miku.sbb.ch

Issued by Swisscom Smaragd CA 2

About this certificate


This digital certificate with serial number a5:4b:aa:9c:8d:e6:d7:f3:59:4e:77:63:bb:13:e8:7e was issued on by Swisscom .

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: Certificate contains a CRL with an non-preferred scheme ([ldap])

SBB/CFF/FFS

Organization: SBB/CFF/FFS
Organization unit: IT
State / Province: Bern
Locality: Bern
Country: CH

Swisscom

Organization: Swisscom
Organization unit: Digital Certificate Services
State / Province: Bern
Locality: Bern
Country: CH

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): a5:4b:aa:9c:8d:e6:d7:f3:59:4e:77:63:bb:13:e8:7e
Serial Number (int): 219715501982043663231585546269824903294
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 5b:45:cb:97:5a:19:b7:8f:e0:9f:7b:12:fa:77:59:99:88:e0:7c:6c
AuthorityKeyId: e0:08:04:70:4e:e3:eb:46:b6:75:82:6e:30:7a:94:80:d3:e3:ee:7d

Fingerprint (sha1): 1b:eb:b1:5f:80:c2:f6:22:b1:49:e5:c6:52:62:35:cb:6d:b0:ca:c5
Fingerprint (sha256): 54:87:d7:a2:9e:fc:f8:ae:dd:23:3a:7c:31:50:52:ff:8f:cd:66:a8:77:1a:4a:2c:1b:5a:ac:3a:d7:4d:33:b9

Issuing Certificate URL: http://aia.swissdigicert.ch/sdcs-smaragd2.crt

Revocation information

OCSP Server: http://ocsp.swissdigicert.ch/sdcs-smaragd2
CRL Distribution Point: http://crl.swissdigicert.ch/sdcs-smaragd2.crl
CRL Distribution Point: ldap://ldap.swissdigicert.ch/CN=Swisscom%20Smaragd%20CA%202,dc=smaragd2,dc=swissdigicert,dc=ch?certificateRevocationList?

Check the revocation status for the current certificate on miku.sbb.ch
6
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

miku.sbb.ch
mikuint.sbb.ch
mikuextint.sbb.ch
mikutest.sbb.ch
mikuexttest.sbb.ch
mikuext.sbb.ch

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGmzCCBYOgAwIBAgIRAKVLqpyN5tfzWU53Y7sT6H4wDQYJKoZIhvcNAQELBQAw ZzELMAkGA1UEBhMCY2gxETAPBgNVBAoTCFN3aXNzY29tMSUwIwYDVQQLExxEaWdp dGFsIENlcnRpZmljYXRlIFNlcnZpY2VzMR4wHAYDVQQDExVTd2lzc2NvbSBTbWFy YWdkIENBIDIwHhcNMTUwNzI3MDkxNTA2WhcNMTgwNzI2MDkxNTA2WjBkMRQwEgYD VQQDEwttaWt1LnNiYi5jaDELMAkGA1UEBhMCQ0gxDTALBgNVBAgTBEJlcm4xDTAL BgNVBAcTBEJlcm4xFDASBgNVBAoTC1NCQi9DRkYvRkZTMQswCQYDVQQLEwJJVDCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOyAlO1uLQL8auSPwMJRc3R4 V/iLg21Tsp77ImsWDxm1NDip8qi9Yp/XlcmiGHaKpdN1+cvOkod3dAMFW31CuE8A Pv1Y3sXVpCQByys7Hg8UiSCKtRcLZJyoXbdE6m39oIRWtbKRf+ua8r68OJGKydBq xkKW0mte9hJRNNBXsoS1u5C8Mpk6B/cyZYgORye1uK3w3diWT4QAjZ9DcBoiymQ5 FFGxA5NbOq6P41dcxUVN+CmCxGqDrSqa0uAhd/fRhtU3wZ1Hc7eoW0kuNvhtV4zL q07vE/MMVFcYMYpr/CENLmNIkfsjXNZdayD0EkyDBhkcWbp2JCkcKzJWoIk9EiUC AwEAAaOCA0MwggM/MB8GA1UdIwQYMBaAFOAIBHBO4+tGtnWCbjB6lIDT4+59MA4G A1UdDwEB/wQEAwIFoDCBgQYIKwYBBQUHAQEEdTBzMDYGCCsGAQUFBzABhipodHRw Oi8vb2NzcC5zd2lzc2RpZ2ljZXJ0LmNoL3NkY3Mtc21hcmFnZDIwOQYIKwYBBQUH MAKGLWh0dHA6Ly9haWEuc3dpc3NkaWdpY2VydC5jaC9zZGNzLXNtYXJhZ2QyLmNy dDCCARQGA1UdIASCAQswggEHMIIBAwYHYIV0AVMRADCB9zAsBggrBgEFBQcCARYg aHR0cDovL3d3dy5zd2lzc2RpZ2ljZXJ0LmNoL2Nwcy8wgcYGCCsGAQUFBwICMIG5 GoG2UmVsaWFuY2Ugb24gdGhlIFN3aXNzY29tIFJvb3QgQ2VydGlmaWNhdGUgYnkg YW55IHBhcnR5IGFzc3VtZXMgYWNjZXB0YW5jZSBvZiB0aGUgdGhlbiBhcHBsaWNh YmxlIHN0YW5kYXJkIHRlcm1zIGFuZCBjb25kaXRpb25zIG9mIHVzZSBhbmQgdGhl IFN3aXNzY29tIENlcnRpZmljYXRlIFByYWN0aWNlIFN0YXRlbWVudC4wgcEGA1Ud HwSBuTCBtjAzoDGgL4YtaHR0cDovL2NybC5zd2lzc2RpZ2ljZXJ0LmNoL3NkY3Mt c21hcmFnZDIuY3JsMH+gfaB7hnlsZGFwOi8vbGRhcC5zd2lzc2RpZ2ljZXJ0LmNo L0NOPVN3aXNzY29tJTIwU21hcmFnZCUyMENBJTIwMixkYz1zbWFyYWdkMixkYz1z d2lzc2RpZ2ljZXJ0LGRjPWNoP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q/MB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBuBgNVHREEZzBlggttaWt1LnNi Yi5jaIIObWlrdWludC5zYmIuY2iCEW1pa3VleHRpbnQuc2JiLmNogg9taWt1dGVz dC5zYmIuY2iCEm1pa3VleHR0ZXN0LnNiYi5jaIIObWlrdWV4dC5zYmIuY2gwHQYD VR0OBBYEFFtFy5daGbeP4J97Evp3WZmI4HxsMA0GCSqGSIb3DQEBCwUAA4IBAQAx /+eXjsXdZPq3ryJLyJFeUoUqKVUhGaT3EPXbhDdMPvZoLPdZPYkgfa/shSBiyqN4 54jGmuGpX3+KUYYnsBaHyRzrUKLBqMUwywteGAnOLv1UGk/RD3Rkmd1FSN7YIne9 Yaxw2H9AeTM7fV9ZHWl5HWzGeRyjBC4mp2L9EQ1nk/uxT7Ms58poyejq2t8onn8R iGpktBRm0u5GKF2opToixLgKYpX6H3ttAKu8JOF2dbImbg42flnBOW++nhkZCneb /C0MSEoAcLcNN9cXpHjKV0Jx4N5pReo++/9Ly1++QWWXcfQf9/gNk48XA41Hgbkc PGYoX0q73gMr3/32hq0u -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ICU7W4tAvxq5I/AwlFz dHhX+IuDbVOynvsiaxYPGbU0OKnyqL1in9eVyaIYdoql03X5y86Sh3d0AwVbfUK4 TwA+/VjexdWkJAHLKzseDxSJIIq1FwtknKhdt0Tqbf2ghFa1spF/65ryvrw4kYrJ 0GrGQpbSa172ElE00FeyhLW7kLwymToH9zJliA5HJ7W4rfDd2JZPhACNn0NwGiLK ZDkUUbEDk1s6ro/jV1zFRU34KYLEaoOtKprS4CF399GG1TfBnUdzt6hbSS42+G1X jMurTu8T8wxUVxgximv8IQ0uY0iR+yNc1l1rIPQSTIMGGRxZunYkKRwrMlagiT0S JQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 219715501982043663231585546269824903294 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ch' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swisscom' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digital Certificate Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swisscom Smaragd CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-27 09:15:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-26 09:15:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'miku.sbb.ch' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SBB/CFF/FFS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29855645995054166575829711664618466193204684084956910005907201876013261541989987103488561758310110363161398665453569165205483182510061301935380908364684096269348371608986163289086082715920713813433561956618195860869589243123148518755832661166575159685936297181797715776085048670377419567328900154220486807481367874249265459545166748712940195920043450105143880898809435795963275081663550308561175089849571743724136843316038613692612023907525804147270118186563676326450572942805653854620777849727381301185610922035875877861209076922795113488994227038307292497534452244423289685934215061566858024986904809318596858417701 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e00804704ee3eb46b675826e307a9480d3e3ee7d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swissdigicert.ch/sdcs-smaragd2' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swissdigicert.ch/sdcs-smaragd2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (267 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.83.17.0 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.swissdigicert.ch/cps/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [82 101 108 105 97 110 99 101 32 111 110 32 116 104 101 32 83 119 105 115 115 99 111 109 32 82 111 111 116 32 67 101 114 116 105 102 105 99 97 116 101 32 98 121 32 97 110 121 32 112 97 114 116 121 32 97 115 115 117 109 101 115 32 97 99 99 101 112 116 97 110 99 101 32 111 102 32 116 104 101 32 116 104 101 110 32 97 112 112 108 105 99 97 98 108 101 32 115 116 97 110 100 97 114 100 32 116 101 114 109 115 32 97 110 100 32 99 111 110 100 105 116 105 111 110 115 32 111 102 32 117 115 101 32 97 110 100 32 116 104 101 32 83 119 105 115 115 99 111 109 32 67 101 114 116 105 102 105 99 97 116 101 32 80 114 97 99 116 105 99 101 32 83 116 97 116 101 109 101 110 116 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swissdigicert.ch/sdcs-smaragd2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.swissdigicert.ch/CN=Swisscom%20Smaragd%20CA%202,dc=smaragd2,dc=swissdigicert,dc=ch?certificateRevocationList?' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miku.sbb.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikuint.sbb.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikuextint.sbb.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikutest.sbb.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikuexttest.sbb.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikuext.sbb.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5b45cb975a19b78fe09f7b12fa77599988e07c6c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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