aussenhandel.postfinance.ch

- PostFinance AG -

Issued by SwissSign RSA TLS EV ICA 2022 - 1

About this certificate

This digital certificate with serial number 74:ea:df:70:b5:ba:78:78:db:e4:09:d2:6a:5f:00:39:6d:a1:0c:36 was issued on by SwissSign AG.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

PostFinance AG

Company registration number: CHE-114.583.749
Organization: PostFinance AG
Address: Mingerstrasse 20
Postal code: 3030
State / Province: BE
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 74:ea:df:70:b5:ba:78:78:db:e4:09:d2:6a:5f:00:39:6d:a1:0c:36
Serial Number (int): 667480768184967906223616242395103844284927904822
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 1c:77:ea:1a:05:43:bb:c2:ad:6d:ea:01:13:f0:f6:42:66:43:90:dd
AuthorityKeyId: 49:52:df:30:86:92:59:5f:34:9c:25:48:24:ab:c0:eb:d1:06:f2:d6

Fingerprint (sha1): 0d:ff:60:7a:8d:16:d5:a1:47:83:27:65:0d:56:b5:dd:52:94:8b:9d
Fingerprint (sha256): 10:5a:69:96:86:e2:70:de:fd:6a:2d:c8:27:2a:de:9e:d3:06:04:65:41:12:60:41:cb:cc:b9:68:50:68:e5:8d

Issuing Certificate URL: http://aia.swisssign.ch/air-20350159-813d-4532-b988-8519eca57650

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-9fdd910e-b9ff-4b2f-be38-2e93708c1b36

Check the revocation status for certificate aussenhandel.postfinance.ch

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aussenhandel.postfinance.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aussenhandel.postfinance.ch
m.aussenhandel.postfinance.ch
commerceexterieur.postfinance.ch
m.commerceexterieur.postfinance.ch
commercioestero.postfinance.ch
m.commercioestero.postfinance.ch

Other certificates including the domain name postfinance.ch

(limited to 100 certificates)
www.postfinance.ch
e-archiv.postfinance.ch
aliasreg.postfinance.ch
e-finance.postfinance.ch
jobs.postfinance.ch
pfportalmo.postfinance.ch
csgw-test.postfinance.ch
proof.doc-shop.postfinance.ch
commercioestero.postfinance.ch
egw-test.postfinance.ch
e-payment.postfinance.ch
sventest.postfinance.ch
youth.postfinance.ch
pfportalext-test.postfinance.ch
sgtm.postfinance.ch
sipskypebe.post.ch
pfsb-admin-test.postfinance.ch
smartbusiness.postfinance.ch
onlinehypothek-test.postfinance.ch
www-poc-test.postfinance.ch
plano.postfinance.ch
mapps-test.postfinance.ch
www.wcm-test.postfinance.ch
www.doc-shop.postfinance.ch
testplattform.postfinance.ch
oauth.postfinance.ch
privatkredit-peprod.postfinance.ch
www.postfinance.ch
dev.plusfinance.postfinance.ch
outlook.post.ch
benefit.postfinance.ch
egw.postfinance.ch
versicherungen.postfinance.ch
ebics-test.postfinance.ch
sventest.postfinance.ch
pfsb-test.postfinance.ch
universal-t2.postfinance.ch
egw-test.postfinance.ch
3dsec.postfinance.ch
dev.tilbago.postfinance.ch
pfportalmo.postfinance.ch
sipskypebe.post.ch
dev.young.postfinance.ch
tilbago.postfinance.ch
statusitservices.postfinance.ch
events-test.postfinance.ch
digitalpfc.int.postfinance.ch
pfportalmo-test.postfinance.ch
sventest.postfinance.ch
m.commercioestero.postfinance.ch
rivista.postfinance.ch
ai.ep2.postfinance.ch
ef-t2.postfinance.ch
jira-dev.postfinance.ch
epayment.postfinance.ch
www-test.postfinance.ch
sandbox1.postfinance.ch
sandbox1.postfinance.ch
collector-test.postfinance.ch
mapps-test.postfinance.ch
sventest.postfinance.ch
egw.postfinance.ch
hosting.postfinance.ch
nladh-t2.postfinance.ch
aussenhandel.postfinance.ch
plano.postfinance.ch
epayment.postfinance.ch
yellowpay.postfinance.ch
nlsec.postfinance.ch
challengethefuture.postfinance.ch
skypeweb.post.ch
pfsb.postfinance.ch
plano.postfinance.ch
pfportalmo.postfinance.ch
events-test.postfinance.ch
csgw-t2.postfinance.ch
epayment-test.postfinance.ch
dev.magazine.postfinance.ch
mapps.postfinance.ch
ef-t2.postfinance.ch
meet.post.ch
young.postfinance.ch
epayment.postfinance.ch
www-test.postfinance.ch
pfportalmo-test.postfinance.ch
e-trading.postfinance.ch
www-poc-test.postfinance.ch
pfportalext-test.postfinance.ch
events-test.postfinance.ch
pfportalmo.postfinance.ch
bqztyw.postfinance.ch
young.postfinance.ch
questback.postfinance.ch
www.plusfinance.postfinance.ch
csgw-test.postfinance.ch
stage.tour.postfinance.ch
3dsec.postfinance.ch
www2.postfinance.ch
teleoptipf.postfinance.ch
plano.postfinance.ch

Certificate

The complete raw certificate details for aussenhandel.postfinance.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qfH6U5PiVYLp+ftoV9F
SFG0Wq544LaMbThQ6aQjsCUB3+P50hcZJhZwWsmXYr+HeH2keJGZUin8U+SbGxr3
BxMHAwdBKez/+AyGxfoNtq7hvotURVq4N1G63O58+4dq3u+Pjxbxfry4gKDGVgYo
pjuRPC3whZOk7UqcjUajzCq+RrHhDfjVeQP2+8FYdz0hVnFibTEYisgV/TTaL21U
hP5pLpXRd5Axmk+XabS2/wmAJwOzfg4D3fpGGEsSkxnZqBXIXXtnH0y2xtSmxiba
VCbCxGw5WE4r6fMCiDAriYfZDwVrRle0O3IOWWtMmDBnwoOVrZRu+L+nBCgFmjYp
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 667480768184967906223616242395103844284927904822
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-24 08:03:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-24 08:03:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3030'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mingerstrasse 20'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PostFinance AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHE-114.583.749'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aussenhandel.postfinance.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30127452429151336065058389499032762097133444626880389487742924938392506322891266212852573464857477069553644100725345074691285752379774202280359983470227869598228009565550923385090423259446105360132313451344170045636305759777195467713410979561899431524968580848651447848737625036013665506434224854301192691316980685166107542939795665051921500860277696347273231298865055816839234475044103530528214569300655019547012893774021052241876250544710074833511339652246085200768566909492287107164180635414935931081555194284811061796906578357737511114872933901082423078823387345084882876284371698692553378212484684258413691414929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-20350159-813d-4532-b988-8519eca57650'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-9fdd910e-b9ff-4b2f-be38-2e93708c1b36'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (199 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aussenhandel.postfinance.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.aussenhandel.postfinance.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerceexterieur.postfinance.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.commerceexterieur.postfinance.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercioestero.postfinance.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.commercioestero.postfinance.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c77ea1a0543bbc2ad6dea0113f0f642664390dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4952df308692595f349c254824abc0ebd106f2d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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