apnac03v.funkemedien.de

- FUNKE Corporate IT GmbH -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 3e:a7:ee:7c:f6:6d:38:01:b7:b5:eb:15:aa:99:95:47:07:46:b5:62 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FUNKE Corporate IT GmbH

Organization: FUNKE Corporate IT GmbH
State / Province: Nordrhein-Westfalen
Locality: Essen
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 3e:a7:ee:7c:f6:6d:38:01:b7:b5:eb:15:aa:99:95:47:07:46:b5:62
Serial Number (int): 357702427485855104973854001801648950237695751522
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 1a:01:c2:fb:40:7f:cb:22:35:d8:07:8e:3f:0c:6e:d2:03:b8:ef:b5
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): 15:21:fa:d9:96:79:44:a3:ff:e7:e8:43:0b:32:a4:f4:32:cc:d7:ac
Fingerprint (sha256): 12:a1:3e:29:e9:60:1b:e6:0d:d3:0c:d7:d1:50:fe:7c:9e:55:99:f9:64:4a:4f:dc:af:2c:dd:a5:0b:f4:64:3c

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate apnac03v.funkemedien.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apnac03v.funkemedien.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apnac03v.funkemedien.de
www.apnac03v.funkemedien.de

Other certificates including the domain name funkemedien.de

(limited to 100 certificates)
bzv-medienhaus.de
ws-reservix.funkemedien.de
casproxy.funkemedien.de
*.dabis.funkemedien.de
funkemedien.de
www.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
www.funkemedien.de
*.funkemedien.de
avmnac02.access.funkemedien.de
dcx.funkemedien.de
*.access.funkemedien.de
dcx.funkemedien.de
bzv-medienhaus.de
extern.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
apnac04v.funkemedien.de
www.funkemedien.de
bzv-medienhaus.de
hadznac01v.funkemedien.de
*.waz.de
marke.funkemedien.de
portal.dz-hagen.funkemedien.de
www.funkemedien.de
*.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
apnac03v.funkemedien.de
*.test.funkemedien.de
mail.funke-medien.de
*.fabo-live.funkemedien.de
*.funkemedien.de
events.funkemedien.de
rd-cb-ha.access.funkemedien.de
aboservice.bildderfrau.de
extern.funkemedien.de
connect.funkemedien.de
waz.de
login.funkemedien.de
*.funkemedien.de
hadznac01v.funkemedien.de
bwv.portal.funkemedien.de
con.funkemedien.de
funkemedien.de
sso.funkemedien.de
bzv-medienhaus.de
bzv-medienhaus.de
expe.funkemedien.de
rdweb.access.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
bzv-medienhaus.de
*.funkemedien.de
dcx.funkemedien.de
*.funkemedien.de
*.funkemedien.de
mail.funkemedien.de
expe.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
connect.funkemedien.de
sso.funkemedien.de
portal.dz-hagen.funkemedien.de
bzv-medienhaus.de
dcx.funkemedien.de
gate.funkemedien.de
email.funkemedien.de
datenschutz.funkemedien.de
mail.funke-medien.de
digas.axelspringer-syndication.de
*.funkemedien.de
*.funkemedien.de
portal.druckzentrum-essen.funkemedien.de
*.planer.funkemedien.de
blog.funkemedien.de
bwv.portal.funkemedien.de
apnac04v.funkemedien.de
*.funkemedien.de
bwv.portal.funkemedien.de
expe-cluster.funkemedien.de
volontariat.funkemedien.de
*.waz.de
funkemedien.de
mail.funkemedien.de
anzeigen.funkemedien.de
avmnac01.access.funkemedien.de
*.zpr.funkemedien.de
funkemedien.de
www.funkemedien.de
anzeigenbuchung-in-thueringen.de
*.fabo-live.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
*.funkemedien.de
*.waz.de
*.waz.de
dcx.funkemedien.de
aisvxc03.funkemedien.de

Certificate

The complete raw certificate details for apnac03v.funkemedien.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKxDCCCKygAwIBAgIUPqfufPZtOAG3tesVqpmVRwdGtWIwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgT1YgSUNBIDIwMjEgLSAxMB4XDTIyMDIxNjA5
MDk0MloXDTIzMDIxNjA5MDk0MlowfzELMAkGA1UEBhMCREUxHDAaBgNVBAgTE05v
cmRyaGVpbi1XZXN0ZmFsZW4xDjAMBgNVBAcTBUVzc2VuMSAwHgYDVQQKExdGVU5L
RSBDb3Jwb3JhdGUgSVQgR21iSDEgMB4GA1UEAxMXYXBuYWMwM3YuZnVua2VtZWRp
ZW4uZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDjVT3dYoVkjzbw
5cAYqu3n8Ii5a0Af21JEdjqFro52541RtrnNWb4gnyA6Qk6RXkRNCRW9ry6jcEuy
RH2XJUjyZfLejCnfNHmLHh1ahFvU6EnO+ylfUGl8Ok539kECNvUNozgegUed08Rr
XN4SVQbBYnPxrQ8C5AgMmv64nlF4aue25so3SNcXwoi1a52OfxNxcSgqbydjS9cR
ciJ6R21VPjGfXJ97+x2GRJVO5QhRH55VbHi6xf+a/qXMEK0YR/0uwEKfaEE3fzUD
CunhTqmiVw8g2GauRHaLck038j4KjdO2/t9iPk3CGEUk8xPvK2WHfZjFFwEySYUB
XT2jIQ9X3geMYluD905jqt1NtiN9tfE3S95dZY/zXMqb8lhjREzivlY5NBRMWu6u
bmnd1PgmK3NxkqOjz1dkWWtqxFbdTRvrSLtGoAQzC2ixTUSIMhAkQDG8BQopMppD
xcY70yCvs47Jm2aqIYcWvwXzQBFfjDvH9jB16e2l6SYlfTsbjrWVBrD5gyk/ihN3
Nmp/cGLUr55pJKHooAj1kDxksB7wcF2MLYrlQJQ7/F4hG9Ty6ribKBhJDuHxw1Xh
rG/pjDqhM6qLwLK/l4nCYKiQxPZqAHLMJ2AddI1g/Kdo33enqNGBr9BvTkjZU2Pa
vBEdxnoesbZU4kq/uTWBKNcPkcBmZwIDAQABo4IFZTCCBWEwPwYDVR0RBDgwNoIX
YXBuYWMwM3YuZnVua2VtZWRpZW4uZGWCG3d3dy5hcG5hYzAzdi5mdW5rZW1lZGll
bi5kZTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMB0GA1UdDgQWBBQaAcL7QH/LIjXYB44/DG7SA7jvtTAfBgNVHSMEGDAWgBSs
0DrCwldVkWkRzHBqWTiKjKycPTCB/wYDVR0fBIH3MIH0MEegRaBDhkFodHRwOi8v
Y3JsLnN3aXNzc2lnbi5uZXQvQUNEMDNBQzJDMjU3NTU5MTY5MTFDQzcwNkE1OTM4
OEE4Q0FDOUMzRDCBqKCBpaCBooaBn2xkYXA6Ly9kaXJlY3Rvcnkuc3dpc3NzaWdu
Lm5ldC9DTj1BQ0QwM0FDMkMyNTc1NTkxNjkxMUNDNzA2QTU5Mzg4QThDQUM5QzNE
JTJDTz1Td2lzc1NpZ24lMkNDPUNIP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q/
YmFzZT9vYmplY3RDbGFzcz1jUkxEaXN0cmlidXRpb25Qb2ludDBvBgNVHSAEaDBm
MFAGCGCFdAFZAgECMEQwQgYIKwYBBQUHAgEWNmh0dHBzOi8vcmVwb3NpdG9yeS5z
d2lzc3NpZ24uY29tL1N3aXNzU2lnbl9DUFNfVExTLnBkZjAIBgYEAI96AQcwCAYG
Z4EMAQICMIHGBggrBgEFBQcBAQSBuTCBtjBkBggrBgEFBQcwAoZYaHR0cDovL3N3
aXNzc2lnbi5uZXQvY2dpLWJpbi9hdXRob3JpdHkvZG93bmxvYWQvQUNEMDNBQzJD
MjU3NTU5MTY5MTFDQzcwNkE1OTM4OEE4Q0FDOUMzRDBOBggrBgEFBQcwAYZCaHR0
cDovL29jc3Auc3dpc3NzaWduLm5ldC9BQ0QwM0FDMkMyNTc1NTkxNjkxMUNDNzA2
QTU5Mzg4QThDQUM5QzNEMIICcQYKKwYBBAHWeQIEAgSCAmEEggJdAlsAdwBVgdTC
FpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAX8By3HUAAAEAwBIMEYCIQCz
/WU9/5CG5f/7TQlp2d7HAqULZk7aJ3HTDFtCxsRVMQIhAOfErm6JXh3D1mxx+U2k
QNXA7qvQ07ltYHXbFdZp0AsNAHcAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2y
CJo32RMAAAF/Actw3QAABAMASDBGAiEA4dfS8FE0wv5Ruln+GrZoj2xwAoSC2PqK
IIK/ghLig3ACIQCWcl88JPo9uNuyLD16U/mPBP8pFIo2AD7hBP/4EYY1pAB2AHoy
jFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABfwHLcCkAAAQDAEcwRQIh
AIwDqB/VJVocV/1cL+MC+iPcETc5Rvh0LsmJwoRlOZExAiBt0U6Cf/JbJCYPQ0KR
ZTLIi8jaXM5wdlzRyqcODdDqPgB3AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqF
hjTr3IKKAAABfwHLcD0AAAQDAEgwRgIhAKpruhX0D2bmni9qTlnVxmKlXv7kf0jn
/Lo4zBi6nikCAiEAva0YPKFbFnvEcFonT3ZUna31v9gGD294uqs7xFlN8TsAdgCz
c3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc8AMOeTalmgAAAX8By3HbAAAEAwBHMEUC
IQDy1ACbtQD2KSYJo87nGJPUww2MAV5URSlxIJMB14JLDQIgUT8cn/kpYrefs0YH
6dxqbVE4fnDgaG9sG20qlF+ixm4wDQYJKoZIhvcNAQELBQADggIBADn+nzCuk24e
sQpIOjWBU1RpP4zZJLQ9Xgl2ka9OMar1cPg2d/P4tdaLRBzmktSWe6TuNP1Y8D1y
0fuRN2oJYvlQVmBL0+C5JIxZsYHhfwFtbEx3CqdrUcC6OvtAkwmGTHrGUxwQWtYv
FSGHVxa62RhYqLL7926UGMwtHVOTemYORHtCYCoeIr9mgdavTI7u4I/sP4Z9kdMW
UMTNjsq2WVujTK2UcSBEM0H5NPYOT9dmtFhdZ6vVQ8fLUGo1KT59s9VC1UGxT811
IRXfnSnRKnBQJhW0Ayyr9LEAni+93yW8FIWsjBWxe5i4QceIm3Cr/8fu4tU2rdt9
OtQxQt6aYHz3ejcEvbH/jkSyCYctwjjZCogaif626xMyo6VAVIR6iCbvDMpdKa45
gpHd6RwHjLWbUDnKbWhfYVpdv6vMOnTMEvb2WWheH2GrySzuhSg6/0FhDNcLxCeL
0SMRRK2iBN07gwoHbCY+8OBtmM0rQUDiwqqhHjfm9f8Wb/WYe+kurDNEiMVH0tHZ
aRWVQqrLtpyGZOpQYTtzo+w2UKqUCAGBTUB0KD33KkKxdH/KKx5L9rcn3cbIudUf
/YZffGw+0uBgEABI7uasDklgJE6zcMsbcJjcV+fnSqeQ2M5ihZ+t7CUBvzFbgg48
xhtsB9p4S6byxhw0X17kqvKFGuvD/Xdf
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357702427485855104973854001801648950237695751522
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-16 09:09:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-16 09:09:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FUNKE Corporate IT GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apnac03v.funkemedien.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 927437623869363323789035225160994234654725056847019608615174004426329602775241297717313787913234864774526659842683712151164217665617545647405213631662546558173442542135613555968804214872618364373817626651439394194136694278600052652985285864374401824114170593637926173382252268652278155873325792849808861344973019914179850199236774167612313554594479761330783330725373156752914682368675082089908913564770918374557341519357202233579632867472556259030256533369833411076494652226649861085111451368097992572029145378628246616479030105557077034609600975634645464648516059580558491290819775002400911667609787845761030120801941731275971937654997836770776453347715368994442369969661055222323576057198114412574001061025307474777075665156469708141645814611573970051663909549293264852292385935840472188740917795878593617202409046371624375774403516569750225739606138662774544925102586425837794000713637968140229228231313543928000116627834864271883437802336197472901877288480908915799627206987470516734797246793365149873122080060687564723896705085184940462386616727392787414704401981569855174799433100603806617073103690955333033164997332392176253834968073970454915312068024154966648337218363312274946174046091240639690292544403920211069584860538471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apnac03v.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apnac03v.funkemedien.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a01c2fb407fcb2235d8078e3f0c6ed203b8efb5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (609 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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