account.kaufland.com
- Kaufland Stiftung & Co. KG -
Issued by SwissSign RSA TLS EV ICA 2022 - 1
About this certificate
This digital certificate with serial number 7a:b3:96:db:cd:f8:93:2d:a3:d1:fd:ca:0f:ae:82:00:a4:d2:33:31 was issued on by SwissSign AG.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Kaufland Stiftung & Co. KG
Company registration number:
HRA 102851
Organization: Kaufland Stiftung & Co. KG
Organization: Kaufland Stiftung & Co. KG
Address:
Rötelstrasse 35
Postal code: 74172
State / Province: BW
Locality: Neckarsulm
Country: DE
Postal code: 74172
State / Province: BW
Locality: Neckarsulm
Country: DE
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate will expire on
Certificate Details
Serial Number (hex): 7a:b3:96:db:cd:f8:93:2d:a3:d1:fd:ca:0f:ae:82:00:a4:d2:33:31Serial Number (int): 700501849069555937108302300443996769228457915185
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: 2c:f6:43:81:47:0e:95:d7:0d:88:30:c0:1d:19:ff:4d:dc:e0:83:73
AuthorityKeyId: 49:52:df:30:86:92:59:5f:34:9c:25:48:24:ab:c0:eb:d1:06:f2:d6
Fingerprint (sha1): af:9e:96:8e:0f:c0:15:2a:80:69:41:fb:2c:36:dd:24:f5:3b:21:d1
Fingerprint (sha256): 15:ef:ad:31:35:b2:66:83:c0:16:81:ed:10:17:a4:31:95:59:38:0b:7b:2f:65:7c:83:f9:7e:b9:a2:1e:96:7c
Issuing Certificate URL: http://aia.swisssign.ch/air-20350159-813d-4532-b988-8519eca57650
Revocation information
OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efecCRL Distribution Point: http://crl.swisssign.ch/cdp-9fdd910e-b9ff-4b2f-be38-2e93708c1b36
Check the revocation status for certificate account.kaufland.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for account.kaufland.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.account.kaufland.com
account.kaufland.com
account.kaufland.com
Other certificates including the domain name kaufland.com
(limited to 100 certificates)
iqpim.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
ssl.ipaper.io
media.kaufland.com
p22-ssl-client-fi-hcm.kaufland.com
ssl2.ipaper.io
mobsot02.kaufland.com
ssl.ipaper.io
pim.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
at2-ssl-client-fi-hcm.kaufland.com
se1-ucexe-p014.uc.schwarz
ssl2.ipaper.io
portal.eu.kaufland.com
qs2-ssl-client-fi-hcm.kaufland.com
iapim.kaufland.com
kaufland-blumen.de
asset.kaufland.com
*.ipaper.io
ssl.ipaper.io
ssl.ipaper.io
remote.au.kaufland.com
www-pc.kaufland.com
ssl3.ipaper.io
ssl2.ipaper.io
ssl2.ipaper.io
*.ipaper.io
media-q.kaufland.com
media.kaufland.com
se1-ucexe-p011.uc.schwarz
ssl.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
*.ipaper.io
test-hr-portal.kaufland.com
portal.eu.kaufland.com
www-ac.kaufland.com
giftcard-q.kaufland.com
portal.eu.kaufland.com
se1-ucexe-p014.uc.schwarz
ssl2.ipaper.io
www-q.kaufland.com
connect-app.kaufland.com
ssl.ipaper.io
media.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
ssl2.ipaper.io
ssl.ipaper.io
*.leaflets.kaufland.com
media.kaufland.com
iqpim.kaufland.com
assets.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
*.ipaper.io
filex-test.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
jobs.kaufland.com
secmail.kaufland.com
account.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
*.ipaper.io
webassets.kaufland.com
account.kaufland.com
www-ec.kaufland.com
asset.kaufland.com
*.leaflets.kaufland.com
account-qs.kaufland.com
*.kaufland.com
www-fc.kaufland.com
kauf.land
*.ipaper.io
www-p.kaufland.com
kaufland.com
*.ipaper.io
ssl2.ipaper.io
dam.kaufland.com
se1-ucexe-p013.uc.schwarz
remote.cz.kaufland.com
www-q.kaufland.com
www-ac.kaufland.com
*.ipaper.io
mobsot.kaufland.com
*.ipaper.io
ssl.ipaper.io
eu.limo.remote.schwarz
jobs.kaufland.com
doa.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
www-q.kaufland.com
remote.eu.kaufland.com
ssl.ipaper.io
www-qc.kaufland.com
www-pc.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
ssl.ipaper.io
media.kaufland.com
p22-ssl-client-fi-hcm.kaufland.com
ssl2.ipaper.io
mobsot02.kaufland.com
ssl.ipaper.io
pim.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
at2-ssl-client-fi-hcm.kaufland.com
se1-ucexe-p014.uc.schwarz
ssl2.ipaper.io
portal.eu.kaufland.com
qs2-ssl-client-fi-hcm.kaufland.com
iapim.kaufland.com
kaufland-blumen.de
asset.kaufland.com
*.ipaper.io
ssl.ipaper.io
ssl.ipaper.io
remote.au.kaufland.com
www-pc.kaufland.com
ssl3.ipaper.io
ssl2.ipaper.io
ssl2.ipaper.io
*.ipaper.io
media-q.kaufland.com
media.kaufland.com
se1-ucexe-p011.uc.schwarz
ssl.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
*.ipaper.io
test-hr-portal.kaufland.com
portal.eu.kaufland.com
www-ac.kaufland.com
giftcard-q.kaufland.com
portal.eu.kaufland.com
se1-ucexe-p014.uc.schwarz
ssl2.ipaper.io
www-q.kaufland.com
connect-app.kaufland.com
ssl.ipaper.io
media.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
ssl2.ipaper.io
ssl.ipaper.io
*.leaflets.kaufland.com
media.kaufland.com
iqpim.kaufland.com
assets.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
*.ipaper.io
filex-test.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
jobs.kaufland.com
secmail.kaufland.com
account.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
*.ipaper.io
webassets.kaufland.com
account.kaufland.com
www-ec.kaufland.com
asset.kaufland.com
*.leaflets.kaufland.com
account-qs.kaufland.com
*.kaufland.com
www-fc.kaufland.com
kauf.land
*.ipaper.io
www-p.kaufland.com
kaufland.com
*.ipaper.io
ssl2.ipaper.io
dam.kaufland.com
se1-ucexe-p013.uc.schwarz
remote.cz.kaufland.com
www-q.kaufland.com
www-ac.kaufland.com
*.ipaper.io
mobsot.kaufland.com
*.ipaper.io
ssl.ipaper.io
eu.limo.remote.schwarz
jobs.kaufland.com
doa.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
www-q.kaufland.com
remote.eu.kaufland.com
ssl.ipaper.io
www-qc.kaufland.com
www-pc.kaufland.com
Certificate
The complete raw certificate details for account.kaufland.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKojCCCIqgAwIBAgIUerOW2834ky2j0f3KD66CAKTSMzEwDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRVYgSUNBIDIwMjIgLSAxMB4XDTIzMTAyNTA3 MTI1NFoXDTI0MTAyNTA3MTI1NFowggEoMRMwEQYLKwYBBAGCNzwCAQMTAkRFMSMw IQYLKwYBBAGCNzwCAQIMEkJhZGVuLVfDvHJ0dGVtYmVyZzEaMBgGCysGAQQBgjc8 AgEBDAlTdHV0dGdhcnQxHTAbBgNVBA8MFFByaXZhdGUgT3JnYW5pemF0aW9uMQsw CQYDVQQGEwJERTELMAkGA1UECAwCQlcxEzARBgNVBAcMCk5lY2thcnN1bG0xDjAM BgNVBBETBTc0MTcyMRkwFwYDVQQJDBBSw7Z0ZWxzdHJhc3NlIDM1MSMwIQYDVQQK DBpLYXVmbGFuZCBTdGlmdHVuZyAmIENvLiBLRzETMBEGA1UEBRMKSFJBIDEwMjg1 MTEdMBsGA1UEAxMUYWNjb3VudC5rYXVmbGFuZC5jb20wggIiMA0GCSqGSIb3DQEB AQUAA4ICDwAwggIKAoICAQDNmGA/APfz0d6fY0z1VL7AgDsGIVNEY+WnGHdjra6m mdus2XvKJ/HfXlDSaLsWH4La/OGB7gpKNBctxNHCwn7SYBUBOd2oF1Qfh5FcdnPh eYihmC3d1kUwnPzr4wZDtCV7kzKqQzG7JyP/jw6zbZgIO8qgg8zYnibMn4ixfpq+ m6KsHW+m4U82BsTQgT86WGeH+2+cPSTg04sdCAsZI1zlIF3zSZi21o7Im6wE5Gxb Cu5OFTjZNH/QCSdam8jnvGwe9hngHZD7T+l36Kl46YqVD2Bdj3ArbmuW/sjPqiQK 8Svy3viqOgZbwyFBqJDO266P479svjS7dE8rmKu38saJKBZ9KUvXaLzwiL645pJO ez6rZEe7zu28oqNYvLPDRtynwgd5hHiykqIs1R4js4vlVYUgVu83hicSqVYqh3U4 +Dx0nk8ctOfij7FNl+5TfGTGv0pla1N5v3kIHUZ6iyHEQGEkrzZ2hsdmh6VwuV4S JQCD6sAib7T8gBJtuMz7NjOhiRCu9Dg7JHpcg9WEZaerdF6Fe23QmPmxEP36QlsT b0OLk8/58NPlSjIlb0mwf3y+1M+S7FkvAfVkJiyVmiHmhuRNdm1dgeVg747xb2g+ acIaTibAkGi/IbtZwqNtiDZbNKh9T8oIEVtenNUF3mE/sIA0MFSG2KynQUUofh6y iQIDAQABo4IEmDCCBJQwgbIGCCsGAQUFBwEBBIGlMIGiMEwGCCsGAQUFBzAChkBo dHRwOi8vYWlhLnN3aXNzc2lnbi5jaC9haXItMjAzNTAxNTktODEzZC00NTMyLWI5 ODgtODUxOWVjYTU3NjUwMFIGCCsGAQUFBzABhkZodHRwOi8vb2NzcC5zd2lzc3Np Z24uY2gvc2lnbi9vY3MtYWFjY2NlZDUtNjZlOC00MDY5LTliMWItZmQyOWFiNzNl ZmVjMG4GA1UdIARnMGUwBwYFZ4EMAQEwCAYGBACPegEEMFAGCGCFdAFZAgEDMEQw QgYIKwYBBQUHAgEWNmh0dHBzOi8vcmVwb3NpdG9yeS5zd2lzc3NpZ24uY29tL1N3 aXNzU2lnbl9DUFNfVExTLnBkZjBRBgNVHR8ESjBIMEagRKBChkBodHRwOi8vY3Js LnN3aXNzc2lnbi5jaC9jZHAtOWZkZDkxMGUtYjlmZi00YjJmLWJlMzgtMmU5Mzcw OGMxYjM2MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8E BAMCBaAwOQYDVR0RBDIwMIIYd3d3LmFjY291bnQua2F1ZmxhbmQuY29tghRhY2Nv dW50LmthdWZsYW5kLmNvbTAdBgNVHQ4EFgQULPZDgUcOldcNiDDAHRn/Tdzgg3Mw HwYDVR0jBBgwFoAUSVLfMIaSWV80nCVIJKvA69EG8tYwggJuBgorBgEEAdZ5AgQC BIICXgSCAloCWAB2AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAAB i2Wt3PkAAAQDAEcwRQIgNmqBQ8ObakoxglQ5GF7eDJNC/D5EkhAaTLGpyNwCJO8C IQCogJZtDhUgbzNHi5wyoodRT8BjroS8gW5MIow4a4XWVgB1ANq2v2s/tbYin5vC u1xr6HCRcWy7UYSFNL2kPTBI1/urAAABi2Wt398AAAQDAEYwRAIga3e66s48W8Zp wcx6HBP8Wy0VhdfxmsyHd+Q0eFsuYXYCICWh76RAQ2pO/r15zpBUwcxbAK5RI2eO yxcBCpmwS1M9AHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGL Za3g3QAABAMARzBFAiBPqx+iYw1rnhUgbt775lTL0jqk0mrspNJxIgZYaytbbwIh AMATxvtjw3NKJYTAOFfDnreShp1JOsR2ogm8yaO0XAygAHcA7s3QZNXbGs7FXLed tM0TojKHRny87N7DUUhZRnEftZsAAAGLZa3jwgAABAMASDBGAiEAqTREhBmyBHGA rELZU+wZAnLRgeeSH2bcrLNQVxqy7osCIQC16ZUX1/98Y18dt5E9kcoS9bEpOIfw mrGmGLdyiBQwhQB2AIdPtQ3AKdmTHeVz6fKJno5FM7OS04sKRiV0vw/usvweAAAB i2Wt5+MAAAQDAEcwRQIhAJ0Nktlk0oefhRMtr4xFQ/v9rqQXCzriUbAjGLVoeSej AiAgerwzkphhBqA3fvuGfX6B7NmTv1MRzC1H5p49OwqULDANBgkqhkiG9w0BAQsF AAOCAgEAm2gSFz0SXmZIUHoCFOFwbPeIJZLiRfqdelOS3eiR5io5XQPaNO7x9TqZ RQi5BhCVb4lUpv4KfCrNkxlIBg37ZyWG8dqChI8tAQ7r72GAGm0xiXP5kPUS3YLU 3iZznzsu72qZqzsWQlcaRJBxMboDI5ikfYZ2Ya1/ItuwdZ1J6ltoQz5SJLx+4mma +6VWrStMjBSCc5cCIYwELUQqzNalIc91rMnrSi/KZfOsHU/cn+Vql5h+KLxmzE/I cpAevNZpkhN+do/36uf4G4pbYaIN/Fahk8NQF5H9xobsuBc+lwdFI764cfyMsOI3 ScBPkBo6xLiektHbpapWxaqwAjED/KjGeCULOnhetYEdsi8NVGLHRMqRsV7KrS9e 7fQEGUEuoSwdXFMOFvC4srICWlZQl5s41xcS3swAsACR42rOwcWyon0oPoyl0aOs 9BzqdfHxPoSmZ0P+C3u826CV/pA/LX0hD1lBYen640aEcOU5OGfN4DxlatTgdNlJ nYZe7mxJ9X/odKiaKS+/wz0X/+/uCPQoQA8KkadlG6fymsES2EbBweVr3kBGw500 2uy5peNDd3ftMmWE1QuHlKamMYDwQY9H90tKqWwZqS8lWx+Nxj+qfVTkfXZuwhtW KSVJKd5F0DQwMPwWMBdXQkzSMVA6YPS5vHa5luGzmeZ/cC7bTu8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzZhgPwD389Hen2NM9VS+ wIA7BiFTRGPlpxh3Y62uppnbrNl7yifx315Q0mi7Fh+C2vzhge4KSjQXLcTRwsJ+ 0mAVATndqBdUH4eRXHZz4XmIoZgt3dZFMJz86+MGQ7Qle5MyqkMxuycj/48Os22Y CDvKoIPM2J4mzJ+IsX6avpuirB1vpuFPNgbE0IE/Olhnh/tvnD0k4NOLHQgLGSNc 5SBd80mYttaOyJusBORsWwruThU42TR/0AknWpvI57xsHvYZ4B2Q+0/pd+ipeOmK lQ9gXY9wK25rlv7Iz6okCvEr8t74qjoGW8MhQaiQztuuj+O/bL40u3RPK5irt/LG iSgWfSlL12i88Ii+uOaSTns+q2RHu87tvKKjWLyzw0bcp8IHeYR4spKiLNUeI7OL 5VWFIFbvN4YnEqlWKod1OPg8dJ5PHLTn4o+xTZfuU3xkxr9KZWtTeb95CB1Geosh xEBhJK82dobHZoelcLleEiUAg+rAIm+0/IASbbjM+zYzoYkQrvQ4OyR6XIPVhGWn q3RehXtt0Jj5sRD9+kJbE29Di5PP+fDT5UoyJW9JsH98vtTPkuxZLwH1ZCYslZoh 5obkTXZtXYHlYO+O8W9oPmnCGk4mwJBovyG7WcKjbYg2WzSofU/KCBFbXpzVBd5h P7CANDBUhtisp0FFKH4esokCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 700501849069555937108302300443996769228457915185 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2022 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-25 07:12:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-25 07:12:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Stuttgart' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BW' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Neckarsulm' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '74172' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rötelstrasse 35' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kaufland Stiftung & Co. KG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 102851' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'account.kaufland.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 838755313970989586815824807044237057366493753001504525441143445938193853068297435181196140295721432382551859624248543403473173377597541673195603552670367810577169704539124483483868397422111208781142789293853600346854142388732931391010242442146693178571845604169154475512100349677013430465318559111671795950643516550331040310969931590792125706713025400819256507513984346524186470410196715530631794774045827306707660294139144777084491424022569894710624254241738779631817077209478056445822681377378406991698191253578213240723820301176805975627138870185592732717243116378414851150075549822009754892237042507363642747529462523843912775969739353988256059797687997572750315662669013098124662705282998561692998944364858509183682522688908573662158967642489621679104239219636925657745306412135798503984596829811595231306794296795038501441984752698056484976600938882565825857815091549653780767896897964047867648503065576428796683248616901210968936414268555092746564803776933308868511421236535360747774035643315492968877419824418747596392232654055144598590529378322779438026617382905423648086033041011212998174674073285205337541979409078880494575366529100571717746039796481064842226546902533446715985526823767870690294152139964850220867176542857 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-20350159-813d-4532-b988-8519eca57650' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-9fdd910e-b9ff-4b2f-be38-2e93708c1b36' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.account.kaufland.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.kaufland.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2cf64381470e95d70d8830c01d19ff4ddce08373 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4952df308692595f349c254824abc0ebd106f2d6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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