mokos.sz.ch

Issued by Swiss Government SSL CA 01

About this certificate


This digital certificate with serial number 55:58:9d:42:6c:7b:c1:d8:72:ec:58:30:fe:7e:08:b6 was issued on by Swiss Government PKI .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: Certificate contains a CRL with an non-preferred scheme ([ldap])
  • ERROR: localityName or stateOrProvinceName is required if organizationName is set
  • ERROR: stateOrProvinceName is required if organizationName is set

Swiss Government PKI

Organization: Swiss Government PKI
Organization unit: Servers
Organization unit: SSL
Country: CH

Swiss Government PKI

Organization: Swiss Government PKI
Organization unit: Services
Organization unit: Certification Authorities
Country: CH

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 55:58:9d:42:6c:7b:c1:d8:72:ec:58:30:fe:7e:08:b6
Serial Number (int): 113444491366209407627863996048986736822
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 96:00:ae:93:2d:39:b9:af:81:e1:da:cc:72:ab:99:52:e8:a3:07:dc
AuthorityKeyId: fc:35:5e:58:1d:f8:52:e0:2b:e8:ac:ab:b9:82:ad:15:11:d6:e6:cd

Fingerprint (sha1): cb:b7:85:19:c2:be:38:4b:fd:d2:13:3e:c0:6b:4a:1a:3d:00:e3:8c
Fingerprint (sha256): 9c:78:db:ab:8d:db:36:38:e2:f6:c3:86:72:6c:6f:14:d4:9a:5d:a2:21:5f:66:52:20:ae:74:07:6c:bf:ee:ee

Issuing Certificate URL: http://www.pki.admin.ch/aia/SSLCA01.crt

Revocation information

OCSP Server: http://www.pki.admin.ch/aia/ocsp
CRL Distribution Point: http://www.pki.admin.ch/crl/SSLCA01.crl
CRL Distribution Point: ldap://www.pki.admin.ch:389/cn=Swiss%20Government%20SSL%20CA%2001,ou=Certification%20Authorities,ou=Services,o=Admin,c=CH

Check the revocation status for the current certificate on mokos.sz.ch
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: mokos.sz.ch

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHADCCBOigAwIBAgIQVVidQmx7wdhy7Fgw/n4ItjANBgkqhkiG9w0BAQsFADCB iDELMAkGA1UEBhMCQ0gxHTAbBgNVBAoTFFN3aXNzIEdvdmVybm1lbnQgUEtJMREw DwYDVQQLEwhTZXJ2aWNlczEiMCAGA1UECxMZQ2VydGlmaWNhdGlvbiBBdXRob3Jp dGllczEjMCEGA1UEAxMaU3dpc3MgR292ZXJubWVudCBTU0wgQ0EgMDEwHhcNMTQx MDA3MTQ1NDMyWhcNMTcxMDA2MTQ1NDMyWjBiMQswCQYDVQQGEwJDSDEdMBsGA1UE CgwUU3dpc3MgR292ZXJubWVudCBQS0kxEDAOBgNVBAsMB1NlcnZlcnMxDDAKBgNV BAsMA1NTTDEUMBIGA1UEAwwLbW9rb3Muc3ouY2gwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC58b3YJk9UEdBvKTepyv1zURaxIxyhSyB+tOJbzNShGi83 kKZFAWpl9ZBbiwrovInQ0c4v1CH7l/zjAgHDi1iidMcIM+ds/OpzUefXOsr4GgZA Ffg1teUX5G/nYZAujEsMLQv9FMyH2cBfQu3St9oEkjUzUNb1EYLVIOq+M7v4xI5H VsrbqQoL/FfnPs8lgQiz8pVuGe1Krn+aZYAn4sZArwdQmdo4LVngm6d0ZE0fTnUT t4WwYUq45EAQz/PdvuZina/fHN1Cx0GwKy0/0zUJfAPRj0LlSlsZx1epYVRdgRQz x333PpQQN+sREHkUtFPTOvZb9uaH02DLQXa9PSv1AgMBAAGjggKJMIIChTAfBgNV HSMEGDAWgBT8NV5YHfhS4CvorKu5gq0VEdbmzTAdBgNVHQ4EFgQUlgCuky05ua+B 4drMcquZUuijB9wwDAYDVR0TAQH/BAIwADCBxgYDVR0gBIG+MIG7MIG4BghghXQB EQMWGjCBqzBEBggrBgEFBQcCARY4aHR0cDovL3d3dy5wa2kuYWRtaW4uY2gvY3Bz L0NQU18yXzE2Xzc1Nl8xXzE3XzNfMjFfMS5wZGYwYwYIKwYBBQUHAgIwVxpVVGhl IHB1cnBvc2Ugb2YgdGhpcyBjZXJ0aWZpY2F0ZSBpcyBzb2xlbHkgaW50ZW5kZWQg Zm9yIFNTTCB3ZWIgc2VydmVyIGF1dGhlbnRpY2F0aW9uLjCBuwYDVR0fBIGzMIGw MC2gK6AphidodHRwOi8vd3d3LnBraS5hZG1pbi5jaC9jcmwvU1NMQ0EwMS5jcmww f6B9oHuGeWxkYXA6Ly93d3cucGtpLmFkbWluLmNoOjM4OS9jbj1Td2lzcyUyMEdv dmVybm1lbnQlMjBTU0wlMjBDQSUyMDAxLG91PUNlcnRpZmljYXRpb24lMjBBdXRo b3JpdGllcyxvdT1TZXJ2aWNlcyxvPUFkbWluLGM9Q0gwDgYDVR0PAQH/BAQDAgWg MBMGA1UdJQQMMAoGCCsGAQUFBwMBMBYGA1UdEQQPMA2CC21va29zLnN6LmNoMHEG CCsGAQUFBwEBBGUwYzAzBggrBgEFBQcwAoYnaHR0cDovL3d3dy5wa2kuYWRtaW4u Y2gvYWlhL1NTTENBMDEuY3J0MCwGCCsGAQUFBzABhiBodHRwOi8vd3d3LnBraS5h ZG1pbi5jaC9haWEvb2NzcDANBgkqhkiG9w0BAQsFAAOCAgEARXXqkERCWtjvpo7g iLI1J351/oYfHLC9biNQYQ6NcyktOWmgVPKWhxRpJDBKTHYV8gyCsagcmBs/bJMN CgigSqjSH/J56nUPETVrTiCBQtan0PASMJc7LwF6GgZulZyCb8hm9bhvOdxX56x3 2UxDeWMx6J6VRQ0bzjOBAcupEvp/7agKKD+6TcBQvMwf78jhmLcQiVXzFLrfIrRo K6LrHu98o+LjBTo7XSfFvHD1NKXnMTYEoMYBJGJK33q3Pzj3SmALJ2EJMBthuEvu iXR6FXjAHwXjKPKl0Ccd5F6JQOMhvHVDXX3xD06mdA6XbjB1XOE4NMqNsiaMVO8f 8e9kBNCgpN5h/XEIMnjEnViSV4M5S9NdSzwnVZpXJlgvPFVaRiJ4a8mekG4VvniJ pcMn/S0p1quWWAqtzhJoD+Xi0F47cEVrSq7TWKtbczpaUK5T/m2ens1CXX2wm0EE Fty+UPawyAdHpAD9wIej2lDeiZ/pzPleCQbGqc8low2SJAU1GuE1aJJEqREckEIl 99auVCP2wWapJkWM2y2b9+e/GeIomt9gwZTVxxMrobWt95gsJrDdd0mjTxpomATM 352FsG/dgzhFnf5uRWyqQgdtGZhNwKqHx4JjTAp9Aca22WmOnvPnIh/dJAu6WwuX uFn0bFwRccJuCnyJvO5M5srQAJo= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufG92CZPVBHQbyk3qcr9 c1EWsSMcoUsgfrTiW8zUoRovN5CmRQFqZfWQW4sK6LyJ0NHOL9Qh+5f84wIBw4tY onTHCDPnbPzqc1Hn1zrK+BoGQBX4NbXlF+Rv52GQLoxLDC0L/RTMh9nAX0Lt0rfa BJI1M1DW9RGC1SDqvjO7+MSOR1bK26kKC/xX5z7PJYEIs/KVbhntSq5/mmWAJ+LG QK8HUJnaOC1Z4JundGRNH051E7eFsGFKuORAEM/z3b7mYp2v3xzdQsdBsCstP9M1 CXwD0Y9C5UpbGcdXqWFUXYEUM8d99z6UEDfrERB5FLRT0zr2W/bmh9Ngy0F2vT0r 9QIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 113444491366209407627863996048986736822 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swiss Government PKI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certification Authorities' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swiss Government SSL CA 01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-07 14:54:32 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-06 14:54:32 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Swiss Government PKI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Servers' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mokos.sz.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23473293634452481320256123303919734928207443181099457178080226318009407895726867382918986308876045830765839202281342274251189070557071042246329843789511387388592331798567126862503778262696439944799955272528007362773643159194718497012672555462919387455639769587318942034932748484182531826621759696830438421281192421155563425497056304180375871825305502844083230974888347373460054379005351885032109125084585516921832280530948791667049593514772997171267095543871432292803435306279010059537684252275368494620259597316445196264956229935808767513003185053840457106167590872947514309490918423280200664823998927622701374581749 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fc355e581df852e02be8acabb982ad1511d6e6cd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9600ae932d39b9af81e1dacc72ab9952e8a307dc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (190 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.17.3.22.26 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.pki.admin.ch/cps/CPS_2_16_756_1_17_3_21_1.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [84 104 101 32 112 117 114 112 111 115 101 32 111 102 32 116 104 105 115 32 99 101 114 116 105 102 105 99 97 116 101 32 105 115 32 115 111 108 101 108 121 32 105 110 116 101 110 100 101 100 32 102 111 114 32 83 83 76 32 119 101 98 32 115 101 114 118 101 114 32 97 117 116 104 101 110 116 105 99 97 116 105 111 110 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (179 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.pki.admin.ch/crl/SSLCA01.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://www.pki.admin.ch:389/cn=Swiss%20Government%20SSL%20CA%2001,ou=Certification%20Authorities,ou=Services,o=Admin,c=CH' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mokos.sz.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.pki.admin.ch/aia/SSLCA01.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.pki.admin.ch/aia/ocsp' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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