mp24hub.apis.post.ch

- Die Schweizerische Post AG -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 2d:3e:54:e7:67:3b:65:a4:68:55:08:8e:be:56:86:27:a4:68:33:52 was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Die Schweizerische Post AG

Organization: Die Schweizerische Post AG
State / Province: BE
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 2d:3e:54:e7:67:3b:65:a4:68:55:08:8e:be:56:86:27:a4:68:33:52
Serial Number (int): 258294627063845594452347816506317412221397250898
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 37:a0:4c:e7:19:51:7a:2a:a2:d4:b9:3c:24:05:fa:5f:5e:a7:f4:57
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): c9:e3:58:3e:6f:3a:e4:19:f0:48:c7:64:c9:69:3a:1b:fe:5b:12:e9
Fingerprint (sha256): 02:c4:57:c1:b6:65:08:0d:f1:7b:d0:8e:fe:8d:a8:f3:8e:9e:1f:40:e4:b0:d3:38:ad:41:45:af:57:dc:c6:71

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate mp24hub.apis.post.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mp24hub.apis.post.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mp24hub.apis.post.ch

Other certificates including the domain name post.ch

(limited to 100 certificates)
fakeext.post.ch
zwab-int.post.ch
moodle.pa.post.ch
mova.post.ch
webfocus.post.ch
digitaler-posteingang.post.ch
securepost.post.ch
filialemitpartner.post.ch
moodle.pa.post.ch
e-collaboration-int.post.ch
jobs-int.post.ch
m-extranet.post.ch
xray.tools.post.ch
directpoint.post.ch
places.post.ch
new.post.ch
mapservice.post.ch
wohnen-franklinplatz.post.ch
wwwsc.post.ch
gandalf.apis.post.ch
billingonline-dev.post.ch
dh-auth.apis.post.ch
cinfoni-germany.innovation.post.ch
loginint.post.ch
file-intpa-cms.post.ch
agentur-int.post.ch
gitit.post.ch
zubofi.apis-dev.post.ch
ef-testix.post.ch
transport-service.post.ch
directpoint.post.ch
ci-euw1.ireland.delivery.aimatch.net
accountint2.post.ch
address.apis-test.post.ch
docucenterint.post.ch
ci-euw1.ireland.delivery.aimatch.net
msmgateway-int.post.ch
uaasapp3rsa.post.ch
epostoffice3.post.ch
static.post.ch
location-poste-martigny.post.ch
uaasapp3rsadev2.post.ch
crypto-stamp.post.ch
gabi.apis-test.post.ch
nemoauth-test.post.ch
sorryrpz-int.post.ch
webservices-cashlog-int.post.ch
accountint1.post.ch
static.post.ch
cbt.externint.post.ch
wohnen-zollikofen.post.ch
directdayint.post.ch
apis.post.ch
gw.incamail-dev.post.ch
mx3.post.ch
salt-aboint.post.ch
ci-euw1.ireland.delivery.aimatch.net
postweb.post.ch
orgtool-int.post.ch
die-post-kann-mehrint.post.ch
erpcorp.apis-int.post.ch
schreibenint.post.ch
nemoint.post.ch
postzone.extern.post.ch
news-intern.post.ch
cockpitint2.post.ch
apitest.post.ch
mp24hub.apis.post.ch
servicetest.post.ch
mobilecodeservice.apis.post.ch
vsc.apis.post.ch
stb-test.innovation.post.ch
pccweb.apitest.post.ch
webtransferint.post.ch
agentur-int.post.ch
www.post.ch
laborsendungen.post.ch
facetoface.post.ch
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
digitaler-posteingangint.post.ch
e-mobilityint.post.ch
fdsbc.post.ch
tresorit.post.ch
gw.incamail-dev.post.ch
gewinnende-worte.post.ch
accountint2.post.ch
rasns01.post.ch
ident.apis-dev.post.ch
test.post.ch
e-commerce.post.ch
salt-aboint.post.ch
96749.post.ch
juravote-int.post.ch
sventest.post.ch
sventest.post.ch
patient.sanela.dh.post.ch
e-mobilityint.post.ch
sapmsint.post.ch
gollum.apis-dev.post.ch

Certificate

The complete raw certificate details for mp24hub.apis.post.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 258294627063845594452347816506317412221397250898
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-19 13:31:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-19 13:31:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Die Schweizerische Post AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mp24hub.apis.post.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 786513110865152630033570761955017931170070103460197872930388007059162282419330746617680420627138079303852920752097210217341038447580110121930510232083054150528401926167284494107187773290762326303604155025153652603191588250361753198186481297299485453465023656416232326856186704292866195157930128958894269042510521165502352352564416734810072127944572777957249499578858003115269484927290522607791723901671731925836826970511837854501721772408287177289931159835818337649517794200080347038740912017732183231263644191375255656895966342493200377864293648637772352773229083431506267229331615548650268146855812739635731454899260255645735458810678009859033667732519773013256572923313193635072579519456910831949656663284291196746467879480989225655367545469034516307868935546334770369086145037881129714758310948773240239515822862115301023929542490415738531253109694952518094614639377939785552089190671532092892518448793631446761935356377372666398207256025818508546648945379417583607721280289240192070611807387615454942248294645466970127879291204954982483771186397779244593159298794088042024754911383920908835865041272141376813813309885695464200234778090692762967527848867440717184003324054034853122832092340982556729193754188676016173067955121717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mp24hub.apis.post.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37a04ce719517a2aa2d4b93c2405fa5f5ea7f457
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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