ot.ukb.ch

- Urner Kantonalbank -

Issued by SwissSign RSA TLS EV ICA 2021 - 1

About this certificate

This digital certificate with serial number 10:35:95:bf:2d:eb:f5:40:48:83:46:2d:f8:0e:2f:dc:4c:4e:90:c0 was issued on by SwissSign AG.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Urner Kantonalbank

Company registration number: CHE-108.954.665
Organization: Urner Kantonalbank
Address: Bahnhofplatz 1
Postal code: 6460
State / Province: UR
Locality: Altdorf
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 10:35:95:bf:2d:eb:f5:40:48:83:46:2d:f8:0e:2f:dc:4c:4e:90:c0
Serial Number (int): 92538836614279893445702379327479328292524167360
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 0d:57:a5:6e:9f:26:12:9e:c0:a1:5d:5a:21:66:8e:88:7f:50:7c:b1
AuthorityKeyId: da:34:d4:8e:10:23:f4:6a:2d:6c:b4:1f:f3:28:11:de:5e:01:c4:de

Fingerprint (sha1): 4b:aa:2b:7c:b4:ad:3b:8e:b2:ce:10:b9:f9:a5:55:1a:27:58:04:89
Fingerprint (sha256): e7:84:25:87:d7:8c:18:4b:4f:dd:65:be:7a:2c:1f:50:3f:f7:9f:7e:19:e3:8a:0b:c7:df:39:3c:0f:ac:14:98

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE

Revocation information

OCSP Server: http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate ot.ukb.ch

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ot.ukb.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ot.ukb.ch
conf.ukb.ch
b2b.ukb.ch

Other certificates including the domain name ukb.ch

(limited to 100 certificates)
www.ukb.ch
fintest-wwwsec.ukb.ch
gast.ukb.ch
fintest-dev-wwwsec.ukb.ch
www.privasphere.com
twint-test.ukb.ch
www.ukb.ch
fintest-e-banking.ukb.ch
ukb00ncs104-e.ukb.ch
satellite-test.ukb.ch
gast.ukb.ch
twint-test.ukb.ch
fintest-e-banking.ukb.ch
dialog.sbb.ch
www.privasphere.com
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ot.ukb.ch
ssl.ukb.ch
ot.ukb.ch
ukb00ucc114.ukb.ch
securemail.ukb.ch
eroeffnung-test.ukb.ch
satellite.ukb.ch
www.privasphere.com
ukb00ncs106-e.ukb.ch
securemail.ukb.ch
www.privasphere.com
gast.ukb.ch
www.ukb.ch
autodiscover.ukb.ch
ot.ukb.ch
autodiscover.ukb.ch
eroeffnung-test.ukb.ch
dialog.sbb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-e-banking.ukb.ch
www.privasphere.com
www.ukb.ch
wwwsec.ukb.ch
www.ukb.ch
ssl.ukb.ch
ukb00ncs104-e.ukb.ch
gast.ukb.ch
wwwsec.ukb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
eroeffnung.ukb.ch
wwwsec.ukb.ch
wwwsec.urkb.ch
ukb00ucc114.ukb.ch
twint.ukb.ch
www.privasphere.com
www.ukb.ch
identifikation-test.ukb.ch
twint-test.ukb.ch
www.privasphere.com
dialog.sbb.ch
gast.ukb.ch
dialog.sbb.ch
ukbhb01mx01-e.urkb.ch
ukb00ucc114.ukb.ch
fintest-dev-wwwsec.ukb.ch
ssl.ukb.ch
satellite-test.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-wwwsec.ukb.ch
wwwsec.ukb.ch
www.privasphere.com
ssl.ukb.ch
autodiscover.ukb.ch
www.ukb.ch
gast.ukb.ch
ukbhb01mx01-e.urkb.ch
identifikation-test.ukb.ch
autodiscover.ukb.ch
fintest-e-banking.ukb.ch
twint.ukb.ch
wwwsec.ukb.ch
ukbhb01mx01-e.urkb.ch
zukunftsbild.ukb.ch
zukunftsbild.ukb.ch
eroeffnung.ukb.ch
www.ukb.ch
fintest-wwwsec.ukb.ch
ukb00ucc114.ukb.ch
ssl.ukb.ch
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ukb00ncs106-e.ukb.ch
ukb00ucc114.ukb.ch
ukb00ncs106-e.ukb.ch
www.privasphere.com
satellite.ukb.ch
ukb00ncs104-e.ukb.ch
ukbhb01mx01-e.urkb.ch
fintest-wwwsec.ukb.ch
www.ukb.ch

Certificate

The complete raw certificate details for ot.ukb.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzX5J+Dl2FFlGlUc1/fzV
A/KtmvQ32klwqwtYmGfY5h9VDHDt/G0c0GWux/lnVR/qPYCNMDLJgMwCX8gSoisU
3RGI8DTgTVho7HdSH+mie68ODC/z9j0cUcqFtaMCfiBdAhiRoAmZUy3y502EFbff
I85bKM1Qo8hZfIiEMr0R6gJSFruEt+H3l9ddlk362Kz46jjFo4tlksFYw5/O3o2P
wOokCrc3nA14SwCS8amcUoTJkxrIRLl3W/uamIK0Dypzv6sqDZ8MG165G2NS6maB
O35JozyKizvlwM6McvjmFr8TtwJxiygbuWb4j5EC72MqKhQhC84Jd1EJV1erMS4i
fLojO27fb4G36bVQUsXc/6XP9A9Han0k256HTgKQXMHGG1J8CWpbf2jTwGGBDxwB
80K84JnliB4RNijLbKLt1JRIC8NsmcEHlWfy34Vw7SR+dAAYLUFtBeZEiGi0jNUS
O2ez3SW9GkkF9LnMuzMYI+UxMKFIz9yGylGmZ3LSlWiUU1GLiq3E7ryWDGENoReQ
2NwfQwswhPdtwRpwUnVDyx9peH/DYx9b1Ga1kO3lRKAygoPQyggBLRvmJhWKpCe1
CUpaCyhaMsqW1vGq45BUSlEf+SPLI8uEYBvR98omrNjX7GymfLT691HUZu/pWwX9
1TF3obKj9PQwewFAjHXujaECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 92538836614279893445702379327479328292524167360
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-23 05:33:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-23 05:33:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHE-108.954.665'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Altdorf'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '6460'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bahnhofplatz 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Urner Kantonalbank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ot.ukb.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 838339588399802313664885250456588811357851338109590025563596173432670935017823280190721083881858198194634198098599102500574004551506303135377864084716363508754523553861066456575487060720316040724149518798785896549306501251800566119938407827610864883226611971803313643032649474787570307770444116655837480713408138193913789749726587994746649198507581865157067303207767902967940852682944027471975145441718404310575187352035695943001835826970189318814499713821283710712833952384268833014951446274528441553334661662093987541485112990854557063294253504263670588847259464323375652156005289164583922830498648463247456566649165828333160234732685770066493557272976793203120308044603628201676958633756708108583619095568885071314974953657855429719123728198858997651825713271154025609291277859307040342301228004419856551368417065546878605724648840647369659798519514797970269221533045627478503330903318176172091758088208836903316095022992147881348049493905435887524430755680987616901476564489828755952779617447254070239128160511921193304946896662823558519807847100388223813215936795439281737903926440181467805726557164327027780488447534112319403826241077906195202920831473576735718294311006290961654513227684179643352781323135129308167428769746337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ot.ukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conf.ukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.ukb.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d57a56e9f26129ec0a15d5a21668e887f507cb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da34d48e1023f46a2d6cb41ff32811de5e01c4de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (726 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (722 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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