pfportalext-test.postfinance.ch

- PostFinance AG -

Issued by PKI SwissPost EXT Machine CA TEST G3

About this certificate

This digital certificate with serial number 18:e9:88:b8:35:d4:15:57:4e:26:9d:c1:de:cd:1a was issued on by Post CH AG.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: subject:localityName MUST appear if subject:organizationName, subject:givenName, or subject:surname fields are present but the subject:stateOrProvinceName field is absent. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: subject:stateOrProvinceName MUST appear if the subject:organizationName, subject:givenName, or subject:surname fields are present and subject:localityName is absent. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PostFinance AG

Organization: PostFinance AG
Organization unit: PostFinance AG
Country: CH

Post CH AG

Organization: Post CH AG
Organization unit: TEST
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 18:e9:88:b8:35:d4:15:57:4e:26:9d:c1:de:cd:1a
Serial Number (int): 129351758082905053177494436220685594
Serial Number lenght: 117 bits, 15 octets

SubjectKeyId: 53:bb:31:01:2e:27:d5:1b:95:cd:88:da:ce:48:07:47:1b:07:87:a2
AuthorityKeyId: 9b:73:2f:f9:53:fe:3e:66:02:08:a8:28:de:95:d7:2e:db:b9:09:8d

Fingerprint (sha1): 9b:bb:8a:35:82:cc:b7:66:33:64:50:b0:f1:a0:81:47:54:2e:02:5d
Fingerprint (sha256): 05:0e:2c:0f:78:78:af:81:47:6e:df:13:7e:c4:57:d8:14:f1:61:4b:e8:3f:f6:e9:42:3b:64:dc:64:78:a3:e8

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/9B732FF953FE3E660208A828DE95D72EDBB9098D

Revocation information

OCSP Server: http://gold-pxmt-g2.ocsp.swisssign.net/9B732FF953FE3E660208A828DE95D72EDBB9098D
CRL Distribution Point: http://crl.swisssign.net/9B732FF953FE3E660208A828DE95D72EDBB9098D
CRL Distribution Point: ldap://directory.swisssign.net/CN=9B732FF953FE3E660208A828DE95D72EDBB9098D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate pfportalext-test.postfinance.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pfportalext-test.postfinance.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pfportalext-test.postfinance.ch

Other certificates including the domain name postfinance.ch

(limited to 100 certificates)
www.postfinance.ch
e-archiv.postfinance.ch
aliasreg.postfinance.ch
e-finance.postfinance.ch
jobs.postfinance.ch
pfportalmo.postfinance.ch
csgw-test.postfinance.ch
proof.doc-shop.postfinance.ch
commercioestero.postfinance.ch
egw-test.postfinance.ch
e-payment.postfinance.ch
sventest.postfinance.ch
youth.postfinance.ch
pfportalext-test.postfinance.ch
sgtm.postfinance.ch
sipskypebe.post.ch
pfsb-admin-test.postfinance.ch
smartbusiness.postfinance.ch
onlinehypothek-test.postfinance.ch
www-poc-test.postfinance.ch
plano.postfinance.ch
mapps-test.postfinance.ch
www.wcm-test.postfinance.ch
www.doc-shop.postfinance.ch
testplattform.postfinance.ch
oauth.postfinance.ch
privatkredit-peprod.postfinance.ch
www.postfinance.ch
dev.plusfinance.postfinance.ch
outlook.post.ch
benefit.postfinance.ch
egw.postfinance.ch
versicherungen.postfinance.ch
ebics-test.postfinance.ch
sventest.postfinance.ch
pfsb-test.postfinance.ch
universal-t2.postfinance.ch
egw-test.postfinance.ch
3dsec.postfinance.ch
dev.tilbago.postfinance.ch
pfportalmo.postfinance.ch
sipskypebe.post.ch
dev.young.postfinance.ch
tilbago.postfinance.ch
statusitservices.postfinance.ch
events-test.postfinance.ch
digitalpfc.int.postfinance.ch
pfportalmo-test.postfinance.ch
sventest.postfinance.ch
m.commercioestero.postfinance.ch
rivista.postfinance.ch
ai.ep2.postfinance.ch
ef-t2.postfinance.ch
jira-dev.postfinance.ch
epayment.postfinance.ch
www-test.postfinance.ch
sandbox1.postfinance.ch
sandbox1.postfinance.ch
collector-test.postfinance.ch
mapps-test.postfinance.ch
sventest.postfinance.ch
egw.postfinance.ch
hosting.postfinance.ch
nladh-t2.postfinance.ch
aussenhandel.postfinance.ch
plano.postfinance.ch
epayment.postfinance.ch
yellowpay.postfinance.ch
nlsec.postfinance.ch
challengethefuture.postfinance.ch
skypeweb.post.ch
pfsb.postfinance.ch
plano.postfinance.ch
pfportalmo.postfinance.ch
events-test.postfinance.ch
csgw-t2.postfinance.ch
epayment-test.postfinance.ch
dev.magazine.postfinance.ch
mapps.postfinance.ch
ef-t2.postfinance.ch
meet.post.ch
young.postfinance.ch
epayment.postfinance.ch
www-test.postfinance.ch
pfportalmo-test.postfinance.ch
e-trading.postfinance.ch
www-poc-test.postfinance.ch
pfportalext-test.postfinance.ch
events-test.postfinance.ch
pfportalmo.postfinance.ch
bqztyw.postfinance.ch
young.postfinance.ch
questback.postfinance.ch
www.plusfinance.postfinance.ch
csgw-test.postfinance.ch
stage.tour.postfinance.ch
3dsec.postfinance.ch
www2.postfinance.ch
teleoptipf.postfinance.ch
plano.postfinance.ch

Certificate

The complete raw certificate details for pfportalext-test.postfinance.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjIFfmLvOBBM4OlJjuZj
s7V/sKkjivXMruFJEggqzLuVLjH0rUk3ofx2ob+9pxETG+V0a9LQk+arcTQaNDnS
ZdRa64zuNJigb+CGxvh8OqIF76jVEsOtgqgJE255tNEe7BrqcDBhLNRSSApY9IJn
1D8t3yto9ysI+wPipHKjqw8L/Fsndnl6FgyCrweXJBPGXK5Aa6ydiARwwaVHfARz
iIGRMV7H8nmgLpwHISny2vcNHbeLbWk11Duj3ETQM5PNUm1CvEojABn9ChznyzIO
Gz0T2H+RqIWMLpW4W37ebEbl11ksrcTvEq51cbzgNdSJb7IzN5a9+D8f8YVaYqlp
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 129351758082905053177494436220685594
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Post CH AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TEST'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI SwissPost EXT Machine CA TEST G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-25 15:14:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-25 15:14:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostFinance AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostFinance AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pfportalext-test.postfinance.ch'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.1 (userID)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'be001'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25524804104281811095111197642899977841206718983640396943569350599230457388240873254437096755020971256937822812960419654453616835952329872653635996375309615782968253826901640446788788504491376069953631000130301157130910028523742450648238736942868520973003270170713851438590993079997877902899034355946476436075533469945259583659775753344408382882586523487397186889577515418189828804257426543878683767200304185420792232764912473977206884099503564741923587511299951466785015926540553542957797461058069433326181339229587501588013931823992904431484579749225402610331156447219830022199004829590542868319573848508523740752257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfportalext-test.postfinance.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							53bb31012e27d51b95cd88dace4807471b0787a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9b732ff953fe3e660208a828de95d72edbb9098d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/9B732FF953FE3E660208A828DE95D72EDBB9098D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=9B732FF953FE3E660208A828DE95D72EDBB9098D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (162 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS-R5.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'To be used with PostFinance e-banking services only.'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (198 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/9B732FF953FE3E660208A828DE95D72EDBB9098D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-pxmt-g2.ocsp.swisssign.net/9B732FF953FE3E660208A828DE95D72EDBB9098D'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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