apnac03v.funkemedien.de
Issued by SwissSign RSA TLS DV ICA 2021 - 1
About this certificate
This digital certificate with serial number 16:5e:f2:31:ca:b1:7e:84:17:29:6d:64:62:eb:e3:df:56:1a:5f:2c was issued on by SwissSign AG.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=apnac03v.funkemedien.de
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate has expire since
Certificate Details
Serial Number (hex): 16:5e:f2:31:ca:b1:7e:84:17:29:6d:64:62:eb:e3:df:56:1a:5f:2cSerial Number (int): 127715165123243470955516136102649016695209484076
Serial Number lenght: 157 bits, 20 octets
SubjectKeyId: ff:97:cc:8d:d3:c7:7e:4a:82:7f:14:a9:26:0e:39:66:fc:cd:f3:b4
AuthorityKeyId: 3c:9e:52:79:03:63:6f:4f:9c:81:1b:d3:28:70:0c:24:5a:ea:a5:87
Fingerprint (sha1): 01:d6:d9:52:b0:9a:64:4e:72:a1:20:2f:36:ca:4f:ec:2e:1b:4e:8e
Fingerprint (sha256): 0b:ba:a4:3e:01:73:b2:05:3f:3c:9e:27:26:1c:76:82:58:df:8d:b5:30:8c:7e:ec:57:ce:95:28:47:90:8d:cc
Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587
Revocation information
OCSP Server: http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587CRL Distribution Point: http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint
Check the revocation status for certificate apnac03v.funkemedien.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for apnac03v.funkemedien.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
apnac03v.funkemedien.de
www.apnac03v.funkemedien.de
www.apnac03v.funkemedien.de
Other certificates including the domain name funkemedien.de
(limited to 100 certificates)
bzv-medienhaus.de
ws-reservix.funkemedien.de
casproxy.funkemedien.de
*.dabis.funkemedien.de
funkemedien.de
www.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
www.funkemedien.de
*.funkemedien.de
avmnac02.access.funkemedien.de
dcx.funkemedien.de
*.access.funkemedien.de
dcx.funkemedien.de
bzv-medienhaus.de
extern.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
apnac04v.funkemedien.de
www.funkemedien.de
bzv-medienhaus.de
hadznac01v.funkemedien.de
*.waz.de
marke.funkemedien.de
portal.dz-hagen.funkemedien.de
www.funkemedien.de
*.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
apnac03v.funkemedien.de
*.test.funkemedien.de
mail.funke-medien.de
*.fabo-live.funkemedien.de
*.funkemedien.de
events.funkemedien.de
rd-cb-ha.access.funkemedien.de
aboservice.bildderfrau.de
extern.funkemedien.de
connect.funkemedien.de
waz.de
login.funkemedien.de
*.funkemedien.de
hadznac01v.funkemedien.de
bwv.portal.funkemedien.de
con.funkemedien.de
funkemedien.de
sso.funkemedien.de
bzv-medienhaus.de
bzv-medienhaus.de
expe.funkemedien.de
rdweb.access.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
bzv-medienhaus.de
*.funkemedien.de
dcx.funkemedien.de
*.funkemedien.de
*.funkemedien.de
mail.funkemedien.de
expe.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
connect.funkemedien.de
sso.funkemedien.de
portal.dz-hagen.funkemedien.de
bzv-medienhaus.de
dcx.funkemedien.de
gate.funkemedien.de
email.funkemedien.de
datenschutz.funkemedien.de
mail.funke-medien.de
digas.axelspringer-syndication.de
*.funkemedien.de
*.funkemedien.de
portal.druckzentrum-essen.funkemedien.de
*.planer.funkemedien.de
blog.funkemedien.de
bwv.portal.funkemedien.de
apnac04v.funkemedien.de
*.funkemedien.de
bwv.portal.funkemedien.de
expe-cluster.funkemedien.de
volontariat.funkemedien.de
*.waz.de
funkemedien.de
mail.funkemedien.de
anzeigen.funkemedien.de
avmnac01.access.funkemedien.de
*.zpr.funkemedien.de
funkemedien.de
www.funkemedien.de
anzeigenbuchung-in-thueringen.de
*.fabo-live.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
*.funkemedien.de
*.waz.de
*.waz.de
dcx.funkemedien.de
aisvxc03.funkemedien.de
ws-reservix.funkemedien.de
casproxy.funkemedien.de
*.dabis.funkemedien.de
funkemedien.de
www.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
www.funkemedien.de
*.funkemedien.de
avmnac02.access.funkemedien.de
dcx.funkemedien.de
*.access.funkemedien.de
dcx.funkemedien.de
bzv-medienhaus.de
extern.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
apnac04v.funkemedien.de
www.funkemedien.de
bzv-medienhaus.de
hadznac01v.funkemedien.de
*.waz.de
marke.funkemedien.de
portal.dz-hagen.funkemedien.de
www.funkemedien.de
*.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
apnac03v.funkemedien.de
*.test.funkemedien.de
mail.funke-medien.de
*.fabo-live.funkemedien.de
*.funkemedien.de
events.funkemedien.de
rd-cb-ha.access.funkemedien.de
aboservice.bildderfrau.de
extern.funkemedien.de
connect.funkemedien.de
waz.de
login.funkemedien.de
*.funkemedien.de
hadznac01v.funkemedien.de
bwv.portal.funkemedien.de
con.funkemedien.de
funkemedien.de
sso.funkemedien.de
bzv-medienhaus.de
bzv-medienhaus.de
expe.funkemedien.de
rdweb.access.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
bzv-medienhaus.de
*.funkemedien.de
dcx.funkemedien.de
*.funkemedien.de
*.funkemedien.de
mail.funkemedien.de
expe.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
connect.funkemedien.de
sso.funkemedien.de
portal.dz-hagen.funkemedien.de
bzv-medienhaus.de
dcx.funkemedien.de
gate.funkemedien.de
email.funkemedien.de
datenschutz.funkemedien.de
mail.funke-medien.de
digas.axelspringer-syndication.de
*.funkemedien.de
*.funkemedien.de
portal.druckzentrum-essen.funkemedien.de
*.planer.funkemedien.de
blog.funkemedien.de
bwv.portal.funkemedien.de
apnac04v.funkemedien.de
*.funkemedien.de
bwv.portal.funkemedien.de
expe-cluster.funkemedien.de
volontariat.funkemedien.de
*.waz.de
funkemedien.de
mail.funkemedien.de
anzeigen.funkemedien.de
avmnac01.access.funkemedien.de
*.zpr.funkemedien.de
funkemedien.de
www.funkemedien.de
anzeigenbuchung-in-thueringen.de
*.fabo-live.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
*.funkemedien.de
*.waz.de
*.waz.de
dcx.funkemedien.de
aisvxc03.funkemedien.de
Certificate
The complete raw certificate details for apnac03v.funkemedien.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKYjCCCEqgAwIBAgIUFl7yMcqxfoQXKW1kYuvj31YaXywwDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjEgLSAxMB4XDTIyMDIxNzA2 MjM0NFoXDTIzMDIxNzA2MjM0NFowIjEgMB4GA1UEAxMXYXBuYWMwM3YuZnVua2Vt ZWRpZW4uZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC7fPILhBSL nEDgf2k74BXy7BKJZreEJVi3Wt7WFtIlkchbwsIfI08v5rmLElWQCprU4k/thK7J DMpTP/+IJqEaU05aBpDxEfipTAQYpFwY/1QYdJZO3QDcD+7SW4e7WkQh7f0nvF1W YMP9JiGqxBahUYdO2PtRzCy5TLTFT78s1VUy6HMzlnWBtqCMQUQAiqcFlq/liE+0 IfepFhurpV6pxcmoopT/C2E9YnykcgQF0m5ul32BMFgDVqcgNvC/FuuCLBeI9fIc 0t+/9Ev2TcNX5fwtzH9rUn17SVeyiuO0IcM9+DAx19um1Srq9A1A1rnD35UYhsTd aUhNdQxbDj2B+5a/HKWc72SYKcL8OiWQH61Q9WtEI4xbNjciuST7GFNwZ8g80OL9 nNU8y6ms1VD0Iyr42rFbUjs+xy3UpxDCrcpbCnQic6JW/QataYoSOBuLz75Lyz14 9Frx0yf5vcH5wwZ6WvbUt1V9LGX3YM2R7sGFGTPcqK1cd9C+QfCg/5ph9DKB2401 Kg++zXsWioN4a8c/iuzTKdVeMMlzhAtZuvze650+aj1l3v5twqMzcpu87a4nD/LV P/veo3idZ+zykuuRK9XJguFP1qjVYrnT8legZNyTfl4v1w9c7Y8zMIrtSQZfSR9E GCf5tM52D0wTAiiAV45fmqHwMYphl2TC1wIDAQABo4IFYDCCBVwwPwYDVR0RBDgw NoIXYXBuYWMwM3YuZnVua2VtZWRpZW4uZGWCG3d3dy5hcG5hYzAzdi5mdW5rZW1l ZGllbi5kZTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMB0GA1UdDgQWBBT/l8yN08d+SoJ/FKkmDjlm/M3ztDAfBgNVHSMEGDAW gBQ8nlJ5A2NvT5yBG9MocAwkWuqlhzCB/wYDVR0fBIH3MIH0MEegRaBDhkFodHRw Oi8vY3JsLnN3aXNzc2lnbi5uZXQvM0M5RTUyNzkwMzYzNkY0RjlDODExQkQzMjg3 MDBDMjQ1QUVBQTU4NzCBqKCBpaCBooaBn2xkYXA6Ly9kaXJlY3Rvcnkuc3dpc3Nz aWduLm5ldC9DTj0zQzlFNTI3OTAzNjM2RjRGOUM4MTFCRDMyODcwMEMyNDVBRUFB NTg3JTJDTz1Td2lzc1NpZ24lMkNDPUNIP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxp c3Q/YmFzZT9vYmplY3RDbGFzcz1jUkxEaXN0cmlidXRpb25Qb2ludDBvBgNVHSAE aDBmMFAGCGCFdAFZAgEBMEQwQgYIKwYBBQUHAgEWNmh0dHBzOi8vcmVwb3NpdG9y eS5zd2lzc3NpZ24uY29tL1N3aXNzU2lnbl9DUFNfVExTLnBkZjAIBgYEAI96AQYw CAYGZ4EMAQIBMIHGBggrBgEFBQcBAQSBuTCBtjBkBggrBgEFBQcwAoZYaHR0cDov L3N3aXNzc2lnbi5uZXQvY2dpLWJpbi9hdXRob3JpdHkvZG93bmxvYWQvM0M5RTUy NzkwMzYzNkY0RjlDODExQkQzMjg3MDBDMjQ1QUVBQTU4NzBOBggrBgEFBQcwAYZC aHR0cDovL29jc3Auc3dpc3NzaWduLm5ldC8zQzlFNTI3OTAzNjM2RjRGOUM4MTFC RDMyODcwMEMyNDVBRUFBNTg3MIICbAYKKwYBBAHWeQIEAgSCAlwEggJYAlYAdABv U3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAX8GWdWBAAAEAwBFMEMC H1XvFXu4p1fXkm0LhzdXZ/T1/gPnLcj/bG2ASa7MYbkCID5A/HNae8QrCa4AnV4/ C8jpD/xgMQ7kGD/r+HQTmkXJAHUAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6 V6NS61IAAAF/BlnYrQAABAMARjBEAiBmPmD1Plsc1s6fzqgnhl/3owjDddETXvzh Nj8dIYjfawIgDYHHgrp6iu9pden++FKYjrbDBcjn1vFABDWqD0WXcGQAdgCt9776 fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yCigAAAX8GWdVDAAAEAwBHMEUCIQCw lHIBzPmsJd4DhIxfNdludcHaQQdn3JD9OX4m41zosgIgYy/LFTl57Ue16tkDMQ4J AMp7tEMrleLDWI8CTYPe3Y4AdgCzc3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc8AMO eTalmgAAAX8GWdZqAAAEAwBHMEUCIBHyCHfNy9tPCrP7s2znTVoC6nvke4U6CHP8 sfc2KZ0tAiEAuNKYwpy4n0UdN+WUMMJ8d/bLqiJiHOW5kMyehGJBLncAdwDoPtDa PvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAX8GWdWkAAAEAwBIMEYCIQDx PUX6tihfilni26PXKBIykd5XekQANQ24D3NR5ETnWQIhAKL0CvKNGIJdnMheL4IZ wxlHcNhyCu3C523AIMkkEbS4MA0GCSqGSIb3DQEBCwUAA4ICAQB7LOCZ+KYc3RKM 8a6n821K1VSiRm2eB9ApOt2rokco/fn204H+ZsrPK3DHong1tU6i4PQoWa7/eQde vy1gXOMGlRyeyee4IjOn1WdfCF9y+VQZVouBSBLV8f/7YR1zHnfKc9sbQdqU6gDh ZzM5rPsD931J6YdXg8KxhgHW8ne8qwzgCMn/Qx3n0TTicrUJYbWuNXUl6uIsJsMm zgQe/egO0+n8f1rqEFT2NDuE9oHOy3qnAsF8zxvoiaP5u3vHpUqfnAGteJ6P0h9i Dn4hyoNxECqNkqXlw1m+aJB9f5iqXhRKm9723n1VbpgTC5eWSjeqqasmo7tWl1Ek 2ksxOL0oxeKk6QIops+SmSMXZK4k0RlsmR/p2DyIM84Jj2Cevfp1UEnkUoIB85K0 aX8cNq0RUZBdn8vhmmdy99yccnJ02bOlgDLG64lQpKqLnsj4pH5L8Mtu1S3l8wUX Ao/E5IMAa2T20kyXb36Or55ZxWWqWdVCT/XwxjOgtiIAwtNuEU/vFqLB528MluV2 OM0bnf3LQqrZA294EHOQr2nN6nu2AXOATqA+0xltgiBY0yCgNyd8PJ1zGfqwdOZO oerRhhKu+uVlm53AWDlKpyScmNXNwP1UuJNvfAoZEbDJDhIkQcBQO3eN9dtSWNSk jY6l6lXZY2D7zQhvonEoGZ7AYqHY4g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu3zyC4QUi5xA4H9pO+AV 8uwSiWa3hCVYt1re1hbSJZHIW8LCHyNPL+a5ixJVkAqa1OJP7YSuyQzKUz//iCah GlNOWgaQ8RH4qUwEGKRcGP9UGHSWTt0A3A/u0luHu1pEIe39J7xdVmDD/SYhqsQW oVGHTtj7UcwsuUy0xU+/LNVVMuhzM5Z1gbagjEFEAIqnBZav5YhPtCH3qRYbq6Ve qcXJqKKU/wthPWJ8pHIEBdJubpd9gTBYA1anIDbwvxbrgiwXiPXyHNLfv/RL9k3D V+X8Lcx/a1J9e0lXsorjtCHDPfgwMdfbptUq6vQNQNa5w9+VGIbE3WlITXUMWw49 gfuWvxylnO9kmCnC/DolkB+tUPVrRCOMWzY3Irkk+xhTcGfIPNDi/ZzVPMuprNVQ 9CMq+NqxW1I7Psct1KcQwq3KWwp0InOiVv0GrWmKEjgbi8++S8s9ePRa8dMn+b3B +cMGelr21LdVfSxl92DNke7BhRkz3KitXHfQvkHwoP+aYfQygduNNSoPvs17FoqD eGvHP4rs0ynVXjDJc4QLWbr83uudPmo9Zd7+bcKjM3KbvO2uJw/y1T/73qN4nWfs 8pLrkSvVyYLhT9ao1WK50/JXoGTck35eL9cPXO2PMzCK7UkGX0kfRBgn+bTOdg9M EwIogFeOX5qh8DGKYZdkwtcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 127715165123243470955516136102649016695209484076 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2021 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-17 06:23:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-17 06:23:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apnac03v.funkemedien.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764884585719137376236024607879657415542635914582113240954844948126486128831646226994893632093174918675655539865414778157245807558652622159264898733525398683063190757283223098346942312626425875611826564972489938730578614228189460330145976575918832189769215536874852097914235043671877059511517327182403583240012166406122789031156208718993879400845848245025441311085542161932713329781206177775238404740148671058732556163148116075687367357416321974812011582520203479796844250998833771440286635554177772125636918511592668273047543669933894203210437552191919248119925952725753493417981925814375335142722680731255072889783649198734105385068612232663476203693177132378411761001906596958218548024376725846813764107919152505271424537363094154743448599564390303225194275377615206552295665146356847207575816979172787339580611321130965507525549338011480856197600730905271913708002614941091759036511506675543160735132322317042823630742108453300639625357889175233614064744266439574052531365859829386025387085729815111838467032399816792557851810005187102420308326591073839243932056483337081551978722401340972678711508569280659025963503878010959208253229683127033687809070493697672578619194710482836201680362935953941977399228946627039250145807221463 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apnac03v.funkemedien.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apnac03v.funkemedien.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ff97cc8dd3c77e4a827f14a9260e3966fccdf3b4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3c9e527903636f4f9c811bd328700c245aeaa587 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (600 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 007b2ce099f8a61cdd128cf1aea7f36d4ad554a2466d9e07d0293addaba24728fdf9f6d381fe66cacf2b70c7a27835b54ea2e0f42859aeff79075ebf2d605ce306951c9ec9e7b82233a7d5675f085f72f95419568b814812d5f1fffb611d731e77ca73db1b41da94ea00e1673339acfb03f77d49e9875783c2b18601d6f277bcab0ce008c9ff431de7d134e272b50961b5ae357525eae22c26c326ce041efde80ed3e9fc7f5aea1054f6343b84f681cecb7aa702c17ccf1be889a3f9bb7bc7a54a9f9c01ad789e8fd21f620e7e21ca8371102a8d92a5e5c359be68907d7f98aa5e144a9bdef6de7d556e98130b97964a37aaa9ab26a3bb56975124da4b3138bd28c5e2a4e90228a6cf9299231764ae24d1196c991fe9d83c8833ce098f609ebdfa755049e4528201f392b4697f1c36ad1151905d9fcbe19a6772f7dc9c727274d9b3a58032c6eb8950a4aa8b9ec8f8a47e4bf0cb6ed52de5f30517028fc4e483006b64f6d24c976f7e8eaf9e59c565aa59d5424ff5f0c633a0b62200c2d36e114fef16a2c1e76f0c96e57638cd1b9dfdcb42aad9036f78107390af69cdea7bb60173804ea03ed3196d822058d320a037277c3c9d7319fab074e64ea1ead18612aefae5659b9dc058394aa7249c98d5cdc0fd54b8936f7c0a1911b0c90e122441c0503b778df5db5258d4a48d8ea5ea55d96360fbcd086fa27128199ec062a1d8e2