leserreisen.morgenpost.de
- FUNKE Corporate IT GmbH -
Issued by SwissSign Server Gold CA 2014 - G22
About this certificate
This digital certificate with serial number 3e:d3:37:9f:f7:08:84:33:78:bc:11:f7:0b:8e:23:af:80:bf:5b:f6 was issued on by SwissSign AG.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
FUNKE Corporate IT GmbH
Organization:
FUNKE Corporate IT GmbH
Organization unit: Netzwerk und Sicherheit
Organization unit: Netzwerk und Sicherheit
State / Province:
Nordrhein-Westfalen
Locality: Essen
Country: DE
Locality: Essen
Country: DE
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate has expire since
Certificate Details
Serial Number (hex): 3e:d3:37:9f:f7:08:84:33:78:bc:11:f7:0b:8e:23:af:80:bf:5b:f6Serial Number (int): 358667730636954133917912245516342180955878808566
Serial Number lenght: 158 bits, 20 octets
SubjectKeyId: 88:67:d5:c4:94:9d:6a:55:4f:18:f4:04:f4:57:5d:37:c4:54:8b:79
AuthorityKeyId: e7:f1:e7:fd:2e:53:ad:11:e5:81:1a:57:a4:73:8f:12:7d:98:c8:ae
Fingerprint (sha1): bd:29:81:15:d0:ba:51:22:e5:7b:23:46:5a:1c:d9:ed:e2:a0:3c:23
Fingerprint (sha256): 29:a0:ec:43:46:aa:95:87:76:a3:81:1b:45:ac:28:31:85:61:b3:0d:5e:ad:65:07:7b:e6:76:e6:3a:07:ad:17
Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
Revocation information
OCSP Server: http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AECRL Distribution Point: http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint
Check the revocation status for certificate leserreisen.morgenpost.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for leserreisen.morgenpost.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
leserreisen.morgenpost.de
leserreisen.abendblatt.de
leserreisen.abendblatt.de
Other certificates including the domain name morgenpost.de
(limited to 100 certificates)
bzv-medienhaus.de
test.augsburgerjobs.de
www.derwesten.de
www.weltsport.net
reader.morgenpost.de
el-shop.welt.de
augsburgerjobs.de
sso.funkemedien.de
wetter.morgenpost.de
origin-interaktiv.fnki.de
bzv-medienhaus.de
aboservice.morgenpost.de
*.funkemedien.de
dev3.aws.funkedigital.de
www.weltsport.net
www.weltsport.net
funkedigital.de
www.funkemedien.de
bzv-medienhaus.de
el-shop.welt.de
*.waz.de
www.funkemedien.de
dev2.aws.funkedigital.de
reader.morgenpost.de
www.weltsport.net
mail.funke-medien.de
*.fabo-live.funkemedien.de
www.derwesten.de
*.waz.de
tv.morgenpost.de
tv.morgenpost.de
aboservice.bildderfrau.de
www.weltfussball.de
www.augsburgerjobs.de
www.weltsport.net
www.weltsport.net
waz.de
125jahre.morgenpost.de
sso.funkemedien.de
bzv-medienhaus.de
bzv-medienhaus.de
www.weltsport.net
abo.morgenpost.de
emag.morgenpost.de
www.weltsport.net
www.weltsport.net
www.derwesten.de
bzv-medienhaus.de
themenwelten.morgenpost.de
el-shop.welt.de
spiele.morgenpost.de
leserreisen.morgenpost.de
www.derwesten.de
www.weltsport.net
www.weltsport.net
www.weltsport.net
www.weltsport.net
www.weltsport.net
data-ff178a0f37.morgenpost.de
www.derwesten.de
wetter.morgenpost.de
sso.funkemedien.de
www.weltsport.net
www.derwesten.de
augsburgerjobs.de
www.weltsport.net
reader.morgenpost.de
dev1.aws.funkedigital.de
bzv-medienhaus.de
mail.funke-medien.de
reader.morgenpost.de
www.derwesten.de
origin-interaktiv.fnki.de
www.weltsport.net
*.funkemedien.de
www.weltfussball.de
www.derwesten.de
www.weltsport.net
www.weltfussball.de
reader.morgenpost.de
www.derwesten.de
jobs.morgenpost.de
www.weltsport.net
www.weltsport.net
*.waz.de
leserreisen.morgenpost.de
sso.morgenpost.de
emag.morgenpost.de
125jahre.morgenpost.de
www.funkemedien.de
www.weltsport.net
*.fabo-live.funkemedien.de
sso.funkemedien.de
www.derwesten.de
*.funkemedien.de
*.waz.de
wetter.morgenpost.de
*.waz.de
*.apps.morgenpost.de
test.augsburgerjobs.de
www.derwesten.de
www.weltsport.net
reader.morgenpost.de
el-shop.welt.de
augsburgerjobs.de
sso.funkemedien.de
wetter.morgenpost.de
origin-interaktiv.fnki.de
bzv-medienhaus.de
aboservice.morgenpost.de
*.funkemedien.de
dev3.aws.funkedigital.de
www.weltsport.net
www.weltsport.net
funkedigital.de
www.funkemedien.de
bzv-medienhaus.de
el-shop.welt.de
*.waz.de
www.funkemedien.de
dev2.aws.funkedigital.de
reader.morgenpost.de
www.weltsport.net
mail.funke-medien.de
*.fabo-live.funkemedien.de
www.derwesten.de
*.waz.de
tv.morgenpost.de
tv.morgenpost.de
aboservice.bildderfrau.de
www.weltfussball.de
www.augsburgerjobs.de
www.weltsport.net
www.weltsport.net
waz.de
125jahre.morgenpost.de
sso.funkemedien.de
bzv-medienhaus.de
bzv-medienhaus.de
www.weltsport.net
abo.morgenpost.de
emag.morgenpost.de
www.weltsport.net
www.weltsport.net
www.derwesten.de
bzv-medienhaus.de
themenwelten.morgenpost.de
el-shop.welt.de
spiele.morgenpost.de
leserreisen.morgenpost.de
www.derwesten.de
www.weltsport.net
www.weltsport.net
www.weltsport.net
www.weltsport.net
www.weltsport.net
data-ff178a0f37.morgenpost.de
www.derwesten.de
wetter.morgenpost.de
sso.funkemedien.de
www.weltsport.net
www.derwesten.de
augsburgerjobs.de
www.weltsport.net
reader.morgenpost.de
dev1.aws.funkedigital.de
bzv-medienhaus.de
mail.funke-medien.de
reader.morgenpost.de
www.derwesten.de
origin-interaktiv.fnki.de
www.weltsport.net
*.funkemedien.de
www.weltfussball.de
www.derwesten.de
www.weltsport.net
www.weltfussball.de
reader.morgenpost.de
www.derwesten.de
jobs.morgenpost.de
www.weltsport.net
www.weltsport.net
*.waz.de
leserreisen.morgenpost.de
sso.morgenpost.de
emag.morgenpost.de
125jahre.morgenpost.de
www.funkemedien.de
www.weltsport.net
*.fabo-live.funkemedien.de
sso.funkemedien.de
www.derwesten.de
*.funkemedien.de
*.waz.de
wetter.morgenpost.de
*.waz.de
*.apps.morgenpost.de
Certificate
The complete raw certificate details for leserreisen.morgenpost.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIhDCCB2ygAwIBAgIUPtM3n/cIhDN4vBH3C44jr4C/W/YwDQYJKoZIhvcNAQEL BQAwUjELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEsMCoGA1UE AxMjU3dpc3NTaWduIFNlcnZlciBHb2xkIENBIDIwMTQgLSBHMjIwHhcNMTgwODI3 MTI1MDA4WhcNMjAwODI3MTI1MDA4WjCBozELMAkGA1UEBhMCREUxHDAaBgNVBAgT E05vcmRyaGVpbi1XZXN0ZmFsZW4xDjAMBgNVBAcTBUVzc2VuMSAwHgYDVQQKExdG VU5LRSBDb3Jwb3JhdGUgSVQgR21iSDEgMB4GA1UECxMXTmV0endlcmsgdW5kIFNp Y2hlcmhlaXQxIjAgBgNVBAMTGWxlc2VycmVpc2VuLm1vcmdlbnBvc3QuZGUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8XGRSMVaOVDYTmQY6fVLJ8Ezh prJ6/NK8NztRFJYNaEXFsU3V716ZaN3vSBEufAERQUglsx5VHss3trUhMf9NW+Nk 16NArwWongWb6w2/l6emDAHwzbuFbKKI0nRh2Nktaj74/HXJpM8deaTJUdqSh5L3 TwdsQ6b5soz0qY0QSr0NQAHdqLHWTVroTzmzMvZHOxoV+TM98/wSxNRNaUMqYKWU bm+AyqcquiLdtzOaAV+C6yTuVAXxHwcTHlfQuVoxka6XNL5hFiWzeEICmc/rQxAn Fjlfp2Pw9wUh3A7Fn5vpycBZY9RW/T+KA30NR5NLQncegkkMgfcXRD+tBJhrAgMB AAGjggT+MIIE+jA/BgNVHREEODA2ghlsZXNlcnJlaXNlbi5tb3JnZW5wb3N0LmRl ghlsZXNlcnJlaXNlbi5hYmVuZGJsYXR0LmRlMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFIhn1cSUnWpVTxj0 BPRXXTfEVIt5MB8GA1UdIwQYMBaAFOfx5/0uU60R5YEaV6RzjxJ9mMiuMIH/BgNV HR8EgfcwgfQwR6BFoEOGQWh0dHA6Ly9jcmwuc3dpc3NzaWduLm5ldC9FN0YxRTdG RDJFNTNBRDExRTU4MTFBNTdBNDczOEYxMjdEOThDOEFFMIGooIGloIGihoGfbGRh cDovL2RpcmVjdG9yeS5zd2lzc3NpZ24ubmV0L0NOPUU3RjFFN0ZEMkU1M0FEMTFF NTgxMUE1N0E0NzM4RjEyN0Q5OEM4QUUlMkNPPVN3aXNzU2lnbiUyQ0M9Q0g/Y2Vy dGlmaWNhdGVSZXZvY2F0aW9uTGlzdD9iYXNlP29iamVjdENsYXNzPWNSTERpc3Ry aWJ1dGlvblBvaW50MHMGA1UdIARsMGowVAYJYIV0AVkBAgEJMEcwRQYIKwYBBQUH AgEWOWh0dHA6Ly9yZXBvc2l0b3J5LnN3aXNzc2lnbi5jb20vU3dpc3NTaWduLUdv bGQtQ1AtQ1BTLnBkZjAIBgYEAI96AQcwCAYGZ4EMAQICMIHVBggrBgEFBQcBAQSB yDCBxTBkBggrBgEFBQcwAoZYaHR0cDovL3N3aXNzc2lnbi5uZXQvY2dpLWJpbi9h dXRob3JpdHkvZG93bmxvYWQvRTdGMUU3RkQyRTUzQUQxMUU1ODExQTU3QTQ3MzhG MTI3RDk4QzhBRTBdBggrBgEFBQcwAYZRaHR0cDovL2dvbGQtc2VydmVyLWcyLm9j c3Auc3dpc3NzaWduLm5ldC9FN0YxRTdGRDJFNTNBRDExRTU4MTFBNTdBNDczOEYx MjdEOThDOEFFMIIB9wYKKwYBBAHWeQIEAgSCAecEggHjAeEAdgBvU3asMfAxGdiZ AKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWV7bzLIAAAEAwBHMEUCIFQ4oksfchhv 9YVsj9gqCulJQD0p0LPH7pb7xEf5Z5U2AiEA4nI0OC813zcvoZuTF5F+ZQCDcIj1 prTSwKMmXiy9MI0AdwC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAA AWV7bzR6AAAEAwBIMEYCIQDXn+NPWDRF7k9EK9IK4rGtmM6wAQC3BetgxEi9atIW wwIhAJ57d1pkJ1a/qHIVz8++jRIRW/pjRGOAk1EnH8LnV/AkAHYA3esdK3oNT6Yg i4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFle28zcAAABAMARzBFAiAnbITOjIDv DkDUzFUm/sgAK8/IOvTymdbyb244Xon/LwIhAMqmihDKJtlKP0xxefmz31ajsNJ2 WNrqlXpQts3nCO77AHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csA AAFle28zHwAABAMARzBFAiBmC32cgck61W6GdbOgIJfL8HtKcEh9XNn++IXXmobo +wIhAN+GMD2P89omDTbdS3q8ZAyTgG0QRXHMpjMKdtzdOP1kMA0GCSqGSIb3DQEB CwUAA4IBAQCBnYTslkmFxptPIFTLN7bBMQcMxIVAhBwV2cUf4L1kTbbS/5SSUK+8 HZRsAJYIsEq3OKhaJchlBb8Bc0OXSiATpNw08PlmPGnbbNMUhHp/UJIkni2MDGCk IWVukVbN51esENCQZufEMaNTI4czsMXqTwKTqgfSUlV0ZuJJbS6VTVhVDTbbwU9u TDuN2xqbrPF8nFMyVKSVy3LCz2O/H375PztV5VXmL7N/0n3AHhgeFTAD31NyT2Ux Ew1M/zM9mLz36b8v/VKN6G5oMopUx3ZOsxhdJWAIp/O9yhRNczJ35ttPiIwnmI16 h/hehX4Y6RzF6XbDLc/9/A/1ZDXG5lrg -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFxkUjFWjlQ2E5kGOn1S yfBM4aayevzSvDc7URSWDWhFxbFN1e9emWjd70gRLnwBEUFIJbMeVR7LN7a1ITH/ TVvjZNejQK8FqJ4Fm+sNv5enpgwB8M27hWyiiNJ0YdjZLWo++Px1yaTPHXmkyVHa koeS908HbEOm+bKM9KmNEEq9DUAB3aix1k1a6E85szL2RzsaFfkzPfP8EsTUTWlD KmCllG5vgMqnKroi3bczmgFfgusk7lQF8R8HEx5X0LlaMZGulzS+YRYls3hCApnP 60MQJxY5X6dj8PcFIdwOxZ+b6cnAWWPUVv0/igN9DUeTS0J3HoJJDIH3F0Q/rQSY awIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 358667730636954133917912245516342180955878808566 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2014 - G22' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-27 12:50:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-27 12:50:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Essen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FUNKE Corporate IT GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Netzwerk und Sicherheit' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leserreisen.morgenpost.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23778361467282984281397445744705508460628925159263150573833777537582797352227058679254460760363222010351331633054049618290986019379582746664317058699286604921453460437907391791870790905158529965615428555465721598006553418267461918342827552030497289870343213716827258691989479097344769918851764406621860057832038397754767345623630259467028425406242712354660948088000245474548253161751548173732271544685767258184603074819346262816897022894269435069382041126984897594377606783415243135261057358161111437492407415671797188750686790541303544737775437482680187278026750632981570708902698001087217165750171961194703388711019 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leserreisen.morgenpost.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leserreisen.abendblatt.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8867d5c4949d6a554f18f404f4575d37c4548b79 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e7f1e7fd2e53ad11e5811a57a4738f127d98c8ae . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.9 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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