hk-ucexe-p002.lidl.com.hk

- Lidl Stiftung & Co. KG -

Issued by SwissSign Server Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 4a:ca:91:19:d3:7b:de:52:48:88:ea:03:7e:eb:c1:73:2f:e1:08:a9 was issued on by SwissSign AG.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lidl Stiftung & Co. KG

Organization: Lidl Stiftung & Co. KG
Organization unit: TCT
State / Province: Baden-Württemberg
Locality: Neckarsulm
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 4a:ca:91:19:d3:7b:de:52:48:88:ea:03:7e:eb:c1:73:2f:e1:08:a9
Serial Number (int): 426982707640696857765375018636288196554579314857
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: f8:09:9f:d3:c7:ae:8b:cc:b4:94:66:a3:a3:da:84:b7:e7:ce:5d:a9
AuthorityKeyId: e7:f1:e7:fd:2e:53:ad:11:e5:81:1a:57:a4:73:8f:12:7d:98:c8:ae

Fingerprint (sha1): 61:71:f3:91:17:4d:c8:94:e0:fb:d6:14:9d:81:2c:99:dd:0f:49:31
Fingerprint (sha256): 06:f4:e3:1e:94:64:f4:09:8e:b3:02:36:22:02:71:6a:ff:bf:7d:07:8e:3b:3c:c3:0b:39:b6:a4:4f:be:31:c5

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE

Revocation information

OCSP Server: http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate hk-ucexe-p002.lidl.com.hk

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hk-ucexe-p002.lidl.com.hk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hk-ucexe-p002.lidl.com.hk
l-hk-c-mra-ext.lidl.com.hk
hk-ucexe-p001.lidl.com.hk
hk-ucexe-p001.asia.lidl.net
hk-ucexe-p002.asia.lidl.net
collab-edge.lidl.sg
collab-edge.saps.com.hk
collab-edge.lidl.com.hk
collab-edge.asia.lidl.net

Other certificates including the domain name lidl.com.hk

(limited to 100 certificates)

Certificate

The complete raw certificate details for hk-ucexe-p002.lidl.com.hk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426982707640696857765375018636288196554579314857
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-31 15:45:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-31 15:45:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Neckarsulm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lidl Stiftung & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TCT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hk-ucexe-p002.lidl.com.hk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 673095699962588413939332876836783871759667409899447599862323635709622582818040954218469825231446196222434324767421857884371059478261853562957774581294656868483181562570271628986900716134832450982905018149212958764360194593722265090039030505609502919316355891914176436355600747680623695203150485710757584971218234177394600393853616890394673264681839873224886469321472044069286813079903357449579984845471706986597313850481977692087238213659000293401290992172941145289472086847530386128731510243781792319553289231754639780607091356172006002885026845071132675366123700749389131270705039851578414265909595595649091544990138846282917716835619009293749718890188780899276159782939026683268536892937176285632879578519390482638639880985929241353796971042484037825860108956672615100036986353457262514977885926920273390422188263922353251695644797366372240291325209577272237717017516344909301320602123945867557909258591402994525667634022057151960593375389325303147362168853379236134811677981266727238747986983366282610743487989521912668141970263297048619824092752664257833898109427562048118328787891585739412942446309608455231870737322930835071886858578947290137262233857268204013568745827504129461353754960109394651566276011182175474139345935117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk-ucexe-p002.lidl.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l-hk-c-mra-ext.lidl.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk-ucexe-p001.lidl.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk-ucexe-p001.asia.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk-ucexe-p002.asia.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.saps.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.asia.lidl.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8099fd3c7ae8bccb49466a3a3da84b7e7ce5da9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e7f1e7fd2e53ad11e5811a57a4738f127d98c8ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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