ukb00ncs104-e.ukb.ch
Issued by SwissSign RSA TLS DV ICA 2021 - 1
About this certificate
This digital certificate with serial number 11:3c:72:33:df:0e:54:91:27:03:03:23:35:98:e6:8b:7b:18:55:bb was issued on by SwissSign AG.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ukb00ncs104-e.ukb.ch
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate has expire since
Certificate Details
Serial Number (hex): 11:3c:72:33:df:0e:54:91:27:03:03:23:35:98:e6:8b:7b:18:55:bbSerial Number (int): 98400836267406293375054496305654685655925020091
Serial Number lenght: 157 bits, 20 octets
SubjectKeyId: 3b:98:97:b5:56:5f:63:08:71:0a:3f:e6:83:c5:d5:c8:56:f5:9f:f9
AuthorityKeyId: 3c:9e:52:79:03:63:6f:4f:9c:81:1b:d3:28:70:0c:24:5a:ea:a5:87
Fingerprint (sha1): 09:ea:70:7e:c4:8f:11:7f:8b:c6:39:ee:c6:a5:b2:33:29:76:e9:8e
Fingerprint (sha256): c8:be:31:24:e5:f0:8d:15:0b:76:f4:80:a5:61:bf:41:50:96:79:8c:09:f4:69:e9:76:34:98:c3:01:08:db:b7
Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587
Revocation information
OCSP Server: http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587CRL Distribution Point: http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint
Check the revocation status for certificate ukb00ncs104-e.ukb.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ukb00ncs104-e.ukb.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ukb00ncs104-e.ukb.ch
Other certificates including the domain name ukb.ch
(limited to 100 certificates)
www.ukb.ch
fintest-wwwsec.ukb.ch
gast.ukb.ch
fintest-dev-wwwsec.ukb.ch
www.privasphere.com
twint-test.ukb.ch
www.ukb.ch
fintest-e-banking.ukb.ch
ukb00ncs104-e.ukb.ch
satellite-test.ukb.ch
gast.ukb.ch
twint-test.ukb.ch
fintest-e-banking.ukb.ch
dialog.sbb.ch
www.privasphere.com
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ot.ukb.ch
ssl.ukb.ch
ot.ukb.ch
ukb00ucc114.ukb.ch
securemail.ukb.ch
eroeffnung-test.ukb.ch
satellite.ukb.ch
www.privasphere.com
ukb00ncs106-e.ukb.ch
securemail.ukb.ch
www.privasphere.com
gast.ukb.ch
www.ukb.ch
autodiscover.ukb.ch
ot.ukb.ch
autodiscover.ukb.ch
eroeffnung-test.ukb.ch
dialog.sbb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-e-banking.ukb.ch
www.privasphere.com
www.ukb.ch
wwwsec.ukb.ch
www.ukb.ch
ssl.ukb.ch
ukb00ncs104-e.ukb.ch
gast.ukb.ch
wwwsec.ukb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
eroeffnung.ukb.ch
wwwsec.ukb.ch
wwwsec.urkb.ch
ukb00ucc114.ukb.ch
twint.ukb.ch
www.privasphere.com
www.ukb.ch
identifikation-test.ukb.ch
twint-test.ukb.ch
www.privasphere.com
dialog.sbb.ch
gast.ukb.ch
dialog.sbb.ch
ukbhb01mx01-e.urkb.ch
ukb00ucc114.ukb.ch
fintest-dev-wwwsec.ukb.ch
ssl.ukb.ch
satellite-test.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-wwwsec.ukb.ch
wwwsec.ukb.ch
www.privasphere.com
ssl.ukb.ch
autodiscover.ukb.ch
www.ukb.ch
gast.ukb.ch
ukbhb01mx01-e.urkb.ch
identifikation-test.ukb.ch
autodiscover.ukb.ch
fintest-e-banking.ukb.ch
twint.ukb.ch
wwwsec.ukb.ch
ukbhb01mx01-e.urkb.ch
zukunftsbild.ukb.ch
zukunftsbild.ukb.ch
eroeffnung.ukb.ch
www.ukb.ch
fintest-wwwsec.ukb.ch
ukb00ucc114.ukb.ch
ssl.ukb.ch
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ukb00ncs106-e.ukb.ch
ukb00ucc114.ukb.ch
ukb00ncs106-e.ukb.ch
www.privasphere.com
satellite.ukb.ch
ukb00ncs104-e.ukb.ch
ukbhb01mx01-e.urkb.ch
fintest-wwwsec.ukb.ch
www.ukb.ch
fintest-wwwsec.ukb.ch
gast.ukb.ch
fintest-dev-wwwsec.ukb.ch
www.privasphere.com
twint-test.ukb.ch
www.ukb.ch
fintest-e-banking.ukb.ch
ukb00ncs104-e.ukb.ch
satellite-test.ukb.ch
gast.ukb.ch
twint-test.ukb.ch
fintest-e-banking.ukb.ch
dialog.sbb.ch
www.privasphere.com
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ot.ukb.ch
ssl.ukb.ch
ot.ukb.ch
ukb00ucc114.ukb.ch
securemail.ukb.ch
eroeffnung-test.ukb.ch
satellite.ukb.ch
www.privasphere.com
ukb00ncs106-e.ukb.ch
securemail.ukb.ch
www.privasphere.com
gast.ukb.ch
www.ukb.ch
autodiscover.ukb.ch
ot.ukb.ch
autodiscover.ukb.ch
eroeffnung-test.ukb.ch
dialog.sbb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-e-banking.ukb.ch
www.privasphere.com
www.ukb.ch
wwwsec.ukb.ch
www.ukb.ch
ssl.ukb.ch
ukb00ncs104-e.ukb.ch
gast.ukb.ch
wwwsec.ukb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
eroeffnung.ukb.ch
wwwsec.ukb.ch
wwwsec.urkb.ch
ukb00ucc114.ukb.ch
twint.ukb.ch
www.privasphere.com
www.ukb.ch
identifikation-test.ukb.ch
twint-test.ukb.ch
www.privasphere.com
dialog.sbb.ch
gast.ukb.ch
dialog.sbb.ch
ukbhb01mx01-e.urkb.ch
ukb00ucc114.ukb.ch
fintest-dev-wwwsec.ukb.ch
ssl.ukb.ch
satellite-test.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-wwwsec.ukb.ch
wwwsec.ukb.ch
www.privasphere.com
ssl.ukb.ch
autodiscover.ukb.ch
www.ukb.ch
gast.ukb.ch
ukbhb01mx01-e.urkb.ch
identifikation-test.ukb.ch
autodiscover.ukb.ch
fintest-e-banking.ukb.ch
twint.ukb.ch
wwwsec.ukb.ch
ukbhb01mx01-e.urkb.ch
zukunftsbild.ukb.ch
zukunftsbild.ukb.ch
eroeffnung.ukb.ch
www.ukb.ch
fintest-wwwsec.ukb.ch
ukb00ucc114.ukb.ch
ssl.ukb.ch
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ukb00ncs106-e.ukb.ch
ukb00ucc114.ukb.ch
ukb00ncs106-e.ukb.ch
www.privasphere.com
satellite.ukb.ch
ukb00ncs104-e.ukb.ch
ukbhb01mx01-e.urkb.ch
fintest-wwwsec.ukb.ch
www.ukb.ch
Certificate
The complete raw certificate details for ukb00ncs104-e.ukb.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJuDCCB6CgAwIBAgIUETxyM98OVJEnAwMjNZjmi3sYVbswDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjEgLSAxMB4XDTIyMDYwMzA2 NDczMVoXDTIzMDYwMzA2NDczMVowHzEdMBsGA1UEAxMUdWtiMDBuY3MxMDQtZS51 a2IuY2gwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU0hJuG9Y6JHf9 0QNFpkxIJdR9DnYX9g0YsP/2r3+zxo7rePF5bC00PygcirczKs4o7EQZz3ZUw9Ca M5IjMQDeuA4KtIz7JqJO5puChGjFDTPwLtvYCT9bfVrWOaXd2qq1xnGRSefAcNqY 3WCQVJUmztH+TWZzmcGBbm55Wa2kkEE+gJ1iay7BryMMF+qo/3mARHH+lynUH+iO CQzjy9pI7llWKcXsZk1ZDZuoJPJbSA21xGcNK0XN70dk/8snzdQOVzVMWLlNld8X zTtXLNgkehKiOoQWl/rCyF1OxXXR3PUvrNwGU2Hr1TtncPSBdZSL3JPJwmrXjLK+ A/yxVlSbAgMBAAGjggW5MIIFtTAfBgNVHREEGDAWghR1a2IwMG5jczEwNC1lLnVr Yi5jaDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMB0GA1UdDgQWBBQ7mJe1Vl9jCHEKP+aDxdXIVvWf+TAfBgNVHSMEGDAWgBQ8 nlJ5A2NvT5yBG9MocAwkWuqlhzCB/wYDVR0fBIH3MIH0MEegRaBDhkFodHRwOi8v Y3JsLnN3aXNzc2lnbi5uZXQvM0M5RTUyNzkwMzYzNkY0RjlDODExQkQzMjg3MDBD MjQ1QUVBQTU4NzCBqKCBpaCBooaBn2xkYXA6Ly9kaXJlY3Rvcnkuc3dpc3NzaWdu Lm5ldC9DTj0zQzlFNTI3OTAzNjM2RjRGOUM4MTFCRDMyODcwMEMyNDVBRUFBNTg3 JTJDTz1Td2lzc1NpZ24lMkNDPUNIP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q/ YmFzZT9vYmplY3RDbGFzcz1jUkxEaXN0cmlidXRpb25Qb2ludDBvBgNVHSAEaDBm MFAGCGCFdAFZAgEBMEQwQgYIKwYBBQUHAgEWNmh0dHBzOi8vcmVwb3NpdG9yeS5z d2lzc3NpZ24uY29tL1N3aXNzU2lnbl9DUFNfVExTLnBkZjAIBgYEAI96AQYwCAYG Z4EMAQIBMIHGBggrBgEFBQcBAQSBuTCBtjBkBggrBgEFBQcwAoZYaHR0cDovL3N3 aXNzc2lnbi5uZXQvY2dpLWJpbi9hdXRob3JpdHkvZG93bmxvYWQvM0M5RTUyNzkw MzYzNkY0RjlDODExQkQzMjg3MDBDMjQ1QUVBQTU4NzBOBggrBgEFBQcwAYZCaHR0 cDovL29jc3Auc3dpc3NzaWduLm5ldC8zQzlFNTI3OTAzNjM2RjRGOUM4MTFCRDMy ODcwMEMyNDVBRUFBNTg3MIIC5QYKKwYBBAHWeQIEAgSCAtUEggLRAs8AdgBVgdTC FpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAYEoUbMBAAAEAwBHMEUCIQCq yHyOuRpp2hfoEVMY8G3dFj0e9PFi+2H8+Xrr5u2OcQIgKPLMB3sXD6FcMHNsXtBC RfUY1NnA0aYiv9PZli3IEl0AdgBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbII mjfZEwAAAYEoUbIBAAAEAwBHMEUCIQCCBnfTdal6F7zU/lzI7Dru3jGWGKP4Xc4I yQwPdSCD1AIgfLGgJNSyUSFpUnKCauSCe/syQ2GPcLGOuold2cT1/R0AdQB6MoxU 2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYEoUbI7AAAEAwBGMEQCIHZw nFfpK4tAVWgTkIvcFqe9CM3QQEx7myBC+JJiJg4MAiBdr9xfvYBu7lbaiFdz8n8f TqHqYFZgseZ2SteECZzofwB2AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr 3IKKAAABgShRscsAAAQDAEcwRQIgOA/gT7bxf0K3iXC+TQYHtSJXarahn6J0p2jy kRlk56cCIQCOQu6gkkbDk4q6M7KOB3zTiVnh43tbhFA9ZtrWPx2/GQB1ALNzdwfh hFD4Y4bWBancEQlKeS2xZwwLh9zwAw55NqWaAAABgShRs7MAAAQDAEYwRAIgOb8T 8+sQodHefWhRtjSOw7A40yxwQzRbOczP6OVxLdMCIFMn5CPYb59IixwnmODQZ1WK aBeiTObbH1h5w5gbc1vaAHcA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0G vW4AAAGBKFGzmwAABAMASDBGAiEA1CkdWcjyswmXKhd3/uf6VJSLiz9Xkv3k2b2c rafaDmoCIQCBbXoCHciGSgJi4ShXKlASLfrer2yvWhdVM6pumwSxzzANBgkqhkiG 9w0BAQsFAAOCAgEAqaibHUx7iMG64m9mKFjl6Fyxt6/zLdxmbJEzpobRUM1D2URI ttGidJXP920DFejpRZqkiGbSAGNEZFqCLSO39es2V4l4wPIMr4VL2mbgcBf8DzO0 R54pG1dskiWAVV80yUILZ4jyNDg//aF0Umug8HyF61GnDaJY4c9LRz0pNhcbXWqV KcosP1YKaff52LaLtwNDSu7LDMAi3OhBNvH3Jm98fN7lKalLaj/JcngL3mcY12NX 0+pjrSTYxxrOnNKdmkhGTnYpiA+30JZ6D0htZ4SPphNJPsZnX13SDRavZ1CrSc45 NZJ+ozpf4T0J/L0TGqWurbX2iuZF7gOptjipL2dDsbT57fL9lhwh85Ug+Vz5UZ3/ 763LNWWqJKnNQ2urXdtkcOoOtbvfjWJhLoQ1j1iGZbPtE+BM0TuX5outsar7JgrK LX/xgH1vFyEdxn7HC+91XuDHh4WRAXlG79RmBBBILdZfqAbgviAmIKB1fpqTtdDH l7Ii/wLOp9mckfdBc1VjFUjRrJ+PlyR40mzJa+V+a2y9olclkBsQlSU8pBRYVtyj PRL3QR8B61oB6bC3gVyC2sEEYIqrlwCzmffrdtcs1mc1zFahhK3h5c08fdquLo+0 vpu17oHA66ywn9WeKN9rrtWwgaqiDALqxxBtZZU+w0gnttA6IysQfclQ1Es= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNISbhvWOiR3/dEDRaZM SCXUfQ52F/YNGLD/9q9/s8aO63jxeWwtND8oHIq3MyrOKOxEGc92VMPQmjOSIzEA 3rgOCrSM+yaiTuabgoRoxQ0z8C7b2Ak/W31a1jml3dqqtcZxkUnnwHDamN1gkFSV Js7R/k1mc5nBgW5ueVmtpJBBPoCdYmsuwa8jDBfqqP95gERx/pcp1B/ojgkM48va SO5ZVinF7GZNWQ2bqCTyW0gNtcRnDStFze9HZP/LJ83UDlc1TFi5TZXfF807VyzY JHoSojqEFpf6wshdTsV10dz1L6zcBlNh69U7Z3D0gXWUi9yTycJq14yyvgP8sVZU mwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 98400836267406293375054496305654685655925020091 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2021 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-03 06:47:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-03 06:47:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ukb00ncs104-e.ukb.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18786859495406163292837994484615653232036675901657018047284997557093290586938349489938915539255480754231591459808721900590807618992048297164328849282052831427590582278365647787574228362495141976574228857953524774754475116393681689906751152923988807925813043309517828527541620887198209737960600067411212361558492652717413597603744386833332564548621741823852363216376569382585670654600640219246648221099880240742243300601287098538478917810585120300890583836856404520642350402484215641467399857514949685626131121435610430496462798311290974352444844631470741019189972341716074859155107533643940817487447428198745224139931 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukb00ncs104-e.ukb.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3b9897b5565f6308710a3fe683c5d5c856f59ff9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3c9e527903636f4f9c811bd328700c245aeaa587 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (725 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (721 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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