wirelessportal.lidl.com

- Lidl Stiftung & Co. KG -

Issued by SwissSign RSA TLS EV ICA 2021 - 1

About this certificate

This digital certificate with serial number 45:16:05:27:6b:0e:27:cd:77:d5:ab:d1:ae:b1:cd:d3:8d:6e:27:b1 was issued on by SwissSign AG.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lidl Stiftung & Co. KG

Company registration number: HRB 107937
Organization: Lidl Stiftung & Co. KG
State / Province: Baden-Württemberg
Locality: Neckarsulm
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 45:16:05:27:6b:0e:27:cd:77:d5:ab:d1:ae:b1:cd:d3:8d:6e:27:b1
Serial Number (int): 394411428555955464596874394148952777164017510321
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 0b:7a:f6:02:da:8f:fc:ad:02:07:23:9c:7a:40:6d:ad:ca:e7:9a:07
AuthorityKeyId: da:34:d4:8e:10:23:f4:6a:2d:6c:b4:1f:f3:28:11:de:5e:01:c4:de

Fingerprint (sha1): 50:83:b8:15:ae:4b:58:36:a5:74:f2:e3:99:17:d1:19:6c:9a:70:4b
Fingerprint (sha256): 13:57:03:77:02:e5:80:3d:68:97:67:32:72:29:40:44:1f:57:e6:c9:4b:5e:37:c0:dc:d7:09:ad:77:5c:2d:d7

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE

Revocation information

OCSP Server: http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate wirelessportal.lidl.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wirelessportal.lidl.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wirelessportal.lidl.com
sponsor.lidl.net
mywirelessdevices.lidl.net
wirelessregistration.lidl.net
m-nm21.asp.lidl.net
m-nm20.asp.lidl.net

Other certificates including the domain name lidl.com

(limited to 100 certificates)
www.lidl.com
cloud.lidlhome.lidl.com
services.lidl
remote.ch.lidl.com
remote.fr.lidl.com
webforms.lidl.com
cloud.messages.accounts.lidl.com
mylidl-q-ext.lidl.com
mobile.limo.lidl.com
iim-qs.lidl.com
mypoints-dev.lidl.com
remote.ch.lidl.com
aktionen.lidl.com
corporate.lidl
weeklyads.lidl.com
realestate.lidl
se1-ucexe-p001.lidl.net
mdm.limo.lidl.com
stikeez.lidl.com
services.lidl
cms-qs.limo.lidl.com
q.www.lidl.com
as-qs.limo.lidl.com
lisa.mdm.lidl.com
profile-uat.lidl.com
image.e.outdoors.org
home-uat.lidlplus.com
www.marketingcloud.lidl.com
remote.dk.lidl.com
services.lidl
media.lidl.com
myworkplace.lidl.com
image.e.outdoors.org
iblftl.lidl.com
remote.nl.lidl.com
remote.nl.lidl.com
vacancies.lidl.com
mobile2.limo.lidl.com
akamai-san31.exacttarget.com
www.marketingcloud.lidl.com
sfs.lidl.com
careers.lidl
i.mobileapi.lidl.com
corporate.lidl
ras-limo.lidl.com
services.lidl
customer-service.lidl.com
deluxe.lidl.com
www.lidlkick.com
accounts.lidl.com
www.lidl.com
customer-service.lidl.com
omnichannel.lidl.com
application.lidl.com
q.www.lidl.com
click.messages.accounts.lidl.com
services.lidl
portal.as.lidl.com
ess.lidl.com
mss-t.lidl.lidl.com
myreceipts-uat.lidl.com
careers.lidl
q.mobileapi.lidl.com
omnichannel.lidl.com
careers.lidl
sfs.lidl.com
services.lidl
www.lidl.com
accounts.lidl.com
view.lidlhome.lidl.com
application.lidl.com
services.lidl
q.www.lidl.com
remote.pt.lidl.com
remote2.gb.lidl.com
remote.es.lidl.com
corporate.lidl
i.preview.lidl.com
remote.eu.lidl.com
deluxe.lidl.com
vacancies.lidl.com
aboutme-trn.lidl.com
remote2.gb.lidl.com
services.lidl
size.lidl.com
vip-test.lidl.com
i.mobileapi.lidl.com
i.preview.lidl.com
aboutme-trn.lidl.com
retail.lidl
myreceipts.lidl.com
aboutme-trn.lidl.com
services.lidl
portal.eu.lidl.com
realestate.lidl
wirelessportal.lidl.com
gdprportal-uat.lidl.com
omnichannel.lidl.com
mylidl.lidl.com
q.www.lidl.com

Certificate

The complete raw certificate details for wirelessportal.lidl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdW2P2ADWt9df1itdtRt
BE4NT348RwR2VKp6oGkRLk3MDLt6CZ9tvdCduKA5hI/EszwtrXkhDWgIFVUXcuDa
k1p0peC9hxL1fVaRUZS+OtCrkM1zBT4z2udN6Yh/1jnVsvmGDjRiagJRQhhbQlJ2
uEaVKFnk8Yrx4mOgWh30JF3flOJVAoprMRRRkPgDasGEYliaMqlEZSsbsQ/pWfS6
GJSBKHC6vFSs9e8cbYN9EbCIA2rF3WGakOVjSs1X3ZTODXRpF/7xoM86+JTget23
Ogh6D9qjjJLqwukI+EnEcMDLz3QwZIs8lv/itIKVeNLrT/NXhruFUsCgwXWxlsO7
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 394411428555955464596874394148952777164017510321
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-09 14:53:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-09 14:53:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stuttgart'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 107937'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Neckarsulm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lidl Stiftung & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wirelessportal.lidl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19419845927691728211458771040199382450352338561828986818786370128207222101347483018066464040036239706910464473110946991276865678233935066878490570847236532511643871572514580023212858982143381680850032517379809115257322170148094304842908925858411508446185923273317662439318343728364870176459259702756469024750322026173953532530081360010669843256307228004743977227114025226436494069852914725857886922079874030148456756187079421687718542148195216348244930325617586557064507986463977561977950890708155415124514553983595397572238209423401946071250863633948163663769351302270743025034430220361685654595624631217594483063689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wirelessportal.lidl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sponsor.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywirelessdevices.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wirelessregistration.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-nm21.asp.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-nm20.asp.lidl.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b7af602da8ffcad0207239c7a406dadcae79a07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da34d48e1023f46a2d6cb41ff32811de5e01c4de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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