kabaapp.ebs.swiss

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 53:f0:fd:b4:f1:c5:87:40:24:79:2b:9d:1a:ad:5c:c5:8f:36:34:45 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kabaapp.ebs.swiss

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 53:f0:fd:b4:f1:c5:87:40:24:79:2b:9d:1a:ad:5c:c5:8f:36:34:45
Serial Number (int): 479220513806562383849127460135295988883374093381
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: ee:6b:71:a5:e5:df:a5:11:9e:84:93:9f:8b:ec:9e:86:11:96:0c:fc
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 6c:2d:42:de:85:9c:69:a0:73:11:4c:50:f5:3e:2e:c3:9b:d7:d5:56
Fingerprint (sha256): e3:dd:87:80:61:f3:8e:30:93:35:09:d2:d0:d2:74:ce:a7:19:b2:b2:0b:a3:fe:67:5b:40:70:b5:21:8c:f2:ec

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate kabaapp.ebs.swiss

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kabaapp.ebs.swiss

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kabaapp.ebs.swiss
www.kabaapp.ebs.swiss

Other certificates including the domain name ebs.swiss

(limited to 100 certificates)
connector.ebs.swiss
stecker.ebs.swiss
sso.ebs.swiss
hybridex.ebs.swiss
testsalary.ebs.swiss
www.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
*.ebs.swiss
sso.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
www.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
ebs.swiss
abacus.ebs.swiss
geoportal.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
elektroform.ebs.swiss
geoportal.ebs.swiss
geoportal.ebs.swiss
kabaapp.ebs.swiss
sftp.ebs.swiss
salary.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
hybridex.ebs.swiss
mdm.ebs.swiss
www.ebs.swiss
abacustest.ebs.swiss
ebs.swiss
ebs.swiss
lora.ebs.swiss
asset.ebs.swiss
connector.ebs.swiss
qmtest.ebs.swiss
ebs.swiss
testsalary.ebs.swiss
testsalary.ebs.swiss
kaba.ebs.swiss
www.ebs.swiss
salary.ebs.swiss
connector.ebs.swiss
www.ebs.swiss
*.ebs.swiss
lora.ebs.swiss
qmtest.ebs.swiss
geoportal.ebs.swiss
lora.ebs.swiss
www.ebs.swiss
my.ebs.swiss
stecker.ebs.swiss
asset.ebs.swiss
lora.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
salary.ebs.swiss
*.ebs.swiss
ebs.swiss
ebs.swiss
my.ebs.swiss
abacustest.ebs.swiss
www.ebs.swiss
asset.ebs.swiss
infoscreen.ebs.swiss
infoscreen.ebs.swiss
salary.ebs.swiss
ebs.swiss
sftp.ebs.swiss
sftp.ebs.swiss
energieportal.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
mydata.ebs.swiss
ebs.swiss
mdm.ebs.swiss
sftp.ebs.swiss
infoscreen.ebs.swiss
qm.ebs.swiss
geoportal.ebs.swiss
abacus.ebs.swiss
kabaapp.ebs.swiss
sftp.ebs.swiss
betrieb.ebs.swiss
betrieb.ebs.swiss
energieportal.ebs.swiss
ebs.swiss
infoscreen.ebs.swiss
testsalary.ebs.swiss

Certificate

The complete raw certificate details for kabaapp.ebs.swiss in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHMjCCBRqgAwIBAgIUU/D9tPHFh0AkeSudGq1cxY82NEUwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDQxNTEz
MjAyMloXDTI1MDQxNTEzMjAyMlowHDEaMBgGA1UEAxMRa2FiYWFwcC5lYnMuc3dp
c3MwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDU8zUwxXTjibV7bydK
PYlPb0nJIGN6lpvHEU3O+wv7TnR44Wywu+9M0W9UuEzRu5tMIuO5fHRcq7+gh3S+
Rq1u7CgwwCKCHdvjP8IkZ0cfL1kQSKIkNZFQfk5acpXSSz20fLAi1uiB3pOE7Xk9
+5cBEUK+XOA9Y2mdqnaQk39hPuRi7IK4dJ+8dOGKIMEj37Kev335Uur4LOsrMZLh
CHY/LelN2eIFXWN0u/Uts/EEFB2YXQtJ4rrBkzLn646Cwhqs2cccBj+5X4/2ZUGF
xvA1vjgezppzH4ntR2iABDk+ZXVLCKJ8xo+80SgOpVu4G5o1QS+60OjHea7udNas
i9TwUSTa3jdfd1AtsaxLOFJTvBUpFWRtfkIva0s0Di9xmd76AWzdR3y5hhRResUy
wH3DQICNuhlAmAKfeEqB0h2yW1ZAVUjmrzIIWtzoc7viLXI6Z25HZBECCihKRVR7
hxF1ibjpCcoKnQ4kYy3q4UvPhZ9IY298ZFXPaOJuwo7n4BOKr30WVHSNF45LhfGv
zIwrK2z/hrif6O2ehCoAR7XEharxPTtyALDMOeHJCvuS1rLtI1Xe1D8VPJ5MyELK
6n2GChpnASTmid4y3dV1r2BKwZpqcPo6NdaNJ3m7BDTCBhvyjFjsVSD+OA4ZSq35
OSqMU2wg/I9pOBNpnFDXfqcIhQIDAQABo4ICNjCCAjIwgbIGCCsGAQUFBwEBBIGl
MIGiMEwGCCsGAQUFBzAChkBodHRwOi8vYWlhLnN3aXNzc2lnbi5jaC9haXItMWI4
NjMzODUtZjRhOS00N2ZhLTg4YTUtMmE1YWJmZDRhMTY3MFIGCCsGAQUFBzABhkZo
dHRwOi8vb2NzcC5zd2lzc3NpZ24uY2gvc2lnbi9vY3MtYWFjY2NlZDUtNjZlOC00
MDY5LTliMWItZmQyOWFiNzNlZmVjMG8GA1UdIARoMGYwCAYGZ4EMAQIBMAgGBgQA
j3oBBjBQBghghXQBWQIBATBEMEIGCCsGAQUFBwIBFjZodHRwczovL3JlcG9zaXRv
cnkuc3dpc3NzaWduLmNvbS9Td2lzc1NpZ25fQ1BTX1RMUy5wZGYwUQYDVR0fBEow
SDBGoESgQoZAaHR0cDovL2NybC5zd2lzc3NpZ24uY2gvY2RwLTY3OTcyM2IyLTg2
NDEtNDY0Mi04NTAwLWY2ZDJmZjM3ZTZiYTAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDMGA1UdEQQsMCqCEWthYmFhcHAuZWJz
LnN3aXNzghV3d3cua2FiYWFwcC5lYnMuc3dpc3MwHQYDVR0OBBYEFO5rcaXl36UR
noSTn4vsnoYRlgz8MB8GA1UdIwQYMBaAFOu9f0mTjMnu7KK69xzSZ/CDsereMBMG
CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4ICAQA57kyGfyJ6etY5
HKTa5o2hokUZsjzxQGhN6z5SM1ekSsmu4r5kYEV14ncsU7iYHHzXRJhHoDHOF3Cs
RU4oDCZpdoiMDQlMcwu399zImb1C+lNubB6jLQtdLJ5V6VtVAYsEZsyhE9Bq9qhp
BwyhapCJTDTM5zfmHlr6P4AgPJQbwyTGzYSG7yMxQ8zVzYwsMofoSKwmwouJ48fw
V0Jm2PEYjtRZ2m6pBE4M+rE8ozIs2bioANbmzG7Xjdx9SC7cnXLsY/p35GWq/ys1
HPxwHPo74bZb42SjyuFAVl0hkHmz9y7phQ3Sy/gQZEnqS/P7eCjjO28HITAZ7Z0Y
13e2AzeSCZ7Elllw3VYT42K1N7VxiqKUlihfRlig19EIRpWqjKpdBkP7Gvb0ePFt
arRinTqN85tOj8oQLPqIBcqInImieFcrJ87pZSQqyGNJXRAGdGs58PSGxASEXWvV
DKy/Cingo8wrxURoneuM2w0Ii493oLGCAqAh+mKtFEsKN1E6vuNG5NKFbi82CwqH
Vt1k7sSsBsnwGwk+G2TE6+E9TXTNkKBnULrObLIzf0VX98Kz+W3o76hSrjk0dqDJ
HlGiBFneZ+Q/2rtBsZOzT1RRQNMNmiA7DenbvyrqLDykQ6vz3hCeK8QHVC5g4VcH
l5kpNjsOoU7gopZwqvXbUrbrDaW3bg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 479220513806562383849127460135295988883374093381
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 13:20:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-15 13:20:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kabaapp.ebs.swiss'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 868760328195169593057902404880485737069714231970026589372170928931632795836735646376364112728733500514279283661687517315213275249276671965509215365582058097405139762425991441972231846343022037473342992461677992271399339281889440968088123057670526209862034465412540724970194029742984302870756542421719600266129206593507441890348018996575535503608434097206794856480855656505539583852098763809441549295356531377428404144003220386792873104335351878104767494015342288790771857750683367138498807934289326009496584409098979507559541579979955931097007002066578913356456676159227391804796661801262280040476256869494934812447187680171908194460200306367392713208662222666045950662071700357834925070294521660786757703180664418977338556738812993334680854905280326373937225173938386456738003244858085202762184424748466140443994809723913444825230545243162357414201202952652292179694133201812243783948420365619112372635824832159722582140022861880084942489895465118852071192094747236223140495313990139288174086199017902635196710131919377157503987522104855628903679418845128601461594518367055263212110340681084835170980885822281250777612903122299263646808703307734740505240351203724128556694386034476715010979528727701420915812240665543398549625440389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kabaapp.ebs.swiss'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kabaapp.ebs.swiss'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ee6b71a5e5dfa5119e84939f8bec9e8611960cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0039ee4c867f227a7ad6391ca4dae68da1a24519b23cf140684deb3e523357a44ac9aee2be64604575e2772c53b8981c7cd7449847a031ce1770ac454e280c266976888c0d094c730bb7f7dcc899bd42fa536e6c1ea32d0b5d2c9e55e95b55018b0466cca113d06af6a869070ca16a90894c34cce737e61e5afa3f80203c941bc324c6cd8486ef233143ccd5cd8c2c3287e848ac26c28b89e3c7f0574266d8f1188ed459da6ea9044e0cfab13ca3322cd9b8a800d6e6cc6ed78ddc7d482edc9d72ec63fa77e465aaff2b351cfc701cfa3be1b65be364a3cae140565d219079b3f72ee9850dd2cbf8106449ea4bf3fb7828e33b6f07213019ed9d18d777b6033792099ec4965970dd5613e362b537b5718aa29496285f4658a0d7d1084695aa8caa5d0643fb1af6f478f16d6ab4629d3a8df39b4e8fca102cfa8805ca889c89a278572b27cee965242ac863495d1006746b39f0f486c404845d6bd50cacbf0a29e0a3cc2bc544689deb8cdb0d088b8f77a0b18202a021fa62ad144b0a37513abee346e4d2856e2f360b0a8756dd64eec4ac06c9f01b093e1b64c4ebe13d4d74cd90a06750bace6cb2337f4557f7c2b3f96de8efa852ae393476a0c91e51a20459de67e43fdabb41b193b34f545140d30d9a203b0de9dbbf2aea2c3ca443abf3de109e2bc407542e60e15707979929363b0ea14ee0a29670aaf5db52b6eb0da5b76e