csgw-test.postfinance.ch
- PostFinance AG -
Issued by SwissSign RSA TLS OV ICA 2021 - 1
About this certificate
This digital certificate with serial number 57:ad:ab:d1:4e:f8:f8:a4:1e:31:02:44:56:81:4d:3f:01:f2:e0:8a was issued on by SwissSign AG.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
PostFinance AG
Organization:
PostFinance AG
State / Province:
BE
Locality: Bern
Country: CH
Locality: Bern
Country: CH
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate has expire since
Certificate Details
Serial Number (hex): 57:ad:ab:d1:4e:f8:f8:a4:1e:31:02:44:56:81:4d:3f:01:f2:e0:8aSerial Number (int): 500555193405901370222568864818835758312663998602
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: dc:64:f3:7d:e7:34:5e:fb:00:82:31:51:03:b8:0d:86:28:5f:54:f9
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d
Fingerprint (sha1): 9c:d1:a0:61:61:3b:a1:c3:f5:64:4a:92:fb:30:29:86:86:7a:7c:a3
Fingerprint (sha256): 01:49:e7:cb:c5:ec:00:56:fd:e7:0d:cc:7a:d1:58:f7:90:78:0a:41:45:75:4e:29:ae:15:2a:15:06:ce:45:2e
Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D
Revocation information
OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3DCRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint
Check the revocation status for certificate csgw-test.postfinance.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for csgw-test.postfinance.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
csgw-test.postfinance.ch
Other certificates including the domain name postfinance.ch
(limited to 100 certificates)
www.postfinance.ch
e-archiv.postfinance.ch
aliasreg.postfinance.ch
e-finance.postfinance.ch
jobs.postfinance.ch
pfportalmo.postfinance.ch
csgw-test.postfinance.ch
proof.doc-shop.postfinance.ch
commercioestero.postfinance.ch
egw-test.postfinance.ch
e-payment.postfinance.ch
sventest.postfinance.ch
youth.postfinance.ch
pfportalext-test.postfinance.ch
sgtm.postfinance.ch
sipskypebe.post.ch
pfsb-admin-test.postfinance.ch
smartbusiness.postfinance.ch
onlinehypothek-test.postfinance.ch
www-poc-test.postfinance.ch
plano.postfinance.ch
mapps-test.postfinance.ch
www.wcm-test.postfinance.ch
www.doc-shop.postfinance.ch
testplattform.postfinance.ch
oauth.postfinance.ch
privatkredit-peprod.postfinance.ch
www.postfinance.ch
dev.plusfinance.postfinance.ch
outlook.post.ch
benefit.postfinance.ch
egw.postfinance.ch
versicherungen.postfinance.ch
ebics-test.postfinance.ch
sventest.postfinance.ch
pfsb-test.postfinance.ch
universal-t2.postfinance.ch
egw-test.postfinance.ch
3dsec.postfinance.ch
dev.tilbago.postfinance.ch
pfportalmo.postfinance.ch
sipskypebe.post.ch
dev.young.postfinance.ch
tilbago.postfinance.ch
statusitservices.postfinance.ch
events-test.postfinance.ch
digitalpfc.int.postfinance.ch
pfportalmo-test.postfinance.ch
sventest.postfinance.ch
m.commercioestero.postfinance.ch
rivista.postfinance.ch
ai.ep2.postfinance.ch
ef-t2.postfinance.ch
jira-dev.postfinance.ch
epayment.postfinance.ch
www-test.postfinance.ch
sandbox1.postfinance.ch
sandbox1.postfinance.ch
collector-test.postfinance.ch
mapps-test.postfinance.ch
sventest.postfinance.ch
egw.postfinance.ch
hosting.postfinance.ch
nladh-t2.postfinance.ch
aussenhandel.postfinance.ch
plano.postfinance.ch
epayment.postfinance.ch
yellowpay.postfinance.ch
nlsec.postfinance.ch
challengethefuture.postfinance.ch
skypeweb.post.ch
pfsb.postfinance.ch
plano.postfinance.ch
pfportalmo.postfinance.ch
events-test.postfinance.ch
csgw-t2.postfinance.ch
epayment-test.postfinance.ch
dev.magazine.postfinance.ch
mapps.postfinance.ch
ef-t2.postfinance.ch
meet.post.ch
young.postfinance.ch
epayment.postfinance.ch
www-test.postfinance.ch
pfportalmo-test.postfinance.ch
e-trading.postfinance.ch
www-poc-test.postfinance.ch
pfportalext-test.postfinance.ch
events-test.postfinance.ch
pfportalmo.postfinance.ch
bqztyw.postfinance.ch
young.postfinance.ch
questback.postfinance.ch
www.plusfinance.postfinance.ch
csgw-test.postfinance.ch
stage.tour.postfinance.ch
3dsec.postfinance.ch
www2.postfinance.ch
teleoptipf.postfinance.ch
plano.postfinance.ch
e-archiv.postfinance.ch
aliasreg.postfinance.ch
e-finance.postfinance.ch
jobs.postfinance.ch
pfportalmo.postfinance.ch
csgw-test.postfinance.ch
proof.doc-shop.postfinance.ch
commercioestero.postfinance.ch
egw-test.postfinance.ch
e-payment.postfinance.ch
sventest.postfinance.ch
youth.postfinance.ch
pfportalext-test.postfinance.ch
sgtm.postfinance.ch
sipskypebe.post.ch
pfsb-admin-test.postfinance.ch
smartbusiness.postfinance.ch
onlinehypothek-test.postfinance.ch
www-poc-test.postfinance.ch
plano.postfinance.ch
mapps-test.postfinance.ch
www.wcm-test.postfinance.ch
www.doc-shop.postfinance.ch
testplattform.postfinance.ch
oauth.postfinance.ch
privatkredit-peprod.postfinance.ch
www.postfinance.ch
dev.plusfinance.postfinance.ch
outlook.post.ch
benefit.postfinance.ch
egw.postfinance.ch
versicherungen.postfinance.ch
ebics-test.postfinance.ch
sventest.postfinance.ch
pfsb-test.postfinance.ch
universal-t2.postfinance.ch
egw-test.postfinance.ch
3dsec.postfinance.ch
dev.tilbago.postfinance.ch
pfportalmo.postfinance.ch
sipskypebe.post.ch
dev.young.postfinance.ch
tilbago.postfinance.ch
statusitservices.postfinance.ch
events-test.postfinance.ch
digitalpfc.int.postfinance.ch
pfportalmo-test.postfinance.ch
sventest.postfinance.ch
m.commercioestero.postfinance.ch
rivista.postfinance.ch
ai.ep2.postfinance.ch
ef-t2.postfinance.ch
jira-dev.postfinance.ch
epayment.postfinance.ch
www-test.postfinance.ch
sandbox1.postfinance.ch
sandbox1.postfinance.ch
collector-test.postfinance.ch
mapps-test.postfinance.ch
sventest.postfinance.ch
egw.postfinance.ch
hosting.postfinance.ch
nladh-t2.postfinance.ch
aussenhandel.postfinance.ch
plano.postfinance.ch
epayment.postfinance.ch
yellowpay.postfinance.ch
nlsec.postfinance.ch
challengethefuture.postfinance.ch
skypeweb.post.ch
pfsb.postfinance.ch
plano.postfinance.ch
pfportalmo.postfinance.ch
events-test.postfinance.ch
csgw-t2.postfinance.ch
epayment-test.postfinance.ch
dev.magazine.postfinance.ch
mapps.postfinance.ch
ef-t2.postfinance.ch
meet.post.ch
young.postfinance.ch
epayment.postfinance.ch
www-test.postfinance.ch
pfportalmo-test.postfinance.ch
e-trading.postfinance.ch
www-poc-test.postfinance.ch
pfportalext-test.postfinance.ch
events-test.postfinance.ch
pfportalmo.postfinance.ch
bqztyw.postfinance.ch
young.postfinance.ch
questback.postfinance.ch
www.plusfinance.postfinance.ch
csgw-test.postfinance.ch
stage.tour.postfinance.ch
3dsec.postfinance.ch
www2.postfinance.ch
teleoptipf.postfinance.ch
plano.postfinance.ch
Certificate
The complete raw certificate details for csgw-test.postfinance.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKBTCCB+2gAwIBAgIUV62r0U74+KQeMQJEVoFNPwHy4IowDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgT1YgSUNBIDIwMjEgLSAxMB4XDTIyMDcxMjA2 NDkzN1oXDTIzMDcxMjA2NDkzN1owZTELMAkGA1UEBhMCQ0gxCzAJBgNVBAgTAkJF MQ0wCwYDVQQHEwRCZXJuMRcwFQYDVQQKEw5Qb3N0RmluYW5jZSBBRzEhMB8GA1UE AxMYY3Nndy10ZXN0LnBvc3RmaW5hbmNlLmNoMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAi3fOtx/iT85vjdnYb753NDXYq1FuY9dN+KhRlYtZSvmet+6+ mAMuHIV5ZRTgv1ta70Q/cD1iQFND6jbTIJJ9k8zjD+/VaBfw1PPWpy4v4Mse0O8N zaEj6dTKA6RrthBU5GxNO+6kMKmrk15Bp3BycD8Z6iUaLroh1XOOVSjE9ynpd6VH SkQ1qENQdS6Holi1xghJMwQLPp+sG64p1+pDF4GeFij1lb2HP/8fMQzx0y5kjfPf aShT14JFAYihMPWgi99GXOMc/m6fV5GzcWKmoKy9BiInl8+1w+ob9PFHC0IKzY2h awzUQlU9VbxW1Ar3GdUsKaVvIFORHVt4ogfmuwIDAQABo4IFwDCCBbwwIwYDVR0R BBwwGoIYY3Nndy10ZXN0LnBvc3RmaW5hbmNlLmNoMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFNxk833nNF77 AIIxUQO4DYYoX1T5MB8GA1UdIwQYMBaAFKzQOsLCV1WRaRHMcGpZOIqMrJw9MIH/ BgNVHR8EgfcwgfQwR6BFoEOGQWh0dHA6Ly9jcmwuc3dpc3NzaWduLm5ldC9BQ0Qw M0FDMkMyNTc1NTkxNjkxMUNDNzA2QTU5Mzg4QThDQUM5QzNEMIGooIGloIGihoGf bGRhcDovL2RpcmVjdG9yeS5zd2lzc3NpZ24ubmV0L0NOPUFDRDAzQUMyQzI1NzU1 OTE2OTExQ0M3MDZBNTkzODhBOENBQzlDM0QlMkNPPVN3aXNzU2lnbiUyQ0M9Q0g/ Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdD9iYXNlP29iamVjdENsYXNzPWNSTERp c3RyaWJ1dGlvblBvaW50MG8GA1UdIARoMGYwUAYIYIV0AVkCAQIwRDBCBggrBgEF BQcCARY2aHR0cHM6Ly9yZXBvc2l0b3J5LnN3aXNzc2lnbi5jb20vU3dpc3NTaWdu X0NQU19UTFMucGRmMAgGBgQAj3oBBzAIBgZngQwBAgIwgcYGCCsGAQUFBwEBBIG5 MIG2MGQGCCsGAQUFBzAChlhodHRwOi8vc3dpc3NzaWduLm5ldC9jZ2ktYmluL2F1 dGhvcml0eS9kb3dubG9hZC9BQ0QwM0FDMkMyNTc1NTkxNjkxMUNDNzA2QTU5Mzg4 QThDQUM5QzNEME4GCCsGAQUFBzABhkJodHRwOi8vb2NzcC5zd2lzc3NpZ24ubmV0 L0FDRDAzQUMyQzI1NzU1OTE2OTExQ0M3MDZBNTkzODhBOENBQzlDM0QwggLoBgor BgEEAdZ5AgQCBIIC2ASCAtQC0gB3AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+j qh0HE9MMAAABgfErpWoAAAQDAEgwRgIhAPu53Sjx4fX/V0UyOW73FF1/Lbu9K/Gt tqrwLV8VPN29AiEAn+CpwfXx4k5cJPoCtsP7yioiC6nTXdRU05DpSa0gE28AdwBv U3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAYHxK6RBAAAEAwBIMEYC IQDmJrnYiceO1H2K6sij1d/KodNbpVsKPI7jX+iBjwTvzAIhAPMvE4tvYQneAtQW H7Ums3IncG9aU2yTQH6m0MJP5FJgAHcAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvS K8E6V6NS61IAAAGB8SukggAABAMASDBGAiEA95b06xzCkEhlVsYM1YJ1CNjV72nv ktiLyI9670Zyie0CIQCmoFfqiyCGpbzkZXKhhZvAOEkyeiN9B4FoGhEvXiPb4wB1 AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABgfErpBwAAAQDAEYw RAIgJLN+n2HXQRtG6GWvkAG7NUjIYeNmW7+MEXGePfr9sjQCICVHebO7u451MQcP yeC2QPZclUOVv6uUf9OMqbybU/doAHYAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH 3PADDnk2pZoAAAGB8SulTgAABAMARzBFAiBGHllMvIgluNjgM87+OvynJP9xP6p6 iOcaqj0oujjPewIhAME5HV1SFrsyIfBMrystAxXwP9F5glJLgvNS3x1Hh8EGAHYA 6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGB8SukUAAABAMARzBF AiANBGIEpNts+ZSXgEt91OdoUkd4gr7WJoti0sOWzRm8kQIhANtnTa1k5XuyAtyR IIcTV3zR4nGxkr1PQ+7DMeBtMzdjMA0GCSqGSIb3DQEBCwUAA4ICAQAbCGD7s94g vw6bNIXUvIQxtGqi/h8vkmfy7aR6XYTacZvHlLYwKZB3Q/o4YM8UVIUBD5GPv5rT Y7Gr6WbaPCG2WMAHFhTuJhNHC1T5GTexOwmfDdb9z3qehpymrMOAB2fdD3FhIHPL NuPUT/GFA2G7WzAAt3EE90HbLnqC7wwkUc5sR0JG7P1TSeeJhIMs3VfDVrGLt2pp qYSFB781HNmWf90KwSGZuw9SbpyUp0qYyxxMrHZThhg8K3s6uVTqN6V2BIfKgGgL r9TAgkyVPnV1h7giG0yfZpDrircshK/KUACLC7XvIe/0mUNso3GRFdEKjqoIRXi2 0Vgmd4+EVolMuV7pi6yAWQSwIY3S4Wzxk27ZU+tUbWn3fq/8ewUku2AC+F28PlY3 /E0+XE1H9mOsSFucrsOp+1VAvfc1r2LeGhrGRbyzqKel3yxG6GaTiZ1OSZVfobFQ evykK4in4rBerxNz5izryFe9XbqPCBRtLRvvVaZ0WgdD9EwFAcu+bFfSM8zNNq1T LCHlUzOrgkQuoPr6KuOzwIpfsAIY5ZGBGmc0OWP7hRDGdG3aXqhqN4BslHkh6SK4 VxD0ILuysn04VqH8Wn0C7xsyQGOyqHmUUuXk6FpAfKY24F8D1cyWgp56Az6aDSne LCq++ANDBCMCArYMYafDBT3LOmr4JpkccA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3fOtx/iT85vjdnYb753 NDXYq1FuY9dN+KhRlYtZSvmet+6+mAMuHIV5ZRTgv1ta70Q/cD1iQFND6jbTIJJ9 k8zjD+/VaBfw1PPWpy4v4Mse0O8NzaEj6dTKA6RrthBU5GxNO+6kMKmrk15Bp3By cD8Z6iUaLroh1XOOVSjE9ynpd6VHSkQ1qENQdS6Holi1xghJMwQLPp+sG64p1+pD F4GeFij1lb2HP/8fMQzx0y5kjfPfaShT14JFAYihMPWgi99GXOMc/m6fV5GzcWKm oKy9BiInl8+1w+ob9PFHC0IKzY2hawzUQlU9VbxW1Ar3GdUsKaVvIFORHVt4ogfm uwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 500555193405901370222568864818835758312663998602 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-12 06:49:37 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-12 06:49:37 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostFinance AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'csgw-test.postfinance.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17606203661452020701028317477157904644334569951398098128762560207787770260434633287082810639755175314436501049276258798382049804692903353629350548179702493258128037781389502230477876537291866590455190356147939430977912895218389907355260635630326761815074376865218170177360637607828014237201765669807133830855489151807901128108105225400758062105804510116655878172417243184747323637162367342178027722805811116103968595749633437628196721391488525105044481652165852071466115642698479909888177547515355693224695281693976392135953872855032523014119651515045313994031264692520996435931723985619582215993320311029602093360827 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csgw-test.postfinance.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dc64f37de7345efb0082315103b80d86285f54f9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (728 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (724 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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