www.post.ch

- Die Schweizerische Post AG -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 0b:37:37:24:b6:29:43:dc:39:dc:e3:f3:f4:a2:af:2a:0b:3a:ea:ec was issued on by SwissSign AG.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Die Schweizerische Post AG

Organization: Die Schweizerische Post AG
State / Province: BE
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:37:37:24:b6:29:43:dc:39:dc:e3:f3:f4:a2:af:2a:0b:3a:ea:ec
Serial Number (int): 64030243133006630780300796475577416232994532076
Serial Number lenght: 156 bits, 20 octets

SubjectKeyId: 27:dc:2d:78:92:5e:02:14:53:d2:6a:11:95:c5:31:93:b9:d9:b8:ee
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): 8d:4e:7e:df:b7:af:7a:1d:3f:a3:26:76:83:92:d1:90:f5:5d:f4:51
Fingerprint (sha256): 03:1d:a3:67:fb:a0:1d:7d:58:9c:a0:b1:54:68:7b:8d:d5:7e:d3:e0:88:15:cc:eb:be:e3:20:63:d0:dc:19:3a

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate www.post.ch

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.post.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.post.ch
www1.post.ch
www2.post.ch
www3.post.ch
www4.post.ch
post.ch

Other certificates including the domain name post.ch

(limited to 100 certificates)
fakeext.post.ch
zwab-int.post.ch
moodle.pa.post.ch
mova.post.ch
webfocus.post.ch
digitaler-posteingang.post.ch
securepost.post.ch
filialemitpartner.post.ch
moodle.pa.post.ch
e-collaboration-int.post.ch
jobs-int.post.ch
m-extranet.post.ch
xray.tools.post.ch
ddstest.post.ch
directpoint.post.ch
places.post.ch
new.post.ch
mapservice.post.ch
wohnen-franklinplatz.post.ch
wwwsc.post.ch
gandalf.apis.post.ch
billingonline-dev.post.ch
dh-auth.apis.post.ch
cinfoni-germany.innovation.post.ch
vgk.apis-test.post.ch
loginint.post.ch
file-intpa-cms.post.ch
agentur-int.post.ch
gitit.post.ch
zubofi.apis-dev.post.ch
ef-testix.post.ch
transport-service.post.ch
directpoint.post.ch
ci-euw1.ireland.delivery.aimatch.net
accountint2.post.ch
address.apis-test.post.ch
docucenterint.post.ch
ci-euw1.ireland.delivery.aimatch.net
msmgateway-int.post.ch
uaasapp3rsa.post.ch
epostoffice3.post.ch
static.post.ch
location-poste-martigny.post.ch
uaasapp3rsadev2.post.ch
crypto-stamp.post.ch
gabi.apis-test.post.ch
nemoauth-test.post.ch
sorryrpz-int.post.ch
webservices-cashlog-int.post.ch
accountint1.post.ch
static.post.ch
cbt.externint.post.ch
wohnen-zollikofen.post.ch
directdayint.post.ch
apis.post.ch
gw.incamail-dev.post.ch
mx3.post.ch
salt-aboint.post.ch
ci-euw1.ireland.delivery.aimatch.net
postweb.post.ch
orgtool-int.post.ch
die-post-kann-mehrint.post.ch
erpcorp.apis-int.post.ch
schreibenint.post.ch
nemoint.post.ch
postzone.extern.post.ch
news-intern.post.ch
kurepo.apis-test.post.ch
cockpitint2.post.ch
dev.post.ch
apitest.post.ch
mp24hub.apis.post.ch
servicetest.post.ch
mobilecodeservice.apis.post.ch
vsc.apis.post.ch
stb-test.innovation.post.ch
pccweb.apitest.post.ch
webtransferint.post.ch
agentur-int.post.ch
www.post.ch
laborsendungen.post.ch
facetoface.post.ch
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
digitaler-posteingangint.post.ch
e-mobilityint.post.ch
fdsbc.post.ch
tresorit.post.ch
aaw.apis-test.post.ch
gw.incamail-dev.post.ch
gewinnende-worte.post.ch
accountint2.post.ch
rasns01.post.ch
ident.apis-dev.post.ch
test.post.ch
e-commerce.post.ch
salt-aboint.post.ch
96749.post.ch
juravote-int.post.ch
sventest.post.ch

Certificate

The complete raw certificate details for www.post.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHnjCCBYagAwIBAgIUCzc3JLYpQ9w53OPz9KKvKgs66uwwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgT1YgSUNBIDIwMjIgLSAxMB4XDTI0MDEwODE0
MjkyM1oXDTI1MDEwODE0MjkyM1owZDELMAkGA1UEBhMCQ0gxCzAJBgNVBAgMAkJF
MQ0wCwYDVQQHDARCZXJuMSMwIQYDVQQKDBpEaWUgU2Nod2VpemVyaXNjaGUgUG9z
dCBBRzEUMBIGA1UEAxMLd3d3LnBvc3QuY2gwggIiMA0GCSqGSIb3DQEBAQUAA4IC
DwAwggIKAoICAQDZI3VDan+4N/uCF7h3/0ZTcXc5Y86JQV3VuyLuo35pmadwB+uV
VI2aRNuAocMg9eN5laE1SQHRT7Dlc7ty2/hJbzFTsF+QQYChqQrX4G3exUMLTcfP
mJZuHSG0zG8lcJAEqL1EDgCxilIrRCO4lmwKA0HqgBbIfLreqjVu4ia0CxmPzVWo
8ZB/7B8E3kW8+nnqDMSl4oeFG8RrdRB5xnSQ3cbZbPd6ZFQCkMSlShcPfjW1AyPM
cSD6jGTZKukhxcHjfwu3lcA7+UH6tZdjnGlCt4nwZmTwLEw6mwM+Q+W2z29iAUVB
3HZhT183lrN4ba+sE/oLxLz2MXhp03eZMzv7q06HXpgSd3qBCVxptqZSc3j8taWY
5DiAAIReIA6hZe4fjNxOuGPyu7A5Cx37X4EB/os44Wrp/q3rEJPVrN1XL+qIVpXL
9AuNSjti25p2L5n0MtUEPgMb4y3bT1vSNbB7cpv6fLuF/beGpIpWz+nwvU6I7uyi
NZfNk13lIi89sT+wqfyDQapPmJHMGroOu6YOAMlCTGjW2PUP5RneaEieU8KZV6uK
HKFJPabVYKbWSFNr0RG//nSN0+CmoK1SwnvMfxpoUhT/XV2F2CnLmA3Uj6jGBHAm
EcRv0pPq/NpmoD3g+vw+P5y1TkocW3euQbdImyfQw8adi9mLSzrhWVYbBwIDAQAB
o4ICWjCCAlYwgbIGCCsGAQUFBwEBBIGlMIGiMEwGCCsGAQUFBzAChkBodHRwOi8v
YWlhLnN3aXNzc2lnbi5jaC9haXItMGYyYmY5YTUtZGQzNy00OGM5LWE4NWItMTJh
Y2RjYjhiZTQ1MFIGCCsGAQUFBzABhkZodHRwOi8vb2NzcC5zd2lzc3NpZ24uY2gv
c2lnbi9vY3MtYWFjY2NlZDUtNjZlOC00MDY5LTliMWItZmQyOWFiNzNlZmVjMG8G
A1UdIARoMGYwCAYGZ4EMAQICMAgGBgQAj3oBBzBQBghghXQBWQIBAjBEMEIGCCsG
AQUFBwIBFjZodHRwczovL3JlcG9zaXRvcnkuc3dpc3NzaWduLmNvbS9Td2lzc1Np
Z25fQ1BTX1RMUy5wZGYwUQYDVR0fBEowSDBGoESgQoZAaHR0cDovL2NybC5zd2lz
c3NpZ24uY2gvY2RwLTk2YjYyZjVhLTZiNzMtNGRhNC04N2Y3LWNlNDAwMmMxY2Qz
NDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWg
MFcGA1UdEQRQME6CC3d3dy5wb3N0LmNoggx3d3cxLnBvc3QuY2iCDHd3dzIucG9z
dC5jaIIMd3d3My5wb3N0LmNoggx3d3c0LnBvc3QuY2iCB3Bvc3QuY2gwHQYDVR0O
BBYEFCfcLXiSXgIUU9JqEZXFMZO52bjuMB8GA1UdIwQYMBaAFHxvCm8TD9mMJG8m
NPNca0NttyO2MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IC
AQC4i9wc56M/L4qjFHXIIg6oeAMkQEP/jkPJeNRzmrrUAX9ZYOIoVVMgH1RzDWp9
sWnNXl3gyH4T5gJ4ZWwwZdO1DLZMsvk1t0Gd7W1z0ufI2T/KGCNC4pwq8BC2Cjd+
AHRRx4Nnh81KSLbFDs8+XLdtrlgHT7zAwWbvFPQ5CnGuxLukldHuAUzdA1wciLkU
VERgyA42X0XeGgbC9/Cfy3eyNCR+0+nvP849QV8928lqCRO5EijAGjK/bITJyu6I
rpadP+Q9wYXQWTHyJuir+Y9z/1SZ+yPKU7pJZepsC+MSkz1tkyxhcX+cD73XycY8
t5q+s87c0dpr6Qdg810KS+IrUmcouPdBBAUSj84dUwFzUYYqvQ8oY9oGjrCPQjLX
cbqz8kJZTa3KvZQneUHxO0yX+vIr/Hr232cKNc2Qxr0NC2p0HkOylcWHQr7vnmNT
emdJIP1kVUpYL/VHzI6e3lnbRXS74upjhzG63jL0fHA6UdTiESIaDTppofbZBPbW
AWz6liUoHTdDzH7NccsvxMwdHvqHc7kLPxpLYNo2rUl4Q6BSsiPCB9vaOZEhy25H
T62rf7yigXxXvztjWshzRDou9tH2Ezn92IghaNvgE5FZzs8Arrinr3miYPlsrHC4
3C+eLAna30sy1DIKTZdjOnkvHuRHpXRSlndp0y8VyhhLGg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2SN1Q2p/uDf7ghe4d/9G
U3F3OWPOiUFd1bsi7qN+aZmncAfrlVSNmkTbgKHDIPXjeZWhNUkB0U+w5XO7ctv4
SW8xU7BfkEGAoakK1+Bt3sVDC03Hz5iWbh0htMxvJXCQBKi9RA4AsYpSK0QjuJZs
CgNB6oAWyHy63qo1buImtAsZj81VqPGQf+wfBN5FvPp56gzEpeKHhRvEa3UQecZ0
kN3G2Wz3emRUApDEpUoXD341tQMjzHEg+oxk2SrpIcXB438Lt5XAO/lB+rWXY5xp
QreJ8GZk8CxMOpsDPkPlts9vYgFFQdx2YU9fN5azeG2vrBP6C8S89jF4adN3mTM7
+6tOh16YEnd6gQlcabamUnN4/LWlmOQ4gACEXiAOoWXuH4zcTrhj8ruwOQsd+1+B
Af6LOOFq6f6t6xCT1azdVy/qiFaVy/QLjUo7Ytuadi+Z9DLVBD4DG+Mt209b0jWw
e3Kb+ny7hf23hqSKVs/p8L1OiO7sojWXzZNd5SIvPbE/sKn8g0GqT5iRzBq6Drum
DgDJQkxo1tj1D+UZ3mhInlPCmVerihyhST2m1WCm1khTa9ERv/50jdPgpqCtUsJ7
zH8aaFIU/11dhdgpy5gN1I+oxgRwJhHEb9KT6vzaZqA94Pr8Pj+ctU5KHFt3rkG3
SJsn0MPGnYvZi0s64VlWGwcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 64030243133006630780300796475577416232994532076
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 14:29:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-08 14:29:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Die Schweizerische Post AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.post.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 885847826291165391556922831601580470170953491511833239114886798697179884874706339730731869361804946580556924088532991195446851578786057192673544693082628786617998517701215777042531567122063625403688299608031785497588025317037354339724543141888173738747336611132788140074829252965975646129345717856205047572068839180196723397641449220762670936665716644738728901508228503387844660378439518464641140029077114766237832173544987102580634760585465029772763300918794533084512097955496977283466144543940061498508938856256002515300737161652437898366490453456979152238797689302027463232199260224151843944374129764412171020498927714557463375411136913728299646958795764219332925988243845293403076805970097950442088947734624013677111960685354366965024783790299240854399623454301758530020151195643929857547832665007762902085434425846151255291078605948733775424618641468161188380617059002998963844450981717957130263849796079502843179224715034511015465504182320513740637345201531840605267215261230684992729503224610457250255933073869600065022514341526702126905464090223029658972470474428585437738906699615757736596508468308885587128690504007932263652046616224626198721366150008852277610580219726158063584481323591462992581216860747924486975917529863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.post.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.post.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.post.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.post.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www4.post.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'post.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							27dc2d78925e021453d26a1195c53193b9d9b8ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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