asset.kaufland.com
- Kaufland Stiftung & Co. KG -
Issued by SwissSign RSA TLS EV ICA 2022 - 1
About this certificate
This digital certificate with serial number 73:5f:02:8e:c7:01:ab:6b:80:3b:66:0a:c6:59:18:73:41:fc:1b:02 was issued on by SwissSign AG.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Kaufland Stiftung & Co. KG
Company registration number:
HRA 102851
Organization: Kaufland Stiftung & Co. KG
Organization: Kaufland Stiftung & Co. KG
Address:
Rötelstrasse 35
Postal code: 74172
State / Province: BW
Locality: Neckarsulm
Country: DE
Postal code: 74172
State / Province: BW
Locality: Neckarsulm
Country: DE
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate will expire on
Certificate Details
Serial Number (hex): 73:5f:02:8e:c7:01:ab:6b:80:3b:66:0a:c6:59:18:73:41:fc:1b:02Serial Number (int): 658652732247794961046210840987705977571563543298
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: 1c:ef:2e:7b:5c:c0:5c:6d:ff:f9:b7:ae:f6:44:da:d2:54:9b:12:c1
AuthorityKeyId: 49:52:df:30:86:92:59:5f:34:9c:25:48:24:ab:c0:eb:d1:06:f2:d6
Fingerprint (sha1): 51:89:a9:13:0b:37:af:58:a3:8d:44:2d:e3:fb:a3:a4:b5:cc:8c:70
Fingerprint (sha256): 19:0b:35:de:47:0d:13:74:ea:36:c5:bd:7e:f2:04:73:fb:00:4e:f3:a0:fd:ee:3c:fe:45:6a:1f:08:be:5a:79
Issuing Certificate URL: http://aia.swisssign.ch/air-20350159-813d-4532-b988-8519eca57650
Revocation information
OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efecCRL Distribution Point: http://crl.swisssign.ch/cdp-9fdd910e-b9ff-4b2f-be38-2e93708c1b36
Check the revocation status for certificate asset.kaufland.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for asset.kaufland.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
asset.kaufland.com
www.asset.kaufland.com
www.asset.kaufland.com
Other certificates including the domain name kaufland.com
(limited to 100 certificates)
iqpim.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
ssl.ipaper.io
media.kaufland.com
p22-ssl-client-fi-hcm.kaufland.com
ssl2.ipaper.io
mobsot02.kaufland.com
ssl.ipaper.io
pim.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
at2-ssl-client-fi-hcm.kaufland.com
se1-ucexe-p014.uc.schwarz
ssl2.ipaper.io
portal.eu.kaufland.com
qs2-ssl-client-fi-hcm.kaufland.com
iapim.kaufland.com
kaufland-blumen.de
asset.kaufland.com
*.ipaper.io
ssl.ipaper.io
ssl.ipaper.io
remote.au.kaufland.com
www-pc.kaufland.com
ssl3.ipaper.io
ssl2.ipaper.io
ssl2.ipaper.io
*.ipaper.io
media-q.kaufland.com
media.kaufland.com
se1-ucexe-p011.uc.schwarz
ssl.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
*.ipaper.io
test-hr-portal.kaufland.com
portal.eu.kaufland.com
www-ac.kaufland.com
giftcard-q.kaufland.com
portal.eu.kaufland.com
se1-ucexe-p014.uc.schwarz
ssl2.ipaper.io
www-q.kaufland.com
connect-app.kaufland.com
ssl.ipaper.io
media.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
ssl2.ipaper.io
ssl.ipaper.io
*.leaflets.kaufland.com
media.kaufland.com
iqpim.kaufland.com
assets.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
*.ipaper.io
filex-test.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
jobs.kaufland.com
secmail.kaufland.com
account.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
*.ipaper.io
webassets.kaufland.com
account.kaufland.com
www-ec.kaufland.com
asset.kaufland.com
*.leaflets.kaufland.com
account-qs.kaufland.com
*.kaufland.com
www-fc.kaufland.com
kauf.land
*.ipaper.io
www-p.kaufland.com
kaufland.com
*.ipaper.io
ssl2.ipaper.io
dam.kaufland.com
se1-ucexe-p013.uc.schwarz
remote.cz.kaufland.com
www-q.kaufland.com
www-ac.kaufland.com
*.ipaper.io
mobsot.kaufland.com
*.ipaper.io
ssl.ipaper.io
eu.limo.remote.schwarz
jobs.kaufland.com
doa.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
www-q.kaufland.com
remote.eu.kaufland.com
ssl.ipaper.io
www-qc.kaufland.com
www-pc.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
ssl.ipaper.io
media.kaufland.com
p22-ssl-client-fi-hcm.kaufland.com
ssl2.ipaper.io
mobsot02.kaufland.com
ssl.ipaper.io
pim.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
at2-ssl-client-fi-hcm.kaufland.com
se1-ucexe-p014.uc.schwarz
ssl2.ipaper.io
portal.eu.kaufland.com
qs2-ssl-client-fi-hcm.kaufland.com
iapim.kaufland.com
kaufland-blumen.de
asset.kaufland.com
*.ipaper.io
ssl.ipaper.io
ssl.ipaper.io
remote.au.kaufland.com
www-pc.kaufland.com
ssl3.ipaper.io
ssl2.ipaper.io
ssl2.ipaper.io
*.ipaper.io
media-q.kaufland.com
media.kaufland.com
se1-ucexe-p011.uc.schwarz
ssl.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
*.ipaper.io
test-hr-portal.kaufland.com
portal.eu.kaufland.com
www-ac.kaufland.com
giftcard-q.kaufland.com
portal.eu.kaufland.com
se1-ucexe-p014.uc.schwarz
ssl2.ipaper.io
www-q.kaufland.com
connect-app.kaufland.com
ssl.ipaper.io
media.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
ssl2.ipaper.io
ssl.ipaper.io
*.leaflets.kaufland.com
media.kaufland.com
iqpim.kaufland.com
assets.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
*.ipaper.io
filex-test.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
jobs.kaufland.com
secmail.kaufland.com
account.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
*.ipaper.io
webassets.kaufland.com
account.kaufland.com
www-ec.kaufland.com
asset.kaufland.com
*.leaflets.kaufland.com
account-qs.kaufland.com
*.kaufland.com
www-fc.kaufland.com
kauf.land
*.ipaper.io
www-p.kaufland.com
kaufland.com
*.ipaper.io
ssl2.ipaper.io
dam.kaufland.com
se1-ucexe-p013.uc.schwarz
remote.cz.kaufland.com
www-q.kaufland.com
www-ac.kaufland.com
*.ipaper.io
mobsot.kaufland.com
*.ipaper.io
ssl.ipaper.io
eu.limo.remote.schwarz
jobs.kaufland.com
doa.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
www-q.kaufland.com
remote.eu.kaufland.com
ssl.ipaper.io
www-qc.kaufland.com
www-pc.kaufland.com
Certificate
The complete raw certificate details for asset.kaufland.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJnTCCB4WgAwIBAgIUc18CjscBq2uAO2YKxlkYc0H8GwIwDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRVYgSUNBIDIwMjIgLSAxMB4XDTIzMTAyNTEy MjMwOVoXDTI0MTAyNTEyMjMwOVowggEmMRMwEQYLKwYBBAGCNzwCAQMTAkRFMSMw IQYLKwYBBAGCNzwCAQIMEkJhZGVuLVfDvHJ0dGVtYmVyZzEaMBgGCysGAQQBgjc8 AgEBDAlTdHV0dGdhcnQxHTAbBgNVBA8MFFByaXZhdGUgT3JnYW5pemF0aW9uMQsw CQYDVQQGEwJERTELMAkGA1UECAwCQlcxEzARBgNVBAcMCk5lY2thcnN1bG0xDjAM BgNVBBETBTc0MTcyMRkwFwYDVQQJDBBSw7Z0ZWxzdHJhc3NlIDM1MSMwIQYDVQQK DBpLYXVmbGFuZCBTdGlmdHVuZyAmIENvLiBLRzETMBEGA1UEBRMKSFJBIDEwMjg1 MTEbMBkGA1UEAxMSYXNzZXQua2F1ZmxhbmQuY29tMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAgX7PkJqDBThQEkFMiD/j0Zcbx4+o8O8c17zezR6zfsxl o8gu1qLNPc3NiTtx0hHXJ6Ai/o3dKeHIGiCr3p+wbnPW9OofA7hxolAhpzSxM09A RFpMlRnLonDAw0+ag9KawNXPEKr3igZRm/rL29iyIqgQy7b0ZHj2PP3TQKVAJNmr st9umKiFFAU6AnVEXSrAe2esMUDMyxuZbCOp0gG5jLct5Z004QEF1yJfenQ8IwqG nw2pGkw1ANP+07Vgd/JUx/JSeOCTcrVfcSfqcnxB75BFmkZXV32SHRAYBcQ+F/Aw VbYm+epnF6wG7JyOvBhCsiFE296KVBYn6qzKBVLGFwIDAQABo4IElTCCBJEwgbIG CCsGAQUFBwEBBIGlMIGiMEwGCCsGAQUFBzAChkBodHRwOi8vYWlhLnN3aXNzc2ln bi5jaC9haXItMjAzNTAxNTktODEzZC00NTMyLWI5ODgtODUxOWVjYTU3NjUwMFIG CCsGAQUFBzABhkZodHRwOi8vb2NzcC5zd2lzc3NpZ24uY2gvc2lnbi9vY3MtYWFj Y2NlZDUtNjZlOC00MDY5LTliMWItZmQyOWFiNzNlZmVjMG4GA1UdIARnMGUwBwYF Z4EMAQEwCAYGBACPegEEMFAGCGCFdAFZAgEDMEQwQgYIKwYBBQUHAgEWNmh0dHBz Oi8vcmVwb3NpdG9yeS5zd2lzc3NpZ24uY29tL1N3aXNzU2lnbl9DUFNfVExTLnBk ZjBRBgNVHR8ESjBIMEagRKBChkBodHRwOi8vY3JsLnN3aXNzc2lnbi5jaC9jZHAt OWZkZDkxMGUtYjlmZi00YjJmLWJlMzgtMmU5MzcwOGMxYjM2MB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwNQYDVR0RBC4wLIIS YXNzZXQua2F1ZmxhbmQuY29tghZ3d3cuYXNzZXQua2F1ZmxhbmQuY29tMB0GA1Ud DgQWBBQc7y57XMBcbf/5t672RNrSVJsSwTAfBgNVHSMEGDAWgBRJUt8whpJZXzSc JUgkq8Dr0Qby1jCCAm8GCisGAQQB1nkCBAIEggJfBIICWwJZAHYAVYHUwhaQNgFK 6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAGLZsnmnwAABAMARzBFAiEAnLiWDpnN ZFmgUA1q80lNl0Dv7hkpNMIsXbWU4e+/I70CIGH+lIXgDvrVmwqrdEUSH/3jBgek AI9ao7A5RMhpAnBCAHYA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sA AAGLZsnrRgAABAMARzBFAiBWop3xeCQAW8WZJxYOlpSAstoEBcbQaceUBsG4W6Xc RwIhAPG3qInqqFVMe9dEU/gf49yFksdCmqAhwPgl+Wg8C7oMAHYAdv+IPwq2+5VR wmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGLZsnr9gAABAMARzBFAiEAiiUdd7bm 44BiV/LCCx/PybzMl1R03SR2sGwoHgZ6OHoCIGdp50bKWtHQA854IacGVeWuQ1I0 vcSqeCx5dR8RTwBsAHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsA AAGLZsnuxwAABAMASDBGAiEAkyWdylff+ErLkRZSSRqFVLA2btzZcBzUbjbdWIMq zJECIQDJlPkMzTSwrMC/8ClQfSnx2SCkq4jJK/M1l2HQPfN0cQB2AIdPtQ3AKdmT HeVz6fKJno5FM7OS04sKRiV0vw/usvweAAABi2bJ8pgAAAQDAEcwRQIgeh8rFytc zFCoORHzXa2bFy1/m8pk6V4o+BOkYfO8vaECIQDQixacv8MhJmtipJsQ8BP3Boft VNei3fH3WenM00vgsTANBgkqhkiG9w0BAQsFAAOCAgEAbb5qW/CmD9n1AHwr7R5k PEFqVYxpLOYWLAJDD09jw+Sx1YMH97rhqkANqn02hlnzEdcVJjmmLqUQb+BmziUU TSxEhiUHq618Z1o9KpvN8JfNjcVQOdT7pyAJs8rnXYeM8m7rXT5dT25exzJGeuFC HaM45v66lMOX4UwvX5stsNH5yyEYt2kThS7nfAKVshpzCkSXCad9Nuv96RvuRpUX XjbPm15fiwQm14lhVjREqqo91Rj0jiJ1sLUICk03NdR5nGshzZIyhbThS2ruuhz2 fxaQyqaA0jA78xNWRztqW0QdEDjjsmM87IGjNZjN67sZeP+NK1OoXdq9cfRBJ1C1 0KQCzamfZK362ODy+39tmuFqId/pN1j81hWrZhEOwWoxnW53zRhXRhUyxsxDENmc MhDqKzE/8y2KWLRmYHkn03IdARrlsS1dDKZfPadNc5qm0SXfvaRIlxdiAdIHrWoc lmFvRagk3vuHjMAcNowzo82PztfkRRmE9/dQmt2zcsUY1RqPWalUZbRSsq1ZzXaG RA3OuQw3cuEG5KHf5BebDA9v97CBPPO//F8ZeR5LIbwJR63xblt7wmxKRqkuEHqg VkF7Oo0nh22F8ixiG0/Y8BjsWRge8gIGVhXzoKuOX/6Hh5op4Vojz2dVZUA3Tl+3 K7rxfzlv0bVHEXhOZRh9WlY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgX7PkJqDBThQEkFMiD/j 0Zcbx4+o8O8c17zezR6zfsxlo8gu1qLNPc3NiTtx0hHXJ6Ai/o3dKeHIGiCr3p+w bnPW9OofA7hxolAhpzSxM09ARFpMlRnLonDAw0+ag9KawNXPEKr3igZRm/rL29iy IqgQy7b0ZHj2PP3TQKVAJNmrst9umKiFFAU6AnVEXSrAe2esMUDMyxuZbCOp0gG5 jLct5Z004QEF1yJfenQ8IwqGnw2pGkw1ANP+07Vgd/JUx/JSeOCTcrVfcSfqcnxB 75BFmkZXV32SHRAYBcQ+F/AwVbYm+epnF6wG7JyOvBhCsiFE296KVBYn6qzKBVLG FwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 658652732247794961046210840987705977571563543298 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2022 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-25 12:23:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-25 12:23:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Stuttgart' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BW' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Neckarsulm' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '74172' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rötelstrasse 35' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kaufland Stiftung & Co. KG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 102851' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'asset.kaufland.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16347274076839626811526556701503828239512020659036604490588853112624942085279810540911343722332150424488124385253351012949288477060386007184615362456280034387179012369323071284300121177079476323407433356131629401231821919417113590544008810847214120653107568435047847582609568707017744658852549926477750883633029775918098582513846053265908354437165547941977203330856153962806832678672577195609321082812983997880285704009018973474415317433321836326733428021324296756115188966495336507713528055001266488365670910843674041086095034827318308319023102940637714242218617690602412481033665547150844989813695889225799322224151 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-20350159-813d-4532-b988-8519eca57650' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-9fdd910e-b9ff-4b2f-be38-2e93708c1b36' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asset.kaufland.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asset.kaufland.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1cef2e7b5cc05c6dfff9b7aef644dad2549b12c1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4952df308692595f349c254824abc0ebd106f2d6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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