kaba.ebs.swiss
Issued by SwissSign RSA TLS DV ICA 2022 - 1
About this certificate
This digital certificate with serial number 04:81:06:b7:b8:28:3a:7f:94:9e:84:94:cf:a9:73:55:65:82:98:c7 was issued on by SwissSign AG.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=kaba.ebs.swiss
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate will expire on
Certificate Details
Serial Number (hex): 04:81:06:b7:b8:28:3a:7f:94:9e:84:94:cf:a9:73:55:65:82:98:c7Serial Number (int): 25713344404081375161904359367726579621940074695
Serial Number lenght: 155 bits, 20 octets
SubjectKeyId: 57:82:ec:1c:fd:8b:91:50:b2:af:8b:42:9c:e7:06:76:87:83:80:c6
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de
Fingerprint (sha1): b6:94:5b:39:cb:a0:ac:b5:f9:db:83:55:46:f0:f7:e9:c8:d7:09:dd
Fingerprint (sha256): fb:d3:0c:81:15:b0:3a:1d:be:4e:56:6d:5b:af:ca:47:75:13:ea:41:c4:5b:8f:75:4f:b7:2e:88:14:74:43:30
Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167
Revocation information
OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efecCRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba
Check the revocation status for certificate kaba.ebs.swiss
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kaba.ebs.swiss
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kaba.ebs.swiss
www.kaba.ebs.swiss
www.kaba.ebs.swiss
Other certificates including the domain name ebs.swiss
(limited to 100 certificates)
connector.ebs.swiss
stecker.ebs.swiss
sso.ebs.swiss
hybridex.ebs.swiss
testsalary.ebs.swiss
www.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
*.ebs.swiss
sso.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
www.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
ebs.swiss
abacus.ebs.swiss
geoportal.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
elektroform.ebs.swiss
geoportal.ebs.swiss
geoportal.ebs.swiss
kabaapp.ebs.swiss
sftp.ebs.swiss
salary.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
hybridex.ebs.swiss
mdm.ebs.swiss
www.ebs.swiss
abacustest.ebs.swiss
ebs.swiss
ebs.swiss
lora.ebs.swiss
asset.ebs.swiss
connector.ebs.swiss
qmtest.ebs.swiss
ebs.swiss
testsalary.ebs.swiss
testsalary.ebs.swiss
kaba.ebs.swiss
www.ebs.swiss
salary.ebs.swiss
connector.ebs.swiss
www.ebs.swiss
*.ebs.swiss
lora.ebs.swiss
qmtest.ebs.swiss
geoportal.ebs.swiss
lora.ebs.swiss
www.ebs.swiss
my.ebs.swiss
stecker.ebs.swiss
asset.ebs.swiss
lora.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
salary.ebs.swiss
*.ebs.swiss
ebs.swiss
ebs.swiss
my.ebs.swiss
abacustest.ebs.swiss
www.ebs.swiss
asset.ebs.swiss
infoscreen.ebs.swiss
infoscreen.ebs.swiss
salary.ebs.swiss
ebs.swiss
sftp.ebs.swiss
sftp.ebs.swiss
energieportal.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
mydata.ebs.swiss
ebs.swiss
mdm.ebs.swiss
sftp.ebs.swiss
infoscreen.ebs.swiss
qm.ebs.swiss
geoportal.ebs.swiss
abacus.ebs.swiss
kabaapp.ebs.swiss
sftp.ebs.swiss
betrieb.ebs.swiss
betrieb.ebs.swiss
energieportal.ebs.swiss
ebs.swiss
infoscreen.ebs.swiss
testsalary.ebs.swiss
stecker.ebs.swiss
sso.ebs.swiss
hybridex.ebs.swiss
testsalary.ebs.swiss
www.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
*.ebs.swiss
sso.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
www.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
ebs.swiss
abacus.ebs.swiss
geoportal.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
elektroform.ebs.swiss
geoportal.ebs.swiss
geoportal.ebs.swiss
kabaapp.ebs.swiss
sftp.ebs.swiss
salary.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
hybridex.ebs.swiss
mdm.ebs.swiss
www.ebs.swiss
abacustest.ebs.swiss
ebs.swiss
ebs.swiss
lora.ebs.swiss
asset.ebs.swiss
connector.ebs.swiss
qmtest.ebs.swiss
ebs.swiss
testsalary.ebs.swiss
testsalary.ebs.swiss
kaba.ebs.swiss
www.ebs.swiss
salary.ebs.swiss
connector.ebs.swiss
www.ebs.swiss
*.ebs.swiss
lora.ebs.swiss
qmtest.ebs.swiss
geoportal.ebs.swiss
lora.ebs.swiss
www.ebs.swiss
my.ebs.swiss
stecker.ebs.swiss
asset.ebs.swiss
lora.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
salary.ebs.swiss
*.ebs.swiss
ebs.swiss
ebs.swiss
my.ebs.swiss
abacustest.ebs.swiss
www.ebs.swiss
asset.ebs.swiss
infoscreen.ebs.swiss
infoscreen.ebs.swiss
salary.ebs.swiss
ebs.swiss
sftp.ebs.swiss
sftp.ebs.swiss
energieportal.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
mydata.ebs.swiss
ebs.swiss
mdm.ebs.swiss
sftp.ebs.swiss
infoscreen.ebs.swiss
qm.ebs.swiss
geoportal.ebs.swiss
abacus.ebs.swiss
kabaapp.ebs.swiss
sftp.ebs.swiss
betrieb.ebs.swiss
betrieb.ebs.swiss
energieportal.ebs.swiss
ebs.swiss
infoscreen.ebs.swiss
testsalary.ebs.swiss
Certificate
The complete raw certificate details for kaba.ebs.swiss in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJiTCCB3GgAwIBAgIUBIEGt7goOn+UnoSUz6lzVWWCmMcwDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDQxNTEz MTcyNFoXDTI1MDQxNTEzMTcyNFowGTEXMBUGA1UEAxMOa2FiYS5lYnMuc3dpc3Mw ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDBiaOqdFpuZA/CHj1eymKR WClNAk/d9Ffz8KQYmiO91HeJHVXkq0rBnpoXxyL55xF5PesuSVnFxcGpJM+skuLl mMBVHZ36sskV3DBsARpt0XAIBMjjfV6jzt96iWUV3H6TWtsbSkJuvoVcBmEPdopZ REwxFKMWGkwhDFWVNQDfH119OJRI/Yjzvcgex2ME22hVqOMOfKW2aill/Jwhzj1M 8+/taHHeSlaJQq6VZCdprg8LdRwa0DhGuDI2bXa3CRJbGSdBzRCxjNiVjE+/mwhF 9H/BTeVuNjvrhkHHZ7U93OyORq7HF2gmzLgAe0rN/bbhGuYravKxuziLPkViCr2W XQXdtjUXu/jXWg67AzbUDZKD81tqgiiTuoLT4ggHRByC5f5LKPshql+lhECYKalq dvoR5YUHssSVGAQAgmZ70/RXe4XEVg93aVHpTbr/XD4ga6L9CvncDs7yHd3sWCmP X5XtcP19dOL1uP2dPikEP/KgBMDiLfaENRbsfcKy0/vFA61zkyHuNsCXRcU0UgMl L+wbRV3F8Lr42JDsaHqQDIsSR79vTFb6pRVR+gwi9ShTcemiWnB1rOrH0hFhBpR1 MhMLudmZuauezuyP0m8rBXgKf3WzoEKUQFYJinBr7Xm0bx3xC7MlgYcklVr1aoiV a1szvwb5LvXk++TeSDhf4wIDAQABo4IEkDCCBIwwgbIGCCsGAQUFBwEBBIGlMIGi MEwGCCsGAQUFBzAChkBodHRwOi8vYWlhLnN3aXNzc2lnbi5jaC9haXItMWI4NjMz ODUtZjRhOS00N2ZhLTg4YTUtMmE1YWJmZDRhMTY3MFIGCCsGAQUFBzABhkZodHRw Oi8vb2NzcC5zd2lzc3NpZ24uY2gvc2lnbi9vY3MtYWFjY2NlZDUtNjZlOC00MDY5 LTliMWItZmQyOWFiNzNlZmVjMG8GA1UdIARoMGYwCAYGZ4EMAQIBMAgGBgQAj3oB BjBQBghghXQBWQIBATBEMEIGCCsGAQUFBwIBFjZodHRwczovL3JlcG9zaXRvcnku c3dpc3NzaWduLmNvbS9Td2lzc1NpZ25fQ1BTX1RMUy5wZGYwUQYDVR0fBEowSDBG oESgQoZAaHR0cDovL2NybC5zd2lzc3NpZ24uY2gvY2RwLTY3OTcyM2IyLTg2NDEt NDY0Mi04NTAwLWY2ZDJmZjM3ZTZiYTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDgYDVR0PAQH/BAQDAgWgMC0GA1UdEQQmMCSCDmthYmEuZWJzLnN3aXNz ghJ3d3cua2FiYS5lYnMuc3dpc3MwHQYDVR0OBBYEFFeC7Bz9i5FQsq+LQpznBnaH g4DGMB8GA1UdIwQYMBaAFOu9f0mTjMnu7KK69xzSZ/CDsereMIICcQYKKwYBBAHW eQIEAgSCAmEEggJdAlsAdwBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPT DAAAAY7h5/eFAAAEAwBIMEYCIQCxpTao+L/abpICuaSAIQqNpGPAMQ4XOgFfRZMd HH+sgAIhAMPGpWAnF5DJQf0uiYYeoto4w3buObGg3bRiWbDbQFfEAHcAKOKBOP2D IUXpqdaqdTdtg3eohRKzwH9yQUgh3L3pjGYAAAGO4efCOAAABAMASDBGAiEAiwKl zpsy8FySRseOoCGvv2qKwd+iDnDJd0iXb6F8BGQCIQCbG6SKnMeBbUrDjTpvZ6LW ydnzix2e4MYutEVDg9YDDAB3AM8RVu7VLnyv84db2Wkum+kacWdKsBfsrAHSW3fO zDsIAAABjuHnvAcAAAQDAEgwRgIhANoqSh7ceePuKE5u4aBZ02T/YWkH+Bfe9I4S wwbOZvUjAiEApryr4O2y+CIHZm7WH8Yr1m2as9YUqqA6tGczBrCy1FUAdwDM+w9q hXEJZf6Vm1PO6bJ8IumFXA2XjbapflTA/kwNsAAAAY7h57w5AAAEAwBIMEYCIQCm JeHPoNwii8r//434W+Hjya/mq6IPbb1JXR8eDG7dyAIhAKKcUT+lYZflMHJQVIkG HG4Wrdi5U7xhaEE5vsBHsEQlAHUATnWjJ1yaEMM4W2zU3z9S6x3w4I4bjWnAsfpk sWKaOd8AAAGO4ee8NAAABAMARjBEAiAAz8LZoalhag2kKEv2V5sGHB6hFbiFAPSy p7Yl/mmWBwIgFaf6MRp9jPwYRxFeh2wWWnm0nirdOAHUu9on6XFgxcswDQYJKoZI hvcNAQELBQADggIBABWfbIFmH9csiu6W6bPV7cEh6B4TucUDIr4wkwdhK8HAj8qq tPem5Gz3P2IKS3Gt75/0ySoeu6TWHRVZy9SM37w+Xwe1Yqfd/8bxy9tcemmo0d9y thle/3hBVHb83Bb4WcBHlqXTyPxQ5gU6UhDVQIELAPzsJ4uh/sVkLsuuCd1fOEHE P28005Y6tidXZJyXngz2RipWHjeHqcmF6zlaRtvQlcfv34BvTaom0gtVTk0fteMe nTCrcJEZeYkQqvgxv4YrHMiWiiyQOabAKHqv3svackL98DUCtXvW2DUqXET2t1ou Gp9JzHL7MdIEgVXGPz7vaRJTFXXgJH7pkJK9AVUdjP1io+pSlN1HFwVYypNermf2 +Q2sxLCEVCZQmOGbftbptZEsPbnhDOj53j87lVAL2uHL9nitDZ/D0TXctuUxL7Qn VC8N0G5HrsBt0aeRKqhrx5mdHI8Lg36XBsC9dvxu5jEqoujXy20a2JVuVDvFitSk LSnzlwEKjwsxhxeviPd+8ZGWCHAEOPSysrxam4xv55KdREkBkohLqzBOVJMInvkG i+Ob9MsmLBdYDILz5zLbqcH+pttUBRcTU46+WUABF1F7S7mTZLs7W40Oa8omg447 PMxcCMVwfpSMgaZCTHlwCMxT8/8Pm9LYXwdghC/stUqmHyb+IkMEdzAW5S72 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwYmjqnRabmQPwh49Xspi kVgpTQJP3fRX8/CkGJojvdR3iR1V5KtKwZ6aF8ci+ecReT3rLklZxcXBqSTPrJLi 5ZjAVR2d+rLJFdwwbAEabdFwCATI431eo87feollFdx+k1rbG0pCbr6FXAZhD3aK WURMMRSjFhpMIQxVlTUA3x9dfTiUSP2I873IHsdjBNtoVajjDnyltmopZfycIc49 TPPv7Whx3kpWiUKulWQnaa4PC3UcGtA4RrgyNm12twkSWxknQc0QsYzYlYxPv5sI RfR/wU3lbjY764ZBx2e1PdzsjkauxxdoJsy4AHtKzf224RrmK2rysbs4iz5FYgq9 ll0F3bY1F7v411oOuwM21A2Sg/NbaoIok7qC0+IIB0QcguX+Syj7IapfpYRAmCmp anb6EeWFB7LElRgEAIJme9P0V3uFxFYPd2lR6U26/1w+IGui/Qr53A7O8h3d7Fgp j1+V7XD9fXTi9bj9nT4pBD/yoATA4i32hDUW7H3CstP7xQOtc5Mh7jbAl0XFNFID JS/sG0VdxfC6+NiQ7Gh6kAyLEke/b0xW+qUVUfoMIvUoU3Hpolpwdazqx9IRYQaU dTITC7nZmbmrns7sj9JvKwV4Cn91s6BClEBWCYpwa+15tG8d8QuzJYGHJJVa9WqI lWtbM78G+S715Pvk3kg4X+MCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 25713344404081375161904359367726579621940074695 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 13:17:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-15 13:17:24 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kaba.ebs.swiss' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 789564740417166238373418147039606072682954705527284923499943224238214213126158783114951757775947384346105525792283120331796352965908747024373551575640399502989142112743243741311529356575450120233387881603378256969171319287977229037171317233025078723661370438252804506596406226355802591664075931322557152718983427860820045962032299441374588287625701228266779631933283430991540303605981182323757269990150630222848892604827226066947398695686108830012093843519990639385939412837754515806723055247062451632914539237760634050203959831422052967137126513504093053536263617748125376181526152667739464282334232837002508245509301187788383943348459520145591690626938042248201969980395892142881302232097090086298738177353654059877672685379760282857105354186010054122084294222770904963695808255267953827199082474083925123912670627646573074019652797651158167909626610127088082274176704956189057001914003956667404380204259000360359994620558925249780521824256393166940218837436103544794239196252615258388725757601048331012996381730541233864402808260696848384941542221786168098978786473545384324297662713390036651910534551071151534280742873835688000474668871639693311479695165978531497256212828252864600598890724113682355025380921816636678952904581091 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaba.ebs.swiss' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaba.ebs.swiss' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5782ec1cfd8b9150b2af8b429ce70676878380c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (609 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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