kaufland.com

- Kaufland Stiftung & Co. KG -

Issued by SwissSign RSA TLS EV ICA 2021 - 1

About this certificate

This digital certificate with serial number 5d:39:32:d5:d5:56:d2:b9:05:0c:45:cb:05:37:26:f2:b8:20:c5:2a was issued on by SwissSign AG.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Kaufland Stiftung & Co. KG

Company registration number: HRA 102851
Organization: Kaufland Stiftung & Co. KG
State / Province: Baden-Württemberg
Locality: Neckarsulm
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 5d:39:32:d5:d5:56:d2:b9:05:0c:45:cb:05:37:26:f2:b8:20:c5:2a
Serial Number (int): 532211712540950438041785135312069944972486427946
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: c0:6b:56:22:31:3a:95:ea:7b:01:15:8d:6c:42:c6:81:fb:51:a1:3c
AuthorityKeyId: da:34:d4:8e:10:23:f4:6a:2d:6c:b4:1f:f3:28:11:de:5e:01:c4:de

Fingerprint (sha1): 93:1f:e1:ce:e8:e3:98:a8:83:fc:97:d8:b0:c8:f8:10:70:d2:3d:89
Fingerprint (sha256): 1a:a2:b0:df:ee:1e:b3:10:1c:1d:f2:ec:7e:21:76:df:38:8b:d2:57:b9:8c:5d:08:06:1d:6b:9b:b1:97:21:40

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE

Revocation information

OCSP Server: http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate kaufland.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kaufland.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kaufland.com
filiale.kaufland.de
www.kaufland.bg
www.kaufland.com
www.filiale.kaufland.de
www.kaufland.cz
www.kaufland.hr
www.kaufland.md
www.kaufland.pl
www.kaufland.ro
www.kaufland.sk
kaufland.bg
kaufland.cz
kaufland.hr
kaufland.md
kaufland.pl
kaufland.ro
kaufland.sk

Other certificates including the domain name kaufland.com

(limited to 100 certificates)
iqpim.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
ssl.ipaper.io
media.kaufland.com
p22-ssl-client-fi-hcm.kaufland.com
ssl2.ipaper.io
mobsot02.kaufland.com
ssl.ipaper.io
pim.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
at2-ssl-client-fi-hcm.kaufland.com
se1-ucexe-p014.uc.schwarz
ssl2.ipaper.io
portal.eu.kaufland.com
qs2-ssl-client-fi-hcm.kaufland.com
iapim.kaufland.com
kaufland-blumen.de
asset.kaufland.com
*.ipaper.io
ssl.ipaper.io
ssl.ipaper.io
remote.au.kaufland.com
www-pc.kaufland.com
ssl3.ipaper.io
ssl2.ipaper.io
ssl2.ipaper.io
*.ipaper.io
media-q.kaufland.com
media.kaufland.com
se1-ucexe-p011.uc.schwarz
ssl.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
*.ipaper.io
test-hr-portal.kaufland.com
portal.eu.kaufland.com
www-ac.kaufland.com
giftcard-q.kaufland.com
portal.eu.kaufland.com
se1-ucexe-p014.uc.schwarz
ssl2.ipaper.io
www-q.kaufland.com
connect-app.kaufland.com
ssl.ipaper.io
media.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
ssl2.ipaper.io
ssl.ipaper.io
*.leaflets.kaufland.com
media.kaufland.com
iqpim.kaufland.com
assets.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
*.ipaper.io
filex-test.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
jobs.kaufland.com
secmail.kaufland.com
account.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
*.ipaper.io
webassets.kaufland.com
account.kaufland.com
www-ec.kaufland.com
asset.kaufland.com
*.leaflets.kaufland.com
account-qs.kaufland.com
*.kaufland.com
www-fc.kaufland.com
kauf.land
*.ipaper.io
www-p.kaufland.com
kaufland.com
*.ipaper.io
ssl2.ipaper.io
dam.kaufland.com
se1-ucexe-p013.uc.schwarz
remote.cz.kaufland.com
www-q.kaufland.com
www-ac.kaufland.com
*.ipaper.io
mobsot.kaufland.com
*.ipaper.io
ssl.ipaper.io
eu.limo.remote.schwarz
jobs.kaufland.com
doa.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
www-q.kaufland.com
remote.eu.kaufland.com
ssl.ipaper.io
www-qc.kaufland.com
www-pc.kaufland.com

Certificate

The complete raw certificate details for kaufland.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILOjCCCSKgAwIBAgIUXTky1dVW0rkFDEXLBTcm8rggxSowDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgRVYgSUNBIDIwMjEgLSAxMB4XDTIyMDYxMzE1
NTgwNVoXDTIzMDYxMzE1NTgwNVowggEFMRMwEQYLKwYBBAGCNzwCAQMTAkRFMSMw
IQYLKwYBBAGCNzwCAQIMEkJhZGVuLVfDvHJ0dGVtYmVyZzEaMBgGCysGAQQBgjc8
AgEBEwlTdHV0dGdhcnQxEzARBgNVBAUTCkhSQSAxMDI4NTExHTAbBgNVBA8TFFBy
aXZhdGUgT3JnYW5pemF0aW9uMQswCQYDVQQGEwJERTEbMBkGA1UECAwSQmFkZW4t
V8O8cnR0ZW1iZXJnMRMwEQYDVQQHEwpOZWNrYXJzdWxtMSMwIQYDVQQKDBpLYXVm
bGFuZCBTdGlmdHVuZyAmIENvLiBLRzEVMBMGA1UEAxMMa2F1ZmxhbmQuY29tMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssiH1/ZEZOuqrgD6IuutTm4s
LbDoSBcKULlASCrH2oZ2Ntxjr6/ruTA9hCDv8Md2HL9X3KDwfC24yxOG7D7fI0Hi
xbTlngvfTwzW9FUm2RHrKqpCUQjwoBxiQGSdiAV5c6z2cqRDweFBi23mWtFrwltm
jpDRQFJysNW0FrgQYkCfBgMAHNofKXe0pZR+ggmOrS6f/DsUl7DkvjuxEAltNuHa
7bvMksoIRJ7YvRvOk1yYYc0sNM3kOzSA8m9JcLPPmSZTJzVvx8ZBqw0fysXwIC/s
rPCB6JtO4+AwneLx6o4cw9hBVx1c89ZXUqv7sf5mH44OX2tq+4wswnw0N7oleQID
AQABo4IGUzCCBk8wggEtBgNVHREEggEkMIIBIIIMa2F1ZmxhbmQuY29tghNmaWxp
YWxlLmthdWZsYW5kLmRlgg93d3cua2F1ZmxhbmQuYmeCEHd3dy5rYXVmbGFuZC5j
b22CF3d3dy5maWxpYWxlLmthdWZsYW5kLmRlgg93d3cua2F1ZmxhbmQuY3qCD3d3
dy5rYXVmbGFuZC5ocoIPd3d3LmthdWZsYW5kLm1kgg93d3cua2F1ZmxhbmQucGyC
D3d3dy5rYXVmbGFuZC5yb4IPd3d3LmthdWZsYW5kLnNrggtrYXVmbGFuZC5iZ4IL
a2F1ZmxhbmQuY3qCC2thdWZsYW5kLmhyggtrYXVmbGFuZC5tZIILa2F1ZmxhbmQu
cGyCC2thdWZsYW5kLnJvggtrYXVmbGFuZC5zazAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBTAa1YiMTqV6nsB
FY1sQsaB+1GhPDAfBgNVHSMEGDAWgBTaNNSOECP0ai1stB/zKBHeXgHE3jCB/wYD
VR0fBIH3MIH0MEegRaBDhkFodHRwOi8vY3JsLnN3aXNzc2lnbi5uZXQvREEzNEQ0
OEUxMDIzRjQ2QTJENkNCNDFGRjMyODExREU1RTAxQzRERTCBqKCBpaCBooaBn2xk
YXA6Ly9kaXJlY3Rvcnkuc3dpc3NzaWduLm5ldC9DTj1EQTM0RDQ4RTEwMjNGNDZB
MkQ2Q0I0MUZGMzI4MTFERTVFMDFDNERFJTJDTz1Td2lzc1NpZ24lMkNDPUNIP2Nl
cnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q/YmFzZT9vYmplY3RDbGFzcz1jUkxEaXN0
cmlidXRpb25Qb2ludDBuBgNVHSAEZzBlMFAGCGCFdAFZAgEDMEQwQgYIKwYBBQUH
AgEWNmh0dHBzOi8vcmVwb3NpdG9yeS5zd2lzc3NpZ24uY29tL1N3aXNzU2lnbl9D
UFNfVExTLnBkZjAIBgYEAI96AQQwBwYFZ4EMAQEwgcYGCCsGAQUFBwEBBIG5MIG2
MGQGCCsGAQUFBzAChlhodHRwOi8vc3dpc3NzaWduLm5ldC9jZ2ktYmluL2F1dGhv
cml0eS9kb3dubG9hZC9EQTM0RDQ4RTEwMjNGNDZBMkQ2Q0I0MUZGMzI4MTFERTVF
MDFDNERFME4GCCsGAQUFBzABhkJodHRwOi8vb2NzcC5zd2lzc3NpZ24ubmV0L0RB
MzRENDhFMTAyM0Y0NkEyRDZDQjQxRkYzMjgxMURFNUUwMUM0REUwggJwBgorBgEE
AdZ5AgQCBIICYASCAlwCWgB3AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0H
E9MMAAABgV3JYSQAAAQDAEgwRgIhALmFvxE6j6n9S2V9ItCE1lbx4OtBFNbgK9Tg
YMOH0QZdAiEAjnxQ4IsioX34oiJ+taT3J8RwLr3A5K1FThEGKYkJhd0AdgBvU3as
MfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAYFdyWBKAAAEAwBHMEUCIG13
CzqmC8ObHPc7dm++BlYb0wuz4eToqYwRbnIGh2u5AiEA+jI9XbgojmsRcX2vONQ2
QA5b32vw0JxblqDCFuNXmaMAdgB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpX
o1LrUgAAAYFdyV8mAAAEAwBHMEUCIGEoKq2ak+/tJwsppN58mxkiGRiV5b6MsANQ
kynNKHzHAiEAv507ZQwvYNTBAU6QHP31Bq6uZiiHNEvYzhVrPvcKJFEAdgCt9776
fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yCigAAAYFdyWBVAAAEAwBHMEUCIB+E
YJPhLXujDVJ9WMNV5BdwWfZoDCv+5YgG5SDOMdwQAiEA+X756Gu1Qx15Pj3MbEPI
VPzGdbPYcT0KiS0KEGqmOrYAdwDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9
bQa9bgAAAYFdyVxlAAAEAwBIMEYCIQC+od8jdngxdCq8s2uljYACnid7+5FrlgBT
RBp0cJqragIhAKvyaD96phE1JaW7lAsdT41gFRSpzIFXai7E76KNWvEHMA0GCSqG
SIb3DQEBCwUAA4ICAQALsjY+NXjrrl3tq8DlxyKi1LNFSqBNP0WSe+lfKkSybtzB
sbJussJ/NwYUdsZzUfk0f67KA3lZXscxaFyBF2q0T6gRb+tnCKQqX2e8+TiZyTjE
tRdKe7iM+6GHv93lMsd9nR7ocOtianMH0TE6yuh49mTYnGU+QWUQLH/vvMmjMD11
aZHyyPa/AwQ2toMeIk74dZBu6re99VELWVON3BzoZaVFFvNVmUvpWBTYW6VQcZYd
4+rnCppFTTcUIvg5614+93BqDBA6SlzlNZDi1e6zCdHCFsKJLOMOsvnzU3eX9e+T
jerv+ExeS8XVgLQmZtCtwTbxMn7h9IMomjwbNqv1QvoVKn65sjCSXy/Sg8SE7rKp
lg452ncDqatm7Ouka/lZVwBZ3nc/WIkHieAgncr+AzhnCGCu7V+4sx5vbxaImohC
jQioNUxMIcu5DDsQiUHl2eBopnSwO+/W7jh2dnkMEebbzzxkTg7PKYNYccVpE32s
2CNbBvpmZq9u25JOzeVmJnlsgpM7EOcDaXvPxFOTBR5AuCS7WkQ+63tlUlIEhDgf
Yi0jTZj9jaPG6eIvvHrYeCF9uu8wQbgTq8/anZzI9fHQnoLmLRSoYpub51rmaXel
BZgETAV7m3sBrBCo0S60i6q342HQj9zZvu+kT4Qz0yHgUd9DtmmHvw+qXjz4Zw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssiH1/ZEZOuqrgD6Iuut
Tm4sLbDoSBcKULlASCrH2oZ2Ntxjr6/ruTA9hCDv8Md2HL9X3KDwfC24yxOG7D7f
I0HixbTlngvfTwzW9FUm2RHrKqpCUQjwoBxiQGSdiAV5c6z2cqRDweFBi23mWtFr
wltmjpDRQFJysNW0FrgQYkCfBgMAHNofKXe0pZR+ggmOrS6f/DsUl7DkvjuxEAlt
NuHa7bvMksoIRJ7YvRvOk1yYYc0sNM3kOzSA8m9JcLPPmSZTJzVvx8ZBqw0fysXw
IC/srPCB6JtO4+AwneLx6o4cw9hBVx1c89ZXUqv7sf5mH44OX2tq+4wswnw0N7ol
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 532211712540950438041785135312069944972486427946
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-13 15:58:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-13 15:58:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stuttgart'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 102851'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Neckarsulm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kaufland Stiftung & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kaufland.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22569303627590249683235311799700160201029778059387878460512526096740517682635212406430265684283071184463468782245481226207014344743570851113695294772467685340656433001114412945664760512454439902463411911901510647003219621813160833465150416898487817774371679426255546638771498033500472543477057055883842716266181745807642593323111957734996176931553010118612294772156524941338806190698596610109932559313922079168178832892881702605843837266570693636285077002182747783653039131816571546478050054128608341965216550564241575191779427857873471778360596927064702181964486718830018535583197681528836297091747816858529641932153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (292 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaufland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filiale.kaufland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaufland.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaufland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.filiale.kaufland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaufland.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaufland.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaufland.md'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaufland.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaufland.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaufland.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaufland.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaufland.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaufland.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaufland.md'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaufland.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaufland.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaufland.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c06b5622313a95ea7b01158d6c42c681fb51a13c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da34d48e1023f46a2d6cb41ff32811de5e01c4de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (608 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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