fw.kellerfahnen.ch

Issued by SwissSign RSA TLS DV ICA 2021 - 1

About this certificate

This digital certificate with serial number 5a:65:b7:b1:b3:df:f7:a7:c4:f5:67:bc:80:36:d1:48:17:db:5d:e7 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fw.kellerfahnen.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:65:b7:b1:b3:df:f7:a7:c4:f5:67:bc:80:36:d1:48:17:db:5d:e7
Serial Number (int): 516077546656596323741706610025716710916419706343
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 12:9f:69:ea:2e:e4:ec:b2:20:96:e3:df:c7:8a:3d:29:83:bd:ee:f9
AuthorityKeyId: 3c:9e:52:79:03:63:6f:4f:9c:81:1b:d3:28:70:0c:24:5a:ea:a5:87

Fingerprint (sha1): ba:7e:0a:a4:6b:fb:6f:69:35:23:ad:bb:00:d8:93:3a:ab:a3:9a:e0
Fingerprint (sha256): f3:5f:10:ff:b9:f4:c4:52:0e:bf:b6:55:38:69:fe:33:4f:c8:1c:d7:56:0d:7e:b8:a3:5c:41:27:88:a6:68:64

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587

Revocation information

OCSP Server: http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate fw.kellerfahnen.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fw.kellerfahnen.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fw.kellerfahnen.ch
www.fw.kellerfahnen.ch

Other certificates including the domain name kellerfahnen.ch

(limited to 100 certificates)
kellerfahnen.ch
kellerfahnen.ch
fw.kellerfahnen.ch
test.kellerfahnen.ch
webmail.kellerfahnen.ch
test.kellerfahnen.ch
www.kellerfahnen.ch
kellerfahnen.ch
www.kellerfahnen.ch
kellerfahnen.ch
fw.kellerfahnen.ch
test.hach.ch
kellerfahnen.ch
fw.kellerfahnen.ch
test.kellerfahnen.ch
kellerfahnen.ch
kellerfahnen.ch
fw.kellerfahnen.ch
test.kellerfahnen.ch
www.kellerfahnen.ch
kellerfahnen.ch
kellerfahnen.ch
kellerfahnen.ch
test.kellerfahnen.ch
kellerfahnen.ch
kellerfahnen.ch
kellerfahnen.ch
www.kellerfahnen.ch
www.kellerfahnen.ch
fw.kellerfahnen.ch
test.kellerfahnen.ch
www.kellerfahnen.ch
www.kellerfahnen.ch
www.kellerfahnen.ch
kellerfahnen.ch
kellerfahnen.ch
kellerfahnen.ch
test.kellerfahnen.ch
kellerfahnen.ch
fw.kellerfahnen.ch
kellerfahnen.ch

Certificate

The complete raw certificate details for fw.kellerfahnen.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJVTCCBz2gAwIBAgIUWmW3sbPf96fE9We8gDbRSBfbXecwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjEgLSAxMB4XDTIyMDMxNDE1
NTQyMVoXDTIzMDMxNDE1NTQyMVowHTEbMBkGA1UEAxMSZncua2VsbGVyZmFobmVu
LmNoMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzASqqAHsLxz6wYfE
A7W4M7lAVeKmH2m7oGIjUrTzx8Y/zFsE0IwiuXGE2/347lwZBuGh/621jdiL2fQt
9eSKUwcfQcKuSHlHhX2RpOVyJTZ2eFFVv7RirC5GkMYcxcxprWD+wra/BLB2pBRl
6IOJVagkAzrWkjIzAtRiDqIJH5nHCAp1IHAoIn8Iia7I7uSgNxOjnwkktkT8kA78
ri3nCkrxvYjqq1vR4YRGMRkd64oR9xPun/FWYZGLvoyux+gi3Sql8KgzE1Aj7iDI
Ma1xFxVVfQ+wFU6y6hJUxbwvnD99GMYXaZkInn6IREvYw80Wkj0/GrN/hxlnqOMx
gIW0AQIDAQABo4IFWDCCBVQwNQYDVR0RBC4wLIISZncua2VsbGVyZmFobmVuLmNo
ghZ3d3cuZncua2VsbGVyZmFobmVuLmNoMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFBKfaeou5OyyIJbj38eK
PSmDve75MB8GA1UdIwQYMBaAFDyeUnkDY29PnIEb0yhwDCRa6qWHMIH/BgNVHR8E
gfcwgfQwR6BFoEOGQWh0dHA6Ly9jcmwuc3dpc3NzaWduLm5ldC8zQzlFNTI3OTAz
NjM2RjRGOUM4MTFCRDMyODcwMEMyNDVBRUFBNTg3MIGooIGloIGihoGfbGRhcDov
L2RpcmVjdG9yeS5zd2lzc3NpZ24ubmV0L0NOPTNDOUU1Mjc5MDM2MzZGNEY5Qzgx
MUJEMzI4NzAwQzI0NUFFQUE1ODclMkNPPVN3aXNzU2lnbiUyQ0M9Q0g/Y2VydGlm
aWNhdGVSZXZvY2F0aW9uTGlzdD9iYXNlP29iamVjdENsYXNzPWNSTERpc3RyaWJ1
dGlvblBvaW50MG8GA1UdIARoMGYwUAYIYIV0AVkCAQEwRDBCBggrBgEFBQcCARY2
aHR0cHM6Ly9yZXBvc2l0b3J5LnN3aXNzc2lnbi5jb20vU3dpc3NTaWduX0NQU19U
TFMucGRmMAgGBgQAj3oBBjAIBgZngQwBAgEwgcYGCCsGAQUFBwEBBIG5MIG2MGQG
CCsGAQUFBzAChlhodHRwOi8vc3dpc3NzaWduLm5ldC9jZ2ktYmluL2F1dGhvcml0
eS9kb3dubG9hZC8zQzlFNTI3OTAzNjM2RjRGOUM4MTFCRDMyODcwMEMyNDVBRUFB
NTg3ME4GCCsGAQUFBzABhkJodHRwOi8vb2NzcC5zd2lzc3NpZ24ubmV0LzNDOUU1
Mjc5MDM2MzZGNEY5QzgxMUJEMzI4NzAwQzI0NUFFQUE1ODcwggJuBgorBgEEAdZ5
AgQCBIICXgSCAloCWAB1AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MM
AAABf4kjPhIAAAQDAEYwRAIgZeqd0AcvlaS6N64rjVUG47VGE38MV/42Yxv8qdOT
w5cCIGOTYPuTDd/ncjUPH317ce3Zc2Cp6+iaF09FjitK2Iq1AHYAejKMVNi3LbYg
6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAF/iSM8ngAABAMARzBFAiAEjkRt9Nzk
TMC/EAfeZ/uqjNv2oGCdFvfpqT5Ob0XTRAIhAN3IWkuhvpQAfTKJVOpxODsA3ng+
a24ceAvy9nkwKHfFAHYArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooA
AAF/iSM8iQAABAMARzBFAiEAh4hM/Odz+T1eVCJeUuYJINCJQFLmbSjtCf/ikjsU
nUQCIG0VI9YQIswNdffgi+d5YNg7Zmhe/+lijfKkDjWSVvHFAHYAs3N3B+GEUPhj
htYFqdwRCUp5LbFnDAuH3PADDnk2pZoAAAF/iSM+mAAABAMARzBFAiEApCM1z/aA
BvfcIn2TIVLo2UH7p7sp5cBhc+DekKRkkYoCIHZl8xXVKJ2rFEDi5mJ5rOrWpwoz
cqApFUACRM5TqblEAHcA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4A
AAF/iSM8xQAABAMASDBGAiEA8U1tsPGAePgMM18n21mz9IsmnQsdcyKwvnW7NWFr
lJUCIQClRTYQvaDBK0tpGXOn/1eyfHOFtkXWUGxhqBENOMHiHTANBgkqhkiG9w0B
AQsFAAOCAgEAribTpsrocD3QwvjB6DkqDJZp0A/gYKNhCp4bbrgeyQtdI6JOCLtQ
FqkuOXZOAL2suUXk6AxedK32XToTYduXZcgexESoD9QGuJU9Na7aDi6RqXu78g7B
QC2w8IuuKtV2CzGzs86X2sKWP60KR+nocj+aZaVnt0c5kzIOk9XgOQFMPVW1m4e9
FoHhC6IwL0VuWuMfyj7zMcQsRb03kIF+/jIOcfhthWZBfwLhIpXltNdlLH6nAbWK
mlRZ/XneI8ZpMqb/kM95UGnQilx1GZoVoE4BAVfJ/i9EYTFoCPcoVN/1VvGk+vtY
m+Ft54+6xfTS/45rEr/AqOcsrhRrKk+62K3aCdtx+ejK/XWRfC/k0aJpbsSSxWpo
lUHZoAN0TexXT7S15VO2iFiv51pvtjLrEGANYXhC7uY0sRnK0ZxUwGS+ZNMJX17u
P/fNTLrPMaAzdswTJ7HjBnIgIAxir/g8go3hcSg7FcERySeT4NdjfFmcHkBmvjSB
IuqUy9qZzI+Gk1uGQtDGYJdhdl82rnfG6z3FdwoH09NAGBPzdfMDrTm+zP5Q7lfz
18VoAmU7CcgrGb/97sNuC56AxQeI7nOITQFqPYpmApvsADqVDPrnggibyPE41djC
5KFgOTkThVMbFJQdwkOsbU0JeRZVPGgru/sI7iIXeTsIiDwDxGAOuTo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzASqqAHsLxz6wYfEA7W4
M7lAVeKmH2m7oGIjUrTzx8Y/zFsE0IwiuXGE2/347lwZBuGh/621jdiL2fQt9eSK
UwcfQcKuSHlHhX2RpOVyJTZ2eFFVv7RirC5GkMYcxcxprWD+wra/BLB2pBRl6IOJ
VagkAzrWkjIzAtRiDqIJH5nHCAp1IHAoIn8Iia7I7uSgNxOjnwkktkT8kA78ri3n
CkrxvYjqq1vR4YRGMRkd64oR9xPun/FWYZGLvoyux+gi3Sql8KgzE1Aj7iDIMa1x
FxVVfQ+wFU6y6hJUxbwvnD99GMYXaZkInn6IREvYw80Wkj0/GrN/hxlnqOMxgIW0
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 516077546656596323741706610025716710916419706343
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-14 15:54:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-14 15:54:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fw.kellerfahnen.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25754915412168373680866257371356513503821123888151001258376782570333602974194318252215703883915581452813517834238788909943460990354235730923484709095342040009303364142994481721484138432887843349988217065641582396273283071094247122796021902077901891774230783215238573402846740741373167980379353107463755983369187315929153493939943737074124694520007732884937756336661106071144801582305433345251981273216110174424722244095054350708886792230475320948342699546365699847941305170748473311969560976068129117109801370929016690947977955080383655023855228667492537119485217760790727551823533821482578514660853980331040810841089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fw.kellerfahnen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fw.kellerfahnen.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							129f69ea2ee4ecb22096e3dfc78a3d2983bdeef9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3c9e527903636f4f9c811bd328700c245aeaa587
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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