www2.postfinance.ch

- PostFinance AG -

Issued by SwissSign EV Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 1e:ea:1e:7f:53:70:b7:a8:4a:e8:07:c9:0d:3c:52:e8:31:95:17:b6 was issued on by SwissSign AG.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PostFinance AG

Company registration number: CHE-114.583.749
Organization: PostFinance AG
Organization unit: PostFinance AG
State / Province: Bern
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:ea:1e:7f:53:70:b7:a8:4a:e8:07:c9:0d:3c:52:e8:31:95:17:b6
Serial Number (int): 176490754196521089221473020055051848762881546166
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 95:8b:9e:db:06:fa:51:55:a4:eb:6e:89:31:e8:d4:07:c8:5c:a1:a0
AuthorityKeyId: ee:fd:46:ca:f7:27:5e:91:bc:5a:b6:e7:87:cd:0a:fa:55:0a:26:42

Fingerprint (sha1): b6:6a:6e:31:67:fc:e0:fc:ac:28:e3:82:bc:3b:29:ef:38:b7:16:d8
Fingerprint (sha256): 17:7e:38:78:3b:d4:59:c3:4f:e6:af:05:53:be:7d:17:5c:10:30:fe:98:f4:83:18:b3:82:af:a1:c5:3b:04:64

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642

Revocation information

OCSP Server: http://gold-ev-g2.ocsp.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642
CRL Distribution Point: http://crl.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642
CRL Distribution Point: ldap://directory.swisssign.net/CN=EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate www2.postfinance.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www2.postfinance.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www2.postfinance.ch

Other certificates including the domain name postfinance.ch

(limited to 100 certificates)
www.postfinance.ch
e-archiv.postfinance.ch
aliasreg.postfinance.ch
e-finance.postfinance.ch
jobs.postfinance.ch
pfportalmo.postfinance.ch
csgw-test.postfinance.ch
proof.doc-shop.postfinance.ch
commercioestero.postfinance.ch
egw-test.postfinance.ch
e-payment.postfinance.ch
sventest.postfinance.ch
youth.postfinance.ch
pfportalext-test.postfinance.ch
sgtm.postfinance.ch
sipskypebe.post.ch
pfsb-admin-test.postfinance.ch
smartbusiness.postfinance.ch
onlinehypothek-test.postfinance.ch
www-poc-test.postfinance.ch
plano.postfinance.ch
mapps-test.postfinance.ch
www.wcm-test.postfinance.ch
www.doc-shop.postfinance.ch
testplattform.postfinance.ch
oauth.postfinance.ch
privatkredit-peprod.postfinance.ch
www.postfinance.ch
dev.plusfinance.postfinance.ch
outlook.post.ch
benefit.postfinance.ch
egw.postfinance.ch
versicherungen.postfinance.ch
ebics-test.postfinance.ch
sventest.postfinance.ch
pfsb-test.postfinance.ch
universal-t2.postfinance.ch
egw-test.postfinance.ch
3dsec.postfinance.ch
dev.tilbago.postfinance.ch
pfportalmo.postfinance.ch
sipskypebe.post.ch
dev.young.postfinance.ch
tilbago.postfinance.ch
statusitservices.postfinance.ch
events-test.postfinance.ch
digitalpfc.int.postfinance.ch
pfportalmo-test.postfinance.ch
sventest.postfinance.ch
m.commercioestero.postfinance.ch
rivista.postfinance.ch
ai.ep2.postfinance.ch
ef-t2.postfinance.ch
jira-dev.postfinance.ch
epayment.postfinance.ch
www-test.postfinance.ch
sandbox1.postfinance.ch
sandbox1.postfinance.ch
collector-test.postfinance.ch
mapps-test.postfinance.ch
sventest.postfinance.ch
egw.postfinance.ch
hosting.postfinance.ch
nladh-t2.postfinance.ch
aussenhandel.postfinance.ch
plano.postfinance.ch
epayment.postfinance.ch
yellowpay.postfinance.ch
nlsec.postfinance.ch
challengethefuture.postfinance.ch
skypeweb.post.ch
pfsb.postfinance.ch
plano.postfinance.ch
pfportalmo.postfinance.ch
events-test.postfinance.ch
csgw-t2.postfinance.ch
epayment-test.postfinance.ch
dev.magazine.postfinance.ch
mapps.postfinance.ch
ef-t2.postfinance.ch
meet.post.ch
young.postfinance.ch
epayment.postfinance.ch
www-test.postfinance.ch
pfportalmo-test.postfinance.ch
e-trading.postfinance.ch
www-poc-test.postfinance.ch
pfportalext-test.postfinance.ch
events-test.postfinance.ch
pfportalmo.postfinance.ch
bqztyw.postfinance.ch
young.postfinance.ch
questback.postfinance.ch
www.plusfinance.postfinance.ch
csgw-test.postfinance.ch
stage.tour.postfinance.ch
3dsec.postfinance.ch
www2.postfinance.ch
teleoptipf.postfinance.ch
plano.postfinance.ch

Certificate

The complete raw certificate details for www2.postfinance.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3ejtHJkGqZqZyfqbLr4
TqVMLDioSvcMGAZy8SyYYJTkVRgdkg+/rBK7bxOosVRqDG8t80aQFFBNMu533pAH
FWRbAb0H0fK/a4r9KVH56RWUi59cYK6rUR1Gmpy7MhOZ4KGjRvfZOt1cHz4DVXZs
7XBWHNtXGSWbZSZuBZK0fGXiHVh4dDeuV4oz1IFSjYJlh0iQwulabcqVPGXVbpfV
YRlgb5DsEM2FteejqIN/Th13z2cM5ebc4rtdteHe9VilVIkKI8ZMRpF4IiYVWStH
nOaK3tnzt57CfwVNw0QHwwG1Nctj3zqTAyDgky2lM09HNtUilf965c+vsl34O1u/
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 176490754196521089221473020055051848762881546166
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign EV Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-02 12:10:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-02 12:10:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHE-114.583.749'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostFinance AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PostFinance AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www2.postfinance.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23665559451197039771523899838780427452997454576452949010071738815069840158086565141601539809342045126828574280037275835366857331886898095069471775898823101128995515993611261932462877336983460037674852946790200178529953651414291698631822859229933503536701739578050919216425259281394323129507016690522779703973764472494145815931247944914201339271621892431926167466385132305834934497493262167949117254569033028981366263266028394443229780198493286607243902162766589072843248327490922908321800471392680129486933025464888112342429797304061445776375133073940443151125636093928671484567298465478251812328343087373370431094717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.postfinance.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							958b9edb06fa5155a4eb6e8931e8d407c85ca1a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eefd46caf7275e91bc5ab6e787cd0afa550a2642
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.1 (SwissSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (196 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-ev-g2.ocsp.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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