rpcon1-cc2e3261.scdemo.ch

- Swisscom (Schweiz) AG -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 45:b1:d1:3e:05:49:f4:54:7c:47:07:c9:cd:82:d4:c1:06:a5:cc:64 was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Swisscom (Schweiz) AG

Organization: Swisscom (Schweiz) AG
State / Province: BE
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 45:b1:d1:3e:05:49:f4:54:7c:47:07:c9:cd:82:d4:c1:06:a5:cc:64
Serial Number (int): 397885822659281467709041204543939668791318137956
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: f0:6c:90:50:ef:8b:14:2c:ca:24:72:4f:10:72:05:72:ee:9b:9b:6a
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): 57:c0:6f:39:9e:5d:f4:be:48:19:97:bd:ed:23:79:4f:fb:52:7b:5f
Fingerprint (sha256): fb:d2:6a:77:3f:9e:b1:db:53:d5:57:4a:58:52:91:ed:e9:cd:78:27:28:5b:85:f1:b9:66:05:0d:5c:8c:a6:1c

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate rpcon1-cc2e3261.scdemo.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rpcon1-cc2e3261.scdemo.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rpcon1-cc2e3261.scdemo.ch

Other certificates including the domain name scdemo.ch

(limited to 100 certificates)
rpcon1-36af53fc.scdemo.ch
rpcon1-84811399.scdemo.ch
rpcon1-4312103a.scdemo.ch
rpcon1-bc811bb5.scdemo.ch
rpcon1-a4a13ad0.scdemo.ch
rpcon1-3ffebb0e.scdemo.ch
rpcon1-0769efc5.scdemo.ch
rpcon1-16016b52.scdemo.ch
rpcon1-8dd997d1.scdemo.ch
rpcon1-348ed950.scdemo.ch
osballure5.scdemo.ch
rpcon1-5df24b88.scdemo.ch
rpcon1-57d6e8a6.scdemo.ch
rpcon1-e0ebddb3.scdemo.ch
rpcon1-cbc34369.scdemo.ch
rpcon1-e57d6b06.scdemo.ch
multi-domain-test3.pre.scdemo.ch
rpcon1-57155bd6.scdemo.ch
rpcon1-5681ac08.scdemo.ch
rpcon1-632088f7.scdemo.ch
rpcon1-443711df.scdemo.ch
rpcon1-0b012653.scdemo.ch
rpcon1-846755d0.scdemo.ch
rpcon1-0e22c92b.scdemo.ch
rpcon1-e859b947.scdemo.ch
rpcon1-4cc52bf1.scdemo.ch
rpcon1-b46472b2.scdemo.ch
rpcon1-d598abd5.scdemo.ch
rpcon1-d301a838.scdemo.ch
rpcon1-b44488b3.scdemo.ch
rpcon1-c259abb8.scdemo.ch
rpcon1-cadf82c4.scdemo.ch
mstunnel.scdemo.ch
rpcon1-cfbfb5d8.scdemo.ch
rpcon1-e31eaeed.scdemo.ch
rpcon1-2bfc0ec5.scdemo.ch
rpcon1-1f0e08b2.scdemo.ch
rpcon1-3c85dc73.scdemo.ch
rpcon1-3678e44f.scdemo.ch
rpcon1-3b9ca0ae.scdemo.ch
rpcon1-0b09b67c.scdemo.ch
rpcon1-495b405b.scdemo.ch
rpcon1-b0adb689.scdemo.ch
rpcon1-0c38886a.scdemo.ch
rpcon1-724bfb2d.scdemo.ch
rpcon1-89f30bee.scdemo.ch
rpcon1-1260c5be.scdemo.ch
rpcon1-1b42718d.scdemo.ch
rpcon1-a877a97b.scdemo.ch
rpcon1-ab510632.scdemo.ch
rpcon1-78708c89.scdemo.ch
rpcon1-a618b744.scdemo.ch
rpcon1-73049f7b.scdemo.ch
rpcon1-411b7569.scdemo.ch
rpcon1-b1ce55e6.scdemo.ch
rpcon1-c44203f0.scdemo.ch
demorptaarogi3.scdemo.ch
rpcon1-ab07434f.scdemo.ch
rpcon1-deced996.scdemo.ch
rpcon1-e57d6b06.scdemo.ch
rpcon1-07270737.scdemo.ch
wirkshop.scdemo.ch
rpcon1-c7e24c2d.scdemo.ch
rpcon1-a61dff60.scdemo.ch
rpcon1-2b2d3878.scdemo.ch
rpcon1-5401497c.scdemo.ch
rpcon1-210f79d7.scdemo.ch
rpcon1-e5aa0f07.scdemo.ch
rpcon1-e17683da.scdemo.ch
rpcon1-8995d448.scdemo.ch
rpcon1-20ad482c.scdemo.ch
rpcon1-389022b5.scdemo.ch
rpcon1-f1ca450a.scdemo.ch
rpcon1-89f30bee.scdemo.ch
rpcon1-9b6a3e10.scdemo.ch
rpcon1-ec07d92f.scdemo.ch
rpcon1-8848ad58.scdemo.ch
rpcon1-3af12958.scdemo.ch
rpcon1-88a56b11.scdemo.ch
rpcon1-1fe34f0a.scdemo.ch
rpcon1-f3237e72.scdemo.ch
rpcon1-9029d29a.scdemo.ch
rpcon1-0769efc5.scdemo.ch
rpcon1-49768824.scdemo.ch
rpcon1-8590ddd5.scdemo.ch
rpcon1-32058b95.scdemo.ch
rpcon1-222c624f.scdemo.ch
rpcon1-4991f0d1.scdemo.ch
rpcon1-5a573283.scdemo.ch
rpcon1-af4051c9.scdemo.ch
rctestwed.scdemo.ch
cadcrobottest99.scdemo.ch
cadcrobottest99.scdemo.ch
rpcon1-9d45654a.scdemo.ch
rpcon1-4ea84f0e.scdemo.ch
rpcon1-1e67b715.scdemo.ch
rpcon1-57155bd6.scdemo.ch
profile.pre.scdemo.ch
rpcon1-af86dd8b.scdemo.ch
osballurefp7.scdemo.ch

Certificate

The complete raw certificate details for rpcon1-cc2e3261.scdemo.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJ0TCCB7mgAwIBAgIURbHRPgVJ9FR8RwfJzYLUwQalzGQwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgT1YgSUNBIDIwMjIgLSAxMB4XDTI0MDYxMjAw
NDEwMFoXDTI1MDYxMjAwNDEwMFowbTELMAkGA1UEBhMCQ0gxCzAJBgNVBAgMAkJF
MQ0wCwYDVQQHDARCZXJuMR4wHAYDVQQKDBVTd2lzc2NvbSAoU2Nod2VpeikgQUcx
IjAgBgNVBAMTGXJwY29uMS1jYzJlMzI2MS5zY2RlbW8uY2gwggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQCpn4RHrRt+opGr2wCIX6bP4RzM9WNSGJVSpQGW
5fOswGASH4m/4geONCrGIjf1AJa20fn7sqkAkgY3DvVWQfrqnKs958qloigFZ+uj
n9kYvN67Mf0erxtAcB6z4/rPbNJxLKvXpDBC4NIxqPkrVDHrwj6SUA4E6vYgZlC/
utm9Qr8B2WNqXwH9SfGdD4NLmcsnyRfRKquqxvsZmn6Zzj2o9WgT0HE/kgj596X4
DKKd5Lq0fV3vv+2zLikUvu+ybtLS/LVQJjY6Ci0F+Qbh9RUKfpFKX2RaOMzwHJZW
0WXLeyhEZX5DD+HKYGNAZwMqf4nH/XVd06IsHE5xtK1j+6MLppESRlK7WTHc+HGk
x118ppfOXyoTNKP8ug4FQdWOnWX6rrnYqk0jMu/AdfSAgNK1OGA9tt7gH8/c4RoN
1kRlBJDuzGbPffjY1hPexqI5y5F+Yq2/WWjDokch7FEaEi+5Vxq02Zq2T6yJSSex
uiLTWEfX7J+NFwBs+wVuI3BKrlxeJjrx3HYAEQW78z5bHPHHrR8NDbN0159kAKr7
h+Q3OlOP7nrfB9Ht+2iZiRnm41HYuCPse1XqgKvn+7SKSli29xXWbDsiLwYYceWc
wpgy9OIwvEE7UeE2lEVIJKIp2UyGCUSBtrVxK2NU3338DUGKDQ1iNiDLYD9iWm7C
Pri13wIDAQABo4IEhDCCBIAwgbIGCCsGAQUFBwEBBIGlMIGiMEwGCCsGAQUFBzAC
hkBodHRwOi8vYWlhLnN3aXNzc2lnbi5jaC9haXItMGYyYmY5YTUtZGQzNy00OGM5
LWE4NWItMTJhY2RjYjhiZTQ1MFIGCCsGAQUFBzABhkZodHRwOi8vb2NzcC5zd2lz
c3NpZ24uY2gvc2lnbi9vY3MtYWFjY2NlZDUtNjZlOC00MDY5LTliMWItZmQyOWFi
NzNlZmVjMG8GA1UdIARoMGYwCAYGZ4EMAQICMAgGBgQAj3oBBzBQBghghXQBWQIB
AjBEMEIGCCsGAQUFBwIBFjZodHRwczovL3JlcG9zaXRvcnkuc3dpc3NzaWduLmNv
bS9Td2lzc1NpZ25fQ1BTX1RMUy5wZGYwUQYDVR0fBEowSDBGoESgQoZAaHR0cDov
L2NybC5zd2lzc3NpZ24uY2gvY2RwLTk2YjYyZjVhLTZiNzMtNGRhNC04N2Y3LWNl
NDAwMmMxY2QzNDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0P
AQH/BAQDAgWgMCQGA1UdEQQdMBuCGXJwY29uMS1jYzJlMzI2MS5zY2RlbW8uY2gw
HQYDVR0OBBYEFPBskFDvixQsyiRyTxByBXLum5tqMB8GA1UdIwQYMBaAFHxvCm8T
D9mMJG8mNPNca0NttyO2MIICbgYKKwYBBAHWeQIEAgSCAl4EggJaAlgAdgAo4oE4
/YMhRemp1qp1N22Dd6iFErPAf3JBSCHcvemMZgAAAZAJ5Br0AAAEAwBHMEUCIQCk
r08nBL1faXSZ8obwbtxp6Vo7Oz8tE/InBSF5+/403QIgLIqDSXMq5DRvoYHb77vS
JwRLOMELAKDNFXMg2Uqth+wAdgDgkrP8DB3I52g2H95huZZNClJ4GYpy1nLEsE2l
bW9UBAAAAZAJ5BdHAAAEAwBHMEUCIA87CwiuZyqObcUlTz9UOf4Tg3ZFF4jPKm7z
BUzUdY+oAiEAxxVDoDNT5hQNey0gqFl4m615b262JgPauRhO5wDrKYUAdQDPEVbu
1S58r/OHW9lpLpvpGnFnSrAX7KwB0lt3zsw7CAAAAZAJ5BZpAAAEAwBGMEQCIGu2
ClX9lWSwiMh51yk1zyy9V9JkwqavjtnDpKzPURhSAiAk3uSTtFl3rVwcKUp6fyz/
+t7BhOP057i3Hb2THPGHTQB2AMz7D2qFcQll/pWbU87psnwi6YVcDZeNtql+VMD+
TA2wAAABkAnkFmgAAAQDAEcwRQIgUnDWvkAITkkKunFo/WSf7OPuAib6al2TPT9I
vsIrj5YCIQClBOegykh4DTGMoy2JmfZQw+bMCosLEvbyDV+l9EzH8QB3AE51oydc
mhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABkAnkFmoAAAQDAEgwRgIhAKet
TdtIiKr9lZGpqJ45NaYuzVD5BpkyxUTmAb2of+YJAiEA+3Aqtu59bfTY1m9dGwvI
hkqU+ao8QRaOYAZwU4MUFPwwDQYJKoZIhvcNAQELBQADggIBABjC3Aj9J3V9EIf1
xQXFJDE59FUqUaWLhIBPLqGsBTrF1N+A8p+BLflA3xuRQaAVhhUL/R4hImCHm6P8
WTEbUCBBUTqT8zp7Ao+RON0MWXCJvC//zTjHB4ek7om6lTO5oY4LfVnOfTthYQg8
RLYX+NfHEKg9p62PzwVoM+MN50A9s3ICDpxE7r6mM5vK4WUK8XeTyKoGwFdL/tDK
2cPvRmZ4+AxZpMU5nEDHnXVeiCIX2Pwgzd8ID9DNyGcFt1LoXIRZr2lcWDhhd4ni
lf/ZAwpDzGcbMQp72WvM09bK2Fnw7YdQKfzk8fikca0pKjHnxG93ZPvF4Wyc6jRf
4Ox8eDqHpYv6sK//rlCh/6It9pilX+HCRQu0SN/zTu/u+8hQWpiCLMiId1SQgOeJ
HXsJ9IBjLivSJ3K04GWouP18USpoLKLxGXixDTZYQ2n+odh/+6MlT3BvdaSqkA/G
yVoilbDN+qA7pvlkiw2T6esJC5k2R1hGEIrBXqWYA/lr6XUTj7ghmEC4UEsO5yrp
WZItabRlD1MWclFxAUjUhJD24EC/fBnfPKLelnd+CZx+p7Ers1Quovl/V863Y3fH
fPAEGneKpphs/3IxVA/gumO1cSwxw1/wy7EXfJGOop9YJOhsaQsqGAERegCY8rM6
MkyB7HWhYXUuOnLQr5DfOE8o0nQe
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397885822659281467709041204543939668791318137956
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-12 00:41:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-12 00:41:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Swisscom (Schweiz) AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rpcon1-cc2e3261.scdemo.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 692001923414002903734101806569058873298031718641858838679378434431379476722628897028675272171795371235987149428701191273440432170256563754408092044266925461028487844472147724287874540335903616998910885583116853284880813765827321472576304123936085274332353724357202540694383221651443216567684898150105316001551810779470933067683850031088151955842208679397920386305597411049413442860952444688380460773395140052447129372131466897852823188187832047771594218164105050820736142646561294494598255758933756405001743680912777555790349512932082859277851478024824752288217180763956319624976992808925844745821460809168281887911359061266341708977428811271081856878164968030984644884539989889387956672498712187399358689962663194276575930022554813901669020841763201486004588363880371642235200557840040749394679633875107326397188977327302202268862363410256625624031027021825845970009541331899331167518685306705914338954580021172390876861609161926183555038757663698478239294158708803650019676185289753255996461066176304679540814215884942606680314381164423471828499244780791453181370091959852684977418449491337472492684305715754564395399775095430575110132118263032530045373044135582379042116031338678903961212421470140878790793883020666467251431978463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpcon1-cc2e3261.scdemo.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f06c9050ef8b142cca24724f10720572ee9b9b6a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0018c2dc08fd27757d1087f5c505c5243139f4552a51a58b84804f2ea1ac053ac5d4df80f29f812df940df1b9141a01586150bfd1e212260879ba3fc59311b502041513a93f33a7b028f9138dd0c597089bc2fffcd38c70787a4ee89ba9533b9a18e0b7d59ce7d3b6161083c44b617f8d7c710a83da7ad8fcf056833e30de7403db372020e9c44eebea6339bcae1650af17793c8aa06c0574bfed0cad9c3ef466678f80c59a4c5399c40c79d755e882217d8fc20cddf080fd0cdc86705b752e85c8459af695c5838617789e295ffd9030a43cc671b310a7bd96bccd3d6cad859f0ed875029fce4f1f8a471ad292a31e7c46f7764fbc5e16c9cea345fe0ec7c783a87a58bfab0afffae50a1ffa22df698a55fe1c2450bb448dff34eefeefbc8505a98822cc88877549080e7891d7b09f480632e2bd22772b4e065a8b8fd7c512a682ca2f11978b10d36584369fea1d87ffba3254f706f75a4aa900fc6c95a2295b0cdfaa03ba6f9648b0d93e9eb090b9936475846108ac15ea59803f96be975138fb8219840b8504b0ee72ae959922d69b4650f53167251710148d48490f6e040bf7c19df3ca2de96777e099c7ea7b12bb3542ea2f97f57ceb76377c77cf0041a778aa6986cff7231540fe0ba63b5712c31c35ff0cbb1177c918ea29f5824e86c690b2a1801117a0098f2b33a324c81ec75a161752e3a72d0af90df384f28d2741e