rpcon1-cc2e3261.scdemo.ch

- Swisscom (Schweiz) AG -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 45:b1:d1:3e:05:49:f4:54:7c:47:07:c9:cd:82:d4:c1:06:a5:cc:64 was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Swisscom (Schweiz) AG

Organization: Swisscom (Schweiz) AG
State / Province: BE
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 45:b1:d1:3e:05:49:f4:54:7c:47:07:c9:cd:82:d4:c1:06:a5:cc:64
Serial Number (int): 397885822659281467709041204543939668791318137956
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: f0:6c:90:50:ef:8b:14:2c:ca:24:72:4f:10:72:05:72:ee:9b:9b:6a
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): a5:ab:9b:d9:26:c9:de:5e:c2:a3:24:f2:88:ab:64:99:39:f0:c7:1f
Fingerprint (sha256): ba:a8:77:4b:9f:b6:21:b4:fb:d7:3c:68:39:ba:51:90:19:35:e3:0b:95:21:7f:37:12:9d:03:53:22:b9:87:44

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate rpcon1-cc2e3261.scdemo.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rpcon1-cc2e3261.scdemo.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rpcon1-cc2e3261.scdemo.ch

Other certificates including the domain name scdemo.ch

(limited to 100 certificates)
rpcon1-36af53fc.scdemo.ch
rpcon1-84811399.scdemo.ch
rpcon1-4312103a.scdemo.ch
rpcon1-bc811bb5.scdemo.ch
rpcon1-a4a13ad0.scdemo.ch
rpcon1-3ffebb0e.scdemo.ch
rpcon1-0769efc5.scdemo.ch
rpcon1-16016b52.scdemo.ch
rpcon1-8dd997d1.scdemo.ch
rpcon1-348ed950.scdemo.ch
osballure5.scdemo.ch
rpcon1-5df24b88.scdemo.ch
rpcon1-57d6e8a6.scdemo.ch
rpcon1-e0ebddb3.scdemo.ch
rpcon1-cbc34369.scdemo.ch
rpcon1-e57d6b06.scdemo.ch
multi-domain-test3.pre.scdemo.ch
rpcon1-57155bd6.scdemo.ch
rpcon1-5681ac08.scdemo.ch
rpcon1-632088f7.scdemo.ch
rpcon1-443711df.scdemo.ch
rpcon1-0b012653.scdemo.ch
rpcon1-846755d0.scdemo.ch
rpcon1-0e22c92b.scdemo.ch
rpcon1-e859b947.scdemo.ch
rpcon1-4cc52bf1.scdemo.ch
rpcon1-b46472b2.scdemo.ch
rpcon1-d598abd5.scdemo.ch
rpcon1-d301a838.scdemo.ch
rpcon1-b44488b3.scdemo.ch
rpcon1-c259abb8.scdemo.ch
rpcon1-cadf82c4.scdemo.ch
mstunnel.scdemo.ch
rpcon1-cfbfb5d8.scdemo.ch
rpcon1-e31eaeed.scdemo.ch
rpcon1-2bfc0ec5.scdemo.ch
rpcon1-1f0e08b2.scdemo.ch
rpcon1-3c85dc73.scdemo.ch
rpcon1-3678e44f.scdemo.ch
rpcon1-3b9ca0ae.scdemo.ch
rpcon1-0b09b67c.scdemo.ch
rpcon1-495b405b.scdemo.ch
rpcon1-b0adb689.scdemo.ch
rpcon1-0c38886a.scdemo.ch
rpcon1-724bfb2d.scdemo.ch
rpcon1-89f30bee.scdemo.ch
rpcon1-1260c5be.scdemo.ch
rpcon1-1b42718d.scdemo.ch
rpcon1-a877a97b.scdemo.ch
rpcon1-ab510632.scdemo.ch
rpcon1-78708c89.scdemo.ch
rpcon1-a618b744.scdemo.ch
rpcon1-73049f7b.scdemo.ch
rpcon1-411b7569.scdemo.ch
rpcon1-b1ce55e6.scdemo.ch
rpcon1-c44203f0.scdemo.ch
demorptaarogi3.scdemo.ch
rpcon1-ab07434f.scdemo.ch
rpcon1-deced996.scdemo.ch
rpcon1-e57d6b06.scdemo.ch
rpcon1-07270737.scdemo.ch
wirkshop.scdemo.ch
rpcon1-c7e24c2d.scdemo.ch
rpcon1-a61dff60.scdemo.ch
rpcon1-2b2d3878.scdemo.ch
rpcon1-5401497c.scdemo.ch
rpcon1-210f79d7.scdemo.ch
rpcon1-e5aa0f07.scdemo.ch
rpcon1-e17683da.scdemo.ch
rpcon1-8995d448.scdemo.ch
rpcon1-20ad482c.scdemo.ch
rpcon1-389022b5.scdemo.ch
rpcon1-f1ca450a.scdemo.ch
rpcon1-89f30bee.scdemo.ch
rpcon1-9b6a3e10.scdemo.ch
rpcon1-ec07d92f.scdemo.ch
rpcon1-8848ad58.scdemo.ch
rpcon1-3af12958.scdemo.ch
rpcon1-88a56b11.scdemo.ch
rpcon1-1fe34f0a.scdemo.ch
rpcon1-f3237e72.scdemo.ch
rpcon1-9029d29a.scdemo.ch
rpcon1-0769efc5.scdemo.ch
rpcon1-49768824.scdemo.ch
rpcon1-8590ddd5.scdemo.ch
rpcon1-32058b95.scdemo.ch
rpcon1-222c624f.scdemo.ch
rpcon1-4991f0d1.scdemo.ch
rpcon1-5a573283.scdemo.ch
rpcon1-af4051c9.scdemo.ch
rctestwed.scdemo.ch
cadcrobottest99.scdemo.ch
cadcrobottest99.scdemo.ch
rpcon1-9d45654a.scdemo.ch
rpcon1-4ea84f0e.scdemo.ch
rpcon1-1e67b715.scdemo.ch
rpcon1-57155bd6.scdemo.ch
profile.pre.scdemo.ch
rpcon1-af86dd8b.scdemo.ch
osballurefp7.scdemo.ch

Certificate

The complete raw certificate details for rpcon1-cc2e3261.scdemo.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHdDCCBVygAwIBAgIURbHRPgVJ9FR8RwfJzYLUwQalzGQwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgT1YgSUNBIDIwMjIgLSAxMB4XDTI0MDYxMjAw
NDEwMFoXDTI1MDYxMjAwNDEwMFowbTELMAkGA1UEBhMCQ0gxCzAJBgNVBAgMAkJF
MQ0wCwYDVQQHDARCZXJuMR4wHAYDVQQKDBVTd2lzc2NvbSAoU2Nod2VpeikgQUcx
IjAgBgNVBAMTGXJwY29uMS1jYzJlMzI2MS5zY2RlbW8uY2gwggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQCpn4RHrRt+opGr2wCIX6bP4RzM9WNSGJVSpQGW
5fOswGASH4m/4geONCrGIjf1AJa20fn7sqkAkgY3DvVWQfrqnKs958qloigFZ+uj
n9kYvN67Mf0erxtAcB6z4/rPbNJxLKvXpDBC4NIxqPkrVDHrwj6SUA4E6vYgZlC/
utm9Qr8B2WNqXwH9SfGdD4NLmcsnyRfRKquqxvsZmn6Zzj2o9WgT0HE/kgj596X4
DKKd5Lq0fV3vv+2zLikUvu+ybtLS/LVQJjY6Ci0F+Qbh9RUKfpFKX2RaOMzwHJZW
0WXLeyhEZX5DD+HKYGNAZwMqf4nH/XVd06IsHE5xtK1j+6MLppESRlK7WTHc+HGk
x118ppfOXyoTNKP8ug4FQdWOnWX6rrnYqk0jMu/AdfSAgNK1OGA9tt7gH8/c4RoN
1kRlBJDuzGbPffjY1hPexqI5y5F+Yq2/WWjDokch7FEaEi+5Vxq02Zq2T6yJSSex
uiLTWEfX7J+NFwBs+wVuI3BKrlxeJjrx3HYAEQW78z5bHPHHrR8NDbN0159kAKr7
h+Q3OlOP7nrfB9Ht+2iZiRnm41HYuCPse1XqgKvn+7SKSli29xXWbDsiLwYYceWc
wpgy9OIwvEE7UeE2lEVIJKIp2UyGCUSBtrVxK2NU3338DUGKDQ1iNiDLYD9iWm7C
Pri13wIDAQABo4ICJzCCAiMwgbIGCCsGAQUFBwEBBIGlMIGiMEwGCCsGAQUFBzAC
hkBodHRwOi8vYWlhLnN3aXNzc2lnbi5jaC9haXItMGYyYmY5YTUtZGQzNy00OGM5
LWE4NWItMTJhY2RjYjhiZTQ1MFIGCCsGAQUFBzABhkZodHRwOi8vb2NzcC5zd2lz
c3NpZ24uY2gvc2lnbi9vY3MtYWFjY2NlZDUtNjZlOC00MDY5LTliMWItZmQyOWFi
NzNlZmVjMG8GA1UdIARoMGYwCAYGZ4EMAQICMAgGBgQAj3oBBzBQBghghXQBWQIB
AjBEMEIGCCsGAQUFBwIBFjZodHRwczovL3JlcG9zaXRvcnkuc3dpc3NzaWduLmNv
bS9Td2lzc1NpZ25fQ1BTX1RMUy5wZGYwUQYDVR0fBEowSDBGoESgQoZAaHR0cDov
L2NybC5zd2lzc3NpZ24uY2gvY2RwLTk2YjYyZjVhLTZiNzMtNGRhNC04N2Y3LWNl
NDAwMmMxY2QzNDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0P
AQH/BAQDAgWgMCQGA1UdEQQdMBuCGXJwY29uMS1jYzJlMzI2MS5zY2RlbW8uY2gw
HQYDVR0OBBYEFPBskFDvixQsyiRyTxByBXLum5tqMB8GA1UdIwQYMBaAFHxvCm8T
D9mMJG8mNPNca0NttyO2MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEB
CwUAA4ICAQAlS/BAEYqEyFa+urmo+fz32y2Mcq4Gp7MaC2GVq/HmUIC8GPTLGPxx
ZQym6gzFsbPuGQxhNPlA8izhTqp0HaGd9YhmMq/Defpo9mWNiePD4aJffA2ivbdO
NjIUJOLjNCkm4I/3OrzhaXM+7qsTLpcNu9nuj8LIud61YI3z1r18uXZ59NN7FDrx
65qHcAYak7JFvFmB+GwGYUP+ypwPtrL7Kp12d8e8W8D53EQDeMrphngmDUT7bG4o
1AjGaDw3p4t8ylCw50ocOT+RSqWkQ7GRbrvG13bnELWZalv4w6Yc8+QsjJqknDzo
1y1H4xZsWUZRpCrlt12sikQcaDlhplGI+y2YIlUN+gG/YgTvmZE7T5afW1dqXm5k
8KQ4nJ2oiXbUWSR4og24buVYkyYxdtFxv9DcrB1hBmYIsBTYSd5rzwj1261vC5au
t3nAA9iaMkoepl9fBIbXdzeQxK5nGXnIqx23b7pHDjgfCmYIOrul0XrFwAo7ic3f
1/+oaOfOMSEaqYMSqxzjR+CWixXnuj09jdSaVfcJJtd/sFNisZoy96tA0BL+YiUs
krYtSTiB06RlGrohzTTnXlQdCHrPFisaMDTByo8gL1FV0YH5+pCviYR5dv0BFMfp
pQUH6Cc4rWVskCtTnX+2FwcCgyCj7yr/YpYDh/gO66idgfkjWcnfUw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqZ+ER60bfqKRq9sAiF+m
z+EczPVjUhiVUqUBluXzrMBgEh+Jv+IHjjQqxiI39QCWttH5+7KpAJIGNw71VkH6
6pyrPefKpaIoBWfro5/ZGLzeuzH9Hq8bQHAes+P6z2zScSyr16QwQuDSMaj5K1Qx
68I+klAOBOr2IGZQv7rZvUK/Adljal8B/UnxnQ+DS5nLJ8kX0Sqrqsb7GZp+mc49
qPVoE9BxP5II+fel+AyineS6tH1d77/tsy4pFL7vsm7S0vy1UCY2OgotBfkG4fUV
Cn6RSl9kWjjM8ByWVtFly3soRGV+Qw/hymBjQGcDKn+Jx/11XdOiLBxOcbStY/uj
C6aREkZSu1kx3PhxpMddfKaXzl8qEzSj/LoOBUHVjp1l+q652KpNIzLvwHX0gIDS
tThgPbbe4B/P3OEaDdZEZQSQ7sxmz3342NYT3saiOcuRfmKtv1low6JHIexRGhIv
uVcatNmatk+siUknsboi01hH1+yfjRcAbPsFbiNwSq5cXiY68dx2ABEFu/M+Wxzx
x60fDQ2zdNefZACq+4fkNzpTj+563wfR7ftomYkZ5uNR2Lgj7HtV6oCr5/u0ikpY
tvcV1mw7Ii8GGHHlnMKYMvTiMLxBO1HhNpRFSCSiKdlMhglEgba1cStjVN99/A1B
ig0NYjYgy2A/Ylpuwj64td8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397885822659281467709041204543939668791318137956
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-12 00:41:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-12 00:41:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Swisscom (Schweiz) AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rpcon1-cc2e3261.scdemo.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 692001923414002903734101806569058873298031718641858838679378434431379476722628897028675272171795371235987149428701191273440432170256563754408092044266925461028487844472147724287874540335903616998910885583116853284880813765827321472576304123936085274332353724357202540694383221651443216567684898150105316001551810779470933067683850031088151955842208679397920386305597411049413442860952444688380460773395140052447129372131466897852823188187832047771594218164105050820736142646561294494598255758933756405001743680912777555790349512932082859277851478024824752288217180763956319624976992808925844745821460809168281887911359061266341708977428811271081856878164968030984644884539989889387956672498712187399358689962663194276575930022554813901669020841763201486004588363880371642235200557840040749394679633875107326397188977327302202268862363410256625624031027021825845970009541331899331167518685306705914338954580021172390876861609161926183555038757663698478239294158708803650019676185289753255996461066176304679540814215884942606680314381164423471828499244780791453181370091959852684977418449491337472492684305715754564395399775095430575110132118263032530045373044135582379042116031338678903961212421470140878790793883020666467251431978463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpcon1-cc2e3261.scdemo.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f06c9050ef8b142cca24724f10720572ee9b9b6a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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