snow2solman-dev.aldi-sued.com

- ALDI International Services GmbH & Co. oHG -

Issued by Trusted Secure Certificate Authority 5

About this certificate

This digital certificate with serial number 3f:7e:86:a8:ea:d0:9d:72:eb:d9:b3:5a:52:e3:6f:4a was issued on by Corporation Service Company.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ALDI International Services GmbH & Co. oHG

Organization: ALDI International Services GmbH & Co. oHG
Organization unit: International Information Technology
Organization unit: Enterprise SSL
Address: Mintarder Strasse 36-40
Postal code: 45481
State / Province: Nordrhein-Westfalen
Locality: Muelheim an der Ruhr
Country: DE

Corporation Service Company

Organization: Corporation Service Company
State / Province: DE
Locality: Wilmington
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:7e:86:a8:ea:d0:9d:72:eb:d9:b3:5a:52:e3:6f:4a
Serial Number (int): 84398324364514972394516247738702851914
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 68:ed:a1:81:45:48:28:8c:1b:36:32:fa:49:12:8a:df:b5:22:9a:fc
AuthorityKeyId: f2:bb:55:ee:fc:8f:cf:d0:3f:14:68:1a:95:7e:79:0e:ab:17:30:f4

Fingerprint (sha1): 4a:9d:83:d8:f3:3b:af:74:52:5a:ed:14:a9:db:1a:13:77:20:92:e1
Fingerprint (sha256): 11:e2:5f:69:c2:40:26:19:12:47:d3:cd:7b:ba:c4:bb:01:3d:42:b5:69:46:a5:d4:54:70:05:88:6e:9a:1d:72

Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl

Check the revocation status for certificate snow2solman-dev.aldi-sued.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for snow2solman-dev.aldi-sued.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

snow2solman-dev.aldi-sued.com
www.snow2solman-dev.aldi-sued.com

Other certificates including the domain name aldi-sued.com

(limited to 100 certificates)
www.aldi-sued.com
fvs.aldi-sued.com
yourls.k8s-prod.aldi-sued.com
karriere.hofer.at
karriere.hofer.at
videoconference.aldi-sued.com
clarity-dev.aldi-sued.com
mgate02.aldi-sued.com
snow2solman-dev.aldi-sued.com
*.qa.aldi-sued.com
cms806.aldi-sued.com
eid.prod.aldi-sued.com
stsl01.aldi-sued.com
eid.prod.aldi-sued.com
ameportal.aldi-sued.com
cms.aldi-sued.com
testextranet.aldi-sued.com
www.aldi-sued.com
cms807.aldi-sued.com
webinterface-test-ptp.aldi-sued.com
ame.aldi-sued.com
karriere.hofer.at
www.aldi-sued.com
mgate02.aldi-sued.com
www.aldi-sued.com
www.aldi-sued.com
gitlab.k8s-gitlab-test.aldi-sued.com
sft.aldi-sued.com
innovation.aldi-sued.com
karriere.hofer.at
snow2solman-prod.aldi-sued.com
cms806.aldi-sued.com
www.aldi-sued.de
webinterface-ptp.aldi-sued.com
gateway-test.aldi-sued.com
www.aldi-sued.com
mia2.aldi-sued.com
sft.aldi-sued.com
cms-test.aldi-sued.com
www.aldi-sued.com
redmine.aldi-sued.com
stsl01.aldi-sued.com
gateway-test.aldi-sued.com
cms806.aldi-sued.com
mia2.aldi-sued.com
clarity-dev.aldi-sued.com
www.aldi-sued.com
eid.prod.aldi-sued.com
extranet.aldi-sued.com
www.aldi-sued.de
www.aldi-sued.com
confluence.aldi-sued.com
ame.aldi-sued.com
cr-report.aldi-sued.com
www.aldi-sued.com
*.qa.aldi-sued.com
redmine.aldi-sued.com
www.aldi-sued.com
snow2solman-test.aldi-sued.com
www.aldi-sued.com
webmail.aldi-sued.com
clarity.aldi-sued.com
snow2solman-prod.aldi-sued.com
www.aldi-sued.com
sft.aldi-sued.com
cms-test.aldi-sued.com
www.aldi-sued.com
webinterface-test-ptp.aldi-sued.com
videoconference.aldi-sued.com
ameportal.aldi-sued.com
ameportal.aldi-sued.com
eid.qa2.aldi-sued.com
www.aldi-sued.com
www.aldi-sued.com
www.aldi-sued.com
wayback.aldi-sued.com
workspace.aldi-sued.com
karriere.hofer.at
karriere.hofer.at
webmail.aldi-sued.com
cms805.aldi-sued.com
securemail.aldi-sued.com
extranet.aldi-sued.com
www.aldi-sued.com
mgate02.aldi-sued.com
ame.aldi-sued.com
securemail.aldi-sued.com
gateway-test.aldi-sued.com
cms806.aldi-sued.com
*.qa.aldi-sued.com
clarity.aldi-sued.com
redmine.aldi-sued.com
stsl01.aldi-sued.com
redmine.aldi-sued.com
www.aldi-sued.com
wstat.aldi-sued.com
workspace.aldi-sued.com
smasa-mock.k8s-prod02.aldi-sued.com
stsl02.aldi-sued.com
gateway-test.aldi-sued.com

Certificate

The complete raw certificate details for snow2solman-dev.aldi-sued.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6XGJ2C7lkjnd/XB7vhl
uZML2pWmE3mu6/Q053A5Ph8gy0X2wVns01rUnnxKYUiiQIC8Q/5dpqKODGYgDk1L
fm/iSNTmLJIFVi3jN7ga/mqLwWqRH6dBn42kNR575deNf2SAvgm3gVY4Vhp0Z/yn
cPhZqcgbmzhbBJnwhEXTqd9xPe990BSkNTSJUMi/mRNn3UFxPFOmurRUFiHY+mFu
EsmSUIpphnM1pKlh+g2E6Ht5Y3ZZRuW1PpwY0iRzgzYgHhmUwDfAv10wh7LGY9PE
jMAaL46KdIaaEa7uY8y/rycjgvNXEumpQi/yNqtzTmJFxxVArPHDlxKiEBEcpM1H
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 84398324364514972394516247738702851914
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '45481'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Muelheim an der Ruhr'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mintarder Strasse 36-40'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ALDI International Services GmbH & Co. oHG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'International Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Enterprise SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'snow2solman-dev.aldi-sued.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24698215693419536170540535275250362849488463656514927519645680221435060544631113936911499490854991146853171366044541638891256640218783788800625927259645900734011454597247056048907241371167444935457452368263068383257616047802026130116292884736357985448192063698455584948886677576018529564624687056303942570521583819161904897249570725255787612914275415769308954808184774424089636160602608797908694452936696510362932495362111853350350600159333883794388922593499700409329612098905232929738126707672991835153743468914588220774326612403735063925662664986053970212683507796332282888087628352860401317116026085566322731468771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f2bb55eefc8fcfd03f14681a957e790eab1730f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68eda1814548288c1b3632fa49128adfb5229afc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snow2solman-dev.aldi-sued.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snow2solman-dev.aldi-sued.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001633f0db071000004030047304502200eaff856cd09b33bfd34428fa922e5b8769c3cf5c641d5286d9a19543837e34e0221008b9c8e03eb36b2df44aa14a9e1e7e4d1c354aa69bbbc32b1e99391b23f776cf10075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001633f0db0b7000004030046304402202b87c0364cdf70671a9cf113e6f1a26d77125f68ab2c6e1d2f8d64facfb4ebcc0220205afd0e55fd3cea67ede76b064dcd42ea7856453464519716f3cca1313ff1e80077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001633f0db2c3000004030048304602210095136d5bec58bee5e1ad5eb19ff86c44bb27f2b6850e06e8db6d5724806738c5022100f30487cef56169519685f5c7414cf02580c4903cdc563639b82522b8ad1806da
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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