test-hr-portal.kaufland.com

- Kaufland Stiftung & Co. KG -

Issued by SwissSign RSA TLS EV ICA 2021 - 1

About this certificate

This digital certificate with serial number 3c:50:67:5f:af:22:c7:37:8b:b6:75:93:7b:ed:86:b8:87:d6:5a:a2 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Kaufland Stiftung & Co. KG

Company registration number: HRA 102851
Organization: Kaufland Stiftung & Co. KG
State / Province: Baden-Württemberg
Locality: Neckarsulm
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 3c:50:67:5f:af:22:c7:37:8b:b6:75:93:7b:ed:86:b8:87:d6:5a:a2
Serial Number (int): 344332510990384128055719644378233017516286171810
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 27:54:68:e9:af:8a:3c:9e:f5:9b:31:4f:dd:03:13:bb:7b:eb:5a:a9
AuthorityKeyId: da:34:d4:8e:10:23:f4:6a:2d:6c:b4:1f:f3:28:11:de:5e:01:c4:de

Fingerprint (sha1): 30:3e:42:f3:d3:b6:74:a0:12:0c:3b:e2:76:26:25:e5:ef:4a:04:de
Fingerprint (sha256): 0b:cf:62:33:df:db:0b:f9:62:4e:9d:7a:48:33:4b:9d:33:89:e0:2e:a0:3f:22:9c:11:bd:2a:1c:25:81:7e:01

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE

Revocation information

OCSP Server: http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate test-hr-portal.kaufland.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-hr-portal.kaufland.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test-hr-portal.kaufland.com
www.test-hr-portal.kaufland.com

Other certificates including the domain name kaufland.com

(limited to 100 certificates)
iqpim.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
ssl.ipaper.io
media.kaufland.com
p22-ssl-client-fi-hcm.kaufland.com
ssl2.ipaper.io
mobsot02.kaufland.com
ssl.ipaper.io
pim.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
at2-ssl-client-fi-hcm.kaufland.com
se1-ucexe-p014.uc.schwarz
ssl2.ipaper.io
portal.eu.kaufland.com
qs2-ssl-client-fi-hcm.kaufland.com
iapim.kaufland.com
kaufland-blumen.de
asset.kaufland.com
*.ipaper.io
ssl.ipaper.io
ssl.ipaper.io
remote.au.kaufland.com
www-pc.kaufland.com
ssl3.ipaper.io
ssl2.ipaper.io
ssl2.ipaper.io
*.ipaper.io
media-q.kaufland.com
media.kaufland.com
se1-ucexe-p011.uc.schwarz
ssl.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
*.ipaper.io
test-hr-portal.kaufland.com
portal.eu.kaufland.com
www-ac.kaufland.com
giftcard-q.kaufland.com
portal.eu.kaufland.com
se1-ucexe-p014.uc.schwarz
ssl2.ipaper.io
www-q.kaufland.com
connect-app.kaufland.com
ssl.ipaper.io
media.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
ssl2.ipaper.io
ssl.ipaper.io
*.leaflets.kaufland.com
media.kaufland.com
iqpim.kaufland.com
assets.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
*.ipaper.io
filex-test.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
jobs.kaufland.com
secmail.kaufland.com
account.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
*.ipaper.io
webassets.kaufland.com
account.kaufland.com
www-ec.kaufland.com
asset.kaufland.com
*.leaflets.kaufland.com
account-qs.kaufland.com
*.kaufland.com
www-fc.kaufland.com
kauf.land
*.ipaper.io
www-p.kaufland.com
kaufland.com
*.ipaper.io
ssl2.ipaper.io
dam.kaufland.com
se1-ucexe-p013.uc.schwarz
remote.cz.kaufland.com
www-q.kaufland.com
www-ac.kaufland.com
*.ipaper.io
mobsot.kaufland.com
*.ipaper.io
ssl.ipaper.io
eu.limo.remote.schwarz
jobs.kaufland.com
doa.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
www-q.kaufland.com
remote.eu.kaufland.com
ssl.ipaper.io
www-qc.kaufland.com
www-pc.kaufland.com

Certificate

The complete raw certificate details for test-hr-portal.kaufland.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344332510990384128055719644378233017516286171810
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-29 09:35:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-29 09:35:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stuttgart'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 102851'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Neckarsulm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kaufland Stiftung & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test-hr-portal.kaufland.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 730453187139318627297912135648642492070009576985988380776298650571561154044988448021716011098226109997543245793629058106295952607068303905914198206218830428203308535065558297196478901523490129627693234665456346088441930956719574419211912064259600099272744528920663957753265724675542524987939844172547778542117866355746388577397192574117297791313101427895033525238370604934451248827845530661079453994295080471783208829587690002025720029381502085553960988154537113722084034218826827025330366675680745516432681232155833749615799534732332420293621210717238298148927173815785260724497905254913968669284981841093071745890320514160930101990077619113125617635486443050862098583451445684024434576991255582615359760325818938049975663936248228632220808631190386608979561315313828909124648478772840559799181248721308568575113700829462039346478716987895245348793135609910700631780205636030144620001394926964714614145041569285200792342296584643507635911291734092107654393442782834373416691644509122285818272272612523031900608110245307204766764930294940481026133887322175169778402670535381428859256886659547221780803883337224305672844356679367024329759556791540912793180048749143958419406752516657171538074877240836383073605101969762298151814967363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-hr-portal.kaufland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-hr-portal.kaufland.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							275468e9af8a3c9ef59b314fdd0313bb7beb5aa9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da34d48e1023f46a2d6cb41ff32811de5e01c4de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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