de91vaucxwye01.sartorius.com

- Sartorius AG -

Issued by SwissSign Server Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 2c:07:36:10:0f:2c:89:db:b2:78:54:c7:f7:32:5d:ee:e4:02:70:1f was issued on by SwissSign AG.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sartorius AG

Organization: Sartorius AG
Organization unit: IT-Operation
State / Province: Niedersachsen
Locality: Göttingen
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 2c:07:36:10:0f:2c:89:db:b2:78:54:c7:f7:32:5d:ee:e4:02:70:1f
Serial Number (int): 251356408660766516311449778381589211917381169183
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 12:3e:a7:f6:eb:0f:e2:10:dd:0c:90:1a:cc:36:e7:e9:9f:c1:17:a9
AuthorityKeyId: e7:f1:e7:fd:2e:53:ad:11:e5:81:1a:57:a4:73:8f:12:7d:98:c8:ae

Fingerprint (sha1): 72:7b:79:64:72:9e:cf:1d:62:12:df:70:c3:b7:39:5e:5b:8b:03:a9
Fingerprint (sha256): 13:47:96:24:fb:2d:5e:d7:39:4b:79:22:3d:d2:44:0e:a9:ab:0f:ee:60:f6:36:ff:3f:5a:67:00:38:e6:2f:e6

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE

Revocation information

OCSP Server: http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate de91vaucxwye01.sartorius.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for de91vaucxwye01.sartorius.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

de91vaucxwye01.sartorius.com
de92vaucxwye01.sartorius.com
vc.sartorius.com
meet.sartorius.com
sg01vaucxwye01.sartorius.com
sg01vaucxwye02.sartorius.com
us01vaucxwye01.sartorius.com
us01vaucxwye02.sartorius.com
uc-test.sartorius.com
sartorius.com
sartorius-stedim.com

Other certificates including the domain name sartorius.com

(limited to 100 certificates)
cert00068-azurecdn.akamaized.net
go.sartorius.com
owa.sartorius.com
sentry-c1.sartorius.com
sentry-access.sartorius.com
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
eshop.sartorius.com
api-qa.sartorius.com
*.scp.sartorius.com
*.scp.sartorius.com
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
su-adp-presentation.sartorius.com
open-access.sartorius.com
configurator-training.sartorius.com
www.shop-wer.de
shop.sartorius.com
dam-qa.sartorius.com
www.sartorius.com
ecoach.sartorius.com
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
upload.sartorius.com
btconfigurator.sartorius.com
jira.sartorius.com
de91vaucxwye01.sartorius.com
*.portal-q.sartorius.com
git.sartorius.com
ecoach.sartorius.com
configurator-training.sartorius.com
verical.sartorius.com
eshop-qa.sartorius.com
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
developer-qa.sartorius.com
cert00068-azurecdn.akamaized.net
config-data-downloads.sartorius.com
go.sartorius.com
uc-gw.sartorius.com
*.sartorius.com
btconfigurator-dev.sartorius.com
sartdam.sartorius.com
btconfigurator-dev3.sartorius.com
cert00068-azurecdn.akamaized.net
bi-test.sartorius.com
cert00068-azurecdn.akamaized.net
ir-reports.sartorius.com
brm.sartorius.com
developer-qa.sartorius.com
bioprocess-test.sartorius.com
*.scp.sartorius.com
mobile-test.sartorius.com
cert00068-azurecdn.akamaized.net
btconfigurator-dev.sartorius.com
cert00068-azurecdn.akamaized.net
git.sartorius.com
serviceshop.sartorius.de
owa.sartorius.com
dam-qa.sartorius.com
www.connect-upstream.com
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
sartdam.sartorius.com
cert00068-azurecdn.akamaized.net
btconfigurator-dev2.sartorius.com
serviceshop.sartorius.de
jira.sartorius.com
owa.sartorius.com
cert00068-azurecdn.akamaized.net
config-data-downloads.sartorius.com
cert00068-azurecdn.akamaized.net
bi-test.sartorius.com
studio.sartorius.com
www.shop-wer.de
Sartorius Corporate Administration GmbH
delivery.wcms.qa.sartorius.com
lps-globalsalesmeeting.sartorius.com
mobile.sartorius.com
login-test.sartorius.com
btconfigurator-dev3.sartorius.com
ir-berichte.sartorius.de
btconfigurator-dev2.sartorius.com
su-adp-presentation.sartorius.com
*.portal.sartorius.com
cert00068-azurecdn.akamaized.net
jira.sartorius.com
am.vpn.sartorius.com
cert00068-azurecdn.akamaized.net
www.connect-upstream.com
cert00068-azurecdn.akamaized.net
www.sartorius.com
sfpi-test.sartorius.com
go.sartorius.com
bioprocess-sandbox.sartorius.com
configurator-presentation.sartorius.com
serviceshop.sartorius.de
login.sartorius.com

Certificate

The complete raw certificate details for de91vaucxwye01.sartorius.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 251356408660766516311449778381589211917381169183
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-13 06:34:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-13 06:34:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Göttingen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sartorius AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT-Operation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'de91vaucxwye01.sartorius.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 936456668159928843699000018635562547114396608317151145976689809762687777935814085991963064961805092639787983073583479440301167856520670196563787332985488249578771161883431947535383796636753803560742746456119497528265444553070926185094266755952134943978305819880669572906799042151161169133192109957793003947741431687837276381565204855643895203100232517805241281462527214622580638709901248518487376681589260887037003342500761080912844772041134088414532929578054872971661434762256473423635501933911640297332231269205668983866411577820002297729346407181567874677095060810108791175621628641448775415512328546955396278972438245462024662595928521001501345459187698095425851200418595181438833100635188567859737721904402222361602618647721555819407470680711176435743560465889663269485330178362270347033373096692125063429547117617168303118415760364818957709551259929426330396957667367368341398011925925914829346034682960854313568423706561450498011349576832989239835590074565239641992906491924488113118262633471505042072921504589927019637709897019647448073210040910277219830782693241364223375187285271906316175268940339616933973282300786567571333994266501273101441884596615350988942781290137656292628166280210866522857026970671869424584663697027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (282 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de91vaucxwye01.sartorius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de92vaucxwye01.sartorius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vc.sartorius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.sartorius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg01vaucxwye01.sartorius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg01vaucxwye02.sartorius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us01vaucxwye01.sartorius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us01vaucxwye02.sartorius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uc-test.sartorius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sartorius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sartorius-stedim.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							123ea7f6eb0fe210dd0c901acc36e7e99fc117a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e7f1e7fd2e53ad11e5811a57a4738f127d98c8ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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