ukbhb01mx01-e.urkb.ch
- Urner Kantonalbank -
Issued by SwissSign RSA TLS OV ICA 2021 - 1
About this certificate
This digital certificate with serial number 4d:74:26:64:d7:19:77:71:ea:d9:75:38:a4:ef:d4:90:c9:10:a9:eb was issued on by SwissSign AG.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Urner Kantonalbank
Organization:
Urner Kantonalbank
State / Province:
UR
Locality: Altdorf
Country: CH
Locality: Altdorf
Country: CH
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate has expire since
Certificate Details
Serial Number (hex): 4d:74:26:64:d7:19:77:71:ea:d9:75:38:a4:ef:d4:90:c9:10:a9:ebSerial Number (int): 442182520377483543781017004744228165669138508267
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: b6:80:93:f8:bd:ff:06:13:b6:ee:a5:54:4c:43:1a:e4:b5:03:2e:b6
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d
Fingerprint (sha1): 58:ef:48:83:86:f0:b0:17:9b:c8:67:1a:ff:27:da:26:4a:b3:ee:3c
Fingerprint (sha256): bc:84:71:67:c9:36:d9:36:05:ac:f6:90:27:ad:a3:a6:82:79:b4:c6:e6:3c:f9:5b:ee:d9:6a:e9:b5:9d:54:cc
Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D
Revocation information
OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3DCRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint
Check the revocation status for certificate ukbhb01mx01-e.urkb.ch
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ukbhb01mx01-e.urkb.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ukbhb01mx01-e.urkb.ch
ukbhb01mx01-e.ukb.ch
ukbhb01mx02-e.urkb.ch
ukbhb01mx02-e.ukb.ch
ukbhb01mx01-e.ukb.ch
ukbhb01mx02-e.urkb.ch
ukbhb01mx02-e.ukb.ch
Other certificates including the domain name urkb.ch
(limited to 100 certificates)
www.ukb.ch
fintest-wwwsec.ukb.ch
fintest-dev-wwwsec.ukb.ch
www.ukb.ch
fintest-e-banking.ukb.ch
fintest-e-banking.ukb.ch
ukbhb01mx01-e.urkb.ch
www.privasphere.com
wwwsec.urkb.ch
www.ukb.ch
www.urkb.ch
www.ukb.ch
fintest-e-banking.ukb.ch
www.ukb.ch
wwwsec.ukb.ch
www.ukb.ch
wwwsec.ukb.ch
ibdemo.urkb.ch
www.ukb.ch
wwwsec.ukb.ch
wwwsec.urkb.ch
www.ukb.ch
ukbhb01mx01-e.urkb.ch
fintest-dev-wwwsec.ukb.ch
fintest-wwwsec.ukb.ch
wwwsec.ukb.ch
www.urkb.ch
www.ukb.ch
ukbhb01mx01-e.urkb.ch
fintest-e-banking.ukb.ch
wwwsec.ukb.ch
ukbhb01mx01-e.urkb.ch
mobilebanking.urkb.ch
www.ukb.ch
fintest-wwwsec.ukb.ch
wwwsec.urkb.ch
ukbhb01mx01-e.urkb.ch
www.ukb.ch
www.privasphere.com
ukbhb01mx01-e.urkb.ch
fintest-wwwsec.ukb.ch
www.ukb.ch
www.ukb.ch
ukbhb01mx01-e.urkb.ch
www.urkb.ch
ssl.urkb.ch
fintest-wwwsec.ukb.ch
fintest-e-banking.ukb.ch
wwwsec.urkb.ch
www.privasphere.com
wwwsec.urkb.ch
www.ukb.ch
fintest-wwwsec.ukb.ch
fintest-dev-wwwsec.ukb.ch
www.ukb.ch
fintest-e-banking.ukb.ch
fintest-e-banking.ukb.ch
ukbhb01mx01-e.urkb.ch
www.privasphere.com
wwwsec.urkb.ch
www.ukb.ch
www.urkb.ch
www.ukb.ch
fintest-e-banking.ukb.ch
www.ukb.ch
wwwsec.ukb.ch
www.ukb.ch
wwwsec.ukb.ch
ibdemo.urkb.ch
www.ukb.ch
wwwsec.ukb.ch
wwwsec.urkb.ch
www.ukb.ch
ukbhb01mx01-e.urkb.ch
fintest-dev-wwwsec.ukb.ch
fintest-wwwsec.ukb.ch
wwwsec.ukb.ch
www.urkb.ch
www.ukb.ch
ukbhb01mx01-e.urkb.ch
fintest-e-banking.ukb.ch
wwwsec.ukb.ch
ukbhb01mx01-e.urkb.ch
mobilebanking.urkb.ch
www.ukb.ch
fintest-wwwsec.ukb.ch
wwwsec.urkb.ch
ukbhb01mx01-e.urkb.ch
www.ukb.ch
www.privasphere.com
ukbhb01mx01-e.urkb.ch
fintest-wwwsec.ukb.ch
www.ukb.ch
www.ukb.ch
ukbhb01mx01-e.urkb.ch
www.urkb.ch
ssl.urkb.ch
fintest-wwwsec.ukb.ch
fintest-e-banking.ukb.ch
wwwsec.urkb.ch
www.privasphere.com
wwwsec.urkb.ch
www.ukb.ch
Certificate
The complete raw certificate details for ukbhb01mx01-e.urkb.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIILwDCCCaigAwIBAgIUTXQmZNcZd3Hq2XU4pO/UkMkQqeswDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgT1YgSUNBIDIwMjEgLSAxMB4XDTIyMDcxMzEx NDMzMVoXDTIzMDcxMzExNDMzMVowaTELMAkGA1UEBhMCQ0gxCzAJBgNVBAgTAlVS MRAwDgYDVQQHEwdBbHRkb3JmMRswGQYDVQQKExJVcm5lciBLYW50b25hbGJhbmsx HjAcBgNVBAMTFXVrYmhiMDFteDAxLWUudXJrYi5jaDCCAiIwDQYJKoZIhvcNAQEB BQADggIPADCCAgoCggIBALQIB+oV5KLFgXOFIi5npD7uWJoxZiv6nExm+ya8m7Av 35WJqSd201iDwSE134VRiaMo5yl/hFZuyHoT0IWEGWYhfNhCanYyHpQTAFPW6nGj yMgPfCfvmo/ZbREGOa3My9T5PjU+pJzijO9UTMiY4OI3QwFke1cENZxjaucmT27r Y6IKKhl9QS4lE4KxQQfRDO7lWLMhlvwpCbk/aFuUszt8d0FxxguAwkPXBPs1Tf0B aX86FN1s4Jiep9XEO6DloYV6ihSWSUcsVogIILMg/zrc9yHCsGVs5AMPMBwb5b8i x/+W/pMUiWbWFn6pgpp9IgKLE/g1bxm1ezUxL5ss31ZqOL74gaA76s70zOkw7EFf CJtSRRh8CWj/gWPWe+QExG6gtFHWf8tnprF/mdyaUNC8iSID7wojzyvY8SaCs3aY //Q6nf+uIUV062fs7GesCOBgEbdVP0DixpNgXV43TwDHkPz6BvR+SGyr/o581qhB vDd6mnzsmo5Lcebh6I9w2dNBAOKs5ykyRz40oOcA6TnTiipBUBH3INfQNNV/tYuJ Qm2D/PbY6s8qLGElW2dvVuiqgTl00YaKujwJV2+dDEW0JboKo9cM8XjXJ15zHFM3 H7x6IzPsowRp7Ku9F0SBQ87LwYfFecozHXRA0NbLlvBM4azek2EsZfJtUUwRTRVJ AgMBAAGjggZ3MIIGczBjBgNVHREEXDBaghV1a2JoYjAxbXgwMS1lLnVya2IuY2iC FHVrYmhiMDFteDAxLWUudWtiLmNoghV1a2JoYjAxbXgwMi1lLnVya2IuY2iCFHVr YmhiMDFteDAyLWUudWtiLmNoMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFLaAk/i9/wYTtu6lVExDGuS1Ay62 MB8GA1UdIwQYMBaAFKzQOsLCV1WRaRHMcGpZOIqMrJw9MIH/BgNVHR8EgfcwgfQw R6BFoEOGQWh0dHA6Ly9jcmwuc3dpc3NzaWduLm5ldC9BQ0QwM0FDMkMyNTc1NTkx NjkxMUNDNzA2QTU5Mzg4QThDQUM5QzNEMIGooIGloIGihoGfbGRhcDovL2RpcmVj dG9yeS5zd2lzc3NpZ24ubmV0L0NOPUFDRDAzQUMyQzI1NzU1OTE2OTExQ0M3MDZB NTkzODhBOENBQzlDM0QlMkNPPVN3aXNzU2lnbiUyQ0M9Q0g/Y2VydGlmaWNhdGVS ZXZvY2F0aW9uTGlzdD9iYXNlP29iamVjdENsYXNzPWNSTERpc3RyaWJ1dGlvblBv aW50MG8GA1UdIARoMGYwUAYIYIV0AVkCAQIwRDBCBggrBgEFBQcCARY2aHR0cHM6 Ly9yZXBvc2l0b3J5LnN3aXNzc2lnbi5jb20vU3dpc3NTaWduX0NQU19UTFMucGRm MAgGBgQAj3oBBzAIBgZngQwBAgIwgcYGCCsGAQUFBwEBBIG5MIG2MGQGCCsGAQUF BzAChlhodHRwOi8vc3dpc3NzaWduLm5ldC9jZ2ktYmluL2F1dGhvcml0eS9kb3du bG9hZC9BQ0QwM0FDMkMyNTc1NTkxNjkxMUNDNzA2QTU5Mzg4QThDQUM5QzNEME4G CCsGAQUFBzABhkJodHRwOi8vb2NzcC5zd2lzc3NpZ24ubmV0L0FDRDAzQUMyQzI1 NzU1OTE2OTExQ0M3MDZBNTkzODhBOENBQzlDM0QwggNfBgorBgEEAdZ5AgQCBIID TwSCA0sDSQB3AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABgfdf FvgAAAQDAEgwRgIhAJNiZdJGxpLz3amY9Khz12+DVJ31MIT0QPLaob9bUtZ6AiEA 1VOr6WBUKTm33KorniRq9ZiTcO21b8G34Od2XLc3a8MAdQBvU3asMfAxGdiZAKRR Ff93FRwR2QLBACkGjbIImjfZEwAAAYH3XxWBAAAEAwBGMEQCIB5+YgzlIELn9lE6 8+QAYGzJ++oeNcpbBxqJvQJToWuHAiBMB8idqREgVBb3jOeDFdBifANsYqF8bO1M S2ouZIcRtgB3AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABgfdf FpEAAAQDAEgwRgIhAMnv60BW1PizsIKafQ1rwUxt6HELDxjMmNzSlwim68CpAiEA shBsj53tLwiqxZ6JAKyB0HUAblwrBL+cQF1mBajEar0AdwCt9776fP8QyIudPZwe PhhqtGcpXc+xDCTKhYY069yCigAAAYH3Xxl6AAAEAwBIMEYCIQD2eeAu14llHFD2 uFdXoSlhnDTGyWh/Rp6D1LlDTAXdngIhAKMx9n+KGl3ebH/eI1pBD/WiwKNHJFT6 7CMzLFFBkTqVAHYAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2pZoAAAGB 918XCgAABAMARzBFAiEA1SYroYbTp/Mg+eT9/VbrsYJUZsl8lxjX08Pb8MycV8gC IBsFSnlFEmVdkR1Ee6ombUCovfVpyYaSyEgnn+D9YQTEAHUA6D7Q2j71BjUy51co vIlryQPTy9ERa+zraeF3fW0GvW4AAAGB918XmgAABAMARjBEAiBAZq3lgAlGe/KV fRSOIzu/0a3jruS6PN4qId8iO1JolQIgI9/PP7KmUiWv9B01RIjPBOwYpME0ofEW MGB+NK5QWV8AdgDofqdmC8Js9gAu9XJdP+DjMbk5O7kvv1jrO5BJ2vVDWgAAAYH3 XxlLAAAEAwBHMEUCIEMaJZVh0xzA7J6Aeb3+OetMAvU/aeW8VN/XQLIcei0YAiEA z0cy3xcF+d8cYGotHLI8uTNwilmV5nHpT3mhjLZd/ncwDQYJKoZIhvcNAQELBQAD ggIBAGNyHga2yFzkNgKzwGLYKj8TxQQmIn2/Dn3d07ibRMOyzi+y+HCPBtOvkWe8 JiONzJXgxT7Od9YksevMvqUThmii6birLs6Z8Nb+sFXUULOloLjj3H4EkWifCcU2 RgXHWHyrgZnUKys+XaekIf27beoSpd69IlDSCn+/i9ZHtrLlMdm6RyF/mNXvdGnP OySp2G2pRKXUalb3Gt850OCqgjoL17qiogasvtx3jGE9ZSsHZaz7l6yxlfQthjeI 5cyLWNlb2YTP3LdUmz/qyETH+KNcSYQ5eRFnyWb6C82qYRK14j7i0tG4RozG2IcC uralxyQEgLjTr8E8h3lD2lqH9STQ6C1xMEXIxHNKYwZDd7Z8HVLLnZ2CwsgfZPs3 v/7Jpj3PZKN06Z3b4+EV8BXG5i12FA9htqvGtahcgV1/tf5h48Ql1l49/6iYqDrk 7P76bPMrDp62W2WWB6B7WqzrHJEAeiAk1yfsgsfufB4usjM+6jVJigsBuZMd4oDv 4pAIqmigg/zfsddDs7ddIkreZU7aTXcDd5dcLpE4Knpd5gU18Te32awjY/CWme1g 3KcUu4QZxxdS/UQN9fled+XOHRPELixoCvivZKjfm3R0zDsLL3Q+qT5YZCcPQoBB +okUzNGWSzbYF/n5qwaIqZUYOQ4XcG6Ci641iSAmq9mU6bAA -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtAgH6hXkosWBc4UiLmek Pu5YmjFmK/qcTGb7JrybsC/flYmpJ3bTWIPBITXfhVGJoyjnKX+EVm7IehPQhYQZ ZiF82EJqdjIelBMAU9bqcaPIyA98J++aj9ltEQY5rczL1Pk+NT6knOKM71RMyJjg 4jdDAWR7VwQ1nGNq5yZPbutjogoqGX1BLiUTgrFBB9EM7uVYsyGW/CkJuT9oW5Sz O3x3QXHGC4DCQ9cE+zVN/QFpfzoU3WzgmJ6n1cQ7oOWhhXqKFJZJRyxWiAggsyD/ Otz3IcKwZWzkAw8wHBvlvyLH/5b+kxSJZtYWfqmCmn0iAosT+DVvGbV7NTEvmyzf Vmo4vviBoDvqzvTM6TDsQV8Im1JFGHwJaP+BY9Z75ATEbqC0UdZ/y2emsX+Z3JpQ 0LyJIgPvCiPPK9jxJoKzdpj/9Dqd/64hRXTrZ+zsZ6wI4GARt1U/QOLGk2BdXjdP AMeQ/PoG9H5IbKv+jnzWqEG8N3qafOyajktx5uHoj3DZ00EA4qznKTJHPjSg5wDp OdOKKkFQEfcg19A01X+1i4lCbYP89tjqzyosYSVbZ29W6KqBOXTRhoq6PAlXb50M RbQlugqj1wzxeNcnXnMcUzcfvHojM+yjBGnsq70XRIFDzsvBh8V5yjMddEDQ1suW 8EzhrN6TYSxl8m1RTBFNFUkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 442182520377483543781017004744228165669138508267 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-13 11:43:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 11:43:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Altdorf' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Urner Kantonalbank' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ukbhb01mx01-e.urkb.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 734463913795324099529189949621712662212436701546289261610560450497199308762651353350275273427735739532216453969709926464365616760181087281923670669441229595334312463493218111281365713328217265511959214143407375703939961258860390882375282519386804842238636252684622421564808617946283923380045458588246434512603018589177241900600573697419561844505992003963245922136281965701199238408449696294324673690351873500172336231379853335687585609739901590000375246449864906484449845851332637861734208771798437641744335057995032565511063574491606431874431558219041830292814587210547637678438876847481892716123809299232649054707516803294886097275089301128232709247390509208787319096539833475297008800672073621273623015662034482765914009234925942397249310225549192686929734400006439872430977972981615346389026172352081186295934332319534737331583877372023020930583942490008393178277694328289863962746847173452532416099471719119221357399736760099995906835020850891858729433646970709835645704630120797380708945361175118970136214883160227881697911880055441987428394023059272312602158995869691923420535792511341693248363308319883834442010539581185851716184541339687796896761735341143193594284967112727548944941794192719510466671312576780969310793045321 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukbhb01mx01-e.urkb.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukbhb01mx01-e.ukb.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukbhb01mx02-e.urkb.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukbhb01mx02-e.ukb.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b68093f8bdff0613b6eea5544c431ae4b5032eb6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (847 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (843 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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