nemoauth-test.post.ch

- Post CH AG -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 69:96:1a:8d:64:fe:a6:42:30:fe:03:4d:b9:8f:3f:ff:60:86:89:d6 was issued on by SwissSign AG.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Post CH AG

Organization: Post CH AG
State / Province: Bern
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 69:96:1a:8d:64:fe:a6:42:30:fe:03:4d:b9:8f:3f:ff:60:86:89:d6
Serial Number (int): 602791455749775720239221354324132431326945380822
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: cf:b2:d1:11:fb:59:e6:d7:1f:86:bf:6c:b0:14:51:20:fc:2f:97:09
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): 46:66:39:32:c3:16:e3:1a:fc:c0:ae:13:81:9d:06:9e:54:31:55:17
Fingerprint (sha256): 01:fd:75:cf:79:7d:cb:f4:30:31:ca:32:0a:64:37:1b:82:8a:9d:99:59:55:49:de:cb:8d:63:f2:fc:23:90:64

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate nemoauth-test.post.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nemoauth-test.post.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nemoauth-test.post.ch

Other certificates including the domain name post.ch

(limited to 100 certificates)
fakeext.post.ch
zwab-int.post.ch
moodle.pa.post.ch
mova.post.ch
webfocus.post.ch
securepost.post.ch
filialemitpartner.post.ch
moodle.pa.post.ch
e-collaboration-int.post.ch
jobs-int.post.ch
m-extranet.post.ch
xray.tools.post.ch
directpoint.post.ch
places.post.ch
new.post.ch
mapservice.post.ch
wohnen-franklinplatz.post.ch
wwwsc.post.ch
gandalf.apis.post.ch
billingonline-dev.post.ch
dh-auth.apis.post.ch
cinfoni-germany.innovation.post.ch
loginint.post.ch
file-intpa-cms.post.ch
agentur-int.post.ch
gitit.post.ch
zubofi.apis-dev.post.ch
ef-testix.post.ch
transport-service.post.ch
directpoint.post.ch
ci-euw1.ireland.delivery.aimatch.net
accountint2.post.ch
address.apis-test.post.ch
docucenterint.post.ch
ci-euw1.ireland.delivery.aimatch.net
msmgateway-int.post.ch
epostoffice3.post.ch
static.post.ch
location-poste-martigny.post.ch
crypto-stamp.post.ch
gabi.apis-test.post.ch
nemoauth-test.post.ch
sorryrpz-int.post.ch
webservices-cashlog-int.post.ch
accountint1.post.ch
static.post.ch
cbt.externint.post.ch
wohnen-zollikofen.post.ch
directdayint.post.ch
apis.post.ch
gw.incamail-dev.post.ch
mx3.post.ch
ci-euw1.ireland.delivery.aimatch.net
postweb.post.ch
orgtool-int.post.ch
die-post-kann-mehrint.post.ch
erpcorp.apis-int.post.ch
schreibenint.post.ch
nemoint.post.ch
postzone.extern.post.ch
news-intern.post.ch
cockpitint2.post.ch
apitest.post.ch
mp24hub.apis.post.ch
mobilecodeservice.apis.post.ch
vsc.apis.post.ch
stb-test.innovation.post.ch
pccweb.apitest.post.ch
webtransferint.post.ch
agentur-int.post.ch
laborsendungen.post.ch
facetoface.post.ch
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
digitaler-posteingangint.post.ch
e-mobilityint.post.ch
fdsbc.post.ch
tresorit.post.ch
gw.incamail-dev.post.ch
gewinnende-worte.post.ch
accountint2.post.ch
rasns01.post.ch
ident.apis-dev.post.ch
test.post.ch
e-commerce.post.ch
salt-aboint.post.ch
96749.post.ch
juravote-int.post.ch
sventest.post.ch
sventest.post.ch
e-mobilityint.post.ch
sapmsint.post.ch
gollum.apis-dev.post.ch
www.post.ch
service.post.ch
opera.apis-test.post.ch
address.apis-test.post.ch
news-intern.post.ch
awsegpf.post.ch
mapservice.post.ch

Certificate

The complete raw certificate details for nemoauth-test.post.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKgjCCCGqgAwIBAgIUaZYajWT+pkIw/gNNuY8//2CGidYwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgT1YgSUNBIDIwMjEgLSAxMB4XDTIyMTIxNDA3
MDQ0MloXDTIzMTIxNDA3MDQ0MlowYDELMAkGA1UEBhMCQ0gxDTALBgNVBAgTBEJl
cm4xDTALBgNVBAcTBEJlcm4xEzARBgNVBAoTClBvc3QgQ0ggQUcxHjAcBgNVBAMT
FW5lbW9hdXRoLXRlc3QucG9zdC5jaDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
AgoCggIBAJ8Pbx4dTx4U12sRQIu0SG00LE8xbdLIFGgBZegkVwnT9/aK5S/uYOcW
bdQQV1rNGzmwF/ZVR0ZT9i3cTbu53aonqt6J74mLdCIyyXKCvK0hS0VpX2uTGpWj
BO+HsgNCrjecxmKTrFnBBbYlzXtTyaaynlEJIvcgBMjoZZ7PitFMb41+FQyr0upT
EPYa4JHruvhWBgw0WUnkfdWf0b0txqNyfv5JtH4cVccrED0OiV/sYAXT3UH7TZMI
cazQtlQrHkZzXBEZuZA+iRySOk3/foYS2apACsuDNSTYBkt+s9qqHec9mI+Q0NBw
XoygvQ+9TBve46RClW6W5kP0z0MYlqNiUqb8e3uVcPI5MuAgLxTWNRM6RnFvlmV+
CQ8OkY9dUnf+WnqhuR1pjdvMjTuKcG97GM02p4bQX4CoqPiXPDE1d58a30o2XhJy
w5DyLFTVjARLUC9iyTYYswjYpvTrie2fn0inhx+n3rPeeVjhJCWnM0afFuTjR7GI
Wstrdb0jlZc3UHHZNylgRs1DsTH/27mDU5Wv7Sm51fB4eV1+QGt4GMC4rUlRnTzV
Yeyq7oT8e7lyzF7yhsL8tGVGc9hoa06wHj7gqgvlnWbAHVpIQgN0yafLA1PTWJBu
C0cjyJjY9FlEnLzBCroLTpN0sVVqwtkKII5+m4KwI2USIbTmnCWxAgMBAAGjggVC
MIIFPjAgBgNVHREEGTAXghVuZW1vYXV0aC10ZXN0LnBvc3QuY2gwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQU
z7LREftZ5tcfhr9ssBRRIPwvlwkwHwYDVR0jBBgwFoAUrNA6wsJXVZFpEcxwalk4
ioysnD0wgf8GA1UdHwSB9zCB9DBHoEWgQ4ZBaHR0cDovL2NybC5zd2lzc3NpZ24u
bmV0L0FDRDAzQUMyQzI1NzU1OTE2OTExQ0M3MDZBNTkzODhBOENBQzlDM0Qwgaig
gaWggaKGgZ9sZGFwOi8vZGlyZWN0b3J5LnN3aXNzc2lnbi5uZXQvQ049QUNEMDNB
QzJDMjU3NTU5MTY5MTFDQzcwNkE1OTM4OEE4Q0FDOUMzRCUyQ089U3dpc3NTaWdu
JTJDQz1DSD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0P2Jhc2U/b2JqZWN0Q2xh
c3M9Y1JMRGlzdHJpYnV0aW9uUG9pbnQwbwYDVR0gBGgwZjBQBghghXQBWQIBAjBE
MEIGCCsGAQUFBwIBFjZodHRwczovL3JlcG9zaXRvcnkuc3dpc3NzaWduLmNvbS9T
d2lzc1NpZ25fQ1BTX1RMUy5wZGYwCAYGBACPegEHMAgGBmeBDAECAjCBxgYIKwYB
BQUHAQEEgbkwgbYwZAYIKwYBBQUHMAKGWGh0dHA6Ly9zd2lzc3NpZ24ubmV0L2Nn
aS1iaW4vYXV0aG9yaXR5L2Rvd25sb2FkL0FDRDAzQUMyQzI1NzU1OTE2OTExQ0M3
MDZBNTkzODhBOENBQzlDM0QwTgYIKwYBBQUHMAGGQmh0dHA6Ly9vY3NwLnN3aXNz
c2lnbi5uZXQvQUNEMDNBQzJDMjU3NTU5MTY5MTFDQzcwNkE1OTM4OEE4Q0FDOUMz
RDCCAm0GCisGAQQB1nkCBAIEggJdBIICWQJXAHUAVYHUwhaQNgFK6gubVzxT8MDk
OHhwJQgXL6OqHQcT0wwAAAGFD3Mn7gAABAMARjBEAiB0KXdSyaJOFAMPisVhX8bU
9kdt9EIJJfT3YjDEO2y6agIgWtUmc+sG/ir9Q6KwE/t+WmfuyGK5MRYGS11O9YA5
vLEAdQB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYUPcygKAAAE
AwBGMEQCIANgk/+4NDw5nf2Y0AV+IMGNWlLvZjWaM3tsm79dqNFeAiBs8/F3xsfD
3xYCg+pBBwyNGQcB0SRdIAXIbgBpMFZwXQB2ALNzdwfhhFD4Y4bWBancEQlKeS2x
ZwwLh9zwAw55NqWaAAABhQ9zKIMAAAQDAEcwRQIgUAWMcC/yA8O7DLYNTnTtYbAp
PUz6ouVMdCT+1ZwaGI8CIQCioR4jX7nXtuNuNUJSPI59ZwblVsOAmIuNgD+ekcn8
KQB3AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABhQ9zKToAAAQD
AEgwRgIhAK7F2YsX0f2yUeWJnATxMfyGuYH8drrswmY6MdpqCe2zAiEA0FSxCUmo
QH3y9gZ9Q9w8ggm9ht2kFQD/9VpjU9diGg4AdgDofqdmC8Js9gAu9XJdP+DjMbk5
O7kvv1jrO5BJ2vVDWgAAAYUPcyojAAAEAwBHMEUCIC+iBne83u5ae78CaZaDTS/k
rOpdtHWEPcYR4psmYPZUAiEAy6lnwbGxqYaBp0yrpCj4zA5WDpT18P5b6KVwEFkI
aeEwDQYJKoZIhvcNAQELBQADggIBAC0niYyLUmsL6DyS64un6xknKS4dLTDE80mu
w8Pk98LqwNqA4mcQQBTXOI+WYBK6qEiO65M7v6WkbL5q9NbvV3tZmj+BcsMfwkrE
LeKkZJP0EWRV01n/z08Td8gfqJ2m/v6kBNxB5yW+rGSPazg1M6jjFphMuvHs5jAD
KLKHEz8cFkVMtj6zu3n4HnkSjkkLDQE5pp8a2afHKG4ryJ8dFGX4oPp8E3+ztIC6
3yLLDopllKUDMFMocwoJMJ9LZ9RlEjRRnAcphn2bUu+3O5GoK9wQw6tMIDfHW9lT
h04HhHLw+PAbn177skZp9JhMjdLKM3fKd9YXcrPWVxCosDpGz9kZR5WWcnXEXrQ7
MGZaIl1SHdI9+NBWcFNTSL9anlNs4CYFUe01S1Odhh8wYx7aX4x4kxTjk520uarY
jelWoHeMZjOuP8esIzpk9O3E2uTEk4yHlVrwZfsP7x6GCoKLWU1pfyPDq2ZvblAi
4+Cs7IpWh/+LyAZy9xW0iC8MrF4KiTS0dKWTnSnAvjfis+hYQF6+paGKKf+1UTls
95lonAEDKso706Uo/pGASIPMvN2uBgDylP91n8/8MYIDokvimWUhMCeAsV3e693f
9VwZZEKNbjOCFvWzz4zPc5B4Km1PmZ6/Zt0V3GDl9EIVmGhKouFOxeLn1JlqmoQG
X1gAZOP7
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 602791455749775720239221354324132431326945380822
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-14 07:04:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 07:04:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Post CH AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nemoauth-test.post.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 648909365580162009610583196073115289246669752350067756007925651083178749677582962619138573540729198864041783924445478188256305600485261156405354761111057348182732153204617954574428391788743901736548741389181189598021436443169393966285289997755575688345263598234645921975916592636880934608138389325700202657433401909487282322986171134456403519266200381245324093976780402471094598678876749271581901255791144641158583005672252147780641468897182714413417507186341915933113220993838084212304779887046076976231590518175446529374187174925143780845940591276634969866000361653734834877735638574011784102104793233373971836697805040586972293877224412761073081458137840176659318282287126527221597641756993243482681841892520946248205205409535631890126965146976504878811263896920674691876623532216485961187073724774427749286852367234122196081573325837471041627722932048959612461747462532307514377140712490483956002417149738185952312121681019603879427523880365682374951061385084102795195470232455437658212162135771724417171280484246487538296280227409084387894989090837115276137803093380135717460054188444639777610704669661484995914458590832519263735350095199116980198560493052725139638715108468486281444324593120636357947500413195873147147331052977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nemoauth-test.post.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cfb2d111fb59e6d71f86bf6cb0145120fc2f9709
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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