api.kaufland.net

- Schwarz IT GmbH & Co. KG -

Issued by SwissSign EV Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 11:86:84:e2:12:85:00:e6:57:73:4c:55:03:0d:13:1c:e3:fa:fe:b7 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Schwarz IT GmbH & Co. KG

Company registration number: HRA 730995
Organization: Schwarz IT GmbH & Co. KG
State / Province: Baden-Württemberg
Locality: Neckarsulm
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 11:86:84:e2:12:85:00:e6:57:73:4c:55:03:0d:13:1c:e3:fa:fe:b7
Serial Number (int): 100052718710782989553434908107915393882897710775
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 23:c9:db:05:77:a0:d6:71:28:90:44:96:ca:ce:5a:56:52:12:f6:a1
AuthorityKeyId: ee:fd:46:ca:f7:27:5e:91:bc:5a:b6:e7:87:cd:0a:fa:55:0a:26:42

Fingerprint (sha1): 1f:b2:1d:45:3b:2b:0d:14:5a:c7:4b:34:81:5c:3b:5e:11:36:4c:1c
Fingerprint (sha256): 12:50:0a:41:33:76:7a:cc:58:7f:aa:6e:6e:36:82:07:b0:c8:66:9c:a5:b6:07:b1:6d:62:ae:b0:0c:c6:21:fc

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642

Revocation information

OCSP Server: http://gold-ev-g2.ocsp.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642
CRL Distribution Point: http://crl.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642
CRL Distribution Point: ldap://directory.swisssign.net/CN=EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate api.kaufland.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.kaufland.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.kaufland.net
www.api.kaufland.net

Other certificates including the domain name kaufland.net

(limited to 100 certificates)
mp.kaufland.net
collaboration.kaufland.de
courtamew.dev
portal-dev.eu.kaufland.net
portal.eu.kaufland.net
killer.logic-wiz.com
iawmseg.kaufland.net
auth-qs.kaufland.net
import.app.kaufland.net
concur.kaufland.net
auth.kaufland.net
iawmseg.kaufland.net
mss.kaufland.net
auth-qs.kaufland.net
collaboration.kaufland.de
api.kaufland.net
mss.kaufland.net
auth-e2.kaufland.net
hc-q.kaufland.net
hc.kaufland.net
int.360live.app
mss-t.kaufland.net
app-qs.kaufland.net
hc-q.kaufland.net
app-qs.kaufland.net
app-qs.kaufland.net
lyncdiscover.uc.kaufland.net
remote.eu.kaufland.com
www.medici.vc
hc-q.kaufland.net
mss-handheld-q.kaufland.net
remote.eu.kaufland.com
concur.kaufland.net
codesnap.co
out-uc17.lidl.net
baustandards-qs.kaufland.net
app.kaufland.net
auth-qs.kaufland.net
auth.kaufland.net
api-qs.kaufland.net
ipwmseg.kaufland.net
out-uc17.lidl.net
remote.eu.kaufland.com
iawmseg.kaufland.net
hc.kaufland.net
hc-a.kaufland.net
ipwmseg.kaufland.net
mp.kaufland.net
softnative.dev
iawmseg.kaufland.net
out-uc18.lidl.net
baustandards.kaufland.net
hc-q.kaufland.net
app-qs.kaufland.net
auth-e2.kaufland.net
iawmseg.kaufland.net
collaboration.kaufland.de
mss-handheld-a.kaufland.net
ad.adaptivemedia.tech
collaboration-q.kaufland.de
out-uc18.lidl.net
auth.kaufland.net
hc.kaufland.net
app-qs.kaufland.net
auth.kaufland.net
portal.eu.kaufland.net
out-uc18.lidl.net
out-uc18.lidl.net
www.elclamor.pe
kaufland.net
app.kaufland.net
import.app-qs.kaufland.net
collaboration.kaufland.de
www.jsonice.com
pm4ngos.ir
pay.kaufland.net
ipwmseg.kaufland.net
app.kaufland.net
auth.kaufland.net
portal.eu.kaufland.net
concur.kaufland.net
oc.kaufland.net
portal.eu.kaufland.net
api-qs.kaufland.net
baustandards-at.kaufland.net
ipwmseg.kaufland.net
baustandards-qs.kaufland.net
suxxusglobal.com
www.rominieloimoveis.com
import.app-qs.kaufland.net
*.cf.kaufland.net
app.kaufland.net
ci.cf.kaufland.net
api.kaufland.net
collaboration.kaufland.de
mirror.yglabs.app
collaboration.kaufland.de
gid.idwall.co
design-hub.kaufland.net
out-uc18.lidl.net

Certificate

The complete raw certificate details for api.kaufland.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA76Eemp9b8IF6L4DfcOkJ
rS1BEUrzcPn0dVLouu3K/YX6i/+eV75Bgr8iDfALiX9vlIZvfbNlr2+dtmiqVAmt
mzLmqh49ldHFefKdnXGEUWbYziqM789SuxzTrqeDvIzkS60FbU4TZi7LZsMvJ5Dg
vExThGJXDEJ9ttf0buCkCNqS4asZw7EmzcuDIbYyku3srDxvVF5jVeOQGOI89MPm
RyoteVaI/CP92LaWAgl/kGKZey2nO+8j10KHEYXotXEyH9ObdP2Zv04Mzy39vISb
RhCthFgAm/Ct1dF1x9Q7OItzssQLGlWBlLGeADsc5T4QNAjbvOrSB/fTTa3HafjL
UG7B+wDVSFcU9Nd5PJ3QBqdou6+AwEGBCEOOTLZKrRh9Ub0Rl6zrXlYl1W2KAHF4
/gLDiR0X9VfV4iKlEUkW1R3LeoD/rJhyCwg5atnQtRsZswJA9R5OoOBkL9W374cP
SBFFVCAbjehG5h30MQ7jgl34BngVxJskDg5bYsbCAsIZU8OZkdkrfVRuPha5C7xC
EeWvV4Q8sbG37hZGqKI+rlzW1zhpJZc3gzVXLJZxtSHksaXmapCA4xVa4zk1iE0g
g2lXDLeRX18k/c4mDmCps7x+2D/He94k5oQP8vZU/91iwdx5mAT2pMZcA1/uOsN7
Bl2ojHluB2/GoW/CytrN6acCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 100052718710782989553434908107915393882897710775
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign EV Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 09:35:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-13 09:35:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stuttgart'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 730995'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Neckarsulm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Schwarz IT GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.kaufland.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 977602551020705267678052802981853092594160585166208291877100465143844755533052253055361967598228547878266320986131917757945162298874614232661188221686629513845073424835173086062042656529682334109106288264744326922407994903671506035341564456825704461607853843805434366627559262439671576066161919097695340804324647989055548516648754871642090775247061343067296840684749801880640187443022456746729652674479717020560335900406203044660037966544859705011379523864842572091894649693463815118099757550230671594184861465042252571363066546431708791815413481250434644954728887487801154871822789917149410956614173698357925757876837078673790540000420985157343074826945680239083100377797076863365821265997443896784119988440353107301023708780917240005407399841233686338933872987356983049221949485121292989945073002807152044028507489428407327288211751408692980607955465626461065311347273154971136493067411729487590100870086664503605172394765027619875042110204220328032729242902168594171056127158381740142816656231028041587513912593331089246457093537367781166704420826636183642117027907654735297662590990825403088193091081653499645013365853107349329120667954955135454477015824350460924972396703136564667131627786611051554052818096960355809777807124903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.kaufland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api.kaufland.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							23c9db0577a0d67128904496cace5a565212f6a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eefd46caf7275e91bc5ab6e787cd0afa550a2642
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.1 (SwissSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (196 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-ev-g2.ocsp.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0024e4b2347fefe5f214cf3dffc4122f8e5b7549835ccbf0afceb48e2b5ebe69e265702bb33a2c374b9d6ea7bd88ecc8c1af527fc6c59a9f0d9c6a15623dd28d727821b0269178330c5fe0a2611ef2b00093732b1672c9bda8b3eea275b698267a5186077095de2dffe981188f19b51d1bd7600a72d9bdfdd5693d21a76b1080bb75f8d8238bba581566cb633659c6b6d840a818fc8fc43a90be890bc9aec0009fc01013d873eea917ecdc5dee7a81304e084ec3464dfe3d6beb5d791bde5dcbc48c0acc0524b557f4cfe70a378fbdd7db0dc134d2589c28dc81bb33d0700a07b747004190a2b6e4b8aa37573d1979a88641f2e58bde44b7f5e66b2f8a61b8e579