ddstest.post.ch
- Die Schweizerische Post AG -
Issued by SwissSign RSA TLS OV ICA 2022 - 1
About this certificate
This digital certificate with serial number 5a:d4:ca:79:62:af:96:53:13:9e:9c:0c:26:59:11:38:da:18:50:7b was issued on by SwissSign AG.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Die Schweizerische Post AG
Organization:
Die Schweizerische Post AG
State / Province:
BE
Locality: Bern
Country: CH
Locality: Bern
Country: CH
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate will expire on
Certificate Details
Serial Number (hex): 5a:d4:ca:79:62:af:96:53:13:9e:9c:0c:26:59:11:38:da:18:50:7bSerial Number (int): 518554565343334706770980567565116436742474846331
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: 10:be:a5:83:3c:7b:ba:72:f6:1d:72:85:47:9e:82:16:74:f1:68:36
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6
Fingerprint (sha1): 92:57:b9:ec:41:78:7d:13:f4:3e:26:3e:92:f5:ef:a3:c3:2f:ba:be
Fingerprint (sha256): 00:9b:89:2e:88:89:e8:89:8b:aa:eb:f7:c0:84:6e:2e:2b:1f:45:d9:d1:bc:24:52:ea:2d:92:c4:d5:73:0a:88
Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45
Revocation information
OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efecCRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34
Check the revocation status for certificate ddstest.post.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ddstest.post.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ddstest.post.ch
Other certificates including the domain name post.ch
(limited to 100 certificates)
fakeext.post.ch
zwab-int.post.ch
moodle.pa.post.ch
mova.post.ch
webfocus.post.ch
digitaler-posteingang.post.ch
swisspostmobile.apis-int.post.ch
securepost.post.ch
filialemitpartner.post.ch
moodle.pa.post.ch
e-collaboration-int.post.ch
jobs-int.post.ch
m-extranet.post.ch
xray.tools.post.ch
ddstest.post.ch
directpoint.post.ch
places.post.ch
new.post.ch
mapservice.post.ch
crypto-stamp.post.ch
wohnen-franklinplatz.post.ch
wwwsc.post.ch
gandalf.apis.post.ch
billingonline-dev.post.ch
dh-auth.apis.post.ch
cinfoni-germany.innovation.post.ch
vgk.apis-test.post.ch
loginint.post.ch
file-intpa-cms.post.ch
agentur-int.post.ch
gitit.post.ch
zubofi.apis-dev.post.ch
ef-testix.post.ch
transport-service.post.ch
directpoint.post.ch
ci-euw1.ireland.delivery.aimatch.net
accountint2.post.ch
address.apis-test.post.ch
docucenterint.post.ch
ci-euw1.ireland.delivery.aimatch.net
msmgateway-int.post.ch
uaasapp3rsa.post.ch
epostoffice3.post.ch
static.post.ch
location-poste-martigny.post.ch
uaasapp3rsadev2.post.ch
crypto-stamp.post.ch
gabi.apis-test.post.ch
nemoauth-test.post.ch
sorryrpz-int.post.ch
webservices-cashlog-int.post.ch
accountint1.post.ch
static.post.ch
cbt.externint.post.ch
wohnen-zollikofen.post.ch
directdayint.post.ch
apis.post.ch
gw.incamail-dev.post.ch
mx3.post.ch
salt-aboint.post.ch
ci-euw1.ireland.delivery.aimatch.net
postweb.post.ch
orgtool-int.post.ch
die-post-kann-mehrint.post.ch
erpcorp.apis-int.post.ch
schreibenint.post.ch
nemoint.post.ch
postzone.extern.post.ch
news-intern.post.ch
kurepo.apis-test.post.ch
cockpitint2.post.ch
dev.post.ch
apitest.post.ch
mp24hub.apis.post.ch
servicetest.post.ch
mobilecodeservice.apis.post.ch
vsc.apis.post.ch
stb-test.innovation.post.ch
spimr1.post.ch
pccweb.apitest.post.ch
webtransferint.post.ch
agentur-int.post.ch
www.post.ch
laborsendungen.post.ch
facetoface.post.ch
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
digitaler-posteingangint.post.ch
e-mobilityint.post.ch
fdsbc.post.ch
tresorit.post.ch
aaw.apis-test.post.ch
gw.incamail-dev.post.ch
gewinnende-worte.post.ch
accountint2.post.ch
rasns01.post.ch
ident.apis-dev.post.ch
test.post.ch
e-commerce.post.ch
salt-aboint.post.ch
zwab-int.post.ch
moodle.pa.post.ch
mova.post.ch
webfocus.post.ch
digitaler-posteingang.post.ch
swisspostmobile.apis-int.post.ch
securepost.post.ch
filialemitpartner.post.ch
moodle.pa.post.ch
e-collaboration-int.post.ch
jobs-int.post.ch
m-extranet.post.ch
xray.tools.post.ch
ddstest.post.ch
directpoint.post.ch
places.post.ch
new.post.ch
mapservice.post.ch
crypto-stamp.post.ch
wohnen-franklinplatz.post.ch
wwwsc.post.ch
gandalf.apis.post.ch
billingonline-dev.post.ch
dh-auth.apis.post.ch
cinfoni-germany.innovation.post.ch
vgk.apis-test.post.ch
loginint.post.ch
file-intpa-cms.post.ch
agentur-int.post.ch
gitit.post.ch
zubofi.apis-dev.post.ch
ef-testix.post.ch
transport-service.post.ch
directpoint.post.ch
ci-euw1.ireland.delivery.aimatch.net
accountint2.post.ch
address.apis-test.post.ch
docucenterint.post.ch
ci-euw1.ireland.delivery.aimatch.net
msmgateway-int.post.ch
uaasapp3rsa.post.ch
epostoffice3.post.ch
static.post.ch
location-poste-martigny.post.ch
uaasapp3rsadev2.post.ch
crypto-stamp.post.ch
gabi.apis-test.post.ch
nemoauth-test.post.ch
sorryrpz-int.post.ch
webservices-cashlog-int.post.ch
accountint1.post.ch
static.post.ch
cbt.externint.post.ch
wohnen-zollikofen.post.ch
directdayint.post.ch
apis.post.ch
gw.incamail-dev.post.ch
mx3.post.ch
salt-aboint.post.ch
ci-euw1.ireland.delivery.aimatch.net
postweb.post.ch
orgtool-int.post.ch
die-post-kann-mehrint.post.ch
erpcorp.apis-int.post.ch
schreibenint.post.ch
nemoint.post.ch
postzone.extern.post.ch
news-intern.post.ch
kurepo.apis-test.post.ch
cockpitint2.post.ch
dev.post.ch
apitest.post.ch
mp24hub.apis.post.ch
servicetest.post.ch
mobilecodeservice.apis.post.ch
vsc.apis.post.ch
stb-test.innovation.post.ch
spimr1.post.ch
pccweb.apitest.post.ch
webtransferint.post.ch
agentur-int.post.ch
www.post.ch
laborsendungen.post.ch
facetoface.post.ch
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
digitaler-posteingangint.post.ch
e-mobilityint.post.ch
fdsbc.post.ch
tresorit.post.ch
aaw.apis-test.post.ch
gw.incamail-dev.post.ch
gewinnende-worte.post.ch
accountint2.post.ch
rasns01.post.ch
ident.apis-dev.post.ch
test.post.ch
e-commerce.post.ch
salt-aboint.post.ch
Certificate
The complete raw certificate details for ddstest.post.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJwzCCB6ugAwIBAgIUWtTKeWKvllMTnpwMJlkRONoYUHswDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgT1YgSUNBIDIwMjIgLSAxMB4XDTI0MDMxMjE0 MzcyOVoXDTI1MDMxMjE0MzcyOVowaDELMAkGA1UEBhMCQ0gxCzAJBgNVBAgMAkJF MQ0wCwYDVQQHDARCZXJuMSMwIQYDVQQKDBpEaWUgU2Nod2VpemVyaXNjaGUgUG9z dCBBRzEYMBYGA1UEAxMPZGRzdGVzdC5wb3N0LmNoMIICIjANBgkqhkiG9w0BAQEF AAOCAg8AMIICCgKCAgEAzeaHsLTmmUhFgp2fyRo0/3l3drqxdbk67tBRVVQ89wJt mK0aTWvMHy04AovX5E9EG/l1WgP2mqfCiZ0tgg1nJKFzqkAEmaQ7r36OctsbYMM0 CjYhd8VxBd7pWKY/xE/HKL7h7p7jT9FuTPaKx6lhV+8akm6RuaLUGsam6QutwopW ljjQ+LLkaxMmY0yDsB57BLj4WLnLLQwCP+DGQKW8qD3I6HYSS3jJu5MqKh6WSjvs kNjhnpW12Sjv1rvH57IDIq6ZI/h/bQQsDMwtDyzsFvOskw4fdL794+EeYcjgb5hF /q+PlDD693edzGsnNfDmthE0qSQ44GRgMboIrz7NZ9FzAG0x4kIdTrcXBYHvqYE4 VYros9gOKCYP0OW6ebEh3Ygf1+EXml9go46gWpSyIaHs0Oq2vXPRJCES+2sUp6+y eYQgBJV+47xB3PksyFmxNWNfo09A8Yn3bSJpcdPBPq1euKrpoRMSPHM0nIrKQu9s DfJSY+uPXdvNnrxfiH2HKICbSLEoR9bU33o35u/jEvuJlJ2RaAS2o5Tq+1WH/F5T iB9czJ3UR4sAm+7ujXKX1xsPPqY9fxYfTadXa1TICESh2TqbROenE5WI8slGV+1n YSVHmRiEUqtGwdNPpUU8cMozLOtTB/lZOsbOOaeAVdImSEthcTY2ndDntBTUGbUC AwEAAaOCBHswggR3MIGyBggrBgEFBQcBAQSBpTCBojBMBggrBgEFBQcwAoZAaHR0 cDovL2FpYS5zd2lzc3NpZ24uY2gvYWlyLTBmMmJmOWE1LWRkMzctNDhjOS1hODVi LTEyYWNkY2I4YmU0NTBSBggrBgEFBQcwAYZGaHR0cDovL29jc3Auc3dpc3NzaWdu LmNoL3NpZ24vb2NzLWFhY2NjZWQ1LTY2ZTgtNDA2OS05YjFiLWZkMjlhYjczZWZl YzBvBgNVHSAEaDBmMAgGBmeBDAECAjAIBgYEAI96AQcwUAYIYIV0AVkCAQIwRDBC BggrBgEFBQcCARY2aHR0cHM6Ly9yZXBvc2l0b3J5LnN3aXNzc2lnbi5jb20vU3dp c3NTaWduX0NQU19UTFMucGRmMFEGA1UdHwRKMEgwRqBEoEKGQGh0dHA6Ly9jcmwu c3dpc3NzaWduLmNoL2NkcC05NmI2MmY1YS02YjczLTRkYTQtODdmNy1jZTQwMDJj MWNkMzQwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQE AwIFoDAaBgNVHREEEzARgg9kZHN0ZXN0LnBvc3QuY2gwHQYDVR0OBBYEFBC+pYM8 e7py9h1yhUeeghZ08Wg2MB8GA1UdIwQYMBaAFHxvCm8TD9mMJG8mNPNca0NttyO2 MIICbwYKKwYBBAHWeQIEAgSCAl8EggJbAlkAdgBVgdTCFpA2AUrqC5tXPFPwwOQ4 eHAlCBcvo6odBxPTDAAAAY4zGNjmAAAEAwBHMEUCIQCLDBx9iIWRzdlevmYenyCL 7b57FLLkwpxnLjYGjw8n2wIgWInYIEqQWeVgl1+3JnppVCRVaRoHlcbozwwyqBSg XKoAdgAo4oE4/YMhRemp1qp1N22Dd6iFErPAf3JBSCHcvemMZgAAAY4zGNxdAAAE AwBHMEUCIHXMVU/Qmo+at4XL9zSdqYl3d0dLlwxemhUbHz9d/mi/AiEA5tp2QZhC mR7XXBMgWJl26oFJjTqUkjw2EDWd9QgD7SQAdgDPEVbu1S58r/OHW9lpLpvpGnFn SrAX7KwB0lt3zsw7CAAAAY4zGNfoAAAEAwBHMEUCIEFofcmxnkcOn/oCBCrV6e3g kJZ8bBszvH1iE50ymy2yAiEApmH5YhL7K0FzXyth/3YrAANDJsV0TCJCRxF7QMNO 5nEAdgDM+w9qhXEJZf6Vm1PO6bJ8IumFXA2XjbapflTA/kwNsAAAAY4zGNhpAAAE AwBHMEUCIAYe5kJ9e6JmgTtVozLxfIQyoT+SbOqZLD9GOZKBIksGAiEAlUYS702u DXXsgYJbh7i55rsG2iyWSXWGL/DKvbYvoiEAdwBOdaMnXJoQwzhbbNTfP1LrHfDg jhuNacCx+mSxYpo53wAAAY4zGNiCAAAEAwBIMEYCIQCuoxN4ZA50EslIf5Sdn1/i 4nPCT/JU7bKvGYIdKTYYSwIhALnGgWfXTTa69g1r6tEqR5YFqVYNVjzkA2S9NdY9 p5L/MA0GCSqGSIb3DQEBCwUAA4ICAQBSPKQ6lacex8xfFo62b7n3RyJzWWPQdhCs wp6XfegetoYgM5NbRQNf/wPY+2yEGW9VYtw7YksccG9YG3kRLz4YHu42MPgNlK5w HmwYbc6QqaGwYbf+OYqI0ZzbrjuTJvNWNWx+GDGHDENUyQHJ4fWqVcll7ayqVB1F DKLZZndflzuI8RiScWGZrIEOF5Lj6fX5VLiDH8WQcWDZQBDUEROzmmY5rvXp4bGN DU8TjA2/O9JtkxIHDB4dXFgbY7efIxxgvgGMLZTjvx1UmE4027hTLd3TbEjO85JR T4g/3qd7jx1+YT+nHP5Qnl07YCmfLtzXJ6XsUFZUu7PsKuOZxI2ykkWDNmoXgcWt nCbCLS1i64GgGV0/PRjLuwsJSjFVjC1PpYmFsqaaxFIRje6g8rvCGh8z01+CepwA d7jUTQ2JfV+x1usKwR4hMCMz83J9sBLzGmxt6zZVR/41OyNzpIMuWcrmpUwSWc0H dNX0LqTWxdIHF6rgeEU1nLJHo7fhuENY9WtukkUM/DABVo23VGjatvpP+TT5/0Vy 1FieiAM7JPNDbWVQ9K0QrjNKkrABV7n1rQIIbRxi+11/XkdepD3Fh0u8rf1JqLiR CjSD0Tc8Nz2ZRNXypAsF5aeWPQ68hQ9sQ5ttokxt84ExCQ4dj4k0vvlrju1bp3O+ O57XlLvhpA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzeaHsLTmmUhFgp2fyRo0 /3l3drqxdbk67tBRVVQ89wJtmK0aTWvMHy04AovX5E9EG/l1WgP2mqfCiZ0tgg1n JKFzqkAEmaQ7r36OctsbYMM0CjYhd8VxBd7pWKY/xE/HKL7h7p7jT9FuTPaKx6lh V+8akm6RuaLUGsam6QutwopWljjQ+LLkaxMmY0yDsB57BLj4WLnLLQwCP+DGQKW8 qD3I6HYSS3jJu5MqKh6WSjvskNjhnpW12Sjv1rvH57IDIq6ZI/h/bQQsDMwtDyzs FvOskw4fdL794+EeYcjgb5hF/q+PlDD693edzGsnNfDmthE0qSQ44GRgMboIrz7N Z9FzAG0x4kIdTrcXBYHvqYE4VYros9gOKCYP0OW6ebEh3Ygf1+EXml9go46gWpSy IaHs0Oq2vXPRJCES+2sUp6+yeYQgBJV+47xB3PksyFmxNWNfo09A8Yn3bSJpcdPB Pq1euKrpoRMSPHM0nIrKQu9sDfJSY+uPXdvNnrxfiH2HKICbSLEoR9bU33o35u/j EvuJlJ2RaAS2o5Tq+1WH/F5TiB9czJ3UR4sAm+7ujXKX1xsPPqY9fxYfTadXa1TI CESh2TqbROenE5WI8slGV+1nYSVHmRiEUqtGwdNPpUU8cMozLOtTB/lZOsbOOaeA VdImSEthcTY2ndDntBTUGbUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 518554565343334706770980567565116436742474846331 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 14:37:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-12 14:37:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Die Schweizerische Post AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ddstest.post.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 840000785938307173410977851222317884339524889237923396604093523958444511248879397663982257168863546309300607963945003505233521662970137245965431898914293446272760017867949204375560256810078321331541280446453416703918172026718290959794940243606467338647544324685617185499456027130806750062629490675269617840928988240960182022432915864906713691353249894740968049966247507846646196028802901688409819575736815356285080085466137176607229297560977136908409170055667373559577498671390155492121512298147652587105097813269265069263768688924012943712953058863915848800368355097518440884675894945076200502981683743401854798124269274530988052862858490363082628134402136834173840057374986544574484575864424903832730891062951050378398924014416244975071880125080541288469356303559753739821057287958418177369354364870686906476921524759991188619227084353346080955310484508204533749393541624541554799088593880100355025882699025510157646292950965379617499308477462712364883536094804982106352115781136788859483098347782730374270911850162697549914822416844601589981535960373830082833791339438969456835611585352705583390321287012806658388187279127031782899112124021568812187878217410214037640539858552524049751858797021444750989625047623775704671713499573 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddstest.post.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 10bea5833c7bba72f61d7285479e821674f16836 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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