ctx.migros.net
Issued by Migros CA Class1
About this certificate
This digital certificate with serial number 13:0d:c3:a7:00:00:00:00:29:3a was issued on by Migros.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
Certificate Subject
CN=ctx.migros.net
Migros
Organization:
Migros
Country:
CH
This certificate has expire since
Certificate Details
Serial Number (hex): 13:0d:c3:a7:00:00:00:00:29:3aSerial Number (int): 89978869084639989868858
Serial Number lenght: 77 bits, 10 octets
SubjectKeyId: 9a:85:82:b0:c9:b3:1e:76:45:1f:95:b9:45:e8:ec:51:80:ab:65:bb
AuthorityKeyId:
Fingerprint (sha1): 76:b6:39:0f:89:f4:c5:1e:17:74:f8:17:13:8a:fb:b1:15:9c:ea:61
Fingerprint (sha256): 0c:5e:de:be:d5:e2:17:ef:7d:31:81:c0:00:5d:87:31:f2:a7:f7:77:b1:53:7b:5b:dc:b5:ad:b6:76:e7:9b:27
Revocation information
CRL Distribution Point: ldap://metadir.migros.ch:389/cn=migros_ca_class1,o=migros,c=chCheck the revocation status for certificate ctx.migros.net
0
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ctx.migros.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Time Stamping
Email Protection
IPSEC User
IPSEC Tunnel
IPSEC End System
Code Signing
Client Authentication
Server Authentication
Extensions
4 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
This certificate doesn't contain any subject alternative names.
Other certificates including the domain name migros.net
(limited to 100 certificates)
ts.mobile.migros.net
ukasolutions-migrosindustrie.migros.net
live.dev.image-upload.mdb.migros.net
idm-qual.migros.net
parkcontrol.migros.net
ext-pi.migros.net
sfd.migros.net
kuva-test.migros.net
staging.prod.pema-coupons.mdb.migros.net
awds.migros.net
qim-appl-supp.migros.net
wsdwh.migros.net
qual.sfd.migros.net
svn.cwi.migros.net
jira.migros.net
artikelstamm.migros.net
d21.mindustry-test.migros.net
q-bw.migros.net
sts.migros.net
m-packaging-bw06.migros.net
wp2.migros.net
test-bivrost.migros.net
staging.qual.mam.mdb.migros.net
neops.migros.net
pim-supp-qual.migros.net
m-packaging-bw04.migros.net
zeugnis.migros.net
zeugnis-sts.migros.net
streaming.migros.net
mcds.migros.net
mlsplus-s.migros.net
mlsplus-t.migros.net
dsapbemignept.migros.net
ltopex-supplier-test.migros.net
sim-report.migros.net
owa.migros.net
intranet.migros.net
smslogin.migros.net
accountant-mpay.migros.net
d-onemindsolman.migros.net
api.idm.migros.net
sso-maps.migros.net
industry-test.migros.net
qual.ts.mobile.migros.net
assets.migros.net
image-upload.mdb.migros.net
finanzarchiv-test.migros.net
epass.migros.net
p99.migros.ch
sapp22.migros.net
sfd.migros.net
p58.mindustry.migros.net
mls-connect.migros.net
ra-sense-test.migros.net
outlook.migros.net
mobilemaps-q.migros.net
ewf.migros.net
d-hr-portal-d30.migros.net
lb-service-url.migros.net
pim.migros.net
hr-portal-p30.migros.net
q-mepcis.migros.net
voucher.migros.net
staging.dev.pema-coupons.mdb.migros.net
login-corp.migros.net
api.commit.migros.net
tagetik.migros.net
parkcontrol.migros.net
octane-uboot.migros.net
cumulus.migros.net
assets.migros.net
helpline.prod.migros.net
obsonis.migros.net
pos-upload-test.migros.net
staging.prod.kms-portal.mdb.migros.net
srm.migros.net
pim-q.migros.net
ctx.migros.net
mura.migros.net
boe.q-bw.migros.net
oas-con.migros.net
login-azure.migros.net
dataintegrationhub.migros.net
d-hr-portal-d30.migros.net
qim-q.migros.net
migros.net
transfer.migros.net
pmls.migros.net
group.m-mobile.migros.net
test-mlsplus-help.migros.net
d-rechnungswesen.migros.net
idm.migros.net
sim.migros.net
ltopex-supplier.migros.net
login-schadenportal.migros.net
ra-sense-test.migros.net
suppliernet.migros.net
migrosticino.migros.net
integ.migros.net
login-schadenportal.migros.net
ukasolutions-migrosindustrie.migros.net
live.dev.image-upload.mdb.migros.net
idm-qual.migros.net
parkcontrol.migros.net
ext-pi.migros.net
sfd.migros.net
kuva-test.migros.net
staging.prod.pema-coupons.mdb.migros.net
awds.migros.net
qim-appl-supp.migros.net
wsdwh.migros.net
qual.sfd.migros.net
svn.cwi.migros.net
jira.migros.net
artikelstamm.migros.net
d21.mindustry-test.migros.net
q-bw.migros.net
sts.migros.net
m-packaging-bw06.migros.net
wp2.migros.net
test-bivrost.migros.net
staging.qual.mam.mdb.migros.net
neops.migros.net
pim-supp-qual.migros.net
m-packaging-bw04.migros.net
zeugnis.migros.net
zeugnis-sts.migros.net
streaming.migros.net
mcds.migros.net
mlsplus-s.migros.net
mlsplus-t.migros.net
dsapbemignept.migros.net
ltopex-supplier-test.migros.net
sim-report.migros.net
owa.migros.net
intranet.migros.net
smslogin.migros.net
accountant-mpay.migros.net
d-onemindsolman.migros.net
api.idm.migros.net
sso-maps.migros.net
industry-test.migros.net
qual.ts.mobile.migros.net
assets.migros.net
image-upload.mdb.migros.net
finanzarchiv-test.migros.net
epass.migros.net
p99.migros.ch
sapp22.migros.net
sfd.migros.net
p58.mindustry.migros.net
mls-connect.migros.net
ra-sense-test.migros.net
outlook.migros.net
mobilemaps-q.migros.net
ewf.migros.net
d-hr-portal-d30.migros.net
lb-service-url.migros.net
pim.migros.net
hr-portal-p30.migros.net
q-mepcis.migros.net
voucher.migros.net
staging.dev.pema-coupons.mdb.migros.net
login-corp.migros.net
api.commit.migros.net
tagetik.migros.net
parkcontrol.migros.net
octane-uboot.migros.net
cumulus.migros.net
assets.migros.net
helpline.prod.migros.net
obsonis.migros.net
pos-upload-test.migros.net
staging.prod.kms-portal.mdb.migros.net
srm.migros.net
pim-q.migros.net
ctx.migros.net
mura.migros.net
boe.q-bw.migros.net
oas-con.migros.net
login-azure.migros.net
dataintegrationhub.migros.net
d-hr-portal-d30.migros.net
qim-q.migros.net
migros.net
transfer.migros.net
pmls.migros.net
group.m-mobile.migros.net
test-mlsplus-help.migros.net
d-rechnungswesen.migros.net
idm.migros.net
sim.migros.net
ltopex-supplier.migros.net
login-schadenportal.migros.net
ra-sense-test.migros.net
suppliernet.migros.net
migrosticino.migros.net
integ.migros.net
login-schadenportal.migros.net
Certificate
The complete raw certificate details for ctx.migros.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEvjCCA6agAwIBAgIKEw3DpwAAAAApOjANBgkqhkiG9w0BAQUFADA5MQswCQYD VQQGEwJDSDEPMA0GA1UEChMGTWlncm9zMRkwFwYDVQQDExBNaWdyb3MgQ0EgQ2xh c3MxMB4XDTA5MDUxOTA5MTA0N1oXDTE0MDUxODA5MTA0N1owGTEXMBUGA1UEAxMO Y3R4Lm1pZ3Jvcy5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4 4RiQtVMS5iZofEOQBxkCgUsPeTz4jQ245gr1TW/cpMFILAA5FTaTPGo2ugRv5hs4 7t6VDkHElxTP9o6U/u7twZLg+ONVX+AP8I7O4waUNeZylahjaaisFvES6XNi+s9u bcPEVR003I/Vf/ukWxExHShW2TN9rit9EAZTfIANAcwuaEpaTriTFho58tZy8i5F wsOfDusla0LF/oZPg9ueEWTsnjh4q+S21l2ltq/1q/67UyclazkrbqHH0HNbSb9/ LKvLQNQygv5gNrPHKhOr6bGspXD4CeTltxXM0MfOxct8TcqBpZ8LMipmpt1r+Nqo FYMScFw69IO5MYB9QaENAgMBAAGjggHmMIIB4jALBgNVHQ8EBAMCBLAwHQYDVR0O BBYEFJqFgrDJsx52RR+VuUXo7FGAq2W7MIIBYQYDVR0lBIIBWDCCAVQGCisGAQQB gjcKAwUGCCsGAQUFBwMIBgorBgEEAYI3FAICBgorBgEEAYI3CgMGBggrBgEFBQcD BAYKKwYBBAGCNwoDCQYKKwYBBAGCNwoDCgYJKwYBBAGCNxUFBgorBgEEAYI3CgMH BgorBgEEAYI3CgMBBgorBgEEAYI3CgMCBgorBgEEAYI3CgMNBgorBgEEAYI3CgYC BgkrBgEEAYI3FQYGCisGAQQBgjcKAwsGCisGAQQBgjcKBgEGCCsGAQUFBwMHBggr BgEFBQcDBgYIKwYBBQUIAgIGCCsGAQUFBwMFBgsrBgEEAYI3CgMEAQYKKwYBBAGC NwoDBAYKKwYBBAGCNwoDCAYKKwYBBAGCNwoDDAYJKwYBBAGCNxUTBgorBgEEAYI3 CgUBBggrBgEFBQcDAwYIKwYBBQUHAwIGCisGAQQBgjcUAgEGCCsGAQUFBwMBME8G A1UdHwRIMEYwRKBCoECGPmxkYXA6Ly9tZXRhZGlyLm1pZ3Jvcy5jaDozODkvY249 bWlncm9zX2NhX2NsYXNzMSxvPW1pZ3JvcyxjPWNoMA0GCSqGSIb3DQEBBQUAA4IB AQC9GWPFuwchAGRJ9ir72l/u9oafvHvcFe+msVNizFJOGmHSdG6MRfBlQTgSblhT +eMoB7q7S3OBH5jAZjIbzbS4NO5yt9igZziMW2IcA+QoXaINsHT00jc/ExFAOqqE lMv7zdfP7iODFVV/T7E4D7wUqvi7TbPuY2HBYu9wRX3mV1fvhNI4dMqtbwwMZONJ 0p35LZXmR9LoeLsMlZ0KuYfJaPFKRkdZWvfMmuvQL+GKTLsuNKspCRs5G88n/hrY 2MLV+ufxxqd7Eg+FFkumowdqo0Ds89pohQhJ493TJK8wfPgs+QEpNvaXOpUg535g mVVASBjDZNQU9zHcrNaO0huU -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOEYkLVTEuYmaHxDkAcZ AoFLD3k8+I0NuOYK9U1v3KTBSCwAORU2kzxqNroEb+YbOO7elQ5BxJcUz/aOlP7u 7cGS4PjjVV/gD/COzuMGlDXmcpWoY2morBbxEulzYvrPbm3DxFUdNNyP1X/7pFsR MR0oVtkzfa4rfRAGU3yADQHMLmhKWk64kxYaOfLWcvIuRcLDnw7rJWtCxf6GT4Pb nhFk7J44eKvkttZdpbav9av+u1MnJWs5K26hx9BzW0m/fyyry0DUMoL+YDazxyoT q+mxrKVw+Ank5bcVzNDHzsXLfE3KgaWfCzIqZqbda/jaqBWDEnBcOvSDuTGAfUGh DQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 89978869084639989868858 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Migros' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Migros CA Class1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2009-05-19 09:10:47 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-18 09:10:47 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ctx.migros.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23338847067668450575096990029469824538693853500801955747443754668284303913452640127867139942587636806684603323620503160964255566394243451947291803124210104269279754352358433237186334499695683654965503088888764697482213987816223273164135414342634033344686150486490885595766579164730710936991449731253786085978754555528253003223163286777328877770354934040533567254807107554804011292974500636295485466166709194852355684812556667975517460550307883114757712702749957734696530529529686475109519573358778052377158356546002011765459576953372940324370903976860481903206134271211219051330509409904399537361996704513320963645709 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9a8582b0c9b31e76451f95b945e8ec5180ab65bb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (344 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.5 (whqlCrypto) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.8 (timeStamping) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2.2 (smartcardLogon) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.6 (nt5Crypto) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.4 (emailProtection) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.9 (rootListSigner) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.10 (qualifiedSubordination) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.5 (caExchange) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.7 (oemWHQLCrypto) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.1 (certTrustListSigning) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.2 (timeStampSigning) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.13 (lifetimeSigning) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.6.2 (licenseServer) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.6 (keyRecovery) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.11 (keyRecovery) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.6.1 (licenses) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.7 (ipsecUser) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.6 (ipsecTunnel) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.8.2.2 (iKEIntermediate) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.5 (ipsecEndSystem) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.4.1 (efsRecovery) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.4 (encryptedFileSystem) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.8 (embeddedNTCrypto) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.12 (documentSigning) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.19 (dsEmailReplication) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.5.1 (drm) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.3 (codeSigning) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2.1 (enrollmentAgent) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://metadir.migros.ch:389/cn=migros_ca_class1,o=migros,c=ch' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00bd1963c5bb0721006449f62afbda5feef6869fbc7bdc15efa6b15362cc524e1a61d2746e8c45f0654138126e5853f9e32807babb4b73811f98c066321bcdb4b834ee72b7d8a067388c5b621c03e4285da20db074f4d2373f1311403aaa8494cbfbcdd7cfee238315557f4fb1380fbc14aaf8bb4db3ee6361c162ef70457de65757ef84d23874caad6f0c0c64e349d29df92d95e647d2e878bb0c959d0ab987c968f14a4647595af7cc9aebd02fe18a4cbb2e34ab29091b391bcf27fe1ad8d8c2d5fae7f1c6a77b120f85164ba6a3076aa340ecf3da68850849e3ddd324af307cf82cf9012936f6973a9520e77e609955404818c364d414f731dcacd68ed21b94