app-qs.kaufland.net

- Schwarz IT GmbH & Co. KG -

Issued by SwissSign EV Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 20:fe:75:da:44:98:6b:47:27:1c:ca:dd:9b:38:0b:8a:93:b6:19:6a was issued on by SwissSign AG.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Schwarz IT GmbH & Co. KG

Company registration number: HRA 730995
Organization: Schwarz IT GmbH & Co. KG
State / Province: Baden-Württemberg
Locality: Neckarsulm
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 20:fe:75:da:44:98:6b:47:27:1c:ca:dd:9b:38:0b:8a:93:b6:19:6a
Serial Number (int): 188362360356978556457856792253119474384751696234
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: bf:17:e7:c1:56:88:95:f0:ae:2f:cb:0c:2a:1b:6c:95:99:ef:66:4d
AuthorityKeyId: ee:fd:46:ca:f7:27:5e:91:bc:5a:b6:e7:87:cd:0a:fa:55:0a:26:42

Fingerprint (sha1): ab:0a:b7:9c:79:f6:f2:bc:d1:b0:10:5a:ca:29:e5:c0:7f:24:3d:83
Fingerprint (sha256): 18:98:41:f1:f8:16:e5:eb:63:eb:62:d7:9e:57:e7:4a:ec:11:46:a0:98:48:24:d4:38:41:4b:17:11:f3:5c:77

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642

Revocation information

OCSP Server: http://gold-ev-g2.ocsp.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642
CRL Distribution Point: http://crl.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642
CRL Distribution Point: ldap://directory.swisssign.net/CN=EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate app-qs.kaufland.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app-qs.kaufland.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app-qs.kaufland.net
app-at.kaufland.net
app-et.kaufland.net

Other certificates including the domain name kaufland.net

(limited to 100 certificates)
mp.kaufland.net
collaboration.kaufland.de
courtamew.dev
portal-dev.eu.kaufland.net
portal.eu.kaufland.net
killer.logic-wiz.com
iawmseg.kaufland.net
auth-qs.kaufland.net
import.app.kaufland.net
concur.kaufland.net
auth.kaufland.net
iawmseg.kaufland.net
mss.kaufland.net
auth-qs.kaufland.net
collaboration.kaufland.de
api.kaufland.net
mss.kaufland.net
auth-e2.kaufland.net
hc-q.kaufland.net
hc.kaufland.net
int.360live.app
mss-t.kaufland.net
app-qs.kaufland.net
hc-q.kaufland.net
app-qs.kaufland.net
app-qs.kaufland.net
lyncdiscover.uc.kaufland.net
remote.eu.kaufland.com
www.medici.vc
hc-q.kaufland.net
mss-handheld-q.kaufland.net
remote.eu.kaufland.com
concur.kaufland.net
codesnap.co
out-uc17.lidl.net
baustandards-qs.kaufland.net
app.kaufland.net
auth-qs.kaufland.net
auth.kaufland.net
api-qs.kaufland.net
ipwmseg.kaufland.net
out-uc17.lidl.net
remote.eu.kaufland.com
iawmseg.kaufland.net
hc.kaufland.net
hc-a.kaufland.net
ipwmseg.kaufland.net
mp.kaufland.net
softnative.dev
iawmseg.kaufland.net
out-uc18.lidl.net
baustandards.kaufland.net
hc-q.kaufland.net
app-qs.kaufland.net
auth-e2.kaufland.net
iawmseg.kaufland.net
collaboration.kaufland.de
mss-handheld-a.kaufland.net
ad.adaptivemedia.tech
collaboration-q.kaufland.de
out-uc18.lidl.net
auth.kaufland.net
hc.kaufland.net
app-qs.kaufland.net
auth.kaufland.net
portal.eu.kaufland.net
out-uc18.lidl.net
out-uc18.lidl.net
www.elclamor.pe
kaufland.net
app.kaufland.net
import.app-qs.kaufland.net
collaboration.kaufland.de
www.jsonice.com
pm4ngos.ir
pay.kaufland.net
ipwmseg.kaufland.net
app.kaufland.net
auth.kaufland.net
portal.eu.kaufland.net
concur.kaufland.net
oc.kaufland.net
portal.eu.kaufland.net
api-qs.kaufland.net
baustandards-at.kaufland.net
ipwmseg.kaufland.net
baustandards-qs.kaufland.net
suxxusglobal.com
www.rominieloimoveis.com
import.app-qs.kaufland.net
*.cf.kaufland.net
app.kaufland.net
ci.cf.kaufland.net
api.kaufland.net
collaboration.kaufland.de
mirror.yglabs.app
collaboration.kaufland.de
gid.idwall.co
design-hub.kaufland.net
out-uc18.lidl.net

Certificate

The complete raw certificate details for app-qs.kaufland.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 188362360356978556457856792253119474384751696234
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign EV Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 19:27:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-04 19:27:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stuttgart'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 730995'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Neckarsulm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Schwarz IT GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app-qs.kaufland.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 838222456029293373936007977088428973991912058191882227150804703638690726756991577439587662028512504748310202261455562971157181519173528130821634233472041806425247709019271719106052156766741695336604265869986621200283563198327402706651712100738009750776334688698485512730463393191756161982815240489855289905559772008207190859062809424743765058437270470204125986039799095453175377620069343963039573392449366920339793954784256150720830974216641522588222769235833168053969665971708632316625626556306339409238654172162203712517595486673864487301520225357531492514255371917603321489370723783766413943716288408949687543788031126056551488478842226746209738472617496093069787946231473769422290300392062894513556935309879225192356059514625806119629406251827038227872640220912336890238583672913747403051252184657559199722296250953811313311106045181697485702741375942361621212895725140583638131057794116132259934589464988614643377428369450906505802821411884801754050087446510294872886024004848945503468993242075522340583108323934571968798663364254554266407078527959229304364203136827917557178051809408042147813929069552261473418374699514494216317889978234922216014952737635856197823070464707727485334890072049821300544073998118304734509627616863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-qs.kaufland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-at.kaufland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-et.kaufland.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf17e7c1568895f0ae2fcb0c2a1b6c9599ef664d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eefd46caf7275e91bc5ab6e787cd0afa550a2642
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.1 (SwissSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (196 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-ev-g2.ocsp.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (608 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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