mydata.ebs.swiss

Issued by SwissSign RSA TLS DV ICA 2021 - 1

About this certificate

This digital certificate with serial number 4b:d3:a2:d7:52:9b:83:c4:93:36:7c:e2:be:7d:0b:e7:ac:1c:1f:a9 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mydata.ebs.swiss

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 4b:d3:a2:d7:52:9b:83:c4:93:36:7c:e2:be:7d:0b:e7:ac:1c:1f:a9
Serial Number (int): 432893950509511933199450324306938556513857052585
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 30:47:d4:c4:10:00:b9:2d:8d:ff:27:7b:59:e5:0d:80:81:13:b9:b1
AuthorityKeyId: 3c:9e:52:79:03:63:6f:4f:9c:81:1b:d3:28:70:0c:24:5a:ea:a5:87

Fingerprint (sha1): ee:e0:5f:df:cb:9f:3e:35:7c:90:b4:71:07:b5:ba:72:b6:d7:3a:0f
Fingerprint (sha256): f6:22:3b:cc:1e:da:1f:33:10:bd:82:61:23:e6:73:53:31:60:e5:e2:84:71:53:bc:1f:70:c9:ba:1a:61:1b:68

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587

Revocation information

OCSP Server: http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate mydata.ebs.swiss

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mydata.ebs.swiss

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mydata.ebs.swiss
www.mydata.ebs.swiss

Other certificates including the domain name ebs.swiss

(limited to 100 certificates)
connector.ebs.swiss
stecker.ebs.swiss
sso.ebs.swiss
hybridex.ebs.swiss
testsalary.ebs.swiss
www.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
*.ebs.swiss
sso.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
www.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
ebs.swiss
geoportal.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
geoportal.ebs.swiss
geoportal.ebs.swiss
sftp.ebs.swiss
salary.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
hybridex.ebs.swiss
mdm.ebs.swiss
www.ebs.swiss
ebs.swiss
ebs.swiss
lora.ebs.swiss
asset.ebs.swiss
connector.ebs.swiss
ebs.swiss
testsalary.ebs.swiss
www.ebs.swiss
salary.ebs.swiss
connector.ebs.swiss
www.ebs.swiss
*.ebs.swiss
lora.ebs.swiss
geoportal.ebs.swiss
lora.ebs.swiss
www.ebs.swiss
my.ebs.swiss
stecker.ebs.swiss
asset.ebs.swiss
lora.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
*.ebs.swiss
ebs.swiss
ebs.swiss
my.ebs.swiss
www.ebs.swiss
infoscreen.ebs.swiss
ebs.swiss
sftp.ebs.swiss
energieportal.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
mydata.ebs.swiss
ebs.swiss
mdm.ebs.swiss
infoscreen.ebs.swiss
qm.ebs.swiss
geoportal.ebs.swiss
sftp.ebs.swiss
energieportal.ebs.swiss
ebs.swiss
connector.ebs.swiss
sftp.ebs.swiss
mydata.ebs.swiss
qm.ebs.swiss

Certificate

The complete raw certificate details for mydata.ebs.swiss in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH8jCCBdqgAwIBAgIUS9Oi11Kbg8STNnzivn0L56wcH6kwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjEgLSAxMB4XDTIyMTEyODA3
MjMyNFoXDTIzMTEyODA3MjMyNFowGzEZMBcGA1UEAxMQbXlkYXRhLmVicy5zd2lz
czCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANQoI8v1g7YySFMcBmw6
9h/Opibh9z8PUUrTGrJaHn1HuwmqvNsIanuJC3yGvUtr7WNRyZ4cAOmTZb32Te8g
wpV/3q6VeGPGCK93Q92WJhY8mn/nhucAlHGWOKTZV/gdY131vwHzroj+8ufpYpRk
aybR52Q9YNFO/E1mq7S0bIB312+JsagHmz8rLOHHa2mR7hlIcsgFrQrY2sSkK95H
IFv1MWtcDCs/jNzToHNJckl4879k0m41PwFAPDhR9NIwve479pSTcVWilrzYFGBG
5WiFQz20VVx89BUQdCSIxVpDKhEpAtk5tdNOhvnx0+VKBGNXsogt5eqP4gnvr6pQ
vgmehwBFUHtAaJrDnbivPuo2kj4BcRlCqm4iqsKGhDPD2U7X3ZGzSnTJUaAsc20g
2BL9zm9KgoYMNzBymwC6QeENBjj2RIJKH7SO+o5ynhyerQjZsYDxk04oHwOymoZr
+Xc9tnlUz4WgHgP5+314jAi/3zLgDQO2NrW5u9gsbtFyGL0z51+jt1iGr18fR01H
4wb2WdpgO7HOUrgz/oNc6LKbsvoWIbYiP20DotyrzFzxTCbqiOp+0z98PJq8Jpho
Ez5Qn8sZrdz6i3cOLS6gJTp6Hr+RE+8bP/IlDyGvTdD3SlVtZsFL0uHbWV3AVdeI
/oD41Itl4E98JFZzV5oNPXoZAgMBAAGjggL3MIIC8zAxBgNVHREEKjAoghBteWRh
dGEuZWJzLnN3aXNzghR3d3cubXlkYXRhLmVicy5zd2lzczAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBQwR9TE
EAC5LY3/J3tZ5Q2AgRO5sTAfBgNVHSMEGDAWgBQ8nlJ5A2NvT5yBG9MocAwkWuql
hzCB/wYDVR0fBIH3MIH0MEegRaBDhkFodHRwOi8vY3JsLnN3aXNzc2lnbi5uZXQv
M0M5RTUyNzkwMzYzNkY0RjlDODExQkQzMjg3MDBDMjQ1QUVBQTU4NzCBqKCBpaCB
ooaBn2xkYXA6Ly9kaXJlY3Rvcnkuc3dpc3NzaWduLm5ldC9DTj0zQzlFNTI3OTAz
NjM2RjRGOUM4MTFCRDMyODcwMEMyNDVBRUFBNTg3JTJDTz1Td2lzc1NpZ24lMkND
PUNIP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q/YmFzZT9vYmplY3RDbGFzcz1j
UkxEaXN0cmlidXRpb25Qb2ludDBvBgNVHSAEaDBmMFAGCGCFdAFZAgEBMEQwQgYI
KwYBBQUHAgEWNmh0dHBzOi8vcmVwb3NpdG9yeS5zd2lzc3NpZ24uY29tL1N3aXNz
U2lnbl9DUFNfVExTLnBkZjAIBgYEAI96AQYwCAYGZ4EMAQIBMIHGBggrBgEFBQcB
AQSBuTCBtjBkBggrBgEFBQcwAoZYaHR0cDovL3N3aXNzc2lnbi5uZXQvY2dpLWJp
bi9hdXRob3JpdHkvZG93bmxvYWQvM0M5RTUyNzkwMzYzNkY0RjlDODExQkQzMjg3
MDBDMjQ1QUVBQTU4NzBOBggrBgEFBQcwAYZCaHR0cDovL29jc3Auc3dpc3NzaWdu
Lm5ldC8zQzlFNTI3OTAzNjM2RjRGOUM4MTFCRDMyODcwMEMyNDVBRUFBNTg3MBMG
CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4ICAQCZ23nPbWC5NsZV
5WD32qdUD51ZW69/HvWf28TtAkytL+OarJLzPXr+MrK0viwL+zQ62PZvm7kj+wUk
t8Q2Q6CQ2XYWPjCF+4R80s9/rz6OtlWAICV9wgSLNo/5tDs++IORPwNXW9dSrE+w
PtmkJAxPl9C931dnifcYWzB5LBAqilFvK4paRYf9ntFCOlwsi0AlybbIjvZj/Px7
N7THr5h5W9PoNZqFgRSx7l+Xv3A2yDIk6Z04SnvIxquOzl+8QxrZb7uu8EfzyOg4
3yVrqsOteQ8AP1k3WWFnTFeuaeb5OQMb66z7XNhD9oVnbZV6XaliPmkGP4V5S+Z5
hS/3R57qSNA2PXA2dHh1ZKM62quskm7sdUTGP0cca63kGIsMxA/kiENFy6XdzN+X
N1UBVw42ScsOue0jvWrHxMXsUqr6gekaylCSFyj23GzFXHLzQtmQo1t7Zp5RKm4w
CDcCrYpoMav6YimVwlNdjY5m6Ilg4euN8vlX0vCiM/rBnIwJBn17rg3Y0T8MUaTN
xe+i9Irp0fRQlPmfApraNcmSym2YPxSMxcwpEQfsVb07LdyxqRJ/Jzc2hkIpCB2u
Jr1C5NSH31HhCS9MfPkgbzQqoUvrs4CBmwfOHuWHgdv54M8EhssDuKhxa/kEcM7o
+ReqKwTB19yb+Pt1Ev7dwlqJzIUXfw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432893950509511933199450324306938556513857052585
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-28 07:23:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 07:23:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mydata.ebs.swiss'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 865524215166735220548385107354498768837206261170196209173481199950344412371099747720975409134069862731475102247680078655636013098724476078181668863328460748587548519495122272860123367952251565857349486368103303720724368254983041266040686530620377146400083884345982503096481439743647101947300952813420922165683847751678643825737748644134481279654754645745200400688332752698408263288757180797327330601569143166142685567810315973603469149459385227273529179589777852655997701823050004621938168886034001873796344483272438048043640093902092519873817341409457179806811107225451418599028741941995829238427973542160444989857991823512277764314437273332092338660296866308065323933461800799376435131761142125644415917849701842086811553038651371400236760963473160715594437234356199150415466999636073793959374586672588109970668332936623996839753471878768482300958522096486623706504658430159155310568033550943694235077792115815090222638674874344993791903904953712831157449400142917325825762985650280346492159140648613700845597900064230854560854734474041473277641515502015560050834603934177574966754766768940252499598336929746673992392619959515885463478283232769377584300592448233070500937885001838029227859433185540144523884115140816473753615432217
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydata.ebs.swiss'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mydata.ebs.swiss'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3047d4c41000b92d8dff277b59e50d808113b9b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3c9e527903636f4f9c811bd328700c245aeaa587
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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