kurepo.apis-test.post.ch

- Die Schweizerische Post AG -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 21:e4:9f:bb:87:b3:b1:63:a9:ac:2c:bd:bd:80:45:c1:a0:bf:87:57 was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Die Schweizerische Post AG

Organization: Die Schweizerische Post AG
State / Province: BE
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 21:e4:9f:bb:87:b3:b1:63:a9:ac:2c:bd:bd:80:45:c1:a0:bf:87:57
Serial Number (int): 193495180009096248921913798014920949061073733463
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: f9:d7:73:a9:68:78:c0:5c:ca:78:e1:d3:e4:0f:3e:12:ec:86:54:4d
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): 95:56:21:06:48:f7:bd:cf:e7:c2:54:e6:1b:8a:cb:f7:f1:81:4c:e9
Fingerprint (sha256): 02:8b:c9:c1:fb:8a:80:e7:ad:89:bd:8a:c2:fb:f9:6c:1b:21:60:e3:d7:6c:cf:af:08:a0:77:05:b3:e1:ec:7f

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate kurepo.apis-test.post.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kurepo.apis-test.post.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kurepo.apis-test.post.ch

Other certificates including the domain name post.ch

(limited to 100 certificates)
fakeext.post.ch
zwab-int.post.ch
moodle.pa.post.ch
mova.post.ch
webfocus.post.ch
digitaler-posteingang.post.ch
swisspostmobile.apis-int.post.ch
securepost.post.ch
filialemitpartner.post.ch
moodle.pa.post.ch
e-collaboration-int.post.ch
jobs-int.post.ch
m-extranet.post.ch
xray.tools.post.ch
ddstest.post.ch
directpoint.post.ch
places.post.ch
new.post.ch
mapservice.post.ch
crypto-stamp.post.ch
wohnen-franklinplatz.post.ch
wwwsc.post.ch
gandalf.apis.post.ch
billingonline-dev.post.ch
dh-auth.apis.post.ch
cinfoni-germany.innovation.post.ch
vgk.apis-test.post.ch
loginint.post.ch
file-intpa-cms.post.ch
agentur-int.post.ch
gitit.post.ch
zubofi.apis-dev.post.ch
ef-testix.post.ch
transport-service.post.ch
directpoint.post.ch
ci-euw1.ireland.delivery.aimatch.net
accountint2.post.ch
address.apis-test.post.ch
docucenterint.post.ch
ci-euw1.ireland.delivery.aimatch.net
msmgateway-int.post.ch
uaasapp3rsa.post.ch
epostoffice3.post.ch
static.post.ch
location-poste-martigny.post.ch
uaasapp3rsadev2.post.ch
crypto-stamp.post.ch
gabi.apis-test.post.ch
nemoauth-test.post.ch
sorryrpz-int.post.ch
webservices-cashlog-int.post.ch
accountint1.post.ch
static.post.ch
cbt.externint.post.ch
wohnen-zollikofen.post.ch
directdayint.post.ch
apis.post.ch
gw.incamail-dev.post.ch
mx3.post.ch
salt-aboint.post.ch
ci-euw1.ireland.delivery.aimatch.net
postweb.post.ch
orgtool-int.post.ch
die-post-kann-mehrint.post.ch
erpcorp.apis-int.post.ch
schreibenint.post.ch
nemoint.post.ch
postzone.extern.post.ch
news-intern.post.ch
kurepo.apis-test.post.ch
cockpitint2.post.ch
dev.post.ch
apitest.post.ch
mp24hub.apis.post.ch
servicetest.post.ch
mobilecodeservice.apis.post.ch
vsc.apis.post.ch
stb-test.innovation.post.ch
spimr1.post.ch
pccweb.apitest.post.ch
webtransferint.post.ch
agentur-int.post.ch
www.post.ch
laborsendungen.post.ch
facetoface.post.ch
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
digitaler-posteingangint.post.ch
e-mobilityint.post.ch
fdsbc.post.ch
tresorit.post.ch
aaw.apis-test.post.ch
gw.incamail-dev.post.ch
gewinnende-worte.post.ch
accountint2.post.ch
rasns01.post.ch
ident.apis-dev.post.ch
test.post.ch
e-commerce.post.ch
salt-aboint.post.ch

Certificate

The complete raw certificate details for kurepo.apis-test.post.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJ1TCCB72gAwIBAgIUIeSfu4ezsWOprCy9vYBFwaC/h1cwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgT1YgSUNBIDIwMjIgLSAxMB4XDTI0MDQxNzE1
MDYwMloXDTI1MDQxNzE1MDYwMlowcTELMAkGA1UEBhMCQ0gxCzAJBgNVBAgMAkJF
MQ0wCwYDVQQHDARCZXJuMSMwIQYDVQQKDBpEaWUgU2Nod2VpemVyaXNjaGUgUG9z
dCBBRzEhMB8GA1UEAxMYa3VyZXBvLmFwaXMtdGVzdC5wb3N0LmNoMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4UGtjx+MELCaBVFyIKE2B3/neEsMgIc9
Erp8SvizOf9jodVbJ2yxzUPLNBnhf2E3jvRRNq6jPToQHz5foc4N2k2gFf7sQVck
Zi+t6377DLAQqNzLCu3wWc2zv9uijFM6+Fu8h2gRkBOfgMG6MXQf+CyP31miJBdl
dZdEA7rvh0CN8aklAY6PStQ04gLrjT07g4LnyMqOpCFfKUevtGWIVNeurYCzyRE4
fUjBPVPExkHG2GG479tUz8ro8apBdsLGqO5nQi1LdV5eINMJ6YEkbJYwkUlFE5Fz
UNpgHMnA4isJlMMxnttHvFRl9oVZdUKOwga0MsSkA9AKKRMTVkHLWOu5j139TBcX
OKWh80pQFFOoSFasS8x1Ct8Zi4XoOp0ksZFHs0LX2mo/zAsU/rVYFaMU6iKY64oW
rCW0gqaTfoy1Ld2vRqJ6oSgnabRg5n7eAvoakrr9oDDFx+eZcdDKS5AFW4dXvv2e
0EathJ5jvYDX2ZqwXP7v8ldp9bKm+PM+U9YQ5m2H7EPstdJGEuuk6I/q3r0MbVAD
lqkCdlzy6ykVRDvCKw04XUDB6uh4jebcj3axBV2OAQW+CIY549/ryT0pe7Y1ccGs
cLuqLfRn04H7EZYMOiyLG2LZ0LC7+Mj/ZyJyUWhKf/IWtnXKbBXNKtC6eIknn7Hh
1JBn38ZlbVUCAwEAAaOCBIQwggSAMIGyBggrBgEFBQcBAQSBpTCBojBMBggrBgEF
BQcwAoZAaHR0cDovL2FpYS5zd2lzc3NpZ24uY2gvYWlyLTBmMmJmOWE1LWRkMzct
NDhjOS1hODViLTEyYWNkY2I4YmU0NTBSBggrBgEFBQcwAYZGaHR0cDovL29jc3Au
c3dpc3NzaWduLmNoL3NpZ24vb2NzLWFhY2NjZWQ1LTY2ZTgtNDA2OS05YjFiLWZk
MjlhYjczZWZlYzBvBgNVHSAEaDBmMAgGBmeBDAECAjAIBgYEAI96AQcwUAYIYIV0
AVkCAQIwRDBCBggrBgEFBQcCARY2aHR0cHM6Ly9yZXBvc2l0b3J5LnN3aXNzc2ln
bi5jb20vU3dpc3NTaWduX0NQU19UTFMucGRmMFEGA1UdHwRKMEgwRqBEoEKGQGh0
dHA6Ly9jcmwuc3dpc3NzaWduLmNoL2NkcC05NmI2MmY1YS02YjczLTRkYTQtODdm
Ny1jZTQwMDJjMWNkMzQwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4G
A1UdDwEB/wQEAwIFoDAjBgNVHREEHDAaghhrdXJlcG8uYXBpcy10ZXN0LnBvc3Qu
Y2gwHQYDVR0OBBYEFPnXc6loeMBcynjh0+QPPhLshlRNMB8GA1UdIwQYMBaAFHxv
Cm8TD9mMJG8mNPNca0NttyO2MIICbwYKKwYBBAHWeQIEAgSCAl8EggJbAlkAdgBV
gdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAY7sl+xfAAAEAwBHMEUC
IQChmk0hLMs6GLpUuK8b/LwAdxkErdXeIXhdr0pv+NAFEAIgDXjWX3wYuS/+EhQN
t1jq5V/NNhhFTEMSWKubmZxjhfgAdQAo4oE4/YMhRemp1qp1N22Dd6iFErPAf3JB
SCHcvemMZgAAAY7sl/A+AAAEAwBGMEQCICE+TV9PZKSDuy/D76XrDv4T1pcwkEEW
R8Jr5D0QAW8hAiA20gj5xOWMql3OL86SIWIeGh1OZvNP1PL3TlIFTgwyyAB3AM8R
Vu7VLnyv84db2Wkum+kacWdKsBfsrAHSW3fOzDsIAAABjuyX61QAAAQDAEgwRgIh
AKcLGhbY1ggHPkvIO4VXY3GXitBc0E9sYOcWuQuGSPA7AiEAgohDqlZ8rt1BFwKU
ntJ9r6eV6WY4Vwec2bM+5SNzEiUAdgDM+w9qhXEJZf6Vm1PO6bJ8IumFXA2Xjbap
flTA/kwNsAAAAY7sl+t3AAAEAwBHMEUCIQDctGIAb0SwJvaDfRsmu3i6mHMz3E+0
U3JZO+AFzNSVqgIge+QHwgqs8MUumeVjOT+njDvcRg36yxYKzzmuQqGGqqEAdwBO
daMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAY7sl+1DAAAEAwBIMEYC
IQC+7Fbxbtd/CyNteGqbolwX1A6VX+YiPK9mubaQU49hpAIhALkbVo89voGPyyrJ
yYIgSUQ95fxPf/vRW4AQp7F153DcMA0GCSqGSIb3DQEBCwUAA4ICAQAUVZ12YRw4
QBj/RvIs+6vZ4uZTsqx//LtuHJcQ7YurHYNCvZQGvOUXyzdCNqcMGkwbq8oo1NAX
o3HcvhHta332mK7v/vmzv0ZbIGs37RYAic7k9JIIYng17CjMWPcPnOSTt5RuMu2K
3Ll4vhNldSFT09b/mYh9NlPe2BS0gREq2eBsYndzTitpNGvjybH2QlB+2lG45sUB
bRJEMkwNkvs6qzOFZdOzDsOnvKAWUiBMcIo2McdTsYRwIAUeBJHgUtADOz9p7Kql
nxji8s/VjoVPzRDv77qYkXFqH6a2/azApgg9CDNqT3YOOc5o3t+z2xFtNgG3bDC9
sH3f0QhwJj0evuP9EyAJPJ6Ac+AjqCFILNMu0aCsHzYFtiqQqa/P9paz9SqsyxHm
iG8h0AnJeCl14ExWwhAkacl0nwyWc7v7TAAo+bLqkdi5cZ+zmG7oJMF0J80uegF9
pJxjlKyrd8x8VuO3MvCQJDPmGYDPGiXgrw6j4z+XPYIddfXAU7lhBplO+ndOv0Xo
7Pp2p4ZFXZ7/vL/fh5CFWxB+yStwtZ4LeKdqaO4nPGsuMCQKdVIhLCqZB84/BwUI
9t6PqL/sLOA6NIeybvryZBB8jTo3v88/DJ0IW1kalKIFM0iqJ3aO32vJ7j2DjRS9
HPWNToIGS4h5B80OHLDPefm1wsiKaKeMoQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4UGtjx+MELCaBVFyIKE2
B3/neEsMgIc9Erp8SvizOf9jodVbJ2yxzUPLNBnhf2E3jvRRNq6jPToQHz5foc4N
2k2gFf7sQVckZi+t6377DLAQqNzLCu3wWc2zv9uijFM6+Fu8h2gRkBOfgMG6MXQf
+CyP31miJBdldZdEA7rvh0CN8aklAY6PStQ04gLrjT07g4LnyMqOpCFfKUevtGWI
VNeurYCzyRE4fUjBPVPExkHG2GG479tUz8ro8apBdsLGqO5nQi1LdV5eINMJ6YEk
bJYwkUlFE5FzUNpgHMnA4isJlMMxnttHvFRl9oVZdUKOwga0MsSkA9AKKRMTVkHL
WOu5j139TBcXOKWh80pQFFOoSFasS8x1Ct8Zi4XoOp0ksZFHs0LX2mo/zAsU/rVY
FaMU6iKY64oWrCW0gqaTfoy1Ld2vRqJ6oSgnabRg5n7eAvoakrr9oDDFx+eZcdDK
S5AFW4dXvv2e0EathJ5jvYDX2ZqwXP7v8ldp9bKm+PM+U9YQ5m2H7EPstdJGEuuk
6I/q3r0MbVADlqkCdlzy6ykVRDvCKw04XUDB6uh4jebcj3axBV2OAQW+CIY549/r
yT0pe7Y1ccGscLuqLfRn04H7EZYMOiyLG2LZ0LC7+Mj/ZyJyUWhKf/IWtnXKbBXN
KtC6eIknn7Hh1JBn38ZlbVUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 193495180009096248921913798014920949061073733463
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 15:06:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-17 15:06:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Die Schweizerische Post AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kurepo.apis-test.post.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 918966566557933162442942805437915368608181823111545445481032804896369416208573042551344799022064442041696217647380917324783968617214756872528347767023568939095965838132511153788350788923104261996580766009742832174533357919180840914532957922748284604741813758709872602834924679920783873955193834436772759180993337964482198357984433818062429291933727650961356915610096819699371619821971424295267258550709641598949079635928231250822824470375415585665898481043466894709461378271254161819675453601399480288500923124370235407217039449932382760819282613619056498514911695986096482336200617435931615441678629066017703003719628337248306624941795195232784774173237972245444504527612860368594417334546449296144777472747940206816484125748212452644357795085636729915276997200106104471544152296199498133375024089010343734563133052480217952338858247650225947917629301619915884704235988099290914899111123019521214554758189924666593379555242345219680628982629781632209442579572260744288105134104944544308810810265305407906270561039772429496258072537773049323349238709183468278013449219917956869866660857079999847582077492531690607648414107825547339930270639203465578990906040170058763499498379725583045221165415210580172991807627669363392146884095317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurepo.apis-test.post.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f9d773a96878c05cca78e1d3e40f3e12ec86544d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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