xrp3.bcv.ch

- Banque Cantonale Vaudoise -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 15:6e:5e:3e:47:b5:45:8f:fb:b3:59:df:e0:ed:03:bb:b7:e4:c3:86 was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Banque Cantonale Vaudoise

Organization: Banque Cantonale Vaudoise
State / Province: VD
Locality: Lausanne
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 15:6e:5e:3e:47:b5:45:8f:fb:b3:59:df:e0:ed:03:bb:b7:e4:c3:86
Serial Number (int): 122350097906839737441745749708838808860896838534
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 5b:0b:d1:1f:0c:88:e0:e8:40:60:de:93:30:05:40:b2:9d:44:f7:b6
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): 8e:5f:b1:11:5a:6f:f1:fe:8f:a8:2d:9c:5c:db:cf:21:f9:16:ca:0f
Fingerprint (sha256): d1:60:84:d3:c2:82:e0:49:b6:4e:5b:a5:43:ff:69:75:3e:21:30:e2:c6:48:97:f2:01:a1:80:07:bd:f6:8a:74

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate xrp3.bcv.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xrp3.bcv.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xrp3.bcv.ch

Other certificates including the domain name bcv.ch

(limited to 100 certificates)
a-visiowebrtc.bcv.ch
spmxsrv1.pub.bcv.ch
projectshare.bcv.ch
www.bcv.ch
pro-access-a.bcv.ch
pro-access-a.bcv.ch
events-a.bcv.ch
vvc-viseca-test.bcv.ch
ebics-a.bcv.ch
ebill-bankapi-xp.bcv.ch
spmxsrv1.pub.bcv.ch
spmxsrv4.pub.bcv.ch
eforex.bcv.ch
target.bcv.ch
convergences.bcv.ch
eforex.bcv.ch
www.tradedirect.ch
b2c-a.bcv.ch
mobiletd-a.bcv.ch
www.bcv.ch
auth.bcv.ch
gfi-sso-test.bcv.ch
auth-a.bcv.ch
pro-access.bcv.ch
mailloop.mail.bcv.ch
yv0-twint-gw.bcv.ch
mobiletd-a.bcv.ch
mta-sts.mail-acc.bcv.ch
auth-aa.bcv.ch
pension-a.bcv.ch
remdesk-a.bcv.ch
connect.bcv.ch
mobiletd-a.bcv.ch
mobile.bcv.ch
yv0-twint-gw-test.bcv.ch
www.bcv.ch
www.tradedirect.ch
pro-access-lab.bcv.ch
paynet-bankapi-xp.bcv.ch
structures.bcv.ch
ier-a.bcv.ch
visiowebrtc.bcv.ch
www.bcv.ch
web-sso.bcv.ch
xrp3.bcv.ch
connect-a.bcv.ch
pro-access.bcv.ch
spmxsrv2.pub.bcv.ch
a-visiorouteur.bcv.ch
wealtheditorial-a.bcv.ch
vvc-viseca.bcv.ch
www-a.tradedirect.ch
sra.bcv.ch
pro-access.bcv.ch
xrp2.bcv.ch
connect.bcv.ch
cpbcv.bcv.ch
connect.bcv.ch
dgo-xml.bcv.ch
access.bcv.ch
ier.bcv.ch
mobile.bcv.ch
ext.bcv.ch
target-a.bcv.ch
projectshare.bcv.ch
b2b.bcv.ch
visio.bcv.ch
spmxsrv1.pub.bcv.ch
mail2.mail.bcv.ch
xrp2.bcv.ch
tradedirect.ch
spmxsrv3.pub.bcv.ch
ebics.bcv.ch
sites-a.bcv.ch
enquete.bcv.ch
auth-a.bcv.ch
visio.bcv.ch
filebox.bcv.ch
eforex.bcv.ch
gfi-sso.bcv.ch
visiorouteur.bcv.ch
rdir.mail.bcv.ch
visioportal.bcv.ch
mail1.mail.bcv.ch
mobile-aa.bcv.ch
ahpxf501.accounts.bcv.ch
dgo-xml.bcv.ch
events.bcv.ch
cpbcv.bcv.ch
paynet-bankapi-xp.bcv.ch
jobs.bcv.ch
a-visio.bcv.ch
remdesk-a.bcv.ch
mobiletd-a.bcv.ch
paymit-a.bcv.ch
connect-a.bcv.ch
a-visiowebrtc.bcv.ch
sites-a.bcv.ch
b2b-a.bcv.ch
access.bcv.ch

Certificate

The complete raw certificate details for xrp3.bcv.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHYDCCBUigAwIBAgIUFW5ePke1RY/7s1nf4O0Du7fkw4YwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgT1YgSUNBIDIwMjIgLSAxMB4XDTI0MDYyMDA1
MzYwMFoXDTI1MDYyMDA1MzYwMFowZzELMAkGA1UEBhMCQ0gxCzAJBgNVBAgMAlZE
MREwDwYDVQQHDAhMYXVzYW5uZTEiMCAGA1UECgwZQmFucXVlIENhbnRvbmFsZSBW
YXVkb2lzZTEUMBIGA1UEAxMLeHJwMy5iY3YuY2gwggIiMA0GCSqGSIb3DQEBAQUA
A4ICDwAwggIKAoICAQDTGsUr3VRN7W1/fnd/5xnWjair+daUJtN6PxWEOzz0A8No
UMZ6WqsPkfj3DD2Hdv4cALZ4b1LcvD5wuAUDeJTF7MmaSYNFY4AP37bCqPH3YTqZ
vdUAJidemqHKpBDt5zAhNCnU9bXbBSUb62CRYEt23f4MI8D5zcp6nX33ZAWVUsYp
/VE35XVe0uSuX2kjzZYhbHZRlScyxeo667z09jZQ3nI7aMBMcr8KmL6N+dbwXLXC
df1fGv6rYiiIZwgCIdhMgYPeecvWE/dIsUzRZZ9zN5yU7rJF8u7PKfyU3LV6UN/7
kJebxRsrAnWph6HiwUqsFqnwV3evlbjrSyVWOXz/KEmekdxUXG0sjan/huZiyi5c
iTzSM1Sf3/ikKJRhs9QmMaIEbkOUJ0M0UAabmjWSzMJAfs0kXJFgFWXdo93WLZhK
056Z5CuvpeYpRIPWclTmHgdQ4hsQNklJqs6nq7SkwnOOSRInXVSfKSbsuM15X7Pd
DdNmS/QTsebBSroCNQTOz9XKsy5Gf4TYlcQdovKzn5wACvSZD38dMU2MH11i9U9I
MbxrFr9ATlwHYtwgmsShsqzAC4yQZ+kqwkxO3NiaQwumEYwFoCqIcqz37y/znlgP
HiBmfuBeL57C5eappgfjsCHCqk8KERqMxzsOcvtu+SnNWuDG+60WVbY5SxOBnwID
AQABo4ICGTCCAhUwgbIGCCsGAQUFBwEBBIGlMIGiMEwGCCsGAQUFBzAChkBodHRw
Oi8vYWlhLnN3aXNzc2lnbi5jaC9haXItMGYyYmY5YTUtZGQzNy00OGM5LWE4NWIt
MTJhY2RjYjhiZTQ1MFIGCCsGAQUFBzABhkZodHRwOi8vb2NzcC5zd2lzc3NpZ24u
Y2gvc2lnbi9vY3MtYWFjY2NlZDUtNjZlOC00MDY5LTliMWItZmQyOWFiNzNlZmVj
MG8GA1UdIARoMGYwCAYGZ4EMAQICMAgGBgQAj3oBBzBQBghghXQBWQIBAjBEMEIG
CCsGAQUFBwIBFjZodHRwczovL3JlcG9zaXRvcnkuc3dpc3NzaWduLmNvbS9Td2lz
c1NpZ25fQ1BTX1RMUy5wZGYwUQYDVR0fBEowSDBGoESgQoZAaHR0cDovL2NybC5z
d2lzc3NpZ24uY2gvY2RwLTk2YjYyZjVhLTZiNzMtNGRhNC04N2Y3LWNlNDAwMmMx
Y2QzNDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQD
AgWgMBYGA1UdEQQPMA2CC3hycDMuYmN2LmNoMB0GA1UdDgQWBBRbC9EfDIjg6EBg
3pMwBUCynUT3tjAfBgNVHSMEGDAWgBR8bwpvEw/ZjCRvJjTzXGtDbbcjtjATBgor
BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAgEArup8GjrliVRswvvc
GtcQArwRLAXcSKrhGEXMJ4IKsYc/SSXx8aLCQLmu6yVk3wB4+XfcKtoY4jNQylnP
rgzrJvd5uoSe3YZBU7e37RfOPt324dJcXYLM0SnmzlJy1EbykZYIoAqBhm2uePH3
bvIVX03TKUlBn/4/crf4QfCwz51sYg7b+8lRcM1IfyYgHEd5zb29s8+/3mGUPM1U
pwLUu0ha91C1Wbq199CzmpvObIblo7wKPYgATiqbsXJs61/YR4cSCEBe8NTf2Zif
+kkzcNwyuHDKk/tWkXe4WtKO/1p0Rn5p1aQXri+P8qCQCiST6C2seYOkeWiWXOm7
2dILgyaamPhXW6MbZqiPRZMTOlQeX7R1iwenR1S8SprDNmEsa7Dp2b0jarfh5/Db
Ulq9lNxTTd8aK9nLj7pYJv2E+Ny/htT7cG3p2Cz9XvQ86p9SFGpJopyl/WIJaXlY
wFOr0dq5Doj4fnLUUrhgUttus8jOkVk7a2+FMjkAIGRcGWPMZNDspymkTlWfs/DQ
k/502b7GbxaBFpd9s7IOA77s+W53EVR068PCU3CJP9NdJVycoQ9GIejJzUlc4DlW
xKUVuWR4GUY9yml4bqk1lq22Kd40IjRNIuTPdA/61USoxXs1Y5RYKvyFcz61WzSN
CX/aktZEL00Oyu+hFWl2mmfIAvY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 122350097906839737441745749708838808860896838534
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-20 05:36:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-20 05:36:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'VD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lausanne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Banque Cantonale Vaudoise'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xrp3.bcv.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 861231511203636884690855003812647760229692169785875777630761634279263995781199050361501996287107194617479508560833579634360776617063025436111104611962310899021957723269240414883571676463044801723018761798640413061803867240777157268697731971273865821965865738488582299655445390209927750728628780323836983554204117028853055303439416847389666006050394805695129596247397125921641257865198405107888009742018694260789199774718403941820251279484292482801581987609478324736120601729124933206010172537315068121538167109124455717299791262982588428670297470539674963363867707241378747171995251154123085245751801684239422618696475879298413665247610074962260703745379103899785520779422953750871395384099067796435567884372841523547608408905510924523992171618055840108532937099541994594974811505602512509391948817761809296651380333299497655429902560227078798870683834149633712076786643433730800473017509461001204824113882986130989987726552364802968473108612079241307245780638424646626740878112498514887009697080320982845262628531802748886238042731231106571215841828708554573369375993464428839608755852820755205831906259723673540245521361161257106326316284920400679364638727696988066108747576498059809722224183131122423187442761615752172770010825119
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xrp3.bcv.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b0bd11f0c88e0e84060de93300540b29d44f7b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00aeea7c1a3ae589546cc2fbdc1ad71002bc112c05dc48aae11845cc27820ab1873f4925f1f1a2c240b9aeeb2564df0078f977dc2ada18e23350ca59cfae0ceb26f779ba849edd864153b7b7ed17ce3eddf6e1d25c5d82ccd129e6ce5272d446f2919608a00a81866dae78f1f76ef2155f4dd32949419ffe3f72b7f841f0b0cf9d6c620edbfbc95170cd487f26201c4779cdbdbdb3cfbfde61943ccd54a702d4bb485af750b559bab5f7d0b39a9bce6c86e5a3bc0a3d88004e2a9bb1726ceb5fd847871208405ef0d4dfd9989ffa493370dc32b870ca93fb569177b85ad28eff5a74467e69d5a417ae2f8ff2a0900a2493e82dac7983a47968965ce9bbd9d20b83269a98f8575ba31b66a88f4593133a541e5fb4758b07a74754bc4a9ac336612c6bb0e9d9bd236ab7e1e7f0db525abd94dc534ddf1a2bd9cb8fba5826fd84f8dcbf86d4fb706de9d82cfd5ef43cea9f52146a49a29ca5fd6209697958c053abd1dab90e88f87e72d452b86052db6eb3c8ce91593b6b6f8532390020645c1963cc64d0eca729a44e559fb3f0d093fe74d9bec66f168116977db3b20e03beecf96e77115474ebc3c25370893fd35d255c9ca10f4621e8c9cd495ce03956c4a515b9647819463dca69786ea93596adb629de3422344d22e4cf740ffad544a8c57b356394582afc85733eb55b348d097fda92d6442f4d0ecaefa11569769a67c802f6