*.funkemedien.de

- FUNKE Corporate IT GmbH -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 5a:34:96:9f:80:5b:a4:47:6c:92:b3:45:b1:21:a5:d6:2b:9d:5f:3d was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FUNKE Corporate IT GmbH

Organization: FUNKE Corporate IT GmbH
State / Province: Nordrhein-Westfalen
Locality: Essen
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:34:96:9f:80:5b:a4:47:6c:92:b3:45:b1:21:a5:d6:2b:9d:5f:3d
Serial Number (int): 514981929242872268499127659865643444011693596477
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 8a:66:bd:53:f7:88:29:d1:7f:fb:54:d3:4a:50:bb:e6:a0:0d:5d:9c
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): 83:9d:de:c2:f6:27:b1:03:0b:19:b5:d7:45:27:9f:11:5a:64:e8:1b
Fingerprint (sha256): 2a:37:cc:b6:13:66:47:b0:a0:23:b1:d7:e1:2f:3a:4f:a3:e8:71:ad:54:68:b7:28:e5:cf:ec:7b:c3:5b:79:25

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate *.funkemedien.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.funkemedien.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.funkemedien.de
funkemedien.de

Other certificates including the domain name funkemedien.de

(limited to 100 certificates)
bzv-medienhaus.de
ws-reservix.funkemedien.de
casproxy.funkemedien.de
*.dabis.funkemedien.de
funkemedien.de
www.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
www.funkemedien.de
*.funkemedien.de
avmnac02.access.funkemedien.de
dcx.funkemedien.de
*.access.funkemedien.de
dcx.funkemedien.de
bzv-medienhaus.de
extern.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
apnac04v.funkemedien.de
www.funkemedien.de
bzv-medienhaus.de
hadznac01v.funkemedien.de
*.waz.de
marke.funkemedien.de
portal.dz-hagen.funkemedien.de
www.funkemedien.de
*.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
apnac03v.funkemedien.de
*.test.funkemedien.de
mail.funke-medien.de
*.fabo-live.funkemedien.de
*.funkemedien.de
events.funkemedien.de
rd-cb-ha.access.funkemedien.de
aboservice.bildderfrau.de
extern.funkemedien.de
connect.funkemedien.de
waz.de
login.funkemedien.de
*.funkemedien.de
hadznac01v.funkemedien.de
bwv.portal.funkemedien.de
con.funkemedien.de
funkemedien.de
sso.funkemedien.de
bzv-medienhaus.de
bzv-medienhaus.de
expe.funkemedien.de
rdweb.access.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
bzv-medienhaus.de
*.funkemedien.de
dcx.funkemedien.de
*.funkemedien.de
*.funkemedien.de
mail.funkemedien.de
expe.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
connect.funkemedien.de
sso.funkemedien.de
portal.dz-hagen.funkemedien.de
bzv-medienhaus.de
dcx.funkemedien.de
gate.funkemedien.de
email.funkemedien.de
datenschutz.funkemedien.de
mail.funke-medien.de
digas.axelspringer-syndication.de
*.funkemedien.de
*.funkemedien.de
portal.druckzentrum-essen.funkemedien.de
*.planer.funkemedien.de
blog.funkemedien.de
bwv.portal.funkemedien.de
apnac04v.funkemedien.de
*.funkemedien.de
bwv.portal.funkemedien.de
expe-cluster.funkemedien.de
volontariat.funkemedien.de
*.waz.de
funkemedien.de
mail.funkemedien.de
anzeigen.funkemedien.de
avmnac01.access.funkemedien.de
*.zpr.funkemedien.de
funkemedien.de
www.funkemedien.de
anzeigenbuchung-in-thueringen.de
*.fabo-live.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
*.funkemedien.de
*.waz.de
*.waz.de
dcx.funkemedien.de
aisvxc03.funkemedien.de

Certificate

The complete raw certificate details for *.funkemedien.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKITCCCAmgAwIBAgIUWjSWn4BbpEdskrNFsSGl1iudXz0wDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgT1YgSUNBIDIwMjEgLSAxMB4XDTIyMDUxNjA3
MDI1OFoXDTIzMDUxNjA3MDI1OFoweDELMAkGA1UEBhMCREUxHDAaBgNVBAgTE05v
cmRyaGVpbi1XZXN0ZmFsZW4xDjAMBgNVBAcTBUVzc2VuMSAwHgYDVQQKExdGVU5L
RSBDb3Jwb3JhdGUgSVQgR21iSDEZMBcGA1UEAwwQKi5mdW5rZW1lZGllbi5kZTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK5ItD3noR2eavlZdi1PYtiE
sQGmCoAPYU0Mj3jUa3ts5jS087yTECDHGsIK1Je78+4XnQ2/62rimeq7G9Aj7qP7
kIJyQhrxTXwpgEUM0i4Zkx0Q/kymvy1ntxQ5RL4ID44CIaZyCXOjJIDcLvxq0kKt
daL9IcEPvxlwXltQEyv+BQxG34F3HoMl3v/uvS7LwTj3loza4MJiwASEDP3JWv/1
AouHLAq8h8RmtMOC+9uSfEgHPX0SzAVpTqxLw69D/Zz4cWvKakS/jS/mIZ7/mW/C
itTGbRGd7CtZbzRDeE54qIE9zxEZ681eSBf/du2c7MuQkxIkg7zr6WR80wUIYHUC
AwEAAaOCBckwggXFMCsGA1UdEQQkMCKCECouZnVua2VtZWRpZW4uZGWCDmZ1bmtl
bWVkaWVuLmRlMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwHQYDVR0OBBYEFIpmvVP3iCnRf/tU00pQu+agDV2cMB8GA1UdIwQY
MBaAFKzQOsLCV1WRaRHMcGpZOIqMrJw9MIH/BgNVHR8EgfcwgfQwR6BFoEOGQWh0
dHA6Ly9jcmwuc3dpc3NzaWduLm5ldC9BQ0QwM0FDMkMyNTc1NTkxNjkxMUNDNzA2
QTU5Mzg4QThDQUM5QzNEMIGooIGloIGihoGfbGRhcDovL2RpcmVjdG9yeS5zd2lz
c3NpZ24ubmV0L0NOPUFDRDAzQUMyQzI1NzU1OTE2OTExQ0M3MDZBNTkzODhBOENB
QzlDM0QlMkNPPVN3aXNzU2lnbiUyQ0M9Q0g/Y2VydGlmaWNhdGVSZXZvY2F0aW9u
TGlzdD9iYXNlP29iamVjdENsYXNzPWNSTERpc3RyaWJ1dGlvblBvaW50MG8GA1Ud
IARoMGYwUAYIYIV0AVkCAQIwRDBCBggrBgEFBQcCARY2aHR0cHM6Ly9yZXBvc2l0
b3J5LnN3aXNzc2lnbi5jb20vU3dpc3NTaWduX0NQU19UTFMucGRmMAgGBgQAj3oB
BzAIBgZngQwBAgIwgcYGCCsGAQUFBwEBBIG5MIG2MGQGCCsGAQUFBzAChlhodHRw
Oi8vc3dpc3NzaWduLm5ldC9jZ2ktYmluL2F1dGhvcml0eS9kb3dubG9hZC9BQ0Qw
M0FDMkMyNTc1NTkxNjkxMUNDNzA2QTU5Mzg4QThDQUM5QzNEME4GCCsGAQUFBzAB
hkJodHRwOi8vb2NzcC5zd2lzc3NpZ24ubmV0L0FDRDAzQUMyQzI1NzU1OTE2OTEx
Q0M3MDZBNTkzODhBOENBQzlDM0QwggLpBgorBgEEAdZ5AgQCBIIC2QSCAtUC0wB3
AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABgMutYzMAAAQDAEgw
RgIhALwO6F4XB6ZfofYVOeCzTBA/+sNWmhmuHqa5fOqZ6wPyAiEAxu9LwvcFIEQo
YvU6iI/o5Z8ckoO514oJjhuovFI0SHUAdwBvU3asMfAxGdiZAKRRFf93FRwR2QLB
ACkGjbIImjfZEwAAAYDLrWI1AAAEAwBIMEYCIQDn6NYCb73dZdW0VDax7fyY8LCh
/QfxrtlFKcKgwPVOxgIhAILIIvBlZH/yJoonqyJ2BqOwciuX85qui1IE6fK2S7Lx
AHcAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGAy61iCwAABAMA
SDBGAiEA4SNbPjqWLMq8oQov/UChrK2A5xKchZr1rgnGDial5kQCIQDM7iyNORTQ
ecFI+WIs8DBvp5CQyXU1u2TD/CvBSg+GogB1AK33vvp8/xDIi509nB4+GGq0Zyld
z7EMJMqFhjTr3IKKAAABgMutYiIAAAQDAEYwRAIgQWCrSBczyAFNdH34QDg/Votd
BJi5gqmJFE/iEaNHtnQCIHGJn9wqLRSecMCT4IoZ7soEeRc8v10CAtNbLlCaiYb8
AHcAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2pZoAAAGAy61kGgAABAMA
SDBGAiEAwYOXWQFfrAJxbwpEIGMdpqMpTFtPpDF2ggmU3g0M7eoCIQDHRDHm7p6W
dTK+Rdvsogu44RT8zO6uMDR3fnvp5bbv5wB2AOg+0No+9QY1MudXKLyJa8kD08vR
EWvs62nhd31tBr1uAAABgMutYjEAAAQDAEcwRQIhAIPK9hTiNy3MRYKnuZD1lWex
nGmHlWhYk8H1N6x9ywf/AiBarL6pEjCImmVUtMr8OVOWAI0n4KUxvJCA9lG3tuXL
YjANBgkqhkiG9w0BAQsFAAOCAgEAdfEx0x6KFe5KfJUevHPgkHvpI9W2OpWfb3Yi
3xaVQghzMInNs+WBWCLgqghel0CA1aRdcPgRXl/4AOLZwE29G4oDP9VLlnCanpMW
pmmG3fu42I6hHICa5xtEcQI0q3CkoJ8PPujhAv/OWLZjjUKZkxQ9cIKdwRlldzSt
qUPQ0t63dDeJDRY6wqejHE69YmXHmj3jVJNx7RQgIywxiV1Fkf3nigjwobTmMsy3
om3qrWPT+vvWReGjCFqlGBxytq1iWRtxSbrQ+xwLBMA2fBvHzVGWjyb2Cf3RHVA0
/ZoKgu8PxoTZw+VT60JwU3lHsluCKR29Ctl3G1H8/YQ9TrLRJRv5avHTlE+xt0vQ
XT1P4loSjZdhvoD/LH/uYW0SCtlBD+ATqLDzrIqA+A8GcftyumiRe1NcOxYzhnoh
2Tt918/T0/0K4UEJi0bfUG1bX4utAkmlRKlIUIKeIPGObXyFIiKxkkmaYo5P4nDD
2ma9I4C7abwhZaHCkR0lZGDxfXTVmAUw6fFAk2rdwCxCGPDahDJ/ChDylUKRn8c4
Y+R17ViVfhoYcpr3/i+ek/hiNktY9OaPtgmE6xezYq8qoICkKVc3KPRUdr+7+UE8
HAYOQoPhwWwOFFL7uHgsVjvxPii81uB8pxL0Bds65l7+d4C+umWuPLzeoWz8io6r
wiYz4m4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArki0PeehHZ5q+Vl2LU9i
2ISxAaYKgA9hTQyPeNRre2zmNLTzvJMQIMcawgrUl7vz7hedDb/rauKZ6rsb0CPu
o/uQgnJCGvFNfCmARQzSLhmTHRD+TKa/LWe3FDlEvggPjgIhpnIJc6MkgNwu/GrS
Qq11ov0hwQ+/GXBeW1ATK/4FDEbfgXcegyXe/+69LsvBOPeWjNrgwmLABIQM/cla
//UCi4csCryHxGa0w4L725J8SAc9fRLMBWlOrEvDr0P9nPhxa8pqRL+NL+Yhnv+Z
b8KK1MZtEZ3sK1lvNEN4TniogT3PERnrzV5IF/927Zzsy5CTEiSDvOvpZHzTBQhg
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 514981929242872268499127659865643444011693596477
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-16 07:02:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-16 07:02:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FUNKE Corporate IT GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.funkemedien.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22001316777021812161450686533570462445506943813635011833072294766662829561547209376128740387162261621513130527043652127308290653741105173270233164541765347154476760797262172006013515176515121492885733353466247778346674579791334703507309324154978001527279206353748279297948495019682236752761264768111493149173281566067990347635613427307016811689202243413878137584812167378997875389730946039895975922229929350760405643150879001908082500508898711184186844977757385991265177942902220778397679977579911791276326601003522717295864732720359423773742223379602552360316869298488130167676700098121763068294688496980153411854453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funkemedien.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a66bd53f78829d17ffb54d34a50bbe6a00d5d9c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (729 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (725 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0075f131d31e8a15ee4a7c951ebc73e0907be923d5b63a959f6f7622df16954208733089cdb3e5815822e0aa085e974080d5a45d70f8115e5ff800e2d9c04dbd1b8a033fd54b96709a9e9316a66986ddfbb8d88ea11c809ae71b44710234ab70a4a09f0f3ee8e102ffce58b6638d429993143d70829dc119657734ada943d0d2deb77437890d163ac2a7a31c4ebd6265c79a3de3549371ed1420232c31895d4591fde78a08f0a1b4e632ccb7a26deaad63d3fafbd645e1a3085aa5181c72b6ad62591b7149bad0fb1c0b04c0367c1bc7cd51968f26f609fdd11d5034fd9a0a82ef0fc684d9c3e553eb4270537947b25b82291dbd0ad9771b51fcfd843d4eb2d1251bf96af1d3944fb1b74bd05d3d4fe25a128d9761be80ff2c7fee616d120ad9410fe013a8b0f3ac8a80f80f0671fb72ba68917b535c3b1633867a21d93b7dd7cfd3d3fd0ae141098b46df506d5b5f8bad0249a544a94850829e20f18e6d7c852222b192499a628e4fe270c3da66bd2380bb69bc2165a1c2911d256460f17d74d5980530e9f140936addc02c4218f0da84327f0a10f29542919fc73863e475ed58957e1a18729af7fe2f9e93f862364b58f4e68fb60984eb17b362af2aa080a429573728f45476bfbbf9413c1c060e4283e1c16c0e1452fbb8782c563bf13e28bcd6e07ca712f405db3ae65efe7780beba65ae3cbcdea16cfc8a8eabc22633e26e