webassets.kaufland.com

- Kaufland Stiftung & Co. KG -

Issued by SwissSign RSA TLS EV ICA 2021 - 1

About this certificate

This digital certificate with serial number 70:d0:bf:78:41:9c:c3:61:82:6d:b2:f9:2a:9f:f0:d0:0e:2b:d9:49 was issued on by SwissSign AG.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Kaufland Stiftung & Co. KG

Company registration number: HRA 102851
Organization: Kaufland Stiftung & Co. KG
State / Province: Baden-Württemberg
Locality: Neckarsulm
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 70:d0:bf:78:41:9c:c3:61:82:6d:b2:f9:2a:9f:f0:d0:0e:2b:d9:49
Serial Number (int): 644062200701275173878597774660671705388774316361
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 5b:08:b0:7d:8e:12:19:57:08:63:35:b1:2b:a6:a8:1e:27:25:00:36
AuthorityKeyId: da:34:d4:8e:10:23:f4:6a:2d:6c:b4:1f:f3:28:11:de:5e:01:c4:de

Fingerprint (sha1): 7b:66:01:08:17:c7:87:ab:a0:09:67:ce:bd:2c:4d:ec:58:70:9d:31
Fingerprint (sha256): 17:20:dc:09:cc:6c:2f:86:5a:7f:3f:45:94:61:33:59:40:bc:ac:be:d8:ef:f8:8b:7c:d9:d0:9c:7a:0b:12:d6

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE

Revocation information

OCSP Server: http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate webassets.kaufland.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webassets.kaufland.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webassets.kaufland.com
appassets.kaufland.com
appflyer.kaufland.com

Other certificates including the domain name kaufland.com

(limited to 100 certificates)
iqpim.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
ssl.ipaper.io
media.kaufland.com
p22-ssl-client-fi-hcm.kaufland.com
ssl2.ipaper.io
mobsot02.kaufland.com
ssl.ipaper.io
pim.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
at2-ssl-client-fi-hcm.kaufland.com
se1-ucexe-p014.uc.schwarz
ssl2.ipaper.io
portal.eu.kaufland.com
qs2-ssl-client-fi-hcm.kaufland.com
iapim.kaufland.com
kaufland-blumen.de
asset.kaufland.com
*.ipaper.io
ssl.ipaper.io
ssl.ipaper.io
remote.au.kaufland.com
www-pc.kaufland.com
ssl3.ipaper.io
ssl2.ipaper.io
ssl2.ipaper.io
*.ipaper.io
media-q.kaufland.com
media.kaufland.com
se1-ucexe-p011.uc.schwarz
ssl.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
*.ipaper.io
test-hr-portal.kaufland.com
portal.eu.kaufland.com
www-ac.kaufland.com
giftcard-q.kaufland.com
portal.eu.kaufland.com
se1-ucexe-p014.uc.schwarz
ssl2.ipaper.io
www-q.kaufland.com
connect-app.kaufland.com
ssl.ipaper.io
media.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
ssl2.ipaper.io
ssl.ipaper.io
*.leaflets.kaufland.com
media.kaufland.com
iqpim.kaufland.com
assets.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
*.ipaper.io
filex-test.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
jobs.kaufland.com
secmail.kaufland.com
account.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
*.ipaper.io
webassets.kaufland.com
account.kaufland.com
www-ec.kaufland.com
asset.kaufland.com
*.leaflets.kaufland.com
account-qs.kaufland.com
*.kaufland.com
www-fc.kaufland.com
kauf.land
*.ipaper.io
www-p.kaufland.com
kaufland.com
*.ipaper.io
ssl2.ipaper.io
dam.kaufland.com
se1-ucexe-p013.uc.schwarz
remote.cz.kaufland.com
www-q.kaufland.com
www-ac.kaufland.com
*.ipaper.io
mobsot.kaufland.com
*.ipaper.io
ssl.ipaper.io
eu.limo.remote.schwarz
jobs.kaufland.com
doa.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
www-q.kaufland.com
remote.eu.kaufland.com
ssl.ipaper.io
www-qc.kaufland.com
www-pc.kaufland.com

Certificate

The complete raw certificate details for webassets.kaufland.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJBjCCBu6gAwIBAgIUcNC/eEGcw2GCbbL5Kp/w0A4r2UkwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgRVYgSUNBIDIwMjEgLSAxMB4XDTIyMDQwNzA2
NDExOFoXDTIzMDQwNzA2NDExOFowggEPMRMwEQYLKwYBBAGCNzwCAQMTAkRFMSMw
IQYLKwYBBAGCNzwCAQIMEkJhZGVuLVfDvHJ0dGVtYmVyZzEaMBgGCysGAQQBgjc8
AgEBEwlTdHV0dGdhcnQxEzARBgNVBAUTCkhSQSAxMDI4NTExHTAbBgNVBA8TFFBy
aXZhdGUgT3JnYW5pemF0aW9uMQswCQYDVQQGEwJERTEbMBkGA1UECAwSQmFkZW4t
V8O8cnR0ZW1iZXJnMRMwEQYDVQQHEwpOZWNrYXJzdWxtMSMwIQYDVQQKDBpLYXVm
bGFuZCBTdGlmdHVuZyAmIENvLiBLRzEfMB0GA1UEAxMWd2ViYXNzZXRzLmthdWZs
YW5kLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJ/8+WwTOn0v
FzNcx5h6ysykEsHr4xsNhOpPhU4cf5WXjG2a11Q67qCs5S+V4EmRQVD8kAWhd2Q6
n3V0s9qnNP1rykFx3sTZpRGPi4K9F87gL7TxZHjNlguy3+zvwMRIBJGuVfYgwa00
lbeiqmusNmooIjxQyrhgQ3rr0l2WDDLNUTwF1yT3jxpZa6Qlpu5vkT6tQ050ouoj
BGoX/teqHYLheEb3sMKhWkPq+HIIUnZ5wVA7bLLHpo6RifUOnUdOIvzF6YfVEmvO
lWQuyDL5aBUxz2hByV1QLOPBz8PC4F7HOHw8gZuJxD3TTaC8M6MWZvqR1v+5dlQT
37F3NeKLUbdcoG1G3cyTuaWONaDu622MtRkUfMouZbCwcS+pLsJSNYdWkRXpYvjI
29cXQEJFY0J3YkVAvMi+gRx512Q1Ecl6ZM9sjralL+52EM6vFvUX65rwRTZ4qFcx
U6jz9WbNwSvE7lp9d/W04iuUjcVSokB8o1ndsf/+WLaBCfP6lw1Gr7mlZPnafrl8
F0BRHrf91Zf28QFCi5hMnQ3iyw0MSBoK2nwly6TaCTIlxr0QZ9OlFWNuNyDxDT2g
DvNcoqkjVrRMHalrRlvOxFuXcOZ8DnLa8412P+69nQwhGj1zQRF8yPJEP8iL20b0
Gf25z/tf3FPReFcH0IPTSZq83H9J8O+1AgMBAAGjggMVMIIDETBQBgNVHREESTBH
ghZ3ZWJhc3NldHMua2F1ZmxhbmQuY29tghZhcHBhc3NldHMua2F1ZmxhbmQuY29t
ghVhcHBmbHllci5rYXVmbGFuZC5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQUWwiwfY4SGVcIYzWxK6ao
HiclADYwHwYDVR0jBBgwFoAU2jTUjhAj9GotbLQf8ygR3l4BxN4wgf8GA1UdHwSB
9zCB9DBHoEWgQ4ZBaHR0cDovL2NybC5zd2lzc3NpZ24ubmV0L0RBMzRENDhFMTAy
M0Y0NkEyRDZDQjQxRkYzMjgxMURFNUUwMUM0REUwgaiggaWggaKGgZ9sZGFwOi8v
ZGlyZWN0b3J5LnN3aXNzc2lnbi5uZXQvQ049REEzNEQ0OEUxMDIzRjQ2QTJENkNC
NDFGRjMyODExREU1RTAxQzRERSUyQ089U3dpc3NTaWduJTJDQz1DSD9jZXJ0aWZp
Y2F0ZVJldm9jYXRpb25MaXN0P2Jhc2U/b2JqZWN0Q2xhc3M9Y1JMRGlzdHJpYnV0
aW9uUG9pbnQwbgYDVR0gBGcwZTBQBghghXQBWQIBAzBEMEIGCCsGAQUFBwIBFjZo
dHRwczovL3JlcG9zaXRvcnkuc3dpc3NzaWduLmNvbS9Td2lzc1NpZ25fQ1BTX1RM
Uy5wZGYwCAYGBACPegEEMAcGBWeBDAEBMIHGBggrBgEFBQcBAQSBuTCBtjBkBggr
BgEFBQcwAoZYaHR0cDovL3N3aXNzc2lnbi5uZXQvY2dpLWJpbi9hdXRob3JpdHkv
ZG93bmxvYWQvREEzNEQ0OEUxMDIzRjQ2QTJENkNCNDFGRjMyODExREU1RTAxQzRE
RTBOBggrBgEFBQcwAYZCaHR0cDovL29jc3Auc3dpc3NzaWduLm5ldC9EQTM0RDQ4
RTEwMjNGNDZBMkQ2Q0I0MUZGMzI4MTFERTVFMDFDNERFMBMGCisGAQQB1nkCBAMB
Af8EAgUAMA0GCSqGSIb3DQEBCwUAA4ICAQAkqT0L13St2H9k/+W6tgCHealHvfSY
ieGXiS3t6yx7nge7gl0UnbZKel/ID4wFnypVoUo7z1iKd9fpncuipEzZTgiGK2Ff
1tjB2vjpr/9okS3wpOu3tJK63UXuQgqRtJYfxNRoYQ32m2rbZ8MAw0W4NbXsDO2J
Fezgf10n2uEn6wtsv32ctG5TqZuCA2bAgFQPSThvy5CIZgBXjyUl1wCnk0uHG66X
0cPR1XY/yjrN/TFQzAjmrQz1KQMdhI0uSiDrx4o/LGOTGfSiibj3XD05Z7URRPLJ
wLICgnpmuvonCsINR98ApG0xWBgSLAx2n2iL4F/hFn9lAo/gZae40g2eYAdOfeqJ
jSErecHKLyo9jYv3ClU+/x36SskbD5wSyyIxQnmN/jxE4Ve3to279vjlkfo6cqjX
GPN0aBdp8nAj/uHikdnsrdDd+lsm81fGM3N0FaZQDLIxNJK1TBJycGWTOzV7kicZ
fMC4QJ+4XKS68BeyV4KIIBNfKHaEO66Nb3N1AXNzAWTmPfnPRnOMQN4gcVOqazop
sXKpbg2MFSmfBZyJ0Y2buScEsFhoW8Ulu73viwEcCFiv2tBU19MSnXI6CPxOePOD
Vu2rBFltfgRX39uGykxC5vJKfP1DC+6yb2EOCt4OT2tsTb6w0EItVyxZWNeFsSXh
Df0Jhm8su4HG/g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 644062200701275173878597774660671705388774316361
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-07 06:41:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-07 06:41:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stuttgart'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 102851'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Neckarsulm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kaufland Stiftung & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webassets.kaufland.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 652694833081464125514609219973694510628518905626635147998365279978039134886937838236174943498200177396705638612863323454287425168108102857834607412065699873991992148602002324965126442738279228553950158006148248994869715342355299294820716205171574150408844357513154790091793320885339966359993381756162592732368407263609713712505290662637790541982510820608007312978279583198337968455926103378768752673837837101886172696520762910150428435001130336021320050312466326053087068591020402854554299853485577135250686838327126716061286595364786724532498764418696583195917959090890541711853441318833058983147441962313187362714073155927263831391400433980308936232056070735570345504855770240893024282588060523063349122481185054839214250717329237931215784831581794437458493449709213576788119780873638206017769206107696800019925210772305301873227129886123589285602489537615196329473647549465195214838139533414117874168213140957561815722023916974480212042123813435235557802924109000935208161051581816327363256021447391553571410893899605942384900853231922805030274966803859052599599625831605041334425690543427431242428763458327503108160869023203689245203964231310881009203965653705457380507711128818768196076417009708071958823780623568474845119311797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webassets.kaufland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appassets.kaufland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appflyer.kaufland.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b08b07d8e121957086335b12ba6a81e27250036
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da34d48e1023f46a2d6cb41ff32811de5e01c4de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0024a93d0bd774add87f64ffe5bab6008779a947bdf49889e197892dedeb2c7b9e07bb825d149db64a7a5fc80f8c059f2a55a14a3bcf588a77d7e99dcba2a44cd94e08862b615fd6d8c1daf8e9afff68912df0a4ebb7b492badd45ee420a91b4961fc4d468610df69b6adb67c300c345b835b5ec0ced8915ece07f5d27dae127eb0b6cbf7d9cb46e53a99b820366c080540f49386fcb90886600578f2525d700a7934b871bae97d1c3d1d5763fca3acdfd3150cc08e6ad0cf529031d848d2e4a20ebc78a3f2c639319f4a289b8f75c3d3967b51144f2c9c0b202827a66bafa270ac20d47df00a46d315818122c0c769f688be05fe1167f65028fe065a7b8d20d9e60074e7dea898d212b79c1ca2f2a3d8d8bf70a553eff1dfa4ac91b0f9c12cb223142798dfe3c44e157b7b68dbbf6f8e591fa3a72a8d718f374681769f27023fee1e291d9ecadd0ddfa5b26f357c633737415a6500cb2313492b54c12727065933b357b9227197cc0b8409fb85ca4baf017b257828820135f2876843bae8d6f73750173730164e63df9cf46738c40de207153aa6b3a29b172a96e0d8c15299f059c89d18d9bb92704b058685bc525bbbdef8b011c0858afdad054d7d3129d723a08fc4e78f38356edab04596d7e0457dfdb86ca4c42e6f24a7cfd430beeb26f610e0ade0e4f6b6c4dbeb0d0422d572c5958d785b125e10dfd09866f2cbb81c6fe