node1.lb.trid.switch.ch

- SWITCH -

Issued by DigiCert EV RSA CA G2

About this certificate

This digital certificate with serial number 09:5f:b6:6b:05:9a:4a:19:95:4c:5c:35:b2:ef:b1:8b was issued on by DigiCert Inc.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SWITCH

Company registration number: CHE-101.494.993
Organization: SWITCH
State / Province: Zürich
Locality: Zürich
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:5f:b6:6b:05:9a:4a:19:95:4c:5c:35:b2:ef:b1:8b
Serial Number (int): 12460020041320254663519729031335358859
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: fc:c3:4f:16:d6:9d:cf:79:a1:ba:dc:fb:34:6e:59:06:72:21:1a:c7
AuthorityKeyId: 6a:4e:50:bf:98:68:9d:5b:7b:20:75:d4:59:01:79:48:66:92:32:06

Fingerprint (sha1): 23:53:5f:4c:a9:b1:f9:13:c1:ab:81:66:b5:2a:bb:07:1c:17:15:14
Fingerprint (sha256): c2:b4:f8:ea:59:df:68:32:b4:ba:31:63:9f:98:3e:93:35:3e:e4:09:12:cc:7b:93:ec:95:63:1f:31:6c:e5:60

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertEVRSACAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertEVRSACAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertEVRSACAG2.crl

Check the revocation status for certificate node1.lb.trid.switch.ch

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for node1.lb.trid.switch.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

node1.lb.trid.switch.ch
eduid.ch
www.eduid.ch
edu-id.ch
www.edu-id.ch
test.eduid.ch
www.test.eduid.ch
dev.eduid.ch
captcha.eduid.ch
captcha.test.eduid.ch
captcha.dev.eduid.ch
static.eduid.ch
mfa.eduid.ch
mfa.test.eduid.ch
mfa.dev.eduid.ch
wayf.switch.ch
wayf-test.switch.ch
attribute-viewer.aai.switch.ch
attribute-viewer-test.aai.switch.ch
attribute-viewer-dev.aai.switch.ch
login.eduid.ch
login.staging.eduid.ch
alumniethz.login.eduid.ch
bfh.login.eduid.ch
careum.login.eduid.ch
eawag.login.eduid.ch
ehsm.login.eduid.ch
epfl.login.eduid.ch
ethz.login.eduid.ch
ethz.login.staging.eduid.ch
fernuni.login.eduid.ch
ffhs.login.eduid.ch
fh-hwz.login.eduid.ch
fhnw.login.eduid.ch
graduateinstitute.login.eduid.ch
hep-bejune.login.eduid.ch
hepl.login.eduid.ch
hepvs.login.eduid.ch
hes-so.login.eduid.ch
hfgs.login.eduid.ch
hfh.login.eduid.ch
hslu.login.eduid.ch
hug.login.eduid.ch
ost.login.eduid.ch
phbern.login.eduid.ch
phgr.login.eduid.ch
phnmsbern.login.eduid.ch
phsg.login.eduid.ch
phsh.login.eduid.ch
phzg.login.eduid.ch
phzh.login.eduid.ch
psi.login.eduid.ch
sfuvet.login.eduid.ch
slsp.login.eduid.ch
switch.login.eduid.ch
switch.login.staging.eduid.ch
unibas.login.eduid.ch
unibe.login.eduid.ch
unifr.login.eduid.ch
unige.login.eduid.ch
unil.login.eduid.ch
unilu.login.eduid.ch
unine.login.eduid.ch
unisg.login.eduid.ch
usb.login.eduid.ch
usi.login.eduid.ch
usz.login.eduid.ch
uzh.login.eduid.ch
zhaw.login.eduid.ch
zhbluzern.login.eduid.ch
zhdk.login.eduid.ch
login.test.eduid.ch
login.idph.test.eduid.ch
login.aaidemo.test.eduid.ch
hslu.login.test.eduid.ch
uni-demo.login.test.eduid.ch
uni-partner.login.test.eduid.ch
unige.login.test.eduid.ch
edu-hfgs.azure-login.eduid.ch
hfgs.azure-login.eduid.ch
phgr.azure-login.eduid.ch
phnmsbern.azure-login.eduid.ch
testphgr.azure-login.eduid.ch
kuriotec.azure-login.test.eduid.ch
uni-demo.azure-login.test.eduid.ch
unidemo.azure-login.test.eduid.ch
unils.azure-login.eduid.ch
aai-demo-idp.switch.ch
aai-logon.vho-switchaai.ch
switchboard.eduroam.ch
login.dev.eduid.ch

Other certificates including the domain name switch.ch

(limited to 100 certificates)
hsr.meet.switch.ch
point.switch.ch
wiki.smap.switch.ch
discourse.toolbox.switch.ch
collab-fms-test.switch.ch
kelimutu.switch.ch
tls.automattic.com
vico.switch.ch
zeus.switch.ch
parma.switch.ch
fl-0-51.zhdk.cloud.switch.ch
ssad.events.switch.ch
placement.api.s2.scloud.switch.ch
evct.ssl.switch.ch
unibas.meet.switch.ch
grafana.int.os-ls.kaas.switch.ch
*.s3-zh.lts.switch.ch
tls.automattic.com
zhaw.meet.switch.ch
neutron.api.s2.scloud.switch.ch
testsp.tw.switch.ch
portal-dev.switch.ch
landingpage.rpz.switch.ch
trust.aviareto.aero
mail.switch.ch
player.cast.switch.ch
test.toolbox.switch.ch
domain-pulse.at
intern.meet.switch.ch
zeus.switch.ch
influxdb.cast-test.switch.ch
glance.api.unil.cloud.switch.ch
producer.cast.switch.ch
filesender.switch.ch
staging.groupie.lard.switch.ch
unili.meet.switch.ch
backend.www.switch.ch
vcregister.switch.ch
kava-admin.cast.switch.ch
worker3.oc-test.switch.ch
alphubel.switch.ch
drive-backup.switch.ch
engines-admin.scloud.switch.ch
*.os.zhdk.cloud.switch.ch
www-test.switch.ch
monitor.switch.ch
wayf.switch.ch
teramac.switch.ch
tls.automattic.com
node21.webauthn.eduid.ch
forge.switch.ch
cast-ng.switch.ch
www.switch.ch
test.id.switch.ch
os.unil.cloud.switch.ch
wayf-test.switch.ch
aai-logon.switch.ch
tls.automattic.com
landingpage.mw.rpz.switch.ch
contracts-test.switch.ch
driveonlyoffice.switch.ch
portfolio.switch.ch
fl-6-178.zhdk.cloud.switch.ch
octavia.api.s1.scloud.switch.ch
cloud-id.switch.ch
compute.api.test1.cloud.switch.ch
portal-dev.switch.ch
status.dilercloud.com
player.cast.switch.ch
bonseyes.zhdk.cloud.switch.ch
cloud-id.switch.ch
tools.aai.switch.ch
download.cast.switch.ch
tools.switch.ch
www-dev.switch.ch
admin.oc-test.switch.ch
www-dev.switch.ch
wayf-test.switch.ch
test.idph.switch.ch
bfh.meet.switch.ch
urlanalyzer-staging-backend.misc01.k8s.cert.switch.ch
password.switch.ch
idp-monitor.aai.switch.ch
saqcnfbe.events.switch.ch
cr.gitlab.switch.ch
*.lts.switch.ch
kava-admin.cast.switch.ch
unibe.meet.switch.ch
domain-pulse.at
bonseyes.zhdk.cloud.switch.ch
wiki.smap.switch.ch
producer.cast.switch.ch
tls.automattic.com
switchnovember.events.switch.ch
*.sandstorm.cloud.switch.ch
portfolio.switch.ch
metadata-test.aai.switch.ch
kelimutu.switch.ch
presentation.cast.switch.ch
mirror.cloud.switch.ch

Certificate

The complete raw certificate details for node1.lb.trid.switch.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllqk+hn5TLsl7zS5N/Hk
By3U/ZKW1c7HGpTWMxtlgMmQuTtFKGgzMvZUSVsCMgLavJkbu5xEkDnDWfSsQzxM
89SPDSh/baUKIrpxwtT1A394n/12jWf9ZwXWeLqAf1GNYELe4A172vQh6XfOLMmm
IjwqGkxVeP4IMuFgxOK5pXD0bg/tuBIm5EdAVzj56tWKNXA4jdG5MYMRjbygYGlZ
kCxJJgsY+r7Xz1KwS6CoEYTCfEpjUhHD/lyndADt5fDtIsBxGbwmdyyq12WovTwy
JYIh+7F/0nrr8E316rT7+Hd4cD61Q7r5IeXGkHVLyEE8OMDUdWm4Ji2Xap5G4JpV
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12460020041320254663519729031335358859
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert EV RSA CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHE-101.494.993'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zürich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zürich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SWITCH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'node1.lb.trid.switch.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18980444184820582854374045738909970866072183377570981280660906542233032824895108769451970271937315741868232716706692301839733170487745934405461848303821281805381040991176338284888042050702998705587836136491872903596331801491741099929471757912338226571055687351020549599831302896986808377537484052190042234310161517781962890050143419147498594656664593684159854526592460428518899433131050266691504838637945232802272388066731227713168069228387120884451547006338425726174864163591047821172511862395236239959501812089028686834896877672466363329316132286259891473510106543085443667149397180967002481937215262182964530402689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6a4e50bf98689d5b7b2075d45901794866923206
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fcc34f16d69dcf79a1badcfb346e590672211ac7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'node1.lb.trid.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu-id.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edu-id.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captcha.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captcha.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captcha.dev.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfa.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfa.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfa.dev.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayf.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayf-test.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribute-viewer.aai.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribute-viewer-test.aai.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribute-viewer-dev.aai.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.staging.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniethz.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfh.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careum.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eawag.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehsm.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epfl.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethz.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethz.login.staging.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fernuni.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffhs.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fh-hwz.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhnw.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graduateinstitute.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hep-bejune.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hepl.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hepvs.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hes-so.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfgs.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfh.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hslu.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hug.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ost.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phbern.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phgr.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phnmsbern.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phsg.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phsh.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phzg.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phzh.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psi.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfuvet.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slsp.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switch.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switch.login.staging.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unibas.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unibe.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unifr.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unige.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unil.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unilu.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unine.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unisg.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usb.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usi.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usz.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uzh.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhaw.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhbluzern.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhdk.login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.idph.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.aaidemo.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hslu.login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni-demo.login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni-partner.login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unige.login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu-hfgs.azure-login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfgs.azure-login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phgr.azure-login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phnmsbern.azure-login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testphgr.azure-login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuriotec.azure-login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni-demo.azure-login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unidemo.azure-login.test.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unils.azure-login.eduid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aai-demo-idp.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aai-logon.vho-switchaai.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switchboard.eduroam.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.dev.eduid.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertEVRSACAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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