pfportalmo-test.postfinance.ch

- PostFinance AG -

Issued by PKI SwissPost EXT Machine CA TEST

About this certificate

This digital certificate with serial number 8f:d7:a7:e0:ef:e8:ff:32:eb:43:6e:72:c9:b5:ca was issued on by Die Schweizerische Post.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)

PostFinance AG

Organization: PostFinance AG
Organization unit: PostFinance AG
Country: CH

Die Schweizerische Post

Organization: Die Schweizerische Post
Organization unit: TEST
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 8f:d7:a7:e0:ef:e8:ff:32:eb:43:6e:72:c9:b5:ca
Serial Number (int): 746872469553081109647444539750331850
Serial Number lenght: 120 bits, 15 octets

SubjectKeyId: 7a:dd:97:70:b6:39:01:c8:7e:14:3a:08:3d:50:88:33:d2:c8:6e:7f
AuthorityKeyId: 23:21:d1:e0:9a:06:98:74:cd:7b:e6:c5:ed:af:87:6c:b9:f7:49:d9

Fingerprint (sha1): 53:f8:70:6a:db:0a:3e:e9:8d:8d:15:a2:26:1d:3d:1f:65:b8:ab:84
Fingerprint (sha256): 0b:f2:3d:ef:94:cc:2b:6b:78:61:4e:13:8c:97:d0:e7:d8:af:80:b0:26:a1:69:20:ac:f5:90:b2:e7:52:0b:48

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/2321D1E09A069874CD7BE6C5EDAF876CB9F749D9

Revocation information

OCSP Server: http://gold-pxmt-g2.ocsp.swisssign.net/2321D1E09A069874CD7BE6C5EDAF876CB9F749D9
CRL Distribution Point: http://crl.swisssign.net/2321D1E09A069874CD7BE6C5EDAF876CB9F749D9
CRL Distribution Point: ldap://directory.swisssign.net/CN=2321D1E09A069874CD7BE6C5EDAF876CB9F749D9%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate pfportalmo-test.postfinance.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pfportalmo-test.postfinance.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pfportalmo-test.postfinance.ch

Other certificates including the domain name postfinance.ch

(limited to 100 certificates)
www.postfinance.ch
e-archiv.postfinance.ch
aliasreg.postfinance.ch
e-finance.postfinance.ch
jobs.postfinance.ch
pfportalmo.postfinance.ch
csgw-test.postfinance.ch
proof.doc-shop.postfinance.ch
commercioestero.postfinance.ch
egw-test.postfinance.ch
e-payment.postfinance.ch
sventest.postfinance.ch
youth.postfinance.ch
pfportalext-test.postfinance.ch
sgtm.postfinance.ch
sipskypebe.post.ch
pfsb-admin-test.postfinance.ch
smartbusiness.postfinance.ch
onlinehypothek-test.postfinance.ch
www-poc-test.postfinance.ch
plano.postfinance.ch
mapps-test.postfinance.ch
www.wcm-test.postfinance.ch
www.doc-shop.postfinance.ch
testplattform.postfinance.ch
oauth.postfinance.ch
privatkredit-peprod.postfinance.ch
www.postfinance.ch
dev.plusfinance.postfinance.ch
outlook.post.ch
benefit.postfinance.ch
egw.postfinance.ch
versicherungen.postfinance.ch
ebics-test.postfinance.ch
sventest.postfinance.ch
pfsb-test.postfinance.ch
universal-t2.postfinance.ch
egw-test.postfinance.ch
3dsec.postfinance.ch
dev.tilbago.postfinance.ch
pfportalmo.postfinance.ch
sipskypebe.post.ch
dev.young.postfinance.ch
tilbago.postfinance.ch
statusitservices.postfinance.ch
events-test.postfinance.ch
digitalpfc.int.postfinance.ch
pfportalmo-test.postfinance.ch
sventest.postfinance.ch
m.commercioestero.postfinance.ch
rivista.postfinance.ch
ai.ep2.postfinance.ch
ef-t2.postfinance.ch
jira-dev.postfinance.ch
epayment.postfinance.ch
www-test.postfinance.ch
sandbox1.postfinance.ch
sandbox1.postfinance.ch
collector-test.postfinance.ch
mapps-test.postfinance.ch
sventest.postfinance.ch
egw.postfinance.ch
hosting.postfinance.ch
nladh-t2.postfinance.ch
aussenhandel.postfinance.ch
plano.postfinance.ch
epayment.postfinance.ch
yellowpay.postfinance.ch
nlsec.postfinance.ch
challengethefuture.postfinance.ch
skypeweb.post.ch
pfsb.postfinance.ch
plano.postfinance.ch
pfportalmo.postfinance.ch
events-test.postfinance.ch
csgw-t2.postfinance.ch
epayment-test.postfinance.ch
dev.magazine.postfinance.ch
mapps.postfinance.ch
ef-t2.postfinance.ch
meet.post.ch
young.postfinance.ch
epayment.postfinance.ch
www-test.postfinance.ch
pfportalmo-test.postfinance.ch
e-trading.postfinance.ch
www-poc-test.postfinance.ch
pfportalext-test.postfinance.ch
events-test.postfinance.ch
pfportalmo.postfinance.ch
bqztyw.postfinance.ch
young.postfinance.ch
questback.postfinance.ch
www.plusfinance.postfinance.ch
csgw-test.postfinance.ch
stage.tour.postfinance.ch
3dsec.postfinance.ch
www2.postfinance.ch
teleoptipf.postfinance.ch
plano.postfinance.ch

Certificate

The complete raw certificate details for pfportalmo-test.postfinance.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYI4sxLgGV5ihJ7AUnaG
hG6k0RqyPR7Pr+VqLPFrYCswQiZZjlU10fo0//5Z98stH2nZkpRWj5lt9c6jQbXF
JoIFImR8/rpOZ3BEoDE5hMQdFiTbf8Rgk0v4VeHrx2ohCcpYN229qwce9+e6N0lx
NzoOm5hchqVfgjh9b6EXbmB5WkWAGzVfiljnEpDABwwW2Fs7Nhe5P7NSwQZKKtT7
BL6lOq380dArf7ypgqQtLnymxd2d9h4JkJE0XUPTRoK1KMoug3vtSLFUiL0qfMNI
QgMI1Acxc8/fV0FcivqqyhzT5QZr+VztQGvq5FddKL3IhqN0O0EXEZcnOUeMLdMo
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 746872469553081109647444539750331850
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Die Schweizerische Post'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TEST'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI SwissPost EXT Machine CA TEST'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-10 15:56:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-10 15:56:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostFinance AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostFinance AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pfportalmo-test.postfinance.ch'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.1 (userID)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 't101'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22408394585298786749034346853635496738796832362964864094653089775899823712138908484787854290167988996003005529375787301245373786188760184553059390522265990822584574988429425830416433899983850473089718927341560513910713445120618091943380227921010811434052688590804425980140881800028574296725324890725028604444197528467093280677670884883367116162529368910359583887189169947497418571121523584451535766177225973879920256747554177022045991441913456262211126566451182969856770985135515671190983569443192036597688294362744566242281628703832576530415090777653360775999795614013969806661569939064773354998727111079445369399429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfportalmo-test.postfinance.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7add9770b63901c87e143a083d508833d2c86e7f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2321d1e09a069874cd7be6c5edaf876cb9f749d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/2321D1E09A069874CD7BE6C5EDAF876CB9F749D9'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=2321D1E09A069874CD7BE6C5EDAF876CB9F749D9%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (162 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS-R5.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [84 111 32 98 101 32 117 115 101 100 32 119 105 116 104 32 80 111 115 116 70 105 110 97 110 99 101 32 101 45 98 97 110 107 105 110 103 32 115 101 114 118 105 99 101 115 32 111 110 108 121 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (198 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/2321D1E09A069874CD7BE6C5EDAF876CB9F749D9'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-pxmt-g2.ocsp.swisssign.net/2321D1E09A069874CD7BE6C5EDAF876CB9F749D9'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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