvI0YbYxuStFcCLY7AdomR+xbhcM= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumthmOZVBeRoLV+DZ1fw xht6SruHu538nV5xp9w2YbosMYTzbVxql0tuo+6221IbQE+73KeO5V8Zgr/uMWek XL3MpVijwPjeb3B0VhGS8nYaEMJAnUmMECjgbko6AwnzWLMOnMqB7yd5Wk/Up53z I6dnHp+YaRK+L24ToigsPXjPunkEiVGat3Z/kU2HD7MzFUmgnuNt9AFfhu/vPGHm Dj7y3CLr1SE/4cMmt5aR72xA4TYAfT5YRxr1Ci4FN1u9Yhd7u0a4tBRAX0YF0Isi FADFBuzrbSbXHxvWASuzD4h66+mBwtYa7aiOLUDwWtSTT5ceqmzDnyHt1vfgB29H eQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 396864516895588073937972796212090579 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2008 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-30 08:54:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-30 08:54:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel-Landschaft' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liestal' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kanton Basel-Landschaft' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zentrale Informatikdienste' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.bl.ch' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23533276386328525885048933412078433210538591259614002610432193570339176514364615275873623987040010019981135717002526017770425950754995853722867987191285639759430829374764752930508243485230438281548673856449712444229066260936213748978664403923457924067281236578474942362044573050033682814762652117946642994524440539853677367771359039520083989413653930711184039370483846013971716849953683329269148396760285400328255835060438950817456628842083009223052094639822153032098307592960399826436489257362286550006543504696841275865220123805817160559912580667042084702205162809991233757780106704952084080238417614556403361335161 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bl.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bl.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e02e58b32cb3b90670ae7b442e81ff3def98a269 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9776de0a34e5109a40c4ebd89d5a537b21cc473e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/9776DE0A34E5109A40C4EBD89D5A537B21CC473E' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=9776DE0A34E5109A40C4EBD89D5A537B21CC473E%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS-R5.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/9776DE0A34E5109A40C4EBD89D5A537B21CC473E' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-server-g2.ocsp.swisssign.net/9776DE0A34E5109A40C4EBD89D5A537B21CC473E' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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