kabaapp.ebs.swiss
Issued by SwissSign RSA TLS DV ICA 2022 - 1
About this certificate
This digital certificate with serial number 53:f0:fd:b4:f1:c5:87:40:24:79:2b:9d:1a:ad:5c:c5:8f:36:34:45 was issued on by SwissSign AG.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=kabaapp.ebs.swiss
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate will expire on
Certificate Details
Serial Number (hex): 53:f0:fd:b4:f1:c5:87:40:24:79:2b:9d:1a:ad:5c:c5:8f:36:34:45Serial Number (int): 479220513806562383849127460135295988883374093381
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: ee:6b:71:a5:e5:df:a5:11:9e:84:93:9f:8b:ec:9e:86:11:96:0c:fc
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de
Fingerprint (sha1): 6c:2d:42:de:85:9c:69:a0:73:11:4c:50:f5:3e:2e:c3:9b:d7:d5:56
Fingerprint (sha256): e3:dd:87:80:61:f3:8e:30:93:35:09:d2:d0:d2:74:ce:a7:19:b2:b2:0b:a3:fe:67:5b:40:70:b5:21:8c:f2:ec
Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167
Revocation information
OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efecCRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba
Check the revocation status for certificate kabaapp.ebs.swiss
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kabaapp.ebs.swiss
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kabaapp.ebs.swiss
www.kabaapp.ebs.swiss
www.kabaapp.ebs.swiss
Other certificates including the domain name ebs.swiss
(limited to 100 certificates)
connector.ebs.swiss
stecker.ebs.swiss
sso.ebs.swiss
hybridex.ebs.swiss
testsalary.ebs.swiss
www.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
*.ebs.swiss
sso.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
www.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
ebs.swiss
abacus.ebs.swiss
geoportal.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
elektroform.ebs.swiss
geoportal.ebs.swiss
geoportal.ebs.swiss
kabaapp.ebs.swiss
sftp.ebs.swiss
salary.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
hybridex.ebs.swiss
mdm.ebs.swiss
www.ebs.swiss
abacustest.ebs.swiss
ebs.swiss
ebs.swiss
lora.ebs.swiss
asset.ebs.swiss
connector.ebs.swiss
qmtest.ebs.swiss
ebs.swiss
testsalary.ebs.swiss
testsalary.ebs.swiss
kaba.ebs.swiss
www.ebs.swiss
salary.ebs.swiss
connector.ebs.swiss
www.ebs.swiss
*.ebs.swiss
lora.ebs.swiss
qmtest.ebs.swiss
geoportal.ebs.swiss
lora.ebs.swiss
www.ebs.swiss
my.ebs.swiss
stecker.ebs.swiss
asset.ebs.swiss
lora.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
salary.ebs.swiss
*.ebs.swiss
ebs.swiss
ebs.swiss
my.ebs.swiss
abacustest.ebs.swiss
www.ebs.swiss
asset.ebs.swiss
infoscreen.ebs.swiss
infoscreen.ebs.swiss
salary.ebs.swiss
ebs.swiss
sftp.ebs.swiss
sftp.ebs.swiss
energieportal.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
mydata.ebs.swiss
ebs.swiss
mdm.ebs.swiss
sftp.ebs.swiss
infoscreen.ebs.swiss
qm.ebs.swiss
geoportal.ebs.swiss
abacus.ebs.swiss
kabaapp.ebs.swiss
sftp.ebs.swiss
betrieb.ebs.swiss
betrieb.ebs.swiss
energieportal.ebs.swiss
ebs.swiss
infoscreen.ebs.swiss
testsalary.ebs.swiss
stecker.ebs.swiss
sso.ebs.swiss
hybridex.ebs.swiss
testsalary.ebs.swiss
www.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
*.ebs.swiss
sso.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
www.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
ebs.swiss
abacus.ebs.swiss
geoportal.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
elektroform.ebs.swiss
geoportal.ebs.swiss
geoportal.ebs.swiss
kabaapp.ebs.swiss
sftp.ebs.swiss
salary.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
hybridex.ebs.swiss
mdm.ebs.swiss
www.ebs.swiss
abacustest.ebs.swiss
ebs.swiss
ebs.swiss
lora.ebs.swiss
asset.ebs.swiss
connector.ebs.swiss
qmtest.ebs.swiss
ebs.swiss
testsalary.ebs.swiss
testsalary.ebs.swiss
kaba.ebs.swiss
www.ebs.swiss
salary.ebs.swiss
connector.ebs.swiss
www.ebs.swiss
*.ebs.swiss
lora.ebs.swiss
qmtest.ebs.swiss
geoportal.ebs.swiss
lora.ebs.swiss
www.ebs.swiss
my.ebs.swiss
stecker.ebs.swiss
asset.ebs.swiss
lora.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
salary.ebs.swiss
*.ebs.swiss
ebs.swiss
ebs.swiss
my.ebs.swiss
abacustest.ebs.swiss
www.ebs.swiss
asset.ebs.swiss
infoscreen.ebs.swiss
infoscreen.ebs.swiss
salary.ebs.swiss
ebs.swiss
sftp.ebs.swiss
sftp.ebs.swiss
energieportal.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
mydata.ebs.swiss
ebs.swiss
mdm.ebs.swiss
sftp.ebs.swiss
infoscreen.ebs.swiss
qm.ebs.swiss
geoportal.ebs.swiss
abacus.ebs.swiss
kabaapp.ebs.swiss
sftp.ebs.swiss
betrieb.ebs.swiss
betrieb.ebs.swiss
energieportal.ebs.swiss
ebs.swiss
infoscreen.ebs.swiss
testsalary.ebs.swiss
Certificate
The complete raw certificate details for kabaapp.ebs.swiss in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHMjCCBRqgAwIBAgIUU/D9tPHFh0AkeSudGq1cxY82NEUwDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDQxNTEz MjAyMloXDTI1MDQxNTEzMjAyMlowHDEaMBgGA1UEAxMRa2FiYWFwcC5lYnMuc3dp c3MwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDU8zUwxXTjibV7bydK PYlPb0nJIGN6lpvHEU3O+wv7TnR44Wywu+9M0W9UuEzRu5tMIuO5fHRcq7+gh3S+ Rq1u7CgwwCKCHdvjP8IkZ0cfL1kQSKIkNZFQfk5acpXSSz20fLAi1uiB3pOE7Xk9 +5cBEUK+XOA9Y2mdqnaQk39hPuRi7IK4dJ+8dOGKIMEj37Kev335Uur4LOsrMZLh CHY/LelN2eIFXWN0u/Uts/EEFB2YXQtJ4rrBkzLn646Cwhqs2cccBj+5X4/2ZUGF xvA1vjgezppzH4ntR2iABDk+ZXVLCKJ8xo+80SgOpVu4G5o1QS+60OjHea7udNas i9TwUSTa3jdfd1AtsaxLOFJTvBUpFWRtfkIva0s0Di9xmd76AWzdR3y5hhRResUy wH3DQICNuhlAmAKfeEqB0h2yW1ZAVUjmrzIIWtzoc7viLXI6Z25HZBECCihKRVR7 hxF1ibjpCcoKnQ4kYy3q4UvPhZ9IY298ZFXPaOJuwo7n4BOKr30WVHSNF45LhfGv zIwrK2z/hrif6O2ehCoAR7XEharxPTtyALDMOeHJCvuS1rLtI1Xe1D8VPJ5MyELK 6n2GChpnASTmid4y3dV1r2BKwZpqcPo6NdaNJ3m7BDTCBhvyjFjsVSD+OA4ZSq35 OSqMU2wg/I9pOBNpnFDXfqcIhQIDAQABo4ICNjCCAjIwgbIGCCsGAQUFBwEBBIGl MIGiMEwGCCsGAQUFBzAChkBodHRwOi8vYWlhLnN3aXNzc2lnbi5jaC9haXItMWI4 NjMzODUtZjRhOS00N2ZhLTg4YTUtMmE1YWJmZDRhMTY3MFIGCCsGAQUFBzABhkZo dHRwOi8vb2NzcC5zd2lzc3NpZ24uY2gvc2lnbi9vY3MtYWFjY2NlZDUtNjZlOC00 MDY5LTliMWItZmQyOWFiNzNlZmVjMG8GA1UdIARoMGYwCAYGZ4EMAQIBMAgGBgQA j3oBBjBQBghghXQBWQIBATBEMEIGCCsGAQUFBwIBFjZodHRwczovL3JlcG9zaXRv cnkuc3dpc3NzaWduLmNvbS9Td2lzc1NpZ25fQ1BTX1RMUy5wZGYwUQYDVR0fBEow SDBGoESgQoZAaHR0cDovL2NybC5zd2lzc3NpZ24uY2gvY2RwLTY3OTcyM2IyLTg2 NDEtNDY0Mi04NTAwLWY2ZDJmZjM3ZTZiYTAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDMGA1UdEQQsMCqCEWthYmFhcHAuZWJz LnN3aXNzghV3d3cua2FiYWFwcC5lYnMuc3dpc3MwHQYDVR0OBBYEFO5rcaXl36UR noSTn4vsnoYRlgz8MB8GA1UdIwQYMBaAFOu9f0mTjMnu7KK69xzSZ/CDsereMBMG CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4ICAQA57kyGfyJ6etY5 HKTa5o2hokUZsjzxQGhN6z5SM1ekSsmu4r5kYEV14ncsU7iYHHzXRJhHoDHOF3Cs RU4oDCZpdoiMDQlMcwu399zImb1C+lNubB6jLQtdLJ5V6VtVAYsEZsyhE9Bq9qhp BwyhapCJTDTM5zfmHlr6P4AgPJQbwyTGzYSG7yMxQ8zVzYwsMofoSKwmwouJ48fw V0Jm2PEYjtRZ2m6pBE4M+rE8ozIs2bioANbmzG7Xjdx9SC7cnXLsY/p35GWq/ys1 HPxwHPo74bZb42SjyuFAVl0hkHmz9y7phQ3Sy/gQZEnqS/P7eCjjO28HITAZ7Z0Y 13e2AzeSCZ7Elllw3VYT42K1N7VxiqKUlihfRlig19EIRpWqjKpdBkP7Gvb0ePFt arRinTqN85tOj8oQLPqIBcqInImieFcrJ87pZSQqyGNJXRAGdGs58PSGxASEXWvV DKy/Cingo8wrxURoneuM2w0Ii493oLGCAqAh+mKtFEsKN1E6vuNG5NKFbi82CwqH Vt1k7sSsBsnwGwk+G2TE6+E9TXTNkKBnULrObLIzf0VX98Kz+W3o76hSrjk0dqDJ HlGiBFneZ+Q/2rtBsZOzT1RRQNMNmiA7DenbvyrqLDykQ6vz3hCeK8QHVC5g4VcH l5kpNjsOoU7gopZwqvXbUrbrDaW3bg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1PM1MMV044m1e28nSj2J T29JySBjepabxxFNzvsL+050eOFssLvvTNFvVLhM0bubTCLjuXx0XKu/oId0vkat buwoMMAigh3b4z/CJGdHHy9ZEEiiJDWRUH5OWnKV0ks9tHywItbogd6ThO15PfuX ARFCvlzgPWNpnap2kJN/YT7kYuyCuHSfvHThiiDBI9+ynr99+VLq+CzrKzGS4Qh2 Py3pTdniBV1jdLv1LbPxBBQdmF0LSeK6wZMy5+uOgsIarNnHHAY/uV+P9mVBhcbw Nb44Hs6acx+J7UdogAQ5PmV1SwiifMaPvNEoDqVbuBuaNUEvutDox3mu7nTWrIvU 8FEk2t43X3dQLbGsSzhSU7wVKRVkbX5CL2tLNA4vcZne+gFs3Ud8uYYUUXrFMsB9 w0CAjboZQJgCn3hKgdIdsltWQFVI5q8yCFrc6HO74i1yOmduR2QRAgooSkVUe4cR dYm46QnKCp0OJGMt6uFLz4WfSGNvfGRVz2jibsKO5+ATiq99FlR0jReOS4Xxr8yM Kyts/4a4n+jtnoQqAEe1xIWq8T07cgCwzDnhyQr7ktay7SNV3tQ/FTyeTMhCyup9 hgoaZwEk5oneMt3Vda9gSsGaanD6OjXWjSd5uwQ0wgYb8oxY7FUg/jgOGUqt+Tkq jFNsIPyPaTgTaZxQ136nCIUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 479220513806562383849127460135295988883374093381 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 13:20:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-15 13:20:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kabaapp.ebs.swiss' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 868760328195169593057902404880485737069714231970026589372170928931632795836735646376364112728733500514279283661687517315213275249276671965509215365582058097405139762425991441972231846343022037473342992461677992271399339281889440968088123057670526209862034465412540724970194029742984302870756542421719600266129206593507441890348018996575535503608434097206794856480855656505539583852098763809441549295356531377428404144003220386792873104335351878104767494015342288790771857750683367138498807934289326009496584409098979507559541579979955931097007002066578913356456676159227391804796661801262280040476256869494934812447187680171908194460200306367392713208662222666045950662071700357834925070294521660786757703180664418977338556738812993334680854905280326373937225173938386456738003244858085202762184424748466140443994809723913444825230545243162357414201202952652292179694133201812243783948420365619112372635824832159722582140022861880084942489895465118852071192094747236223140495313990139288174086199017902635196710131919377157503987522104855628903679418845128601461594518367055263212110340681084835170980885822281250777612903122299263646808703307734740505240351203724128556694386034476715010979528727701420915812240665543398549625440389 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kabaapp.ebs.swiss' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kabaapp.ebs.swiss' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ee6b71a5e5dfa5119e84939f8bec9e8611960cfc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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