se1-ucexe-p001.lidl.net

- Lidl Stiftung & Co. KG -

Issued by SwissSign RSA TLS EV ICA 2021 - 1

About this certificate

This digital certificate with serial number 23:29:0e:fa:aa:ea:f7:9f:ce:b2:ac:ef:51:2f:d7:9d:11:46:6c:fe was issued on by SwissSign AG.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lidl Stiftung & Co. KG

Company registration number: HRB 107937
Organization: Lidl Stiftung & Co. KG
State / Province: Baden-Württemberg
Locality: Neckarsulm
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 23:29:0e:fa:aa:ea:f7:9f:ce:b2:ac:ef:51:2f:d7:9d:11:46:6c:fe
Serial Number (int): 200730312401757692939784626020446030904443694334
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: c1:60:e0:2e:d7:f7:74:73:6a:ec:24:92:b7:75:8b:84:1a:9b:10:0b
AuthorityKeyId: da:34:d4:8e:10:23:f4:6a:2d:6c:b4:1f:f3:28:11:de:5e:01:c4:de

Fingerprint (sha1): b3:8c:43:db:98:d3:57:e5:e7:01:0c:1e:08:e9:be:44:4c:ab:42:34
Fingerprint (sha256): 04:16:8b:f8:15:82:6d:b1:e7:03:40:ad:0a:fb:ff:b7:b5:5f:c1:ae:6a:0f:35:d3:71:fa:d2:9d:e3:57:65:1d

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE

Revocation information

OCSP Server: http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate se1-ucexe-p001.lidl.net

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for se1-ucexe-p001.lidl.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

se1-ucexe-p001.lidl.net
l-c-mra-ext.lidl.net
se1-ucexe-p002.lidl.net
se1-ucexe-p001.sys.uc.schwarz
se1-ucexe-p002.sys.uc.schwarz
l-c-mra-ext.sys.uc.schwarz
collab-edge.lidl.rs
collab-edge.pt.lidl.net
collab-edge.mail.schwarz
collab-edge.lidl.si
collab-edge.nl.lidl.net
collab-edge.ro.lidl.net
collab-edge.gb.lidl.net
collab-edge.ch.lidl.net
collab-edge.lidl.com
collab-edge.it.lidl.net
collab-edge.pl.lidl.net
collab-edge.dk.lidl.net
collab-edge.lidl.hk
collab-edge.lidl.se
collab-edge.sit.mra.schwarz
collab-edge.fi.lidl.net
collab-edge.lidl.hr
collab-edge.lidl.sk
collab-edge.lidl.com.cy
collab-edge.se.lidl.net
collab-edge.lt.lidl.net
collab-edge.lidl.ie
collab-edge.ie.lidl.net
collab-edge.es.lidl.net
collab-edge.gr.lidl.net
collab-edge.cy.lidl.net
collab-edge.lidl.hu
collab-edge.lidl.ro
collab-edge.lidl.ch
collab-edge.lidl.be
collab-edge.lidl.gr
collab-edge.lidl.es
collab-edge.at.lidl.net
collab-edge.hu.lidl.net
collab-edge.siv-dl.de
collab-edge.lidl.ee
collab-edge.bg.lidl.net
collab-edge.lidl.bg
collab-edge.lidl.at
collab-edge.cz.lidl.net
collab-edge.lidl.lt
collab-edge.lidl.us
collab-edge.lidl.co.uk
collab-edge.lidl.fr
collab-edge.lidl.it
collab-edge.lidl.cz
collab-edge.hr.lidl.net
collab-edge.si.lidl.net
collab-edge.lidl.lv
collab-edge.rs.lidl.net
collab-edge.hk.lidl.net
collab-edge.fr.lidl.net
collab-edge.sk.lidl.net
collab-edge.be.lidl.net
collab-edge.lidl.fi
collab-edge.lidl.dk
collab-edge.prezero.com
collab-edge.lidl.nl
collab-edge.lidl.net
collab-edge.lidl.pt
collab-edge.lidl.de
collab-edge.lidl.pl
collab-edge.us.lidl.net
collab-edge.eu.lidl.net
collab-edge.lidl.ba
collab-edge.lidl.mk
collab-edge.lidl.me

Other certificates including the domain name lidl.net

(limited to 100 certificates)
cms-esaint.lidl.net
exp1.ucie.lidl.net
lsap29.asp.lidl.net
se1-ucexe-p001.lidl.net
abz-ssl-client-si.lidl.net
exp2.ucie.lidl.net
se1-ucexe-p001.lidl.net
qie-ssl-client-ie.lidl.net
hk-ucexe-p002.lidl.com.hk
lhr.hr.lidl.net
fizz.lidl.net
qdk-ssl-client-dk.lidl.net
l-tas154.asp.lidl.net
se1-ucexe-p001.lidl.net
ps4-ssl-client-eric.lidl.net
fizz.lidl.net
*.retail.lidl.net
qeu-ssl-client-eric.lidl.net
l-as525.asp.lidl.net
wirelessportal.lidl.com
hk-ucexe-p002.lidl.com.hk
se1-ucexe-p001.lidl.net
hgb-ssl-client-gb.lidl.net
heu-ssl-client-eric.lidl.net
exp2.ucie.lidl.net
fizz.lidl.net
se1-ucexe-p002.lidl.net
fizz.lidl.net
l-tas408.asp.lidl.net
fizz.lidl.net
*.sdl-career.lidl.net
heu-ssl-client-eric.lidl.net
qgb-ssl-client-gb.lidl.net
abz-ssl-client-eric.lidl.net
pf3-ssl-client-eric.lidl.net
exp1.ucie.lidl.net
se1-ucexe-p001.lidl.net
qps-ssl-client.lidl.net
se1-ucexe-p001.lidl.net
hsi-ssl-client-si.lidl.net
*.vdc.lidl.net
se1-ucexe-p001.lidl.net
out-uc17.lidl.net
abz-ssl-client-gb.lidl.net
abz-ssl-client-cssz.lidl.net
hcz-ssl-client-cssz.lidl.net
exp1.ucie.lidl.net
ebz-ssl-client-eric.lidl.net
heu-ssl-client-eric.lidl.net
qsi-ssl-client-si.lidl.net
wirelessportal.lidl.com
out-uc17.lidl.net
*.vdc.lidl.net
jss.lidl.net
fmmobile-qs.lidl.net
wirelessportal.lidl.com
pf3-ssl-client-eric.lidl.net
qie-ssl-client-ie.lidl.net
qps-ssl-client.lidl.net
out-uc18.lidl.net
ebz-ssl-client-eric.lidl.net
qeu-ssl-client-eric.lidl.net
heu-ssl-client-eric.lidl.net
ebz-ssl-client-eric.lidl.net
se1-ucexe-p001.lidl.net
wirelessportal.lidl.com
hps-ssl-client.lidl.net
abz-ssl-client-dk.lidl.net
qsi-ssl-client-si.lidl.net
hdk-ssl-client-dk.lidl.net
se1-ucexe-p001.lidl.net
out-uc18.lidl.net
qs4-ssl-client-eric.lidl.net
out-uc18.lidl.net
out-uc18.lidl.net
se1-ucexe-p001.lidl.net
fizz.lidl.net
abz-ssl-client-dk.lidl.net
ebz-ssl-client-dk.lidl.net
hdk-ssl-client-dk.lidl.net
qf3-ssl-client-eric.lidl.net
se1-ucexe-p002.lidl.net
hgb-ssl-client-gb.lidl.net
abz-ssl-client-eric.lidl.net
abz-ssl-client-si.lidl.net
se1-ucexe-p001.lidl.net
es4-ssl-client-eric.lidl.net
qgb-ssl-client-gb.lidl.net
exp2.ucie.lidl.net
*.vdc.lidl.net
jss.lidl.net
abz-ssl-client-eric.lidl.net
ssl-client-eee.lidl.net
se1-ucexe-p002.lidl.net
ebz-ssl-client-si.lidl.net
*.esaint.lidl.net
ssl-client-eee.lidl.net
qde-ssl-client-eric.lidl.net
hk-ucexe-p002.lidl.com.hk
heu-ssl-client-eric.lidl.net

Certificate

The complete raw certificate details for se1-ucexe-p001.lidl.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAx2IuXKQk3J6gkYByt6BF
Vhx0ofA/2SMBNfMiNzTP8GPK0j4aPJmfpp2pUZRuDzk49VW+z8sy/h1Et8WztTpz
JSmcee2hzVcVGTGtQ+UxSVVyBc4jbmm+Vima0bbx+J+IeX7aWKYhLwHoasmhLhh8
Ts5puqwDZ0wUsiLFHdTi4S5BPyzlTkVbHXFQQ6NNPZ1kHRoH6hRrglNkLX/5HNPU
2Ar/Kst8D8Cuwd2FpXlcF7L+KW3AuUfHJVzE6caP3rWO0CRGW2UOvc0tXqvRch0t
UN48wYQJOlzA1gAUOyVfKdwl1AfWcmaA+P8B8LSTpt43RQw6u38Gs4IV2MlN7iFv
lTTuB2Q+sGMBHxsZe7/tCXoGBRaQ2XlcE+o4M9iesezKQrhhD+FvM8m8oXu+roQW
EXtmh0Z4d9TSRnzKZsR09L6rwIsHLl16uGxR2ipNSSGb69lNjIpzFjIaze+6Ad3E
yfbLwi/Rmvk/XNdPO7Uj8dMZo5RKF5Al9o0fHAGvNdnsJRPwVuwyFog1KpfUMhnV
/m9LqlI7qvc+f/1k+v2WqUVwwYGpU7sJe9Su+Pjkt4FHME2mqs23vf+auqKC9ZC0
mAKKpjnKU8dLdmnoP52hi+5r+oPIYYmAJwdpkNBC/v0+VvWO+PbKl32mM/MpK+0t
uWPC9H64AMrvqRgTedN/QU8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 200730312401757692939784626020446030904443694334
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-10 09:43:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-10 09:43:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stuttgart'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 107937'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Neckarsulm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lidl Stiftung & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'se1-ucexe-p001.lidl.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 813413794327657774067909417941953849019468185433676905582514589120918923437046268590244519785329532918668451235726650737940250063742422062134775473987901187686228912467769428240524361376482300940595201956966726075148494177054158105343793340689482673036325795931704908566941720280260101129361364469129275046489162303367632918583153890788760497009957870722498457326230119337434883199928236071187065803854362662573765024368371221197125471578055357355946786746695726234761410650211120425035404385544595761522367246127308623524933048101145721137429436304842841399451008519113090061130943421742588995675515261708972046110725713030111810529412469974571792873071885687599693196408888079052320499143683069006454961265016983932285056840280838043038932310329014690650823795977558433252901550943000272202286608927340613702637617940012966793750168905359500133246069147387014047570332849437621534926026331228248767280816988934707279828471098427803057153803264917302546614917693890393643806189264137588409926424168917216069045971563642901164675054121797621292898568680204346019664907052153910559017874415901521096729697649243190629770133412358320950381154406601451472619000916936650642569647791591950484158156692779255101081570311997789676289081679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1713 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se1-ucexe-p001.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l-c-mra-ext.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se1-ucexe-p002.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se1-ucexe-p001.sys.uc.schwarz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se1-ucexe-p002.sys.uc.schwarz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l-c-mra-ext.sys.uc.schwarz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.pt.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.mail.schwarz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.nl.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.ro.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.gb.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.ch.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.it.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.pl.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.dk.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.sit.mra.schwarz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.fi.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.com.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.se.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lt.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.ie.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.es.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.gr.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.cy.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.at.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.hu.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.siv-dl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.bg.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.cz.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.hr.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.si.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.rs.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.hk.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.fr.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.sk.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.be.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.prezero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.us.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.eu.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c160e02ed7f774736aec2492b7758b841a9b100b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da34d48e1023f46a2d6cb41ff32811de5e01c4de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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