erpcorp.apis-int.post.ch

- Post CH AG -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 12:43:dc:bb:28:75:eb:d8:f7:a3:64:6c:56:c7:4f:08:f5:d7:6b:74 was issued on by SwissSign AG.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Post CH AG

Organization: Post CH AG
State / Province: BE
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 12:43:dc:bb:28:75:eb:d8:f7:a3:64:6c:56:c7:4f:08:f5:d7:6b:74
Serial Number (int): 104275212192619666776459905375529252221242272628
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: b6:8c:5a:a7:37:53:ed:66:50:2f:6d:bb:40:aa:83:9a:f4:4f:24:0e
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): cb:d9:07:0b:1f:0b:86:8e:d4:41:20:1b:90:a5:b0:ed:1d:0a:26:88
Fingerprint (sha256): 02:6e:ea:2e:04:61:db:a5:7b:ac:8c:ca:6f:4c:1b:c2:f5:cd:bb:f0:c3:fc:fb:9f:12:c3:d5:e7:b3:fe:ca:e4

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate erpcorp.apis-int.post.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for erpcorp.apis-int.post.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

erpcorp.apis-int.post.ch

Other certificates including the domain name post.ch

(limited to 100 certificates)
fakeext.post.ch
zwab-int.post.ch
moodle.pa.post.ch
mova.post.ch
webfocus.post.ch
digitaler-posteingang.post.ch
securepost.post.ch
filialemitpartner.post.ch
moodle.pa.post.ch
e-collaboration-int.post.ch
jobs-int.post.ch
m-extranet.post.ch
xray.tools.post.ch
directpoint.post.ch
places.post.ch
new.post.ch
mapservice.post.ch
wohnen-franklinplatz.post.ch
wwwsc.post.ch
gandalf.apis.post.ch
billingonline-dev.post.ch
dh-auth.apis.post.ch
cinfoni-germany.innovation.post.ch
loginint.post.ch
file-intpa-cms.post.ch
agentur-int.post.ch
gitit.post.ch
zubofi.apis-dev.post.ch
ef-testix.post.ch
transport-service.post.ch
directpoint.post.ch
ci-euw1.ireland.delivery.aimatch.net
accountint2.post.ch
address.apis-test.post.ch
docucenterint.post.ch
ci-euw1.ireland.delivery.aimatch.net
msmgateway-int.post.ch
uaasapp3rsa.post.ch
epostoffice3.post.ch
static.post.ch
location-poste-martigny.post.ch
uaasapp3rsadev2.post.ch
crypto-stamp.post.ch
gabi.apis-test.post.ch
nemoauth-test.post.ch
sorryrpz-int.post.ch
webservices-cashlog-int.post.ch
accountint1.post.ch
static.post.ch
cbt.externint.post.ch
wohnen-zollikofen.post.ch
directdayint.post.ch
apis.post.ch
gw.incamail-dev.post.ch
mx3.post.ch
salt-aboint.post.ch
ci-euw1.ireland.delivery.aimatch.net
postweb.post.ch
orgtool-int.post.ch
die-post-kann-mehrint.post.ch
erpcorp.apis-int.post.ch
schreibenint.post.ch
nemoint.post.ch
postzone.extern.post.ch
news-intern.post.ch
cockpitint2.post.ch
apitest.post.ch
mp24hub.apis.post.ch
servicetest.post.ch
mobilecodeservice.apis.post.ch
vsc.apis.post.ch
stb-test.innovation.post.ch
pccweb.apitest.post.ch
webtransferint.post.ch
agentur-int.post.ch
www.post.ch
laborsendungen.post.ch
facetoface.post.ch
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
digitaler-posteingangint.post.ch
e-mobilityint.post.ch
fdsbc.post.ch
tresorit.post.ch
gw.incamail-dev.post.ch
gewinnende-worte.post.ch
accountint2.post.ch
rasns01.post.ch
ident.apis-dev.post.ch
test.post.ch
e-commerce.post.ch
salt-aboint.post.ch
96749.post.ch
juravote-int.post.ch
sventest.post.ch
sventest.post.ch
patient.sanela.dh.post.ch
e-mobilityint.post.ch
sapmsint.post.ch
gollum.apis-dev.post.ch

Certificate

The complete raw certificate details for erpcorp.apis-int.post.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKDzCCB/egAwIBAgIUEkPcuyh169j3o2RsVsdPCPXXa3QwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgT1YgSUNBIDIwMjEgLSAxMB4XDTIzMDMwNjA3
MzMzMloXDTI0MDMwNjA3MzMzMlowYTELMAkGA1UEBhMCQ0gxCzAJBgNVBAgTAkJF
MQ0wCwYDVQQHEwRCZXJuMRMwEQYDVQQKEwpQb3N0IENIIEFHMSEwHwYDVQQDExhl
cnBjb3JwLmFwaXMtaW50LnBvc3QuY2gwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
ggIKAoICAQCpTCzd9F0YL3DpeYv8hBDcrujksCKn9FbiFXigiDHxocmL9D4iHLVW
smIiHratkWEhI9a77ym3BNzgQfYu72WEBYeArj0XNDxHfxb4gsLoKY9AwXyuyjSe
tYoqUZAuhaOOjlHPxF39N6Qml5amX0RBjTjm2vI3NHgA+J5Z1XSaZFigaXq6yfAM
29yhZpNUPM84nrmZuQu41JVc5gYWv83ofadmXtCeb7KYQc/Kf/RhvRIvHbE7/4Zz
ZLvrJFT1U3IPRlzQHQbAe6aCKgaOMGAZ/gxWSO7jD0w8HILSz8ZJiMPLWQREZCSt
sshAMIkPbwwC3ehH095FWC2I9HIPPqpG7imL/EULIGsvXffuKPYyc0v33vqzJ6/C
OZW5OgthF/SFZL+UPyNa9Sg1gG8WtDUJvqvZ9Nm3lc3rFK9vMM+LVj8rz3Z69m5b
1mTLTFXgmRwlY354RYlvZw1XQe4mZet3s42wUkuKZaMEUH7iramed8Dt5l7yJYpf
HPiBrSnXFc4Arz1WbosLuTzLc17ctYdS0q/ayWii3pjpcDf9FuseFhqXEQ30Vyfc
0COHexFERh3eXfGuA2hULXwq7A3bXOWySQInhNLBDiMM7ZGMt2rjJ/aSG9E3AXs5
WU71CkavpUsGwyQifjJcgoc9uwy6JNciKHZ5dySC4Tlqbrk6OadN0QIDAQABo4IE
zjCCBMowIwYDVR0RBBwwGoIYZXJwY29ycC5hcGlzLWludC5wb3N0LmNoMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0O
BBYEFLaMWqc3U+1mUC9tu0Cqg5r0TyQOMB8GA1UdIwQYMBaAFKzQOsLCV1WRaRHM
cGpZOIqMrJw9MIH/BgNVHR8EgfcwgfQwR6BFoEOGQWh0dHA6Ly9jcmwuc3dpc3Nz
aWduLm5ldC9BQ0QwM0FDMkMyNTc1NTkxNjkxMUNDNzA2QTU5Mzg4QThDQUM5QzNE
MIGooIGloIGihoGfbGRhcDovL2RpcmVjdG9yeS5zd2lzc3NpZ24ubmV0L0NOPUFD
RDAzQUMyQzI1NzU1OTE2OTExQ0M3MDZBNTkzODhBOENBQzlDM0QlMkNPPVN3aXNz
U2lnbiUyQ0M9Q0g/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdD9iYXNlP29iamVj
dENsYXNzPWNSTERpc3RyaWJ1dGlvblBvaW50MG8GA1UdIARoMGYwUAYIYIV0AVkC
AQIwRDBCBggrBgEFBQcCARY2aHR0cHM6Ly9yZXBvc2l0b3J5LnN3aXNzc2lnbi5j
b20vU3dpc3NTaWduX0NQU19UTFMucGRmMAgGBgQAj3oBBzAIBgZngQwBAgIwgcYG
CCsGAQUFBwEBBIG5MIG2MGQGCCsGAQUFBzAChlhodHRwOi8vc3dpc3NzaWduLm5l
dC9jZ2ktYmluL2F1dGhvcml0eS9kb3dubG9hZC9BQ0QwM0FDMkMyNTc1NTkxNjkx
MUNDNzA2QTU5Mzg4QThDQUM5QzNEME4GCCsGAQUFBzABhkJodHRwOi8vb2NzcC5z
d2lzc3NpZ24ubmV0L0FDRDAzQUMyQzI1NzU1OTE2OTExQ0M3MDZBNTkzODhBOENB
QzlDM0QwggH2BgorBgEEAdZ5AgQCBIIB5gSCAeIB4AB2AFWB1MIWkDYBSuoLm1c8
U/DA5Dh4cCUIFy+jqh0HE9MMAAABhrXXB3gAAAQDAEcwRQIgKCVNV3Q9GQEflcUu
4NHp7D34auc5nsaihdhMuneBJa4CIQC7+HYwU5kjkpGf60n5pXr2XKG1yvJkyhdT
5PFXwcQeHgB2AHPZnokbTJZ4oCB9R53mssYc0FFecRkqjGuAEHrBd3K1AAABhrXX
B7UAAAQDAEcwRQIgCYP/8dmNlHsxoBt7tuObRQo8hp/+tENkfEkT1bcqDmACIQDt
Wrjg+mrCBGbMo0pwslDJZB5tW2ON1ccCoF4Wdnhc5AB2ANq2v2s/tbYin5vCu1xr
6HCRcWy7UYSFNL2kPTBI1/urAAABhrXXBd0AAAQDAEcwRQIhAPZgGcT+yBna96nh
VU0NMwrlUH1zYAr5Ma4lbk2wsDECAiA9A35kU5bydsxBwpO+aLIlsuL1STA8A4Zc
K632tygUoQB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABhrXX
B/IAAAQDAEcwRQIhAIApU1wZil6+kp/OPabLupS4M9qDPL261XHE1qPIdPrKAiA0
E55TKJclWW78/bH1jhLbe83hIAI3hrGgD+ocOcOL4zANBgkqhkiG9w0BAQsFAAOC
AgEABlyHrgvsY3Fvgo+jlkGAbKLgaYARhMLmujsru4Qo7ASP8in7t/cDqu5g8XIU
YCjsR5LPsEQJDhkzFp3OM91wnjjPX9wPnutKSb+pY+eeIaYWrprpzXYrshoHmUok
2o8+LzBMpyBd/0795hYCQ7jS9XbMAmUgAi9KNKtYUJzTfPGJINC4TJsN1Rj1FQOL
6QK5SpGngmth3v7Zyl5kaS1zryMvlj+qaesqD1gX8VXBzSD+3c/Q+UzzfAMWGRNL
+g3it8igwIrtrXoCRwII1XB+c/uuOzS+CEP1L4MPkWuZP8PGE3lUfphqzBoBxmrD
zoukVuZO4LzyaeNHZdrTNabsFEg5t1RYBcSZEWSNHoSvW6irIs48lwxQp6z0FqSe
mEmajpRCRU6fQBR/xVobiDkU/IogKrkTb4lqrPotgkSn6FaK3gLlxjnvdKLoGSxU
l1XVa3bBmHchAKdIhHubUX2TEI0wZBuaTSM5WJLkeYtexe2bzTzoSL4xhfm5DflS
mnriRyMjsGVQWc2VfpNfdA8bJZf0AtUL4YYIkkV8nyhOKTKpaFgWdUUKXDPSlwYY
6kCyyxr41M8VjJrJm7pZIutIjwXdQzRqcUOXBoZScuhbcqS2qxrrGVUXVr5JehTP
gEY4CpfRiwmHJr/H5p6Agwa27sAFd33B7hnW8d6qTYPGDzU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 104275212192619666776459905375529252221242272628
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-06 07:33:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 07:33:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Post CH AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'erpcorp.apis-int.post.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 690673784818679733407856672681503316184691238894456433710277320631059913214642634493892595507190487949110754794185905280629144795489896381039969010439194868808199973186037366567361372840507168153424502447528846986511495275436692864609244117988362774957357469353699851102752656621803618998069905592394496725071890910557632002800798209717656045052252612088189153799809444054303143232210240970732359238689302033326550744620040498307672614999689347357425146726648824173892363979734467180369673884613097038723894658187903712910171254310643298275265876961514267288490802688158908578742087292653986898613616627569822157187067373839619637578246924737703768966893112096941613575614703068744695002116454298399677686891001533361192223652414697543970698643319568566157786376825006264777357457378283160625915851924985569913429527658947827027328926975019637404698370644882762220618338963389933761474929816535342776844663981708480183897667655116851676198514897880146376615562982124263349470275442543956399201037743465163682904184702179613606761460721444544838351548060415918229816593605555033930206113655043445888836900014978627934225521469360748221850733159300761910592891885587065746212765620037509535615799773876528783537351723341929011885854161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erpcorp.apis-int.post.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b68c5aa73753ed66502f6dbb40aa839af44f240e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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