testplattform.postfinance.ch

- PostFinance AG -

Issued by SwissSign RSA TLS EV ICA 2021 - 1

About this certificate

This digital certificate with serial number 72:24:06:14:0e:5e:7a:b6:dc:ee:dd:84:36:72:c6:86:ea:4d:96:6d was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PostFinance AG

Company registration number: CHE-114.583.749
Organization: PostFinance AG
Address: Mingerstrasse 20
Postal code: 3030
State / Province: BE
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 72:24:06:14:0e:5e:7a:b6:dc:ee:dd:84:36:72:c6:86:ea:4d:96:6d
Serial Number (int): 651628304199527493963486628642961161417049085549
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: c4:c0:1b:00:df:62:c3:5b:75:7c:5b:92:fc:83:f4:c2:56:fb:b3:04
AuthorityKeyId: da:34:d4:8e:10:23:f4:6a:2d:6c:b4:1f:f3:28:11:de:5e:01:c4:de

Fingerprint (sha1): f4:6b:ca:78:cd:33:db:4c:e4:12:e1:ed:1d:48:c3:d7:43:d4:18:b0
Fingerprint (sha256): 06:b0:70:eb:04:1d:29:66:2b:0c:5a:ea:af:c1:ec:8f:ff:da:3c:ec:d7:66:cb:dc:95:4d:0e:3a:9b:cc:46:bf

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE

Revocation information

OCSP Server: http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate testplattform.postfinance.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for testplattform.postfinance.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

testplattform.postfinance.ch
isotest.postfinance.ch

Other certificates including the domain name postfinance.ch

(limited to 100 certificates)
www.postfinance.ch
e-archiv.postfinance.ch
aliasreg.postfinance.ch
e-finance.postfinance.ch
jobs.postfinance.ch
pfportalmo.postfinance.ch
csgw-test.postfinance.ch
proof.doc-shop.postfinance.ch
commercioestero.postfinance.ch
egw-test.postfinance.ch
e-payment.postfinance.ch
sventest.postfinance.ch
youth.postfinance.ch
pfportalext-test.postfinance.ch
sgtm.postfinance.ch
sipskypebe.post.ch
pfsb-admin-test.postfinance.ch
smartbusiness.postfinance.ch
onlinehypothek-test.postfinance.ch
www-poc-test.postfinance.ch
plano.postfinance.ch
mapps-test.postfinance.ch
www.wcm-test.postfinance.ch
www.doc-shop.postfinance.ch
testplattform.postfinance.ch
oauth.postfinance.ch
privatkredit-peprod.postfinance.ch
www.postfinance.ch
dev.plusfinance.postfinance.ch
outlook.post.ch
benefit.postfinance.ch
egw.postfinance.ch
versicherungen.postfinance.ch
ebics-test.postfinance.ch
sventest.postfinance.ch
pfsb-test.postfinance.ch
universal-t2.postfinance.ch
egw-test.postfinance.ch
3dsec.postfinance.ch
dev.tilbago.postfinance.ch
pfportalmo.postfinance.ch
sipskypebe.post.ch
dev.young.postfinance.ch
tilbago.postfinance.ch
statusitservices.postfinance.ch
events-test.postfinance.ch
digitalpfc.int.postfinance.ch
pfportalmo-test.postfinance.ch
sventest.postfinance.ch
m.commercioestero.postfinance.ch
rivista.postfinance.ch
ai.ep2.postfinance.ch
ef-t2.postfinance.ch
jira-dev.postfinance.ch
epayment.postfinance.ch
www-test.postfinance.ch
sandbox1.postfinance.ch
sandbox1.postfinance.ch
collector-test.postfinance.ch
mapps-test.postfinance.ch
sventest.postfinance.ch
egw.postfinance.ch
hosting.postfinance.ch
nladh-t2.postfinance.ch
aussenhandel.postfinance.ch
plano.postfinance.ch
epayment.postfinance.ch
yellowpay.postfinance.ch
nlsec.postfinance.ch
challengethefuture.postfinance.ch
skypeweb.post.ch
pfsb.postfinance.ch
plano.postfinance.ch
pfportalmo.postfinance.ch
events-test.postfinance.ch
csgw-t2.postfinance.ch
epayment-test.postfinance.ch
dev.magazine.postfinance.ch
mapps.postfinance.ch
ef-t2.postfinance.ch
meet.post.ch
young.postfinance.ch
epayment.postfinance.ch
www-test.postfinance.ch
pfportalmo-test.postfinance.ch
e-trading.postfinance.ch
www-poc-test.postfinance.ch
pfportalext-test.postfinance.ch
events-test.postfinance.ch
pfportalmo.postfinance.ch
bqztyw.postfinance.ch
young.postfinance.ch
questback.postfinance.ch
www.plusfinance.postfinance.ch
csgw-test.postfinance.ch
stage.tour.postfinance.ch
3dsec.postfinance.ch
www2.postfinance.ch
teleoptipf.postfinance.ch
plano.postfinance.ch

Certificate

The complete raw certificate details for testplattform.postfinance.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKNjCCCB6gAwIBAgIUciQGFA5eerbc7t2ENnLGhupNlm0wDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgRVYgSUNBIDIwMjEgLSAxMB4XDTIyMDQwNDA5
MjQ1OFoXDTIzMDQwNDA5MjQ1OFowgfYxEzARBgsrBgEEAYI3PAIBAxMCQ0gxEzAR
BgsrBgEEAYI3PAIBAhMCQkUxGDAWBgNVBAUTD0NIRS0xMTQuNTgzLjc0OTEdMBsG
A1UEDxMUUHJpdmF0ZSBPcmdhbml6YXRpb24xCzAJBgNVBAYTAkNIMQswCQYDVQQI
EwJCRTENMAsGA1UEBxMEQmVybjENMAsGA1UEERMEMzAzMDEZMBcGA1UECRMQTWlu
Z2Vyc3RyYXNzZSAyMDEXMBUGA1UEChMOUG9zdEZpbmFuY2UgQUcxJTAjBgNVBAMT
HHRlc3RwbGF0dGZvcm0ucG9zdGZpbmFuY2UuY2gwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7ivzs3OWy7jlix087SCmUMNlptG5TdrWShm3qWlKISixM
4c4iA524ss/bk7UU30wOBUo87aQ4C/4CrRuw1aAVv689heeAoYrrdol0+1WF5HC0
uU1YAkIl2scp0EuYzifx8qa6tDh8E7c2XFqoSDdmsUCIzN8hQokoPYtDwORWediV
7O0yRLFMp841V1in+ylEbYyaJ4Ey6wP3eFXF4d/pfzEDCtmTBtR5B4WmhahGZ3cl
o/NlhNwrNvrqtZlS+XKGaTujlL3LXYAvCuXVyi/RQmmrqw/UQmsPYl7eG4SudjmY
7eetjqfoCqOd7aQqmSDdy9ycsUs/ZL0kHVfcB0RFAgMBAAGjggVfMIIFWzA/BgNV
HREEODA2ghx0ZXN0cGxhdHRmb3JtLnBvc3RmaW5hbmNlLmNoghZpc290ZXN0LnBv
c3RmaW5hbmNlLmNoMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwHQYDVR0OBBYEFMTAGwDfYsNbdXxbkvyD9MJW+7MEMB8GA1Ud
IwQYMBaAFNo01I4QI/RqLWy0H/MoEd5eAcTeMIH/BgNVHR8EgfcwgfQwR6BFoEOG
QWh0dHA6Ly9jcmwuc3dpc3NzaWduLm5ldC9EQTM0RDQ4RTEwMjNGNDZBMkQ2Q0I0
MUZGMzI4MTFERTVFMDFDNERFMIGooIGloIGihoGfbGRhcDovL2RpcmVjdG9yeS5z
d2lzc3NpZ24ubmV0L0NOPURBMzRENDhFMTAyM0Y0NkEyRDZDQjQxRkYzMjgxMURF
NUUwMUM0REUlMkNPPVN3aXNzU2lnbiUyQ0M9Q0g/Y2VydGlmaWNhdGVSZXZvY2F0
aW9uTGlzdD9iYXNlP29iamVjdENsYXNzPWNSTERpc3RyaWJ1dGlvblBvaW50MG4G
A1UdIARnMGUwUAYIYIV0AVkCAQMwRDBCBggrBgEFBQcCARY2aHR0cHM6Ly9yZXBv
c2l0b3J5LnN3aXNzc2lnbi5jb20vU3dpc3NTaWduX0NQU19UTFMucGRmMAgGBgQA
j3oBBDAHBgVngQwBATCBxgYIKwYBBQUHAQEEgbkwgbYwZAYIKwYBBQUHMAKGWGh0
dHA6Ly9zd2lzc3NpZ24ubmV0L2NnaS1iaW4vYXV0aG9yaXR5L2Rvd25sb2FkL0RB
MzRENDhFMTAyM0Y0NkEyRDZDQjQxRkYzMjgxMURFNUUwMUM0REUwTgYIKwYBBQUH
MAGGQmh0dHA6Ly9vY3NwLnN3aXNzc2lnbi5uZXQvREEzNEQ0OEUxMDIzRjQ2QTJE
NkNCNDFGRjMyODExREU1RTAxQzRERTCCAmwGCisGAQQB1nkCBAIEggJcBIICWAJW
AHUAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAF/8+RMdAAABAMA
RjBEAiBgsf/ObqV4XRaNR2D3xkNUBYYL9S6Em5vhQcT7gmwedwIgHodoyZ3aD2Ey
S6aEGrQQADe/l/wuQ7gNsbwNWZDNudsAdQBvU3asMfAxGdiZAKRRFf93FRwR2QLB
ACkGjbIImjfZEwAAAX/z5EuJAAAEAwBGMEQCIDhzjX3Gb0kixBvMoRUZ7mJ+lkFh
iyEy+eKjGhS3k97/AiAzcvzc/rS71sJ1xfqkmb6rYNO9HW9IgRDGjlVxo++R0AB1
AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABf/PkSykAAAQDAEYw
RAIgBHiLeMnXJW/pmc6RevIgO4fTslMSbxAGPKxokR+o6eQCIGWgyqwcI9XEwK1J
gofrBGWKKgYHOIc6Cy5d3coKo/QcAHcArfe++nz/EMiLnT2cHj4YarRnKV3PsQwk
yoWGNOvcgooAAAF/8+RLggAABAMASDBGAiEA29INSLGpvMTlkTFtQKmlKlO8rZqF
MPM7C7lzd9WOf5sCIQCNo6yfXahkb/uz8yWkCpdjSOJor53TYTyJRl81w/yFcAB2
AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABf/PkS/QAAAQDAEcw
RQIgHiDq2ptKlYsUapuZKbUKT2bZNt+E9FnfFdvWlMCMXMwCIQChqYCtA7xQ5+HU
8ju2KfobaGyFRi4o/pdAEzpTR29VpTANBgkqhkiG9w0BAQsFAAOCAgEA3kAze54S
f7SrGJb/UBsacNKfK7hL+/7Sv6No4DKHaci5AEiln5wh8IE5lWW36Rbve6Ok1+uf
HmCLcBLGzqVUcTHhfQsGf0He5YmkVQijkMBg7yQT7ARNPecQBFvsDFTGI5Gndrt6
4nk+bFfqOpCJ5GEPuSZVdCkewJvyuCdxVZ1WYVhs5VmKOOSVTKmeMrgcJHKexX+e
GTSIKq3sQdref//TQEL65lC7JVZ1WEu81HvF+9Lb5b2DYF5D66vb06xexSxs05/j
uFMSltBLE4FVNT53sA1a0fuyVw/X/SIfqjK2yFsZdOaIZpiISlMFukuav4qxfwEt
/lcAqQbY+Iadd8wXXXUssPYw7iK8KQRMrxfKlX5V1vEi31RtZOuk5rfipo8x3ulq
MlWkQWUbMdC99Gt9q8N0cjTf9feqZJVV1gybJK2Yv/GhjEvNJRs3n/Mva62/Hoao
LoK9/sM5SWALzW2UEtXIkgzEiGI79ZLqq3qT3VL6M9UP6IO4DXY2lOi5qrC2TqJN
wxHmNtl6Adf4XTvKOuNoWDZa7fCt0/TTjYeZrwhGV2NOhP7bSXeIU0Kzz176Cj+n
YutqvzuM/ffyHUy0HX37gU0Im6nyjq+3Uilp6Rdbp5Coohu51orMb42frqNv5t0C
id+lhhcZnsoWWUceOQF8BZyhZyTkY23Mie0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4r87Nzlsu45YsdPO0gp
lDDZabRuU3a1koZt6lpSiEosTOHOIgOduLLP25O1FN9MDgVKPO2kOAv+Aq0bsNWg
Fb+vPYXngKGK63aJdPtVheRwtLlNWAJCJdrHKdBLmM4n8fKmurQ4fBO3NlxaqEg3
ZrFAiMzfIUKJKD2LQ8DkVnnYleztMkSxTKfONVdYp/spRG2MmieBMusD93hVxeHf
6X8xAwrZkwbUeQeFpoWoRmd3JaPzZYTcKzb66rWZUvlyhmk7o5S9y12ALwrl1cov
0UJpq6sP1EJrD2Je3huErnY5mO3nrY6n6Aqjne2kKpkg3cvcnLFLP2S9JB1X3AdE
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 651628304199527493963486628642961161417049085549
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-04 09:24:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-04 09:24:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHE-114.583.749'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3030'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mingerstrasse 20'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostFinance AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'testplattform.postfinance.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23675100560576358778878271351018467458520423566401033410010285899200100352275642747343054614457557723671186998614689157970132476921955360142501519097282360633707791093637147185132353082827947624796908945488177272174497896437931837278000469308815726223330174752490987329804712626187475433116767146125197084552433131435346494602096537147476858139639161559032458611764226134015578547378294110225949693211042083624272863415548512910975293231781789064746041213719277103604572716168715027090152359095724088860521054093979628126753162789165792640839013668377825759218888322710113670812480406461963748685133728817247357977669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testplattform.postfinance.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isotest.postfinance.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c4c01b00df62c35b757c5b92fc83f4c256fbb304
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da34d48e1023f46a2d6cb41ff32811de5e01c4de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (600 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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