kaba.ebs.swiss

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 04:81:06:b7:b8:28:3a:7f:94:9e:84:94:cf:a9:73:55:65:82:98:c7 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kaba.ebs.swiss

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 04:81:06:b7:b8:28:3a:7f:94:9e:84:94:cf:a9:73:55:65:82:98:c7
Serial Number (int): 25713344404081375161904359367726579621940074695
Serial Number lenght: 155 bits, 20 octets

SubjectKeyId: 57:82:ec:1c:fd:8b:91:50:b2:af:8b:42:9c:e7:06:76:87:83:80:c6
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): b6:94:5b:39:cb:a0:ac:b5:f9:db:83:55:46:f0:f7:e9:c8:d7:09:dd
Fingerprint (sha256): fb:d3:0c:81:15:b0:3a:1d:be:4e:56:6d:5b:af:ca:47:75:13:ea:41:c4:5b:8f:75:4f:b7:2e:88:14:74:43:30

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate kaba.ebs.swiss

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kaba.ebs.swiss

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kaba.ebs.swiss
www.kaba.ebs.swiss

Other certificates including the domain name ebs.swiss

(limited to 100 certificates)
connector.ebs.swiss
stecker.ebs.swiss
sso.ebs.swiss
hybridex.ebs.swiss
testsalary.ebs.swiss
www.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
*.ebs.swiss
sso.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
www.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
ebs.swiss
abacus.ebs.swiss
geoportal.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
elektroform.ebs.swiss
geoportal.ebs.swiss
geoportal.ebs.swiss
kabaapp.ebs.swiss
sftp.ebs.swiss
salary.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
hybridex.ebs.swiss
mdm.ebs.swiss
www.ebs.swiss
abacustest.ebs.swiss
ebs.swiss
ebs.swiss
lora.ebs.swiss
asset.ebs.swiss
connector.ebs.swiss
qmtest.ebs.swiss
ebs.swiss
testsalary.ebs.swiss
testsalary.ebs.swiss
kaba.ebs.swiss
www.ebs.swiss
salary.ebs.swiss
connector.ebs.swiss
www.ebs.swiss
*.ebs.swiss
lora.ebs.swiss
qmtest.ebs.swiss
geoportal.ebs.swiss
lora.ebs.swiss
www.ebs.swiss
my.ebs.swiss
stecker.ebs.swiss
asset.ebs.swiss
lora.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
salary.ebs.swiss
*.ebs.swiss
ebs.swiss
ebs.swiss
my.ebs.swiss
abacustest.ebs.swiss
www.ebs.swiss
asset.ebs.swiss
infoscreen.ebs.swiss
infoscreen.ebs.swiss
salary.ebs.swiss
ebs.swiss
sftp.ebs.swiss
sftp.ebs.swiss
energieportal.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
mydata.ebs.swiss
ebs.swiss
mdm.ebs.swiss
sftp.ebs.swiss
infoscreen.ebs.swiss
qm.ebs.swiss
geoportal.ebs.swiss
abacus.ebs.swiss
kabaapp.ebs.swiss
sftp.ebs.swiss
betrieb.ebs.swiss
betrieb.ebs.swiss
energieportal.ebs.swiss
ebs.swiss
infoscreen.ebs.swiss
testsalary.ebs.swiss

Certificate

The complete raw certificate details for kaba.ebs.swiss in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJiTCCB3GgAwIBAgIUBIEGt7goOn+UnoSUz6lzVWWCmMcwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDQxNTEz
MTcyNFoXDTI1MDQxNTEzMTcyNFowGTEXMBUGA1UEAxMOa2FiYS5lYnMuc3dpc3Mw
ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDBiaOqdFpuZA/CHj1eymKR
WClNAk/d9Ffz8KQYmiO91HeJHVXkq0rBnpoXxyL55xF5PesuSVnFxcGpJM+skuLl
mMBVHZ36sskV3DBsARpt0XAIBMjjfV6jzt96iWUV3H6TWtsbSkJuvoVcBmEPdopZ
REwxFKMWGkwhDFWVNQDfH119OJRI/Yjzvcgex2ME22hVqOMOfKW2aill/Jwhzj1M
8+/taHHeSlaJQq6VZCdprg8LdRwa0DhGuDI2bXa3CRJbGSdBzRCxjNiVjE+/mwhF
9H/BTeVuNjvrhkHHZ7U93OyORq7HF2gmzLgAe0rN/bbhGuYravKxuziLPkViCr2W
XQXdtjUXu/jXWg67AzbUDZKD81tqgiiTuoLT4ggHRByC5f5LKPshql+lhECYKalq
dvoR5YUHssSVGAQAgmZ70/RXe4XEVg93aVHpTbr/XD4ga6L9CvncDs7yHd3sWCmP
X5XtcP19dOL1uP2dPikEP/KgBMDiLfaENRbsfcKy0/vFA61zkyHuNsCXRcU0UgMl
L+wbRV3F8Lr42JDsaHqQDIsSR79vTFb6pRVR+gwi9ShTcemiWnB1rOrH0hFhBpR1
MhMLudmZuauezuyP0m8rBXgKf3WzoEKUQFYJinBr7Xm0bx3xC7MlgYcklVr1aoiV
a1szvwb5LvXk++TeSDhf4wIDAQABo4IEkDCCBIwwgbIGCCsGAQUFBwEBBIGlMIGi
MEwGCCsGAQUFBzAChkBodHRwOi8vYWlhLnN3aXNzc2lnbi5jaC9haXItMWI4NjMz
ODUtZjRhOS00N2ZhLTg4YTUtMmE1YWJmZDRhMTY3MFIGCCsGAQUFBzABhkZodHRw
Oi8vb2NzcC5zd2lzc3NpZ24uY2gvc2lnbi9vY3MtYWFjY2NlZDUtNjZlOC00MDY5
LTliMWItZmQyOWFiNzNlZmVjMG8GA1UdIARoMGYwCAYGZ4EMAQIBMAgGBgQAj3oB
BjBQBghghXQBWQIBATBEMEIGCCsGAQUFBwIBFjZodHRwczovL3JlcG9zaXRvcnku
c3dpc3NzaWduLmNvbS9Td2lzc1NpZ25fQ1BTX1RMUy5wZGYwUQYDVR0fBEowSDBG
oESgQoZAaHR0cDovL2NybC5zd2lzc3NpZ24uY2gvY2RwLTY3OTcyM2IyLTg2NDEt
NDY0Mi04NTAwLWY2ZDJmZjM3ZTZiYTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDgYDVR0PAQH/BAQDAgWgMC0GA1UdEQQmMCSCDmthYmEuZWJzLnN3aXNz
ghJ3d3cua2FiYS5lYnMuc3dpc3MwHQYDVR0OBBYEFFeC7Bz9i5FQsq+LQpznBnaH
g4DGMB8GA1UdIwQYMBaAFOu9f0mTjMnu7KK69xzSZ/CDsereMIICcQYKKwYBBAHW
eQIEAgSCAmEEggJdAlsAdwBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPT
DAAAAY7h5/eFAAAEAwBIMEYCIQCxpTao+L/abpICuaSAIQqNpGPAMQ4XOgFfRZMd
HH+sgAIhAMPGpWAnF5DJQf0uiYYeoto4w3buObGg3bRiWbDbQFfEAHcAKOKBOP2D
IUXpqdaqdTdtg3eohRKzwH9yQUgh3L3pjGYAAAGO4efCOAAABAMASDBGAiEAiwKl
zpsy8FySRseOoCGvv2qKwd+iDnDJd0iXb6F8BGQCIQCbG6SKnMeBbUrDjTpvZ6LW
ydnzix2e4MYutEVDg9YDDAB3AM8RVu7VLnyv84db2Wkum+kacWdKsBfsrAHSW3fO
zDsIAAABjuHnvAcAAAQDAEgwRgIhANoqSh7ceePuKE5u4aBZ02T/YWkH+Bfe9I4S
wwbOZvUjAiEApryr4O2y+CIHZm7WH8Yr1m2as9YUqqA6tGczBrCy1FUAdwDM+w9q
hXEJZf6Vm1PO6bJ8IumFXA2XjbapflTA/kwNsAAAAY7h57w5AAAEAwBIMEYCIQCm
JeHPoNwii8r//434W+Hjya/mq6IPbb1JXR8eDG7dyAIhAKKcUT+lYZflMHJQVIkG
HG4Wrdi5U7xhaEE5vsBHsEQlAHUATnWjJ1yaEMM4W2zU3z9S6x3w4I4bjWnAsfpk
sWKaOd8AAAGO4ee8NAAABAMARjBEAiAAz8LZoalhag2kKEv2V5sGHB6hFbiFAPSy
p7Yl/mmWBwIgFaf6MRp9jPwYRxFeh2wWWnm0nirdOAHUu9on6XFgxcswDQYJKoZI
hvcNAQELBQADggIBABWfbIFmH9csiu6W6bPV7cEh6B4TucUDIr4wkwdhK8HAj8qq
tPem5Gz3P2IKS3Gt75/0ySoeu6TWHRVZy9SM37w+Xwe1Yqfd/8bxy9tcemmo0d9y
thle/3hBVHb83Bb4WcBHlqXTyPxQ5gU6UhDVQIELAPzsJ4uh/sVkLsuuCd1fOEHE
P28005Y6tidXZJyXngz2RipWHjeHqcmF6zlaRtvQlcfv34BvTaom0gtVTk0fteMe
nTCrcJEZeYkQqvgxv4YrHMiWiiyQOabAKHqv3svackL98DUCtXvW2DUqXET2t1ou
Gp9JzHL7MdIEgVXGPz7vaRJTFXXgJH7pkJK9AVUdjP1io+pSlN1HFwVYypNermf2
+Q2sxLCEVCZQmOGbftbptZEsPbnhDOj53j87lVAL2uHL9nitDZ/D0TXctuUxL7Qn
VC8N0G5HrsBt0aeRKqhrx5mdHI8Lg36XBsC9dvxu5jEqoujXy20a2JVuVDvFitSk
LSnzlwEKjwsxhxeviPd+8ZGWCHAEOPSysrxam4xv55KdREkBkohLqzBOVJMInvkG
i+Ob9MsmLBdYDILz5zLbqcH+pttUBRcTU46+WUABF1F7S7mTZLs7W40Oa8omg447
PMxcCMVwfpSMgaZCTHlwCMxT8/8Pm9LYXwdghC/stUqmHyb+IkMEdzAW5S72
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25713344404081375161904359367726579621940074695
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 13:17:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-15 13:17:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kaba.ebs.swiss'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 789564740417166238373418147039606072682954705527284923499943224238214213126158783114951757775947384346105525792283120331796352965908747024373551575640399502989142112743243741311529356575450120233387881603378256969171319287977229037171317233025078723661370438252804506596406226355802591664075931322557152718983427860820045962032299441374588287625701228266779631933283430991540303605981182323757269990150630222848892604827226066947398695686108830012093843519990639385939412837754515806723055247062451632914539237760634050203959831422052967137126513504093053536263617748125376181526152667739464282334232837002508245509301187788383943348459520145591690626938042248201969980395892142881302232097090086298738177353654059877672685379760282857105354186010054122084294222770904963695808255267953827199082474083925123912670627646573074019652797651158167909626610127088082274176704956189057001914003956667404380204259000360359994620558925249780521824256393166940218837436103544794239196252615258388725757601048331012996381730541233864402808260696848384941542221786168098978786473545384324297662713390036651910534551071151534280742873835688000474668871639693311479695165978531497256212828252864600598890724113682355025380921816636678952904581091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaba.ebs.swiss'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaba.ebs.swiss'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5782ec1cfd8b9150b2af8b429ce70676878380c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (609 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00159f6c81661fd72c8aee96e9b3d5edc121e81e13b9c50322be309307612bc1c08fcaaab4f7a6e46cf73f620a4b71adef9ff4c92a1ebba4d61d1559cbd48cdfbc3e5f07b562a7ddffc6f1cbdb5c7a69a8d1df72b6195eff78415476fcdc16f859c04796a5d3c8fc50e6053a5210d540810b00fcec278ba1fec5642ecbae09dd5f3841c43f6f34d3963ab62757649c979e0cf6462a561e3787a9c985eb395a46dbd095c7efdf806f4daa26d20b554e4d1fb5e31e9d30ab709119798910aaf831bf862b1cc8968a2c9039a6c0287aafdecbda7242fdf03502b57bd6d8352a5c44f6b75a2e1a9f49cc72fb31d2048155c63f3eef6912531575e0247ee99092bd01551d8cfd62a3ea5294dd47170558ca935eae67f6f90dacc4b08454265098e19b7ed6e9b5912c3db9e10ce8f9de3f3b95500bdae1cbf678ad0d9fc3d135dcb6e5312fb427542f0dd06e47aec06dd1a7912aa86bc7999d1c8f0b837e9706c0bd76fc6ee6312aa2e8d7cb6d1ad8956e543bc58ad4a42d29f397010a8f0b318717af88f77ef1919608700438f4b2b2bc5a9b8c6fe7929d44490192884bab304e5493089ef9068be39bf4cb262c17580c82f3e732dba9c1fea6db54051713538ebe59400117517b4bb99364bb3b5b8d0e6bca26838e3b3ccc5c08c5707e948c81a6424c797008cc53f3ff0f9bd2d85f0760842fecb54aa61f26fe224304773016e52ef6