media.kaufland.com
- Kaufland Stiftung & Co. KG -
Issued by SwissSign RSA TLS EV ICA 2021 - 1
About this certificate
This digital certificate with serial number 4f:62:2e:2e:81:7d:88:d8:1c:d4:cc:e8:cb:76:54:64:a0:90:f9:c5 was issued on by SwissSign AG.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Kaufland Stiftung & Co. KG
Company registration number:
HRA 102851
Organization: Kaufland Stiftung & Co. KG
Organization: Kaufland Stiftung & Co. KG
State / Province:
Baden-Württemberg
Locality: Neckarsulm
Country: DE
Locality: Neckarsulm
Country: DE
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate has expire since
Certificate Details
Serial Number (hex): 4f:62:2e:2e:81:7d:88:d8:1c:d4:cc:e8:cb:76:54:64:a0:90:f9:c5Serial Number (int): 453199766914803286910286971723625152983004674501
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: 62:91:aa:a9:a3:e4:85:81:3d:5d:66:c5:09:52:cb:52:ec:36:4b:bc
AuthorityKeyId: da:34:d4:8e:10:23:f4:6a:2d:6c:b4:1f:f3:28:11:de:5e:01:c4:de
Fingerprint (sha1): 4a:9e:bf:33:99:72:53:52:f2:70:1b:c7:dd:3c:68:fd:14:16:39:a8
Fingerprint (sha256): 20:1c:61:e5:6d:7e:69:0b:29:6d:4c:68:4b:17:ad:f8:56:4e:a5:64:80:ed:c3:86:e7:8f:dc:43:a3:94:64:e9
Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
Revocation information
OCSP Server: http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DECRL Distribution Point: http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint
Check the revocation status for certificate media.kaufland.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for media.kaufland.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
media.kaufland.com
media.kaufland.de
media.kaufland.de
Other certificates including the domain name kaufland.com
(limited to 100 certificates)
iqpim.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
ssl.ipaper.io
media.kaufland.com
p22-ssl-client-fi-hcm.kaufland.com
ssl2.ipaper.io
mobsot02.kaufland.com
ssl.ipaper.io
pim.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
*.kaufland.com
at2-ssl-client-fi-hcm.kaufland.com
se1-ucexe-p014.uc.schwarz
ssl2.ipaper.io
portal.eu.kaufland.com
qs2-ssl-client-fi-hcm.kaufland.com
iapim.kaufland.com
kaufland-blumen.de
asset.kaufland.com
*.ipaper.io
ssl.ipaper.io
ssl.ipaper.io
remote.au.kaufland.com
www-pc.kaufland.com
ssl3.ipaper.io
ssl2.ipaper.io
ssl2.ipaper.io
*.ipaper.io
media-q.kaufland.com
media.kaufland.com
se1-ucexe-p011.uc.schwarz
ssl.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
*.ipaper.io
test-hr-portal.kaufland.com
portal.eu.kaufland.com
www-ac.kaufland.com
giftcard-q.kaufland.com
portal.eu.kaufland.com
se1-ucexe-p014.uc.schwarz
ssl2.ipaper.io
www-q.kaufland.com
connect-app.kaufland.com
ssl.ipaper.io
media.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
ssl2.ipaper.io
ssl.ipaper.io
*.leaflets.kaufland.com
media.kaufland.com
iqpim.kaufland.com
assets.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
*.ipaper.io
filex-test.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
jobs.kaufland.com
secmail.kaufland.com
account.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
*.ipaper.io
webassets.kaufland.com
account.kaufland.com
www-ec.kaufland.com
asset.kaufland.com
*.leaflets.kaufland.com
account-qs.kaufland.com
*.kaufland.com
www-fc.kaufland.com
kauf.land
*.ipaper.io
www-p.kaufland.com
kaufland.com
*.ipaper.io
ssl2.ipaper.io
dam.kaufland.com
se1-ucexe-p013.uc.schwarz
remote.cz.kaufland.com
www-q.kaufland.com
www-ac.kaufland.com
*.ipaper.io
mobsot.kaufland.com
*.ipaper.io
ssl.ipaper.io
eu.limo.remote.schwarz
account-qs.kaufland.com
jobs.kaufland.com
doa.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
www-q.kaufland.com
remote.eu.kaufland.com
ssl.ipaper.io
ssl2.ipaper.io
ssl.ipaper.io
ssl.ipaper.io
media.kaufland.com
p22-ssl-client-fi-hcm.kaufland.com
ssl2.ipaper.io
mobsot02.kaufland.com
ssl.ipaper.io
pim.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
*.kaufland.com
at2-ssl-client-fi-hcm.kaufland.com
se1-ucexe-p014.uc.schwarz
ssl2.ipaper.io
portal.eu.kaufland.com
qs2-ssl-client-fi-hcm.kaufland.com
iapim.kaufland.com
kaufland-blumen.de
asset.kaufland.com
*.ipaper.io
ssl.ipaper.io
ssl.ipaper.io
remote.au.kaufland.com
www-pc.kaufland.com
ssl3.ipaper.io
ssl2.ipaper.io
ssl2.ipaper.io
*.ipaper.io
media-q.kaufland.com
media.kaufland.com
se1-ucexe-p011.uc.schwarz
ssl.ipaper.io
ssl3.ipaper.io
ssl2.ipaper.io
*.ipaper.io
test-hr-portal.kaufland.com
portal.eu.kaufland.com
www-ac.kaufland.com
giftcard-q.kaufland.com
portal.eu.kaufland.com
se1-ucexe-p014.uc.schwarz
ssl2.ipaper.io
www-q.kaufland.com
connect-app.kaufland.com
ssl.ipaper.io
media.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
ssl2.ipaper.io
ssl.ipaper.io
*.leaflets.kaufland.com
media.kaufland.com
iqpim.kaufland.com
assets.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
*.ipaper.io
filex-test.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
jobs.kaufland.com
secmail.kaufland.com
account.kaufland.com
ssl2.ipaper.io
ssl.ipaper.io
*.ipaper.io
webassets.kaufland.com
account.kaufland.com
www-ec.kaufland.com
asset.kaufland.com
*.leaflets.kaufland.com
account-qs.kaufland.com
*.kaufland.com
www-fc.kaufland.com
kauf.land
*.ipaper.io
www-p.kaufland.com
kaufland.com
*.ipaper.io
ssl2.ipaper.io
dam.kaufland.com
se1-ucexe-p013.uc.schwarz
remote.cz.kaufland.com
www-q.kaufland.com
www-ac.kaufland.com
*.ipaper.io
mobsot.kaufland.com
*.ipaper.io
ssl.ipaper.io
eu.limo.remote.schwarz
account-qs.kaufland.com
jobs.kaufland.com
doa.kaufland.com
ssl.ipaper.io
ssl.ipaper.io
www-q.kaufland.com
remote.eu.kaufland.com
ssl.ipaper.io
Certificate
The complete raw certificate details for media.kaufland.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIILPzCCCSegAwIBAgIUT2IuLoF9iNgc1Mzoy3ZUZKCQ+cUwDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRVYgSUNBIDIwMjEgLSAxMB4XDTIyMDEwNDE3 MDcwOFoXDTIzMDEwNDE3MDcwOFowggELMRMwEQYLKwYBBAGCNzwCAQMTAkRFMSMw IQYLKwYBBAGCNzwCAQIMEkJhZGVuLVfDvHJ0dGVtYmVyZzEaMBgGCysGAQQBgjc8 AgEBEwlTdHV0dGdhcnQxEzARBgNVBAUTCkhSQSAxMDI4NTExHTAbBgNVBA8TFFBy aXZhdGUgT3JnYW5pemF0aW9uMQswCQYDVQQGEwJERTEbMBkGA1UECAwSQmFkZW4t V8O8cnR0ZW1iZXJnMRMwEQYDVQQHEwpOZWNrYXJzdWxtMSMwIQYDVQQKDBpLYXVm bGFuZCBTdGlmdHVuZyAmIENvLiBLRzEbMBkGA1UEAxMSbWVkaWEua2F1ZmxhbmQu Y29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5zd5FhA/FFQOLARq Yyf8nmFi2D5munyoYfX6StGAzNs4LdXe4S7NTyUrlqCQ/7KcDfPIcGs8MMIYX7pT ecM7+6t0a2jZSEfv9VlDJbRLKnToQqzYUfdshJQzGOHpVHn5fdlAd8UuTvvudpSw JhgwQGVbfzspWtDAStev34qJW4lfz6Ugu0GvPzF2Zk+W/fXUecUcxfvVJACr8ikz qDu3AzQJ/dmGSr3d/iWRbmRbFPu8zd/vnJfA8i6TQx9yICXPuRStjHPdk1OkrSc2 pe31AFE9A5yr0OGMMS16qK/K8LGAoy54nmrKm2VHSDrovTlP2NFmKbetE9X4QTMg 0bD6BWTnR/smFtmlLWmjpA56OZqMH/6pbE5c+1Myq9512oqZpokf/2/pFkVedug9 z9csp7ObR57R+6KOsrSeDE0tqaZXOkY6RJBPTErJw1mXXmIPs9dK8eJPvpc7dipD cDtIi1AYQ7C2o/oEl9Hqc6tGv1YdECwQtlMcqCFAEw0ICctFmbWDEDW0xmZMd1mA FPpiU0MGNoFAeoarSrPerr/lfvsBHSsaPGNEQo4AjIrqlenbwIAB3jflpznvcMuo FgU5/8FTk/juoC/IgS9FSR7uwmcXg7OQCzdMMDP5Galqa9N295VI66CjqJkdstrq n70HouNxuvVZTPpAaLfrEjesY48CAwEAAaOCBVIwggVOMDAGA1UdEQQpMCeCEm1l ZGlhLmthdWZsYW5kLmNvbYIRbWVkaWEua2F1ZmxhbmQuZGUwDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQUYpGq qaPkhYE9XWbFCVLLUuw2S7wwHwYDVR0jBBgwFoAU2jTUjhAj9GotbLQf8ygR3l4B xN4wgf8GA1UdHwSB9zCB9DBHoEWgQ4ZBaHR0cDovL2NybC5zd2lzc3NpZ24ubmV0 L0RBMzRENDhFMTAyM0Y0NkEyRDZDQjQxRkYzMjgxMURFNUUwMUM0REUwgaiggaWg gaKGgZ9sZGFwOi8vZGlyZWN0b3J5LnN3aXNzc2lnbi5uZXQvQ049REEzNEQ0OEUx MDIzRjQ2QTJENkNCNDFGRjMyODExREU1RTAxQzRERSUyQ089U3dpc3NTaWduJTJD Qz1DSD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0P2Jhc2U/b2JqZWN0Q2xhc3M9 Y1JMRGlzdHJpYnV0aW9uUG9pbnQwbgYDVR0gBGcwZTBQBghghXQBWQIBAzBEMEIG CCsGAQUFBwIBFjZodHRwczovL3JlcG9zaXRvcnkuc3dpc3NzaWduLmNvbS9Td2lz c1NpZ25fQ1BTX1RMUy5wZGYwCAYGBACPegEEMAcGBWeBDAEBMIHGBggrBgEFBQcB AQSBuTCBtjBkBggrBgEFBQcwAoZYaHR0cDovL3N3aXNzc2lnbi5uZXQvY2dpLWJp bi9hdXRob3JpdHkvZG93bmxvYWQvREEzNEQ0OEUxMDIzRjQ2QTJENkNCNDFGRjMy ODExREU1RTAxQzRERTBOBggrBgEFBQcwAYZCaHR0cDovL29jc3Auc3dpc3NzaWdu Lm5ldC9EQTM0RDQ4RTEwMjNGNDZBMkQ2Q0I0MUZGMzI4MTFERTVFMDFDNERFMIIC bgYKKwYBBAHWeQIEAgSCAl4EggJaAlgAdgBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAl CBcvo6odBxPTDAAAAX4mDxiAAAAEAwBHMEUCIQDMUM2FwoWaGaJnoxDWJShh1t4R ic4fnXPR85XDroyRcgIgOc3nhjtXpAM7ixN7u1lx2nq/M/+w7E9Ag8/DGw7NEZ4A dQBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAX4mDxeVAAAEAwBG MEQCIAI4z8Vih0l9z6O0vMVjcoMsQNu3CIay8IkOoyy4qobGAiBqoNnFtDKvsoIQ r8gXQD2Fe+jrBKd0CRgNQAyXztQWvQB3AHoyjFTYty22IOo44FIe6YQWcDIThU07 0ivBOlejUutSAAABfiYPFt4AAAQDAEgwRgIhAJDhWaMGSH6SXWPl0WM7YgUqnYOA JheG18GfUuQ8V7EwAiEAtK95mXbI+WB+Cf7uK2HzCjVOG/QpJAclD3veH8qGrDEA dgCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yCigAAAX4mDxWUAAAEAwBH MEUCIQCNiQbeeY52jIiGSK7ex+0uy9QWFuNVIbCMBgXViq2L6AIgNqmltxRkj8cs JRXBjBEqksLZetFuJzaCO3UrtgqR2j0AdgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr 7Otp4Xd9bQa9bgAAAX4mDxglAAAEAwBHMEUCIFAGAWcd+jzbCM/k4Ba3YeVDkEO8 6y8poZDy2fAP9XHcAiEAk4gws8ymuXvYwu6cJE10yRz6ppQuBErT5MpauKSnaDUw DQYJKoZIhvcNAQELBQADggIBABLMrhjbqidyDQorRcWx2z+BSpW+SdXU790JOy4+ u2Cgwkpv7RA+G8oBqVLs7++W4YBzkexIk7xlczSWodm+d7pYvvYgLMzl0HT6teTJ yFN4ErW6F5Jo1+rfVWvSSmoa5aXuPtJOPF0poKdPfRE+d51IAbFKUGgWde7Rn6z7 6llLquhyifM5mwSe0o0xl3OajcexzzeWQJAlGurbCyxvFf3mhG5Mgerymrxi52nB 7sl6H2cEq00JXRZANg3bxVgDf9YoxiJ7HlXvTaZ0RFUl5gGEPCfAIx9qiZVqa8q2 X13FpyAKvoir9DyUMpU2O33eNwOyLqelHXHFdKwDo7yHUViibjEPamGcO9PivZmq Deu0pkTS6ttFYcGubOrehU1Pk7G1OGZnKK5sT1T6JzcNSa+m8Dbx/ugFkgSfY/p+ PvbDk5tSV0kutv0TEYJuYebIGKfld4KiBaOsOeMC0ZP1Ee/Jir/y9kgJwdjpsNcB LoMkQMeSrg0Vff02ljr/DMnOgJwtgdObYdjK7JRrZy/PTZsshEUSSFA2Q75yh4Ae dmZU0Avo8uq2zN1+BminWNldrYPdyfAYGub02ON0M7nCy9iwpF9m9eHmVU5YzcOq gqe9PlcZN6Es8rRdZoNb+uW3lt9JdFgG0Xit0TBegUf0aV+TOW4wwJ43PIeFRyzb wJAL -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5zd5FhA/FFQOLARqYyf8 nmFi2D5munyoYfX6StGAzNs4LdXe4S7NTyUrlqCQ/7KcDfPIcGs8MMIYX7pTecM7 +6t0a2jZSEfv9VlDJbRLKnToQqzYUfdshJQzGOHpVHn5fdlAd8UuTvvudpSwJhgw QGVbfzspWtDAStev34qJW4lfz6Ugu0GvPzF2Zk+W/fXUecUcxfvVJACr8ikzqDu3 AzQJ/dmGSr3d/iWRbmRbFPu8zd/vnJfA8i6TQx9yICXPuRStjHPdk1OkrSc2pe31 AFE9A5yr0OGMMS16qK/K8LGAoy54nmrKm2VHSDrovTlP2NFmKbetE9X4QTMg0bD6 BWTnR/smFtmlLWmjpA56OZqMH/6pbE5c+1Myq9512oqZpokf/2/pFkVedug9z9cs p7ObR57R+6KOsrSeDE0tqaZXOkY6RJBPTErJw1mXXmIPs9dK8eJPvpc7dipDcDtI i1AYQ7C2o/oEl9Hqc6tGv1YdECwQtlMcqCFAEw0ICctFmbWDEDW0xmZMd1mAFPpi U0MGNoFAeoarSrPerr/lfvsBHSsaPGNEQo4AjIrqlenbwIAB3jflpznvcMuoFgU5 /8FTk/juoC/IgS9FSR7uwmcXg7OQCzdMMDP5Galqa9N295VI66CjqJkdstrqn70H ouNxuvVZTPpAaLfrEjesY48CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 453199766914803286910286971723625152983004674501 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2021 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-04 17:07:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-04 17:07:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stuttgart' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 102851' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Neckarsulm' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kaufland Stiftung & Co. KG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'media.kaufland.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 943281803409788485069557213667791333574754732509131268886780884888037619945932864679198945344627671749615615827370143713945521152154755868695951286283580781769670118147176608168041705180346349656645110317375422515105516548083052771627217995333522106196976606019962592026179763872498380396349427227299563269208455137707051872837846689325573216300274786367850355550400945917821139405572027789053877881172618532322046739083060261548384257708227557098974980017063732261868924851219354066918340563660170180636389142691391572838806670123118474813713941495189962961088918804588411547456316199055707158004413572553048590994653320589619510987814311521027248905739714775574204735700063716564508838233521806950726302685857265370787376384467288616922640945548690787814796515342709694618699701221538477893143521298217281186591889498864575304903331431111777855237893452221820965625137083227117806701540658758711719305917543873576150523866995897713273824352543692921054986212696716646208821329957044900435545907619143953779389070762195361796708373646803413929959370047443437434524134269929255612999891685221458829552025337179475125085880624821134927818948723293723893946726615040194825006301958100454657297572946948722369022773545672013925820687247 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.kaufland.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.kaufland.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6291aaa9a3e485813d5d66c50952cb52ec364bbc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da34d48e1023f46a2d6cb41ff32811de5e01c4de . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes) 02580076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000017e260f18800000040300473045022100cc50cd85c2859a19a267a310d6252861d6de1189ce1f9d73d1f395c3ae8c9172022039cde7863b57a4033b8b137bbb5971da7abf33ffb0ec4f4083cfc31b0ecd119e0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017e260f1795000004030046304402200238cfc56287497dcfa3b4bcc56372832c40dbb70886b2f0890ea32cb8aa86c602206aa0d9c5b432afb28210afc817403d857be8eb04a77409180d400c97ced416bd0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000017e260f16de000004030048304602210090e159a306487e925d63e5d1633b62052a9d8380261786d7c19f52e43c57b130022100b4af799976c8f9607e09feee2b61f30a354e1bf4292407250f7bde1fca86ac31007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000017e260f159400000403004730450221008d8906de798e768c888648aedec7ed2ecbd41616e35521b08c0605d58aad8be8022036a9a5b714648fc72c2515c18c112a92c2d97ad16e2736823b752bb60a91da3d007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000017e260f182500000403004730450220500601671dfa3cdb08cfe4e016b761e5439043bceb2f29a190f2d9f00ff571dc022100938830b3cca6b97bd8c2ee9c244d74c91cfaa6942e044ad3e4ca5ab8a4a76835 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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