outlook.post.ch

- Die Schweizerische Post AG -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 26:18:6c:f9:21:fb:bb:59:f1:ce:e6:a0:4e:65:be:60:6e:57:05:fc was issued on by SwissSign AG.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Die Schweizerische Post AG

Organization: Die Schweizerische Post AG
State / Province: BE
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 26:18:6c:f9:21:fb:bb:59:f1:ce:e6:a0:4e:65:be:60:6e:57:05:fc
Serial Number (int): 217486360078432220605704389715976474586976290300
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 54:b4:8e:9e:8a:f9:a5:0f:bf:51:57:e9:10:0a:e5:08:db:8d:5d:a4
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): d8:0a:a8:d3:d6:11:a5:7b:69:a4:55:b0:38:5d:5a:b7:c2:fe:53:62
Fingerprint (sha256): 07:a9:1c:77:0c:74:f2:ab:7d:3c:00:31:0e:51:1a:b2:14:44:06:34:06:c1:67:ef:7c:a8:f2:17:8b:4a:e8:1e

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate outlook.post.ch

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for outlook.post.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

outlook.post.ch
exchange.pnet.ch
owa.pnet.ch
autodiscover.arcobaleno.ch
autodiscover.autopostale.ch
autodiscover.carpostal.ch
autodiscover.finform.ch
autodiscover.pkpost.ch
autodiscover.post.ch
autodiscover.post.li
autodiscover.postauto.ch
autodiscover.postbus.ch
autodiscover.postfinance.ch
autodiscover.prestoag.ch
autodiscover.za-imlig.ch
autodiscover.dm-company.ch
autodiscover.swisspost.pt
autodiscover.cdr-services.de
autodiscover.spsch.swisspost.com
popimap.pnet.ch
popimap2016.pnet.ch
smtpauth.pnet.ch
smtpmsx.pnet.ch
exchangeserver.pnet.ch
vexmbbe11.pnet.ch
vexmbbe12.pnet.ch
vexmbzf11.pnet.ch
vexmbzf12.pnet.ch

Other certificates including the domain name post.ch

(limited to 100 certificates)
fakeext.post.ch
zwab-int.post.ch
moodle.pa.post.ch
mova.post.ch
webfocus.post.ch
digitaler-posteingang.post.ch
swisspostmobile.apis-int.post.ch
securepost.post.ch
filialemitpartner.post.ch
moodle.pa.post.ch
e-collaboration-int.post.ch
jobs-int.post.ch
m-extranet.post.ch
xray.tools.post.ch
ddstest.post.ch
directpoint.post.ch
places.post.ch
new.post.ch
mapservice.post.ch
crypto-stamp.post.ch
wohnen-franklinplatz.post.ch
wwwsc.post.ch
gandalf.apis.post.ch
billingonline-dev.post.ch
dh-auth.apis.post.ch
cinfoni-germany.innovation.post.ch
vgk.apis-test.post.ch
loginint.post.ch
file-intpa-cms.post.ch
agentur-int.post.ch
gitit.post.ch
zubofi.apis-dev.post.ch
ef-testix.post.ch
transport-service.post.ch
directpoint.post.ch
ci-euw1.ireland.delivery.aimatch.net
accountint2.post.ch
address.apis-test.post.ch
docucenterint.post.ch
ci-euw1.ireland.delivery.aimatch.net
msmgateway-int.post.ch
uaasapp3rsa.post.ch
epostoffice3.post.ch
static.post.ch
location-poste-martigny.post.ch
uaasapp3rsadev2.post.ch
crypto-stamp.post.ch
gabi.apis-test.post.ch
nemoauth-test.post.ch
sorryrpz-int.post.ch
webservices-cashlog-int.post.ch
accountint1.post.ch
static.post.ch
cbt.externint.post.ch
wohnen-zollikofen.post.ch
directdayint.post.ch
apis.post.ch
gw.incamail-dev.post.ch
mx3.post.ch
salt-aboint.post.ch
ci-euw1.ireland.delivery.aimatch.net
postweb.post.ch
orgtool-int.post.ch
die-post-kann-mehrint.post.ch
erpcorp.apis-int.post.ch
schreibenint.post.ch
nemoint.post.ch
postzone.extern.post.ch
news-intern.post.ch
kurepo.apis-test.post.ch
cockpitint2.post.ch
dev.post.ch
apitest.post.ch
mp24hub.apis.post.ch
servicetest.post.ch
mobilecodeservice.apis.post.ch
vsc.apis.post.ch
stb-test.innovation.post.ch
spimr1.post.ch
pccweb.apitest.post.ch
webtransferint.post.ch
agentur-int.post.ch
www.post.ch
laborsendungen.post.ch
facetoface.post.ch
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
digitaler-posteingangint.post.ch
e-mobilityint.post.ch
fdsbc.post.ch
tresorit.post.ch
aaw.apis-test.post.ch
gw.incamail-dev.post.ch
gewinnende-worte.post.ch
accountint2.post.ch
rasns01.post.ch
ident.apis-dev.post.ch
test.post.ch
e-commerce.post.ch
salt-aboint.post.ch

Certificate

The complete raw certificate details for outlook.post.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 217486360078432220605704389715976474586976290300
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 12:40:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-10 12:40:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Die Schweizerische Post AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'outlook.post.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 917945519537094000729044010457044367508464562072055354518774918058376911397755460357117782635918566599986316213603922907617624313423855114364049407878487774751106338546956697180916010714743437469384966534390685217069698190348564225920247766566877652737048288899545799847447743676273753589856691528026890431848603250051985985691580471514675774639104881013253274888244793664237423614180157607614498947936840421052057802491801539318945270685726805298425524736168637299271519395050063673549665260623213508717245683163772650350008731629129413374555570530128015712504628482002571535458128428717834627708261871192620000802728989205642885803662808722606963806398076973643230919500715341021682672371731769421537388304926696309937999700682088917786238604749331397835369178184178555176246803123816250269656052177580905567271557840497756349669397882134981548900335131506965097931599976541752551091276632139702280552655778606671376223722794399630262823574042943915065360032911957881489724641546834193060108986872409596725115797729578527773491408942867398609059930613954577346249353184361267326235134602311378704308009604690536204699512759019300210420950838013299092077237910957819995536347265999293202521310393259009228762199498636167247965306397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (653 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook.post.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.pnet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.pnet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.arcobaleno.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.autopostale.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.carpostal.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.finform.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pkpost.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.post.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.post.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.postauto.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.postbus.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.postfinance.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.prestoag.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.za-imlig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.dm-company.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.swisspost.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cdr-services.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.spsch.swisspost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popimap.pnet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popimap2016.pnet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtpauth.pnet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtpmsx.pnet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchangeserver.pnet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vexmbbe11.pnet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vexmbbe12.pnet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vexmbzf11.pnet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vexmbzf12.pnet.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54b48e9e8af9a50fbf5157e9100ae508db8d5da4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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