www.bwl-extranet.admin.ch

Issued by Swiss Government SSL CA 01

About this certificate


This digital certificate with serial number 6b:5c:a9:f1:2e:36:bb:be:1e:52:77:3f:0b:25:55:4a was issued on by Swiss Government PKI .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: Certificate contains a CRL with an non-preferred scheme ([ldap])
  • ERROR: localityName or stateOrProvinceName is required if organizationName is set
  • ERROR: stateOrProvinceName is required if organizationName is set

Swiss Government PKI

Organization: Swiss Government PKI
Organization unit: Servers
Organization unit: SSL
Country: CH

Swiss Government PKI

Organization: Swiss Government PKI
Organization unit: Services
Organization unit: Certification Authorities
Country: CH

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 6b:5c:a9:f1:2e:36:bb:be:1e:52:77:3f:0b:25:55:4a
Serial Number (int): 142708533695483864648178841888970069322
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 8b:70:fe:e2:b4:cc:ef:27:cb:ae:eb:89:00:3c:ab:8f:b8:59:01:da
AuthorityKeyId: fc:35:5e:58:1d:f8:52:e0:2b:e8:ac:ab:b9:82:ad:15:11:d6:e6:cd

Fingerprint (sha1): d0:b6:f4:d7:d8:0b:8c:83:ce:a2:c5:54:8c:59:e8:64:74:cb:55:53
Fingerprint (sha256): f1:95:bf:23:5c:21:53:1c:03:fb:49:ee:6d:1d:26:4d:ea:55:c6:7a:a4:2b:da:45:46:fa:6e:80:8b:c1:92:24

Issuing Certificate URL: http://www.pki.admin.ch/aia/SSLCA01.crt

Revocation information

OCSP Server: http://www.pki.admin.ch/aia/ocsp
CRL Distribution Point: http://www.pki.admin.ch/crl/SSLCA01.crl
CRL Distribution Point: ldap://www.pki.admin.ch:389/cn=Swiss%20Government%20SSL%20CA%2001,ou=Certification%20Authorities,ou=Services,o=Admin,c=CH

Check the revocation status for the current certificate on www.bwl-extranet.admin.ch
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: www.bwl-extranet.admin.ch

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHHDCCBQSgAwIBAgIQa1yp8S42u74eUnc/CyVVSjANBgkqhkiG9w0BAQsFADCB iDELMAkGA1UEBhMCQ0gxHTAbBgNVBAoTFFN3aXNzIEdvdmVybm1lbnQgUEtJMREw DwYDVQQLEwhTZXJ2aWNlczEiMCAGA1UECxMZQ2VydGlmaWNhdGlvbiBBdXRob3Jp dGllczEjMCEGA1UEAxMaU3dpc3MgR292ZXJubWVudCBTU0wgQ0EgMDEwHhcNMTQw OTAzMTUxMDA4WhcNMTcwOTAyMTUxMDA4WjBwMQswCQYDVQQGEwJDSDEdMBsGA1UE CgwUU3dpc3MgR292ZXJubWVudCBQS0kxEDAOBgNVBAsMB1NlcnZlcnMxDDAKBgNV BAsMA1NTTDEiMCAGA1UEAwwZd3d3LmJ3bC1leHRyYW5ldC5hZG1pbi5jaDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM3pmfqoGlW5vaZdzrMz6romXgk3 0LKgVPCRIHKo6h7OU6H37/Wv7i1n5LbCrUbKKsYI7S/kJqURInF/yU+aC4gq8HbP I59yqQQv5aWo3KvLShePcUAkGkNG2koRRczgTyqvlxyE4PruPiQEpjtfD7JvQf+R XS0NK9Sx7BzaBZrkJPlJPejyY8sICGqMVkKWo0V1xPKOR70UzcTNyMWqtWliNRI8 W57Kc8EpkHFuifCE5Xmwq+cVJo+f4MBaQ2DnlekDk8I5GgC1hMj/OZTA5Z2iXT3+ +LCP84T2p+iAPv6TLnwgG5hKvjODSyRG8psNe/nOxkcPt3ozPFPN6xwQrG8CAwEA AaOCApcwggKTMB8GA1UdIwQYMBaAFPw1Xlgd+FLgK+isq7mCrRUR1ubNMB0GA1Ud DgQWBBSLcP7itMzvJ8uu64kAPKuPuFkB2jAMBgNVHRMBAf8EAjAAMIHGBgNVHSAE gb4wgbswgbgGCGCFdAERAxYaMIGrMEQGCCsGAQUFBwIBFjhodHRwOi8vd3d3LnBr aS5hZG1pbi5jaC9jcHMvQ1BTXzJfMTZfNzU2XzFfMTdfM18yMV8xLnBkZjBjBggr BgEFBQcCAjBXGlVUaGUgcHVycG9zZSBvZiB0aGlzIGNlcnRpZmljYXRlIGlzIHNv bGVseSBpbnRlbmRlZCBmb3IgU1NMIHdlYiBzZXJ2ZXIgYXV0aGVudGljYXRpb24u MIG7BgNVHR8EgbMwgbAwLaAroCmGJ2h0dHA6Ly93d3cucGtpLmFkbWluLmNoL2Ny bC9TU0xDQTAxLmNybDB/oH2ge4Z5bGRhcDovL3d3dy5wa2kuYWRtaW4uY2g6Mzg5 L2NuPVN3aXNzJTIwR292ZXJubWVudCUyMFNTTCUyMENBJTIwMDEsb3U9Q2VydGlm aWNhdGlvbiUyMEF1dGhvcml0aWVzLG91PVNlcnZpY2VzLG89QWRtaW4sYz1DSDAO BgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwJAYDVR0RBB0wG4IZ d3d3LmJ3bC1leHRyYW5ldC5hZG1pbi5jaDBxBggrBgEFBQcBAQRlMGMwMwYIKwYB BQUHMAKGJ2h0dHA6Ly93d3cucGtpLmFkbWluLmNoL2FpYS9TU0xDQTAxLmNydDAs BggrBgEFBQcwAYYgaHR0cDovL3d3dy5wa2kuYWRtaW4uY2gvYWlhL29jc3AwDQYJ KoZIhvcNAQELBQADggIBAJWByHqz4AMGym+0SStnchvswv7lHUxw1MlSdnqRjPTH SxgSpeF14pnuHmTS7ftEg2HoMsnd63dZpawTdba4VRHEjs917VvwGIXWIfDPxKGx xSpxSAPKP1GZ4U7wJ3kR2tqWajmIERI+o8QHTc8gJbxLMuzkCH09UFMAtc1zGRgV TpxpYHFc2xvXi3Zq0DQyvHrd+vc6aGyAOgjqpE0vFxaB86xSS7dxACQcTTadXsom vgFi6wSuM4DKw79xz0kjm8gAKcftMysIUpJfCeAWUWB555hAnLKKPNjL+sCKlPEp U+AEmNRBAWfRtxXdzYezVqrfdMtAj+vGF5/Y3do0eYJZybE3S56khHfaN56vl2mN 0PuD+7YM4rusFtJA60/0bBtZBqRVkQebgzg1u7DVIUyQcx+7aIdVA/BcEC21irbC Bzy+HNJ1td179xOSozZXVa1aUIdfJlW+5fJgZXqjBV85fe3WRRU4xq4TTj5MsmZO 97AKgy+RChtOZKh7ZonAgFOEMMyyWvCMmDivQVhua3uzwrjJet2J9Va7E8prKkj2 p+8tiVWAkl44CxC3kxdxPcE9vTPe9e4PhOU6NeaIX9ed6Biuc0tX5DP5QYH2t8c3 lEvtB3MZHfi70OZiJz8z0jRi2iGBjUVHZT7zwYmG1qk5rlH+KkYdc/Rg3OvORwp3 -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzemZ+qgaVbm9pl3OszPq uiZeCTfQsqBU8JEgcqjqHs5Toffv9a/uLWfktsKtRsoqxgjtL+QmpREicX/JT5oL iCrwds8jn3KpBC/lpajcq8tKF49xQCQaQ0baShFFzOBPKq+XHITg+u4+JASmO18P sm9B/5FdLQ0r1LHsHNoFmuQk+Uk96PJjywgIaoxWQpajRXXE8o5HvRTNxM3Ixaq1 aWI1EjxbnspzwSmQcW6J8ITlebCr5xUmj5/gwFpDYOeV6QOTwjkaALWEyP85lMDl naJdPf74sI/zhPan6IA+/pMufCAbmEq+M4NLJEbymw17+c7GRw+3ejM8U83rHBCs bwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 142708533695483864648178841888970069322 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swiss Government PKI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certification Authorities' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swiss Government SSL CA 01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-09-03 15:10:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-02 15:10:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Swiss Government PKI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Servers' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.bwl-extranet.admin.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25994045701615581025374407436587897117684439269501190841312394213557275035997660027353840704201540001218251132227070180764590547391336272227172219815119880233773584503386923905512006936704158350371212467817410856443818082841056386085997206934099720399298286174980975448825121200396961685253071451170804695778531967271915852345127257309255442326780838242314007893327181793391753675541598775971517577416759569012007022903159038152188262448506263792829030100037216240603704493994760850292866052347212887259041607949279460207484030506839049195999373095036829517430123308395907361424595063412794355831751325436211396389999 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fc355e581df852e02be8acabb982ad1511d6e6cd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8b70fee2b4ccef27cbaeeb89003cab8fb85901da . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (190 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.17.3.22.26 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.pki.admin.ch/cps/CPS_2_16_756_1_17_3_21_1.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [84 104 101 32 112 117 114 112 111 115 101 32 111 102 32 116 104 105 115 32 99 101 114 116 105 102 105 99 97 116 101 32 105 115 32 115 111 108 101 108 121 32 105 110 116 101 110 100 101 100 32 102 111 114 32 83 83 76 32 119 101 98 32 115 101 114 118 101 114 32 97 117 116 104 101 110 116 105 99 97 116 105 111 110 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (179 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.pki.admin.ch/crl/SSLCA01.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://www.pki.admin.ch:389/cn=Swiss%20Government%20SSL%20CA%2001,ou=Certification%20Authorities,ou=Services,o=Admin,c=CH' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bwl-extranet.admin.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.pki.admin.ch/aia/SSLCA01.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.pki.admin.ch/aia/ocsp' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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