www.passchange.eda.admin.ch

Issued by Swiss Government SSL CA 01

About this certificate


This digital certificate with serial number 4c:f1:e4:20:a1:96:d3:58:a7:dc:50:41:70:85:98:46 was issued on by Swiss Government PKI .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: Certificate contains a CRL with an non-preferred scheme ([ldap])
  • ERROR: localityName or stateOrProvinceName is required if organizationName is set
  • ERROR: stateOrProvinceName is required if organizationName is set

Swiss Government PKI

Organization: Swiss Government PKI
Organization unit: Servers
Organization unit: SSL
Country: CH

Swiss Government PKI

Organization: Swiss Government PKI
Organization unit: Services
Organization unit: Certification Authorities
Country: CH

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 4c:f1:e4:20:a1:96:d3:58:a7:dc:50:41:70:85:98:46
Serial Number (int): 102277298197260756345396394527025371206
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d4:ad:b6:8d:43:46:c0:f2:d8:a6:ef:ec:ec:29:4c:c5:7b:eb:95:22
AuthorityKeyId: fc:35:5e:58:1d:f8:52:e0:2b:e8:ac:ab:b9:82:ad:15:11:d6:e6:cd

Fingerprint (sha1): 3b:a7:14:1d:33:bb:54:b1:1c:24:56:df:0c:1d:f6:7e:51:44:3a:9c
Fingerprint (sha256): 84:5e:e4:09:03:d3:3c:1b:4e:4e:a6:81:00:0e:9c:45:f9:11:af:b7:ba:22:73:e1:3f:59:42:d6:ee:14:8e:de

Issuing Certificate URL: http://www.pki.admin.ch/aia/SSLCA01.crt

Revocation information

OCSP Server: http://www.pki.admin.ch/aia/ocsp
CRL Distribution Point: http://www.pki.admin.ch/crl/SSLCA01.crl
CRL Distribution Point: ldap://www.pki.admin.ch:389/cn=Swiss%20Government%20SSL%20CA%2001,ou=Certification%20Authorities,ou=Services,o=Admin,c=CH

Check the revocation status for the current certificate on www.passchange.eda.admin.ch
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: www.passchange.eda.admin.ch

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHIDCCBQigAwIBAgIQTPHkIKGW01in3FBBcIWYRjANBgkqhkiG9w0BAQsFADCB iDELMAkGA1UEBhMCQ0gxHTAbBgNVBAoTFFN3aXNzIEdvdmVybm1lbnQgUEtJMREw DwYDVQQLEwhTZXJ2aWNlczEiMCAGA1UECxMZQ2VydGlmaWNhdGlvbiBBdXRob3Jp dGllczEjMCEGA1UEAxMaU3dpc3MgR292ZXJubWVudCBTU0wgQ0EgMDEwHhcNMTQw OTA0MTUwNzM0WhcNMTcwOTAzMTUwNzM0WjByMQswCQYDVQQGEwJDSDEdMBsGA1UE CgwUU3dpc3MgR292ZXJubWVudCBQS0kxEDAOBgNVBAsMB1NlcnZlcnMxDDAKBgNV BAsMA1NTTDEkMCIGA1UEAwwbd3d3LnBhc3NjaGFuZ2UuZWRhLmFkbWluLmNoMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3fe8RsKe34HRAl7ffaEKyqb ZYSWV9dfHheMWjEiCQfHknDP8Y5U4frs+okvg1pzXssnL3Ta/wK9YBWZiVgtaSRP wJ3Kov6+n9/wvrVOka+OepyHv7hiXXssNCfM4aQvE/7fO2sCrd9a2unpfWPCIpQE MzOqEdQNQ3IdvrHZVbt46QacQSwTIyporLVhnVMGOKueCbTNrmIXNJ2ENwKcwFBe JetBUnfEPbc50tMrngYr4T0qvq7xvB0npBOLkpCKHQnUplPoJ8h9u5UvB9GDmA8/ OM93NOehk4REmzPm+H1mdMnNdOoYud6Jo+m8Cp/DVDmjn99tDD36H2ULoY3wYwID AQABo4ICmTCCApUwHwYDVR0jBBgwFoAU/DVeWB34UuAr6KyruYKtFRHW5s0wHQYD VR0OBBYEFNStto1DRsDy2Kbv7OwpTMV765UiMAwGA1UdEwEB/wQCMAAwgcYGA1Ud IASBvjCBuzCBuAYIYIV0AREDFhowgaswRAYIKwYBBQUHAgEWOGh0dHA6Ly93d3cu cGtpLmFkbWluLmNoL2Nwcy9DUFNfMl8xNl83NTZfMV8xN18zXzIxXzEucGRmMGMG CCsGAQUFBwICMFcaVVRoZSBwdXJwb3NlIG9mIHRoaXMgY2VydGlmaWNhdGUgaXMg c29sZWx5IGludGVuZGVkIGZvciBTU0wgd2ViIHNlcnZlciBhdXRoZW50aWNhdGlv bi4wgbsGA1UdHwSBszCBsDAtoCugKYYnaHR0cDovL3d3dy5wa2kuYWRtaW4uY2gv Y3JsL1NTTENBMDEuY3JsMH+gfaB7hnlsZGFwOi8vd3d3LnBraS5hZG1pbi5jaDoz ODkvY249U3dpc3MlMjBHb3Zlcm5tZW50JTIwU1NMJTIwQ0ElMjAwMSxvdT1DZXJ0 aWZpY2F0aW9uJTIwQXV0aG9yaXRpZXMsb3U9U2VydmljZXMsbz1BZG1pbixjPUNI MA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAmBgNVHREEHzAd ght3d3cucGFzc2NoYW5nZS5lZGEuYWRtaW4uY2gwcQYIKwYBBQUHAQEEZTBjMDMG CCsGAQUFBzAChidodHRwOi8vd3d3LnBraS5hZG1pbi5jaC9haWEvU1NMQ0EwMS5j cnQwLAYIKwYBBQUHMAGGIGh0dHA6Ly93d3cucGtpLmFkbWluLmNoL2FpYS9vY3Nw MA0GCSqGSIb3DQEBCwUAA4ICAQDDjb9+Y/r53pN9WnnMjca7uKIDpAZwGq35iQT9 Hu4gs0Ty1Y5Wh7S6oAmXN7WCVPeGdQ+FVh4vuxN6tRgxn88skz349YSai6ZH6CN1 sxl/XgQjcoCVx4KF8aWpWYdEseFN3Xj4hk+KViOuTVqgZgXiMg4SRwhgV+Zn/AdL IVhkQPtKQbHWv4GYzgkn/AzbA6IoyKfAUuJi2BpTkqc6DDbTFtW9y8nzOtSWEGU3 DJiGabYiqO24F0beI2gledeuzNx+jCYEJ1YeTeWXBjaWmMb4xXh+ujkHygipqwT3 TUqq0qWbjYJVkcPpe3A7Y4M4d3bX9sjfRy0Eoqy/KciT+lpGMSi8QdsdjkQkJxKZ NkJE1Ue5Zb7O7r8m7+uUp+3y2+LnkITVwuxCbWeHh3iDJkYUOgBlgM2XqLRUljam /MtszzVBmJHJELxm8u0C77MZEeuvxcgVhFaAFpRYX2+cVQ0Fos8tiJS16e25M1JB eC8pDFUxqNlpi5WCimtRlwhxo54p403V/UIsin7GKT21QIHtNLrgDnfmguWoXS16 CnusJknUSxWCXmldf3op6mzpmtM97I5PldkdFsvTzXqkR8sFOgsVQmru8JA9qXDC vyXjzXUGZ5XnKZsi68KAV3hxcrMDc2TsJtIzRW+/LBPqAfS5/yN9AS5FNws8hsYS 933VcA== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3fe8RsKe34HRAl7ffaE KyqbZYSWV9dfHheMWjEiCQfHknDP8Y5U4frs+okvg1pzXssnL3Ta/wK9YBWZiVgt aSRPwJ3Kov6+n9/wvrVOka+OepyHv7hiXXssNCfM4aQvE/7fO2sCrd9a2unpfWPC IpQEMzOqEdQNQ3IdvrHZVbt46QacQSwTIyporLVhnVMGOKueCbTNrmIXNJ2ENwKc wFBeJetBUnfEPbc50tMrngYr4T0qvq7xvB0npBOLkpCKHQnUplPoJ8h9u5UvB9GD mA8/OM93NOehk4REmzPm+H1mdMnNdOoYud6Jo+m8Cp/DVDmjn99tDD36H2ULoY3w YwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 102277298197260756345396394527025371206 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swiss Government PKI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certification Authorities' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swiss Government SSL CA 01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-09-04 15:07:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-03 15:07:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Swiss Government PKI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Servers' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.passchange.eda.admin.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25685486435450678090641380717574717409522290529358676152100358512818826868801867119113833890927817758783662293317649849142140586163361767229330942624812146819492145762696145409725215481964379655295808480299430335598475782495697634100889648086301333974750382383683027301783878411055403747380474212173071234460975605885698565172173893191362351569845697712870441043465192443933130303113112594388320728033021793731657876103749790079305770654871332516052659656933257889506690395350010868071163023486463908250188890232670878448750000889653773457105758142287423940074151738534579286281531809944405359716999799577916509909091 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fc355e581df852e02be8acabb982ad1511d6e6cd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d4adb68d4346c0f2d8a6efecec294cc57beb9522 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (190 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.17.3.22.26 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.pki.admin.ch/cps/CPS_2_16_756_1_17_3_21_1.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [84 104 101 32 112 117 114 112 111 115 101 32 111 102 32 116 104 105 115 32 99 101 114 116 105 102 105 99 97 116 101 32 105 115 32 115 111 108 101 108 121 32 105 110 116 101 110 100 101 100 32 102 111 114 32 83 83 76 32 119 101 98 32 115 101 114 118 101 114 32 97 117 116 104 101 110 116 105 99 97 116 105 111 110 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (179 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.pki.admin.ch/crl/SSLCA01.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://www.pki.admin.ch:389/cn=Swiss%20Government%20SSL%20CA%2001,ou=Certification%20Authorities,ou=Services,o=Admin,c=CH' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.passchange.eda.admin.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.pki.admin.ch/aia/SSLCA01.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.pki.admin.ch/aia/ocsp' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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