iawmseg.kaufland.net

- Kaufland Stiftung & Co. KG -

Issued by SwissSign RSA TLS EV ICA 2022 - 1

About this certificate

This digital certificate with serial number 40:d2:45:36:19:5b:38:0f:86:2d:02:a0:4e:e1:42:94:d8:47:ea:38 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Kaufland Stiftung & Co. KG

Company registration number: HRA 102851
Organization: Kaufland Stiftung & Co. KG
Address: Rötelstrasse 35
Postal code: 74172
State / Province: BW
Locality: Neckarsulm
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 40:d2:45:36:19:5b:38:0f:86:2d:02:a0:4e:e1:42:94:d8:47:ea:38
Serial Number (int): 370064594981098601551974566811760455988179102264
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: d2:d4:8f:7c:f0:26:ff:d7:2e:0e:07:1d:71:89:47:a3:62:00:82:6f
AuthorityKeyId: 49:52:df:30:86:92:59:5f:34:9c:25:48:24:ab:c0:eb:d1:06:f2:d6

Fingerprint (sha1): 6a:a7:e1:b3:b3:7d:fa:d8:ba:06:11:a2:e9:c9:30:3d:1a:b2:9d:ef
Fingerprint (sha256): 0f:7a:56:a5:49:92:48:cc:7b:5c:d5:0e:3a:d2:24:21:e1:45:bf:14:d8:e5:28:58:4e:67:eb:27:b4:d4:76:3e

Issuing Certificate URL: http://aia.swisssign.ch/air-20350159-813d-4532-b988-8519eca57650

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-9fdd910e-b9ff-4b2f-be38-2e93708c1b36

Check the revocation status for certificate iawmseg.kaufland.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for iawmseg.kaufland.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

iawmseg.kaufland.net
iqwmseg.kaufland.net

Other certificates including the domain name kaufland.net

(limited to 100 certificates)
mp.kaufland.net
collaboration.kaufland.de
courtamew.dev
portal-dev.eu.kaufland.net
portal.eu.kaufland.net
killer.logic-wiz.com
iawmseg.kaufland.net
auth-qs.kaufland.net
import.app.kaufland.net
concur.kaufland.net
auth.kaufland.net
iawmseg.kaufland.net
mss.kaufland.net
auth-qs.kaufland.net
collaboration.kaufland.de
api.kaufland.net
mss.kaufland.net
auth-e2.kaufland.net
hc-q.kaufland.net
hc.kaufland.net
int.360live.app
mss-t.kaufland.net
app-qs.kaufland.net
hc-q.kaufland.net
app-qs.kaufland.net
app-qs.kaufland.net
lyncdiscover.uc.kaufland.net
remote.eu.kaufland.com
www.medici.vc
hc-q.kaufland.net
mss-handheld-q.kaufland.net
remote.eu.kaufland.com
concur.kaufland.net
codesnap.co
out-uc17.lidl.net
baustandards-qs.kaufland.net
app.kaufland.net
auth-qs.kaufland.net
auth.kaufland.net
api-qs.kaufland.net
ipwmseg.kaufland.net
out-uc17.lidl.net
remote.eu.kaufland.com
iawmseg.kaufland.net
hc.kaufland.net
hc-a.kaufland.net
ipwmseg.kaufland.net
mp.kaufland.net
softnative.dev
iawmseg.kaufland.net
out-uc18.lidl.net
baustandards.kaufland.net
hc-q.kaufland.net
app-qs.kaufland.net
auth-e2.kaufland.net
iawmseg.kaufland.net
collaboration.kaufland.de
mss-handheld-a.kaufland.net
ad.adaptivemedia.tech
collaboration-q.kaufland.de
out-uc18.lidl.net
auth.kaufland.net
hc.kaufland.net
app-qs.kaufland.net
auth.kaufland.net
portal.eu.kaufland.net
out-uc18.lidl.net
out-uc18.lidl.net
www.elclamor.pe
kaufland.net
app.kaufland.net
import.app-qs.kaufland.net
collaboration.kaufland.de
www.jsonice.com
pm4ngos.ir
pay.kaufland.net
ipwmseg.kaufland.net
app.kaufland.net
auth.kaufland.net
portal.eu.kaufland.net
concur.kaufland.net
oc.kaufland.net
portal.eu.kaufland.net
api-qs.kaufland.net
baustandards-at.kaufland.net
ipwmseg.kaufland.net
baustandards-qs.kaufland.net
suxxusglobal.com
www.rominieloimoveis.com
import.app-qs.kaufland.net
*.cf.kaufland.net
app.kaufland.net
ci.cf.kaufland.net
api.kaufland.net
collaboration.kaufland.de
mirror.yglabs.app
collaboration.kaufland.de
gid.idwall.co
design-hub.kaufland.net
out-uc18.lidl.net

Certificate

The complete raw certificate details for iawmseg.kaufland.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCjIoKRs6s/oIOvLhL2R
nOU5rJjpK7VAT0krYnjVtd5JKHy/S46ysyQiPnrqv0tuKE77ky5pNuiVL6VnrwZm
e8nBksYggw3DEjD89Z018GR3EqZwHWihqotnLgVE6GDz2uK9wnUUoM63V+WzoWbl
2KThP7e7E1Mv3ShIsdhHkzN5MairT7Jwbh5a5NT7WLclYhncHVa98enqCsa+YCye
+zky6mBdgxCoYy5DYKubNPOvcX6VrIweQuLfNTorReOm86Yk3ByfWCjMcB98kwei
3+xwW+FurqBFhIUNEa2+ZEAJ9ezQJkj/YMUIZaZA+WL9MVqwzOssXMdmviTVAdeS
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370064594981098601551974566811760455988179102264
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-08 07:38:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-08 07:38:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Stuttgart'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Neckarsulm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '74172'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rötelstrasse 35'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kaufland Stiftung & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 102851'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iawmseg.kaufland.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18198427107731914154329455873478256593554757553991510715906907078204281308741778930016276647764225979937471557999233003814130559521875126279358964617220163185695981998560409962271002942125690490855654932432147438150218086494422832598163693335302100434006874958949453941863896486237207352059174723748773989522450738633263363471080506750388555659980684794540207110907031748167919889364393932315250781903095287191917991178806129206035432106550529148407891523817935067626416236650233138321392364858083399366524919285467345489299004904472408827309472450074430444566670691168290502153417192182118684400590094671278734021153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-20350159-813d-4532-b988-8519eca57650'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-9fdd910e-b9ff-4b2f-be38-2e93708c1b36'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iawmseg.kaufland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iqwmseg.kaufland.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d2d48f7cf026ffd72e0e071d718947a36200826f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4952df308692595f349c254824abc0ebd106f2d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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