*.test.ehpp.schwarz

- Schwarz IT KG -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 68:32:b8:da:53:0e:bd:fe:2d:5f:7d:34:97:cd:59:a7:3e:d3:f5:a2 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Schwarz IT KG

Organization: Schwarz IT KG
State / Province: BW
Locality: Neckarsulm
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 68:32:b8:da:53:0e:bd:fe:2d:5f:7d:34:97:cd:59:a7:3e:d3:f5:a2
Serial Number (int): 594866180378175743646869901505266034735920182690
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 07:84:34:d3:32:66:2c:8b:ed:67:df:6c:c5:49:8e:63:ef:aa:05:f7
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): a4:ea:c1:27:0b:c5:6a:80:6b:b0:31:f7:c3:90:36:c3:c0:a4:d6:57
Fingerprint (sha256): ae:00:a8:f6:07:5e:fc:9e:b4:5d:04:c1:7a:69:2d:9c:9d:26:c2:cd:7e:5c:d3:3c:ae:87:53:22:4e:d8:2d:f5

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate *.test.ehpp.schwarz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.test.ehpp.schwarz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.test.ehpp.schwarz
test.ehpp.schwarz

Other certificates including the domain name ehpp.schwarz

(limited to 100 certificates)
*.ehpp.schwarz
*.ehpp.schwarz
*.ehpp.schwarz
*.ext.ehpp.schwarz
*.test.ehpp.schwarz
*.dev.ehpp.schwarz
*.ext.ehpp.schwarz
*.ehpp.schwarz
*.dev.ehpp.schwarz
*.ehpp.schwarz
*.test.ehpp.schwarz
*.test.ehpp.schwarz
*.ext.ehpp.schwarz
*.ext.ehpp.schwarz
*.test.ehpp.schwarz
*.dev.ehpp.schwarz
*.dev.ehpp.schwarz
*.ehpp.schwarz

Certificate

The complete raw certificate details for *.test.ehpp.schwarz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKDzCCB/egAwIBAgIUaDK42lMOvf4tX300l81Zpz7T9aIwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgT1YgSUNBIDIwMjEgLSAxMB4XDTIyMTEyODA4
NTYyNFoXDTIzMTEyODA4NTYyNFowZTELMAkGA1UEBhMCREUxCzAJBgNVBAgTAkJX
MRMwEQYDVQQHEwpOZWNrYXJzdWxtMRYwFAYDVQQKEw1TY2h3YXJ6IElUIEtHMRww
GgYDVQQDDBMqLnRlc3QuZWhwcC5zY2h3YXJ6MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzt7UdQQPFpquWsHOjzZFQd2I6qLKOzmP+2ZXUXJdSDrZXHC9
QQBUh5tdaNZf1hZ3AFykPnLGa58MDkNRjEOnLOF5f0GnFZMlNdfhsaQaEoPdeDcX
UhP9AQtVCc56IIBIRYzRsBSPIUSgoyaF5tuQVyfDkUZ+5CznojNs0uzMUjs7P5Vz
Mxkj/jFjJ69CY3eJq6MYlffe5THn06u0VHfWmlCozLMa638IQPLQBHtOteSI+2b6
hvPuooc6UhpdHwMIkRC0Bkv+J9s3FAYQJMoy/frGQ+YwpE/6wDxK/rHTabfbLgHb
vYG31eXISyH/Gz/bkLIlka1jspUTIh0qIeCeFwIDAQABo4IFyjCCBcYwMQYDVR0R
BCowKIITKi50ZXN0LmVocHAuc2Nod2FyeoIRdGVzdC5laHBwLnNjaHdhcnowDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNV
HQ4EFgQUB4Q00zJmLIvtZ99sxUmOY++qBfcwHwYDVR0jBBgwFoAUrNA6wsJXVZFp
Ecxwalk4ioysnD0wgf8GA1UdHwSB9zCB9DBHoEWgQ4ZBaHR0cDovL2NybC5zd2lz
c3NpZ24ubmV0L0FDRDAzQUMyQzI1NzU1OTE2OTExQ0M3MDZBNTkzODhBOENBQzlD
M0QwgaiggaWggaKGgZ9sZGFwOi8vZGlyZWN0b3J5LnN3aXNzc2lnbi5uZXQvQ049
QUNEMDNBQzJDMjU3NTU5MTY5MTFDQzcwNkE1OTM4OEE4Q0FDOUMzRCUyQ089U3dp
c3NTaWduJTJDQz1DSD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0P2Jhc2U/b2Jq
ZWN0Q2xhc3M9Y1JMRGlzdHJpYnV0aW9uUG9pbnQwbwYDVR0gBGgwZjBQBghghXQB
WQIBAjBEMEIGCCsGAQUFBwIBFjZodHRwczovL3JlcG9zaXRvcnkuc3dpc3NzaWdu
LmNvbS9Td2lzc1NpZ25fQ1BTX1RMUy5wZGYwCAYGBACPegEHMAgGBmeBDAECAjCB
xgYIKwYBBQUHAQEEgbkwgbYwZAYIKwYBBQUHMAKGWGh0dHA6Ly9zd2lzc3NpZ24u
bmV0L2NnaS1iaW4vYXV0aG9yaXR5L2Rvd25sb2FkL0FDRDAzQUMyQzI1NzU1OTE2
OTExQ0M3MDZBNTkzODhBOENBQzlDM0QwTgYIKwYBBQUHMAGGQmh0dHA6Ly9vY3Nw
LnN3aXNzc2lnbi5uZXQvQUNEMDNBQzJDMjU3NTU5MTY5MTFDQzcwNkE1OTM4OEE4
Q0FDOUMzRDCCAuQGCisGAQQB1nkCBAIEggLUBIIC0ALOAHYAVYHUwhaQNgFK6gub
VzxT8MDkOHhwJQgXL6OqHQcT0wwAAAGEvXOwcgAABAMARzBFAiEA8nddr9OStXIZ
+ywoTS96wwKQ8j1KI30PQy1Zn2B6XFYCIElxeB6soVZ9qzQBEofrnbePwIDpkNPi
5qEH3fHDE8A1AHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAGE
vXOvRQAABAMARzBFAiEAhBTf3OYkxp+q09NYQyhFGVwbNwo1RXHOahj0/gDMRuUC
IFRe9nmvLETYz+2CIO05oeD7aeqXibObpZrY9JGyrf+YAHYAejKMVNi3LbYg6jjg
Uh7phBZwMhOFTTvSK8E6V6NS61IAAAGEvXOvZgAABAMARzBFAiEAsF+Hzvi7e6mk
+Mn3sRDF77YABEcOcTSfxyTHTwnBjkMCIEYPXfFGMc9YpC8rP3f+BQP1+7X+5Ua7
dYVIL0FFpkxJAHYArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGE
vXOwjwAABAMARzBFAiEA+LNo9Tops4vNTcj8b+5qBNhT5HDIrWIpVVE+Mnc4wpoC
IBnqA2vYEpewDhsQTjY5mWPqooh35l4GlPMlgdgBZCkIAHUAs3N3B+GEUPhjhtYF
qdwRCUp5LbFnDAuH3PADDnk2pZoAAAGEvXOxlgAABAMARjBEAiBTj0hYWZ8csaB+
lsvvqMU8Auf3rFDTnF68UcGdMmCeRwIgMTWO0fP+S3vRFYSlqM82NRFWuLoUKEsQ
gpXRZWrL9Z8AdQDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYS9
c7FSAAAEAwBGMEQCIE25ZYyuxYxf0sJH93AscaUnyHkC9bAM2fu8Huqv7fyiAiAs
ymmOHZpNnrEpnsVX3/99ri8xLk3ttFQWjmZmeqkMgDANBgkqhkiG9w0BAQsFAAOC
AgEAty3q3Yj+VgqvYtmcSKhg3lyspoV2USjXA6KIRja16yks5ZmeVLH9BD6gZjG8
EjWeFTuYQrLn6f+7s27MvvYLbfkfF4bVIntAiOc1PKrYkBwWFTX4isByWyxYIXhD
cw81iX5iQjtLlTDaPFgo+zPnEIzL/Ap+NdyT17vHXZLP5MBO6839bvB/0XO7ajcH
u4ITPOkhH0oXBPtWz5xOkaueqIwS+6ByAZ6OJsTNSRPvvVbFdjZIwcqDuXE3BKba
8lSYXRjnLcZDaYxmA+4Dbekit3GOaCvFp4PczXZc8aPgokCBFc7HLrWEPmaPd4Ii
+QGBvnL6svkPKQ7Pzca7eETVtQ3iIBy0/yt1FFB1fQPAuRKscjXLxbRnbom4+3G+
ie5pofzYvORMc6TDOOejgDfAlgPqzKCJaftrJAGPUd2paP+IHFna/d75E0kA0Gnk
wJzeUdKfcZ9mD9FLa5/QlNM0GvoDD95TeGawQTj7k6tNRuuAPRbUVrini0DfkFDD
OZUfPN4TX5vZfnmjoXvR/in9EoK9nFKDFIaaBBO27w252gwY6Im5VldvIRvH/A5p
BHB2j4xMH4iPv3TZOBg/sq6tk0EW88x1ekJ81ECMQRNxFbfEj7JN9CZiiFSYydC0
uXDLruJDvMiSKMI/RUlyI8BTRgyH01Iy/euZVwshDhTuuHo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt7UdQQPFpquWsHOjzZF
Qd2I6qLKOzmP+2ZXUXJdSDrZXHC9QQBUh5tdaNZf1hZ3AFykPnLGa58MDkNRjEOn
LOF5f0GnFZMlNdfhsaQaEoPdeDcXUhP9AQtVCc56IIBIRYzRsBSPIUSgoyaF5tuQ
VyfDkUZ+5CznojNs0uzMUjs7P5VzMxkj/jFjJ69CY3eJq6MYlffe5THn06u0VHfW
mlCozLMa638IQPLQBHtOteSI+2b6hvPuooc6UhpdHwMIkRC0Bkv+J9s3FAYQJMoy
/frGQ+YwpE/6wDxK/rHTabfbLgHbvYG31eXISyH/Gz/bkLIlka1jspUTIh0qIeCe
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 594866180378175743646869901505266034735920182690
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-28 08:56:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 08:56:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Neckarsulm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schwarz IT KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.test.ehpp.schwarz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26114972347226103980605806335502282794479501758117912416138573430569619790146016036143953606698923028881289065664928561830442854305191887888912410501679875599504645616315878118059868910975438836702882415960405001814306168517446205678422988177261552956737056622334911617140667890733482965641367803788975334944804252768942029780390868230324233790960960785994458631349780550175113398805641083756523756316492837180607096625319234906064799138190595449886200883770195989572798685363022302878779693731871580809052766565989204212496403698438037795268320319351580297571549313957717996926914507108937483918166610756832180870679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.ehpp.schwarz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ehpp.schwarz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							078434d332662c8bed67df6cc5498e63efaa05f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (724 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (720 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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