kurepo.apis-test.post.ch
- Die Schweizerische Post AG -
Issued by SwissSign RSA TLS OV ICA 2022 - 1
About this certificate
This digital certificate with serial number 21:e4:9f:bb:87:b3:b1:63:a9:ac:2c:bd:bd:80:45:c1:a0:bf:87:57 was issued on by SwissSign AG.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Die Schweizerische Post AG
Organization:
Die Schweizerische Post AG
State / Province:
BE
Locality: Bern
Country: CH
Locality: Bern
Country: CH
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate will expire on
Certificate Details
Serial Number (hex): 21:e4:9f:bb:87:b3:b1:63:a9:ac:2c:bd:bd:80:45:c1:a0:bf:87:57Serial Number (int): 193495180009096248921913798014920949061073733463
Serial Number lenght: 158 bits, 20 octets
SubjectKeyId: f9:d7:73:a9:68:78:c0:5c:ca:78:e1:d3:e4:0f:3e:12:ec:86:54:4d
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6
Fingerprint (sha1): 95:56:21:06:48:f7:bd:cf:e7:c2:54:e6:1b:8a:cb:f7:f1:81:4c:e9
Fingerprint (sha256): 02:8b:c9:c1:fb:8a:80:e7:ad:89:bd:8a:c2:fb:f9:6c:1b:21:60:e3:d7:6c:cf:af:08:a0:77:05:b3:e1:ec:7f
Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45
Revocation information
OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efecCRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34
Check the revocation status for certificate kurepo.apis-test.post.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kurepo.apis-test.post.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kurepo.apis-test.post.ch
Other certificates including the domain name post.ch
(limited to 100 certificates)
fakeext.post.ch
zwab-int.post.ch
moodle.pa.post.ch
mova.post.ch
webfocus.post.ch
digitaler-posteingang.post.ch
swisspostmobile.apis-int.post.ch
securepost.post.ch
filialemitpartner.post.ch
moodle.pa.post.ch
e-collaboration-int.post.ch
jobs-int.post.ch
m-extranet.post.ch
xray.tools.post.ch
ddstest.post.ch
directpoint.post.ch
places.post.ch
new.post.ch
mapservice.post.ch
crypto-stamp.post.ch
wohnen-franklinplatz.post.ch
wwwsc.post.ch
gandalf.apis.post.ch
billingonline-dev.post.ch
dh-auth.apis.post.ch
cinfoni-germany.innovation.post.ch
vgk.apis-test.post.ch
loginint.post.ch
file-intpa-cms.post.ch
agentur-int.post.ch
gitit.post.ch
zubofi.apis-dev.post.ch
ef-testix.post.ch
transport-service.post.ch
directpoint.post.ch
ci-euw1.ireland.delivery.aimatch.net
accountint2.post.ch
address.apis-test.post.ch
docucenterint.post.ch
ci-euw1.ireland.delivery.aimatch.net
msmgateway-int.post.ch
uaasapp3rsa.post.ch
epostoffice3.post.ch
static.post.ch
location-poste-martigny.post.ch
uaasapp3rsadev2.post.ch
crypto-stamp.post.ch
gabi.apis-test.post.ch
nemoauth-test.post.ch
sorryrpz-int.post.ch
webservices-cashlog-int.post.ch
accountint1.post.ch
static.post.ch
cbt.externint.post.ch
wohnen-zollikofen.post.ch
directdayint.post.ch
apis.post.ch
gw.incamail-dev.post.ch
mx3.post.ch
salt-aboint.post.ch
ci-euw1.ireland.delivery.aimatch.net
postweb.post.ch
orgtool-int.post.ch
die-post-kann-mehrint.post.ch
erpcorp.apis-int.post.ch
schreibenint.post.ch
nemoint.post.ch
postzone.extern.post.ch
news-intern.post.ch
kurepo.apis-test.post.ch
cockpitint2.post.ch
dev.post.ch
apitest.post.ch
mp24hub.apis.post.ch
servicetest.post.ch
mobilecodeservice.apis.post.ch
vsc.apis.post.ch
stb-test.innovation.post.ch
spimr1.post.ch
pccweb.apitest.post.ch
webtransferint.post.ch
agentur-int.post.ch
www.post.ch
laborsendungen.post.ch
facetoface.post.ch
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
digitaler-posteingangint.post.ch
e-mobilityint.post.ch
fdsbc.post.ch
tresorit.post.ch
aaw.apis-test.post.ch
gw.incamail-dev.post.ch
gewinnende-worte.post.ch
accountint2.post.ch
rasns01.post.ch
ident.apis-dev.post.ch
test.post.ch
e-commerce.post.ch
salt-aboint.post.ch
zwab-int.post.ch
moodle.pa.post.ch
mova.post.ch
webfocus.post.ch
digitaler-posteingang.post.ch
swisspostmobile.apis-int.post.ch
securepost.post.ch
filialemitpartner.post.ch
moodle.pa.post.ch
e-collaboration-int.post.ch
jobs-int.post.ch
m-extranet.post.ch
xray.tools.post.ch
ddstest.post.ch
directpoint.post.ch
places.post.ch
new.post.ch
mapservice.post.ch
crypto-stamp.post.ch
wohnen-franklinplatz.post.ch
wwwsc.post.ch
gandalf.apis.post.ch
billingonline-dev.post.ch
dh-auth.apis.post.ch
cinfoni-germany.innovation.post.ch
vgk.apis-test.post.ch
loginint.post.ch
file-intpa-cms.post.ch
agentur-int.post.ch
gitit.post.ch
zubofi.apis-dev.post.ch
ef-testix.post.ch
transport-service.post.ch
directpoint.post.ch
ci-euw1.ireland.delivery.aimatch.net
accountint2.post.ch
address.apis-test.post.ch
docucenterint.post.ch
ci-euw1.ireland.delivery.aimatch.net
msmgateway-int.post.ch
uaasapp3rsa.post.ch
epostoffice3.post.ch
static.post.ch
location-poste-martigny.post.ch
uaasapp3rsadev2.post.ch
crypto-stamp.post.ch
gabi.apis-test.post.ch
nemoauth-test.post.ch
sorryrpz-int.post.ch
webservices-cashlog-int.post.ch
accountint1.post.ch
static.post.ch
cbt.externint.post.ch
wohnen-zollikofen.post.ch
directdayint.post.ch
apis.post.ch
gw.incamail-dev.post.ch
mx3.post.ch
salt-aboint.post.ch
ci-euw1.ireland.delivery.aimatch.net
postweb.post.ch
orgtool-int.post.ch
die-post-kann-mehrint.post.ch
erpcorp.apis-int.post.ch
schreibenint.post.ch
nemoint.post.ch
postzone.extern.post.ch
news-intern.post.ch
kurepo.apis-test.post.ch
cockpitint2.post.ch
dev.post.ch
apitest.post.ch
mp24hub.apis.post.ch
servicetest.post.ch
mobilecodeservice.apis.post.ch
vsc.apis.post.ch
stb-test.innovation.post.ch
spimr1.post.ch
pccweb.apitest.post.ch
webtransferint.post.ch
agentur-int.post.ch
www.post.ch
laborsendungen.post.ch
facetoface.post.ch
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
digitaler-posteingangint.post.ch
e-mobilityint.post.ch
fdsbc.post.ch
tresorit.post.ch
aaw.apis-test.post.ch
gw.incamail-dev.post.ch
gewinnende-worte.post.ch
accountint2.post.ch
rasns01.post.ch
ident.apis-dev.post.ch
test.post.ch
e-commerce.post.ch
salt-aboint.post.ch
Certificate
The complete raw certificate details for kurepo.apis-test.post.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJ1TCCB72gAwIBAgIUIeSfu4ezsWOprCy9vYBFwaC/h1cwDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgT1YgSUNBIDIwMjIgLSAxMB4XDTI0MDQxNzE1 MDYwMloXDTI1MDQxNzE1MDYwMlowcTELMAkGA1UEBhMCQ0gxCzAJBgNVBAgMAkJF MQ0wCwYDVQQHDARCZXJuMSMwIQYDVQQKDBpEaWUgU2Nod2VpemVyaXNjaGUgUG9z dCBBRzEhMB8GA1UEAxMYa3VyZXBvLmFwaXMtdGVzdC5wb3N0LmNoMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4UGtjx+MELCaBVFyIKE2B3/neEsMgIc9 Erp8SvizOf9jodVbJ2yxzUPLNBnhf2E3jvRRNq6jPToQHz5foc4N2k2gFf7sQVck Zi+t6377DLAQqNzLCu3wWc2zv9uijFM6+Fu8h2gRkBOfgMG6MXQf+CyP31miJBdl dZdEA7rvh0CN8aklAY6PStQ04gLrjT07g4LnyMqOpCFfKUevtGWIVNeurYCzyRE4 fUjBPVPExkHG2GG479tUz8ro8apBdsLGqO5nQi1LdV5eINMJ6YEkbJYwkUlFE5Fz UNpgHMnA4isJlMMxnttHvFRl9oVZdUKOwga0MsSkA9AKKRMTVkHLWOu5j139TBcX OKWh80pQFFOoSFasS8x1Ct8Zi4XoOp0ksZFHs0LX2mo/zAsU/rVYFaMU6iKY64oW rCW0gqaTfoy1Ld2vRqJ6oSgnabRg5n7eAvoakrr9oDDFx+eZcdDKS5AFW4dXvv2e 0EathJ5jvYDX2ZqwXP7v8ldp9bKm+PM+U9YQ5m2H7EPstdJGEuuk6I/q3r0MbVAD lqkCdlzy6ykVRDvCKw04XUDB6uh4jebcj3axBV2OAQW+CIY549/ryT0pe7Y1ccGs cLuqLfRn04H7EZYMOiyLG2LZ0LC7+Mj/ZyJyUWhKf/IWtnXKbBXNKtC6eIknn7Hh 1JBn38ZlbVUCAwEAAaOCBIQwggSAMIGyBggrBgEFBQcBAQSBpTCBojBMBggrBgEF BQcwAoZAaHR0cDovL2FpYS5zd2lzc3NpZ24uY2gvYWlyLTBmMmJmOWE1LWRkMzct NDhjOS1hODViLTEyYWNkY2I4YmU0NTBSBggrBgEFBQcwAYZGaHR0cDovL29jc3Au c3dpc3NzaWduLmNoL3NpZ24vb2NzLWFhY2NjZWQ1LTY2ZTgtNDA2OS05YjFiLWZk MjlhYjczZWZlYzBvBgNVHSAEaDBmMAgGBmeBDAECAjAIBgYEAI96AQcwUAYIYIV0 AVkCAQIwRDBCBggrBgEFBQcCARY2aHR0cHM6Ly9yZXBvc2l0b3J5LnN3aXNzc2ln bi5jb20vU3dpc3NTaWduX0NQU19UTFMucGRmMFEGA1UdHwRKMEgwRqBEoEKGQGh0 dHA6Ly9jcmwuc3dpc3NzaWduLmNoL2NkcC05NmI2MmY1YS02YjczLTRkYTQtODdm Ny1jZTQwMDJjMWNkMzQwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4G A1UdDwEB/wQEAwIFoDAjBgNVHREEHDAaghhrdXJlcG8uYXBpcy10ZXN0LnBvc3Qu Y2gwHQYDVR0OBBYEFPnXc6loeMBcynjh0+QPPhLshlRNMB8GA1UdIwQYMBaAFHxv Cm8TD9mMJG8mNPNca0NttyO2MIICbwYKKwYBBAHWeQIEAgSCAl8EggJbAlkAdgBV gdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAY7sl+xfAAAEAwBHMEUC IQChmk0hLMs6GLpUuK8b/LwAdxkErdXeIXhdr0pv+NAFEAIgDXjWX3wYuS/+EhQN t1jq5V/NNhhFTEMSWKubmZxjhfgAdQAo4oE4/YMhRemp1qp1N22Dd6iFErPAf3JB SCHcvemMZgAAAY7sl/A+AAAEAwBGMEQCICE+TV9PZKSDuy/D76XrDv4T1pcwkEEW R8Jr5D0QAW8hAiA20gj5xOWMql3OL86SIWIeGh1OZvNP1PL3TlIFTgwyyAB3AM8R Vu7VLnyv84db2Wkum+kacWdKsBfsrAHSW3fOzDsIAAABjuyX61QAAAQDAEgwRgIh AKcLGhbY1ggHPkvIO4VXY3GXitBc0E9sYOcWuQuGSPA7AiEAgohDqlZ8rt1BFwKU ntJ9r6eV6WY4Vwec2bM+5SNzEiUAdgDM+w9qhXEJZf6Vm1PO6bJ8IumFXA2Xjbap flTA/kwNsAAAAY7sl+t3AAAEAwBHMEUCIQDctGIAb0SwJvaDfRsmu3i6mHMz3E+0 U3JZO+AFzNSVqgIge+QHwgqs8MUumeVjOT+njDvcRg36yxYKzzmuQqGGqqEAdwBO daMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAY7sl+1DAAAEAwBIMEYC IQC+7Fbxbtd/CyNteGqbolwX1A6VX+YiPK9mubaQU49hpAIhALkbVo89voGPyyrJ yYIgSUQ95fxPf/vRW4AQp7F153DcMA0GCSqGSIb3DQEBCwUAA4ICAQAUVZ12YRw4 QBj/RvIs+6vZ4uZTsqx//LtuHJcQ7YurHYNCvZQGvOUXyzdCNqcMGkwbq8oo1NAX o3HcvhHta332mK7v/vmzv0ZbIGs37RYAic7k9JIIYng17CjMWPcPnOSTt5RuMu2K 3Ll4vhNldSFT09b/mYh9NlPe2BS0gREq2eBsYndzTitpNGvjybH2QlB+2lG45sUB bRJEMkwNkvs6qzOFZdOzDsOnvKAWUiBMcIo2McdTsYRwIAUeBJHgUtADOz9p7Kql nxji8s/VjoVPzRDv77qYkXFqH6a2/azApgg9CDNqT3YOOc5o3t+z2xFtNgG3bDC9 sH3f0QhwJj0evuP9EyAJPJ6Ac+AjqCFILNMu0aCsHzYFtiqQqa/P9paz9SqsyxHm iG8h0AnJeCl14ExWwhAkacl0nwyWc7v7TAAo+bLqkdi5cZ+zmG7oJMF0J80uegF9 pJxjlKyrd8x8VuO3MvCQJDPmGYDPGiXgrw6j4z+XPYIddfXAU7lhBplO+ndOv0Xo 7Pp2p4ZFXZ7/vL/fh5CFWxB+yStwtZ4LeKdqaO4nPGsuMCQKdVIhLCqZB84/BwUI 9t6PqL/sLOA6NIeybvryZBB8jTo3v88/DJ0IW1kalKIFM0iqJ3aO32vJ7j2DjRS9 HPWNToIGS4h5B80OHLDPefm1wsiKaKeMoQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4UGtjx+MELCaBVFyIKE2 B3/neEsMgIc9Erp8SvizOf9jodVbJ2yxzUPLNBnhf2E3jvRRNq6jPToQHz5foc4N 2k2gFf7sQVckZi+t6377DLAQqNzLCu3wWc2zv9uijFM6+Fu8h2gRkBOfgMG6MXQf +CyP31miJBdldZdEA7rvh0CN8aklAY6PStQ04gLrjT07g4LnyMqOpCFfKUevtGWI VNeurYCzyRE4fUjBPVPExkHG2GG479tUz8ro8apBdsLGqO5nQi1LdV5eINMJ6YEk bJYwkUlFE5FzUNpgHMnA4isJlMMxnttHvFRl9oVZdUKOwga0MsSkA9AKKRMTVkHL WOu5j139TBcXOKWh80pQFFOoSFasS8x1Ct8Zi4XoOp0ksZFHs0LX2mo/zAsU/rVY FaMU6iKY64oWrCW0gqaTfoy1Ld2vRqJ6oSgnabRg5n7eAvoakrr9oDDFx+eZcdDK S5AFW4dXvv2e0EathJ5jvYDX2ZqwXP7v8ldp9bKm+PM+U9YQ5m2H7EPstdJGEuuk 6I/q3r0MbVADlqkCdlzy6ykVRDvCKw04XUDB6uh4jebcj3axBV2OAQW+CIY549/r yT0pe7Y1ccGscLuqLfRn04H7EZYMOiyLG2LZ0LC7+Mj/ZyJyUWhKf/IWtnXKbBXN KtC6eIknn7Hh1JBn38ZlbVUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 193495180009096248921913798014920949061073733463 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 15:06:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-17 15:06:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Die Schweizerische Post AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kurepo.apis-test.post.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 918966566557933162442942805437915368608181823111545445481032804896369416208573042551344799022064442041696217647380917324783968617214756872528347767023568939095965838132511153788350788923104261996580766009742832174533357919180840914532957922748284604741813758709872602834924679920783873955193834436772759180993337964482198357984433818062429291933727650961356915610096819699371619821971424295267258550709641598949079635928231250822824470375415585665898481043466894709461378271254161819675453601399480288500923124370235407217039449932382760819282613619056498514911695986096482336200617435931615441678629066017703003719628337248306624941795195232784774173237972245444504527612860368594417334546449296144777472747940206816484125748212452644357795085636729915276997200106104471544152296199498133375024089010343734563133052480217952338858247650225947917629301619915884704235988099290914899111123019521214554758189924666593379555242345219680628982629781632209442579572260744288105134104944544308810810265305407906270561039772429496258072537773049323349238709183468278013449219917956869866660857079999847582077492531690607648414107825547339930270639203465578990906040170058763499498379725583045221165415210580172991807627669363392146884095317 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurepo.apis-test.post.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f9d773a96878c05cca78e1d3e40f3e12ec86544d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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