account.kaufland.com

- Kaufland Stiftung & Co. KG -

Issued by SwissSign RSA TLS EV ICA 2022 - 1

About this certificate

This digital certificate with serial number 7a:b3:96:db:cd:f8:93:2d:a3:d1:fd:ca:0f:ae:82:00:a4:d2:33:31 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Kaufland Stiftung & Co. KG

Company registration number: HRA 102851
Organization: Kaufland Stiftung & Co. KG
Address: Rötelstrasse 35
Postal code: 74172
State / Province: BW
Locality: Neckarsulm
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 7a:b3:96:db:cd:f8:93:2d:a3:d1:fd:ca:0f:ae:82:00:a4:d2:33:31
Serial Number (int): 700501849069555937108302300443996769228457915185
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 2c:f6:43:81:47:0e:95:d7:0d:88:30:c0:1d:19:ff:4d:dc:e0:83:73
AuthorityKeyId: 49:52:df:30:86:92:59:5f:34:9c:25:48:24:ab:c0:eb:d1:06:f2:d6

Fingerprint (sha1): af:9e:96:8e:0f:c0:15:2a:80:69:41:fb:2c:36:dd:24:f5:3b:21:d1
Fingerprint (sha256): 15:ef:ad:31:35:b2:66:83:c0:16:81:ed:10:17:a4:31:95:59:38:0b:7b:2f:65:7c:83:f9:7e:b9:a2:1e:96:7c

Issuing Certificate URL: http://aia.swisssign.ch/air-20350159-813d-4532-b988-8519eca57650

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-9fdd910e-b9ff-4b2f-be38-2e93708c1b36

Check the revocation status for certificate account.kaufland.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for account.kaufland.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.account.kaufland.com
account.kaufland.com

Other certificates including the domain name kaufland.com

(limited to 100 certificates)
iqpim.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
ssl.ipaper.io
media.kaufland.com
p22-ssl-client-fi-hcm.kaufland.com
ssl2.ipaper.io
mobsot02.kaufland.com
ssl.ipaper.io
pim.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
at2-ssl-client-fi-hcm.kaufland.com
se1-ucexe-p014.uc.schwarz
ssl2.ipaper.io
portal.eu.kaufland.com
qs2-ssl-client-fi-hcm.kaufland.com
iapim.kaufland.com
kaufland-blumen.de
asset.kaufland.com
*.ipaper.io
ssl.ipaper.io
ssl.ipaper.io
remote.au.kaufland.com
www-pc.kaufland.com
ssl3.ipaper.io
ssl2.ipaper.io
ssl2.ipaper.io
*.ipaper.io
media-q.kaufland.com
media.kaufland.com
se1-ucexe-p011.uc.schwarz
ssl.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
*.ipaper.io
test-hr-portal.kaufland.com
portal.eu.kaufland.com
www-ac.kaufland.com
giftcard-q.kaufland.com
portal.eu.kaufland.com
se1-ucexe-p014.uc.schwarz
ssl2.ipaper.io
www-q.kaufland.com
connect-app.kaufland.com
ssl.ipaper.io
media.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
ssl2.ipaper.io
ssl.ipaper.io
*.leaflets.kaufland.com
media.kaufland.com
iqpim.kaufland.com
assets.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
*.ipaper.io
filex-test.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
jobs.kaufland.com
secmail.kaufland.com
account.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
*.ipaper.io
webassets.kaufland.com
account.kaufland.com
www-ec.kaufland.com
asset.kaufland.com
*.leaflets.kaufland.com
account-qs.kaufland.com
*.kaufland.com
www-fc.kaufland.com
kauf.land
*.ipaper.io
www-p.kaufland.com
kaufland.com
*.ipaper.io
ssl2.ipaper.io
dam.kaufland.com
se1-ucexe-p013.uc.schwarz
remote.cz.kaufland.com
www-q.kaufland.com
www-ac.kaufland.com
*.ipaper.io
mobsot.kaufland.com
*.ipaper.io
ssl.ipaper.io
eu.limo.remote.schwarz
jobs.kaufland.com
doa.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
www-q.kaufland.com
remote.eu.kaufland.com
ssl.ipaper.io
www-qc.kaufland.com
www-pc.kaufland.com

Certificate

The complete raw certificate details for account.kaufland.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 700501849069555937108302300443996769228457915185
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-25 07:12:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-25 07:12:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Stuttgart'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Neckarsulm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '74172'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rötelstrasse 35'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kaufland Stiftung & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 102851'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'account.kaufland.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 838755313970989586815824807044237057366493753001504525441143445938193853068297435181196140295721432382551859624248543403473173377597541673195603552670367810577169704539124483483868397422111208781142789293853600346854142388732931391010242442146693178571845604169154475512100349677013430465318559111671795950643516550331040310969931590792125706713025400819256507513984346524186470410196715530631794774045827306707660294139144777084491424022569894710624254241738779631817077209478056445822681377378406991698191253578213240723820301176805975627138870185592732717243116378414851150075549822009754892237042507363642747529462523843912775969739353988256059797687997572750315662669013098124662705282998561692998944364858509183682522688908573662158967642489621679104239219636925657745306412135798503984596829811595231306794296795038501441984752698056484976600938882565825857815091549653780767896897964047867648503065576428796683248616901210968936414268555092746564803776933308868511421236535360747774035643315492968877419824418747596392232654055144598590529378322779438026617382905423648086033041011212998174674073285205337541979409078880494575366529100571717746039796481064842226546902533446715985526823767870690294152139964850220867176542857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-20350159-813d-4532-b988-8519eca57650'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-9fdd910e-b9ff-4b2f-be38-2e93708c1b36'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.account.kaufland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.kaufland.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2cf64381470e95d70d8830c01d19ff4ddce08373
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4952df308692595f349c254824abc0ebd106f2d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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