ddstest.post.ch

- Die Schweizerische Post AG -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 5a:d4:ca:79:62:af:96:53:13:9e:9c:0c:26:59:11:38:da:18:50:7b was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Die Schweizerische Post AG

Organization: Die Schweizerische Post AG
State / Province: BE
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 5a:d4:ca:79:62:af:96:53:13:9e:9c:0c:26:59:11:38:da:18:50:7b
Serial Number (int): 518554565343334706770980567565116436742474846331
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 10:be:a5:83:3c:7b:ba:72:f6:1d:72:85:47:9e:82:16:74:f1:68:36
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): 92:57:b9:ec:41:78:7d:13:f4:3e:26:3e:92:f5:ef:a3:c3:2f:ba:be
Fingerprint (sha256): 00:9b:89:2e:88:89:e8:89:8b:aa:eb:f7:c0:84:6e:2e:2b:1f:45:d9:d1:bc:24:52:ea:2d:92:c4:d5:73:0a:88

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate ddstest.post.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ddstest.post.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ddstest.post.ch

Other certificates including the domain name post.ch

(limited to 100 certificates)
fakeext.post.ch
zwab-int.post.ch
moodle.pa.post.ch
mova.post.ch
webfocus.post.ch
digitaler-posteingang.post.ch
swisspostmobile.apis-int.post.ch
securepost.post.ch
filialemitpartner.post.ch
moodle.pa.post.ch
e-collaboration-int.post.ch
jobs-int.post.ch
m-extranet.post.ch
xray.tools.post.ch
ddstest.post.ch
directpoint.post.ch
places.post.ch
new.post.ch
mapservice.post.ch
crypto-stamp.post.ch
wohnen-franklinplatz.post.ch
wwwsc.post.ch
gandalf.apis.post.ch
billingonline-dev.post.ch
dh-auth.apis.post.ch
cinfoni-germany.innovation.post.ch
vgk.apis-test.post.ch
loginint.post.ch
file-intpa-cms.post.ch
agentur-int.post.ch
gitit.post.ch
zubofi.apis-dev.post.ch
ef-testix.post.ch
transport-service.post.ch
directpoint.post.ch
ci-euw1.ireland.delivery.aimatch.net
accountint2.post.ch
address.apis-test.post.ch
docucenterint.post.ch
ci-euw1.ireland.delivery.aimatch.net
msmgateway-int.post.ch
uaasapp3rsa.post.ch
epostoffice3.post.ch
static.post.ch
location-poste-martigny.post.ch
uaasapp3rsadev2.post.ch
crypto-stamp.post.ch
gabi.apis-test.post.ch
nemoauth-test.post.ch
sorryrpz-int.post.ch
webservices-cashlog-int.post.ch
accountint1.post.ch
static.post.ch
cbt.externint.post.ch
wohnen-zollikofen.post.ch
directdayint.post.ch
apis.post.ch
gw.incamail-dev.post.ch
mx3.post.ch
salt-aboint.post.ch
ci-euw1.ireland.delivery.aimatch.net
postweb.post.ch
orgtool-int.post.ch
die-post-kann-mehrint.post.ch
erpcorp.apis-int.post.ch
schreibenint.post.ch
nemoint.post.ch
postzone.extern.post.ch
news-intern.post.ch
kurepo.apis-test.post.ch
cockpitint2.post.ch
dev.post.ch
apitest.post.ch
mp24hub.apis.post.ch
servicetest.post.ch
mobilecodeservice.apis.post.ch
vsc.apis.post.ch
stb-test.innovation.post.ch
spimr1.post.ch
pccweb.apitest.post.ch
webtransferint.post.ch
agentur-int.post.ch
www.post.ch
laborsendungen.post.ch
facetoface.post.ch
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
digitaler-posteingangint.post.ch
e-mobilityint.post.ch
fdsbc.post.ch
tresorit.post.ch
aaw.apis-test.post.ch
gw.incamail-dev.post.ch
gewinnende-worte.post.ch
accountint2.post.ch
rasns01.post.ch
ident.apis-dev.post.ch
test.post.ch
e-commerce.post.ch
salt-aboint.post.ch

Certificate

The complete raw certificate details for ddstest.post.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 518554565343334706770980567565116436742474846331
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 14:37:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-12 14:37:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Die Schweizerische Post AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ddstest.post.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 840000785938307173410977851222317884339524889237923396604093523958444511248879397663982257168863546309300607963945003505233521662970137245965431898914293446272760017867949204375560256810078321331541280446453416703918172026718290959794940243606467338647544324685617185499456027130806750062629490675269617840928988240960182022432915864906713691353249894740968049966247507846646196028802901688409819575736815356285080085466137176607229297560977136908409170055667373559577498671390155492121512298147652587105097813269265069263768688924012943712953058863915848800368355097518440884675894945076200502981683743401854798124269274530988052862858490363082628134402136834173840057374986544574484575864424903832730891062951050378398924014416244975071880125080541288469356303559753739821057287958418177369354364870686906476921524759991188619227084353346080955310484508204533749393541624541554799088593880100355025882699025510157646292950965379617499308477462712364883536094804982106352115781136788859483098347782730374270911850162697549914822416844601589981535960373830082833791339438969456835611585352705583390321287012806658388187279127031782899112124021568812187878217410214037640539858552524049751858797021444750989625047623775704671713499573
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddstest.post.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10bea5833c7bba72f61d7285479e821674f16836
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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