xray.tools.post.ch

- Post CH AG -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 50:01:e7:9f:4b:1d:39:c0:56:de:a0:27:f7:de:5c:0f:bf:40:bd:b6 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Post CH AG

Organization: Post CH AG
State / Province: Bern
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 50:01:e7:9f:4b:1d:39:c0:56:de:a0:27:f7:de:5c:0f:bf:40:bd:b6
Serial Number (int): 456761739553896117236789766784949871568341745078
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 5a:82:e1:d2:32:db:0f:22:ed:da:56:6b:73:c1:38:f4:4d:54:2c:e3
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): ec:38:59:97:48:73:98:a1:30:e2:cb:d7:96:84:3e:74:93:45:46:b3
Fingerprint (sha256): 00:82:10:e6:46:ee:9c:70:58:db:65:e2:88:a9:2e:40:fc:4c:3d:7f:bc:d1:d3:8f:20:df:22:77:a6:dd:e8:d6

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate xray.tools.post.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xray.tools.post.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xray.tools.post.ch
xray.tools.pnet.ch

Other certificates including the domain name post.ch

(limited to 100 certificates)
fakeext.post.ch
zwab-int.post.ch
moodle.pa.post.ch
mova.post.ch
webfocus.post.ch
digitaler-posteingang.post.ch
securepost.post.ch
filialemitpartner.post.ch
moodle.pa.post.ch
e-collaboration-int.post.ch
jobs-int.post.ch
m-extranet.post.ch
xray.tools.post.ch
ddstest.post.ch
directpoint.post.ch
places.post.ch
new.post.ch
mapservice.post.ch
wohnen-franklinplatz.post.ch
wwwsc.post.ch
gandalf.apis.post.ch
billingonline-dev.post.ch
dh-auth.apis.post.ch
cinfoni-germany.innovation.post.ch
vgk.apis-test.post.ch
loginint.post.ch
file-intpa-cms.post.ch
agentur-int.post.ch
gitit.post.ch
zubofi.apis-dev.post.ch
ef-testix.post.ch
transport-service.post.ch
directpoint.post.ch
ci-euw1.ireland.delivery.aimatch.net
accountint2.post.ch
address.apis-test.post.ch
docucenterint.post.ch
ci-euw1.ireland.delivery.aimatch.net
msmgateway-int.post.ch
uaasapp3rsa.post.ch
epostoffice3.post.ch
static.post.ch
location-poste-martigny.post.ch
uaasapp3rsadev2.post.ch
crypto-stamp.post.ch
gabi.apis-test.post.ch
nemoauth-test.post.ch
sorryrpz-int.post.ch
webservices-cashlog-int.post.ch
accountint1.post.ch
static.post.ch
cbt.externint.post.ch
wohnen-zollikofen.post.ch
directdayint.post.ch
apis.post.ch
gw.incamail-dev.post.ch
mx3.post.ch
salt-aboint.post.ch
ci-euw1.ireland.delivery.aimatch.net
postweb.post.ch
orgtool-int.post.ch
die-post-kann-mehrint.post.ch
erpcorp.apis-int.post.ch
schreibenint.post.ch
nemoint.post.ch
postzone.extern.post.ch
news-intern.post.ch
kurepo.apis-test.post.ch
cockpitint2.post.ch
dev.post.ch
apitest.post.ch
mp24hub.apis.post.ch
servicetest.post.ch
mobilecodeservice.apis.post.ch
vsc.apis.post.ch
stb-test.innovation.post.ch
pccweb.apitest.post.ch
webtransferint.post.ch
agentur-int.post.ch
www.post.ch
laborsendungen.post.ch
facetoface.post.ch
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
digitaler-posteingangint.post.ch
e-mobilityint.post.ch
fdsbc.post.ch
tresorit.post.ch
aaw.apis-test.post.ch
gw.incamail-dev.post.ch
gewinnende-worte.post.ch
accountint2.post.ch
rasns01.post.ch
ident.apis-dev.post.ch
test.post.ch
e-commerce.post.ch
salt-aboint.post.ch
96749.post.ch
juravote-int.post.ch
sventest.post.ch

Certificate

The complete raw certificate details for xray.tools.post.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 456761739553896117236789766784949871568341745078
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-14 08:30:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 08:30:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Post CH AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xray.tools.post.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 830600265278186685400813496175129855932789659365947727497764551195359735294846303645657049557403979548441724316892889295972375538021835402011468688912462149339175250685093979701956602398518034975968395902776530888891177293686677047638930104246669894104195560016892378111060403130607931550626846660906391530674785443533712672279440656176933446277581240220308221294169273143747659610974795109582700797777744806815480425634995206739165722276802900651754058643709752403354880823318139930851388638974325163129297272726008072449522272142418051237845672266606958617558135067771227408778903627992858128828933445035431377469403527855959241425786821428817553303995261266497107736249562194204315896680597771552492801369082963260462901287477027373845966827352651383702654030974556062323879902594680205782535468222559848659845132794481669996475088711623947611896539871790590303968339708325479928022539546134975465569347122829932891078576720411519520969944200247290061989799971376402508029469987221778960662376419056618237470870642112359958892584336503477421220757691886747476785209115574314730782840298909095328103572417821737822506476858710674150786133589089672765898728190988008074605019479708991540533616675948324403583791611694962007071428049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xray.tools.post.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xray.tools.pnet.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a82e1d232db0f22edda566b73c138f44d542ce3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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