*.funkemedien.de
- FUNKE Corporate IT GmbH -
Issued by SwissSign RSA TLS OV ICA 2021 - 1
About this certificate
This digital certificate with serial number 5a:34:96:9f:80:5b:a4:47:6c:92:b3:45:b1:21:a5:d6:2b:9d:5f:3d was issued on by SwissSign AG.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
FUNKE Corporate IT GmbH
Organization:
FUNKE Corporate IT GmbH
State / Province:
Nordrhein-Westfalen
Locality: Essen
Country: DE
Locality: Essen
Country: DE
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate has expire since
Certificate Details
Serial Number (hex): 5a:34:96:9f:80:5b:a4:47:6c:92:b3:45:b1:21:a5:d6:2b:9d:5f:3dSerial Number (int): 514981929242872268499127659865643444011693596477
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: 8a:66:bd:53:f7:88:29:d1:7f:fb:54:d3:4a:50:bb:e6:a0:0d:5d:9c
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d
Fingerprint (sha1): 83:9d:de:c2:f6:27:b1:03:0b:19:b5:d7:45:27:9f:11:5a:64:e8:1b
Fingerprint (sha256): 2a:37:cc:b6:13:66:47:b0:a0:23:b1:d7:e1:2f:3a:4f:a3:e8:71:ad:54:68:b7:28:e5:cf:ec:7b:c3:5b:79:25
Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D
Revocation information
OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3DCRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint
Check the revocation status for certificate *.funkemedien.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.funkemedien.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.funkemedien.de
funkemedien.de
funkemedien.de
Other certificates including the domain name funkemedien.de
(limited to 100 certificates)
bzv-medienhaus.de
ws-reservix.funkemedien.de
casproxy.funkemedien.de
*.dabis.funkemedien.de
funkemedien.de
www.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
www.funkemedien.de
*.funkemedien.de
avmnac02.access.funkemedien.de
dcx.funkemedien.de
*.access.funkemedien.de
dcx.funkemedien.de
bzv-medienhaus.de
extern.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
apnac04v.funkemedien.de
www.funkemedien.de
bzv-medienhaus.de
hadznac01v.funkemedien.de
*.waz.de
marke.funkemedien.de
portal.dz-hagen.funkemedien.de
www.funkemedien.de
*.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
apnac03v.funkemedien.de
*.test.funkemedien.de
mail.funke-medien.de
*.fabo-live.funkemedien.de
*.funkemedien.de
events.funkemedien.de
rd-cb-ha.access.funkemedien.de
aboservice.bildderfrau.de
extern.funkemedien.de
connect.funkemedien.de
waz.de
login.funkemedien.de
*.funkemedien.de
hadznac01v.funkemedien.de
bwv.portal.funkemedien.de
con.funkemedien.de
funkemedien.de
sso.funkemedien.de
bzv-medienhaus.de
bzv-medienhaus.de
expe.funkemedien.de
rdweb.access.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
bzv-medienhaus.de
*.funkemedien.de
dcx.funkemedien.de
*.funkemedien.de
*.funkemedien.de
mail.funkemedien.de
expe.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
connect.funkemedien.de
sso.funkemedien.de
portal.dz-hagen.funkemedien.de
bzv-medienhaus.de
dcx.funkemedien.de
gate.funkemedien.de
email.funkemedien.de
datenschutz.funkemedien.de
mail.funke-medien.de
digas.axelspringer-syndication.de
*.funkemedien.de
*.funkemedien.de
portal.druckzentrum-essen.funkemedien.de
*.planer.funkemedien.de
blog.funkemedien.de
bwv.portal.funkemedien.de
apnac04v.funkemedien.de
*.funkemedien.de
bwv.portal.funkemedien.de
expe-cluster.funkemedien.de
volontariat.funkemedien.de
*.waz.de
funkemedien.de
mail.funkemedien.de
anzeigen.funkemedien.de
avmnac01.access.funkemedien.de
*.zpr.funkemedien.de
funkemedien.de
www.funkemedien.de
anzeigenbuchung-in-thueringen.de
*.fabo-live.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
*.funkemedien.de
*.waz.de
*.waz.de
dcx.funkemedien.de
aisvxc03.funkemedien.de
ws-reservix.funkemedien.de
casproxy.funkemedien.de
*.dabis.funkemedien.de
funkemedien.de
www.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
www.funkemedien.de
*.funkemedien.de
avmnac02.access.funkemedien.de
dcx.funkemedien.de
*.access.funkemedien.de
dcx.funkemedien.de
bzv-medienhaus.de
extern.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
apnac04v.funkemedien.de
www.funkemedien.de
bzv-medienhaus.de
hadznac01v.funkemedien.de
*.waz.de
marke.funkemedien.de
portal.dz-hagen.funkemedien.de
www.funkemedien.de
*.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
apnac03v.funkemedien.de
*.test.funkemedien.de
mail.funke-medien.de
*.fabo-live.funkemedien.de
*.funkemedien.de
events.funkemedien.de
rd-cb-ha.access.funkemedien.de
aboservice.bildderfrau.de
extern.funkemedien.de
connect.funkemedien.de
waz.de
login.funkemedien.de
*.funkemedien.de
hadznac01v.funkemedien.de
bwv.portal.funkemedien.de
con.funkemedien.de
funkemedien.de
sso.funkemedien.de
bzv-medienhaus.de
bzv-medienhaus.de
expe.funkemedien.de
rdweb.access.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
bzv-medienhaus.de
*.funkemedien.de
dcx.funkemedien.de
*.funkemedien.de
*.funkemedien.de
mail.funkemedien.de
expe.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
connect.funkemedien.de
sso.funkemedien.de
portal.dz-hagen.funkemedien.de
bzv-medienhaus.de
dcx.funkemedien.de
gate.funkemedien.de
email.funkemedien.de
datenschutz.funkemedien.de
mail.funke-medien.de
digas.axelspringer-syndication.de
*.funkemedien.de
*.funkemedien.de
portal.druckzentrum-essen.funkemedien.de
*.planer.funkemedien.de
blog.funkemedien.de
bwv.portal.funkemedien.de
apnac04v.funkemedien.de
*.funkemedien.de
bwv.portal.funkemedien.de
expe-cluster.funkemedien.de
volontariat.funkemedien.de
*.waz.de
funkemedien.de
mail.funkemedien.de
anzeigen.funkemedien.de
avmnac01.access.funkemedien.de
*.zpr.funkemedien.de
funkemedien.de
www.funkemedien.de
anzeigenbuchung-in-thueringen.de
*.fabo-live.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
*.funkemedien.de
*.waz.de
*.waz.de
dcx.funkemedien.de
aisvxc03.funkemedien.de
Certificate
The complete raw certificate details for *.funkemedien.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKITCCCAmgAwIBAgIUWjSWn4BbpEdskrNFsSGl1iudXz0wDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgT1YgSUNBIDIwMjEgLSAxMB4XDTIyMDUxNjA3 MDI1OFoXDTIzMDUxNjA3MDI1OFoweDELMAkGA1UEBhMCREUxHDAaBgNVBAgTE05v cmRyaGVpbi1XZXN0ZmFsZW4xDjAMBgNVBAcTBUVzc2VuMSAwHgYDVQQKExdGVU5L RSBDb3Jwb3JhdGUgSVQgR21iSDEZMBcGA1UEAwwQKi5mdW5rZW1lZGllbi5kZTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK5ItD3noR2eavlZdi1PYtiE sQGmCoAPYU0Mj3jUa3ts5jS087yTECDHGsIK1Je78+4XnQ2/62rimeq7G9Aj7qP7 kIJyQhrxTXwpgEUM0i4Zkx0Q/kymvy1ntxQ5RL4ID44CIaZyCXOjJIDcLvxq0kKt daL9IcEPvxlwXltQEyv+BQxG34F3HoMl3v/uvS7LwTj3loza4MJiwASEDP3JWv/1 AouHLAq8h8RmtMOC+9uSfEgHPX0SzAVpTqxLw69D/Zz4cWvKakS/jS/mIZ7/mW/C itTGbRGd7CtZbzRDeE54qIE9zxEZ681eSBf/du2c7MuQkxIkg7zr6WR80wUIYHUC AwEAAaOCBckwggXFMCsGA1UdEQQkMCKCECouZnVua2VtZWRpZW4uZGWCDmZ1bmtl bWVkaWVuLmRlMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwHQYDVR0OBBYEFIpmvVP3iCnRf/tU00pQu+agDV2cMB8GA1UdIwQY MBaAFKzQOsLCV1WRaRHMcGpZOIqMrJw9MIH/BgNVHR8EgfcwgfQwR6BFoEOGQWh0 dHA6Ly9jcmwuc3dpc3NzaWduLm5ldC9BQ0QwM0FDMkMyNTc1NTkxNjkxMUNDNzA2 QTU5Mzg4QThDQUM5QzNEMIGooIGloIGihoGfbGRhcDovL2RpcmVjdG9yeS5zd2lz c3NpZ24ubmV0L0NOPUFDRDAzQUMyQzI1NzU1OTE2OTExQ0M3MDZBNTkzODhBOENB QzlDM0QlMkNPPVN3aXNzU2lnbiUyQ0M9Q0g/Y2VydGlmaWNhdGVSZXZvY2F0aW9u TGlzdD9iYXNlP29iamVjdENsYXNzPWNSTERpc3RyaWJ1dGlvblBvaW50MG8GA1Ud IARoMGYwUAYIYIV0AVkCAQIwRDBCBggrBgEFBQcCARY2aHR0cHM6Ly9yZXBvc2l0 b3J5LnN3aXNzc2lnbi5jb20vU3dpc3NTaWduX0NQU19UTFMucGRmMAgGBgQAj3oB BzAIBgZngQwBAgIwgcYGCCsGAQUFBwEBBIG5MIG2MGQGCCsGAQUFBzAChlhodHRw Oi8vc3dpc3NzaWduLm5ldC9jZ2ktYmluL2F1dGhvcml0eS9kb3dubG9hZC9BQ0Qw M0FDMkMyNTc1NTkxNjkxMUNDNzA2QTU5Mzg4QThDQUM5QzNEME4GCCsGAQUFBzAB hkJodHRwOi8vb2NzcC5zd2lzc3NpZ24ubmV0L0FDRDAzQUMyQzI1NzU1OTE2OTEx Q0M3MDZBNTkzODhBOENBQzlDM0QwggLpBgorBgEEAdZ5AgQCBIIC2QSCAtUC0wB3 AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABgMutYzMAAAQDAEgw RgIhALwO6F4XB6ZfofYVOeCzTBA/+sNWmhmuHqa5fOqZ6wPyAiEAxu9LwvcFIEQo YvU6iI/o5Z8ckoO514oJjhuovFI0SHUAdwBvU3asMfAxGdiZAKRRFf93FRwR2QLB ACkGjbIImjfZEwAAAYDLrWI1AAAEAwBIMEYCIQDn6NYCb73dZdW0VDax7fyY8LCh /QfxrtlFKcKgwPVOxgIhAILIIvBlZH/yJoonqyJ2BqOwciuX85qui1IE6fK2S7Lx AHcAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGAy61iCwAABAMA SDBGAiEA4SNbPjqWLMq8oQov/UChrK2A5xKchZr1rgnGDial5kQCIQDM7iyNORTQ ecFI+WIs8DBvp5CQyXU1u2TD/CvBSg+GogB1AK33vvp8/xDIi509nB4+GGq0Zyld z7EMJMqFhjTr3IKKAAABgMutYiIAAAQDAEYwRAIgQWCrSBczyAFNdH34QDg/Votd BJi5gqmJFE/iEaNHtnQCIHGJn9wqLRSecMCT4IoZ7soEeRc8v10CAtNbLlCaiYb8 AHcAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2pZoAAAGAy61kGgAABAMA SDBGAiEAwYOXWQFfrAJxbwpEIGMdpqMpTFtPpDF2ggmU3g0M7eoCIQDHRDHm7p6W dTK+Rdvsogu44RT8zO6uMDR3fnvp5bbv5wB2AOg+0No+9QY1MudXKLyJa8kD08vR EWvs62nhd31tBr1uAAABgMutYjEAAAQDAEcwRQIhAIPK9hTiNy3MRYKnuZD1lWex nGmHlWhYk8H1N6x9ywf/AiBarL6pEjCImmVUtMr8OVOWAI0n4KUxvJCA9lG3tuXL YjANBgkqhkiG9w0BAQsFAAOCAgEAdfEx0x6KFe5KfJUevHPgkHvpI9W2OpWfb3Yi 3xaVQghzMInNs+WBWCLgqghel0CA1aRdcPgRXl/4AOLZwE29G4oDP9VLlnCanpMW pmmG3fu42I6hHICa5xtEcQI0q3CkoJ8PPujhAv/OWLZjjUKZkxQ9cIKdwRlldzSt qUPQ0t63dDeJDRY6wqejHE69YmXHmj3jVJNx7RQgIywxiV1Fkf3nigjwobTmMsy3 om3qrWPT+vvWReGjCFqlGBxytq1iWRtxSbrQ+xwLBMA2fBvHzVGWjyb2Cf3RHVA0 /ZoKgu8PxoTZw+VT60JwU3lHsluCKR29Ctl3G1H8/YQ9TrLRJRv5avHTlE+xt0vQ XT1P4loSjZdhvoD/LH/uYW0SCtlBD+ATqLDzrIqA+A8GcftyumiRe1NcOxYzhnoh 2Tt918/T0/0K4UEJi0bfUG1bX4utAkmlRKlIUIKeIPGObXyFIiKxkkmaYo5P4nDD 2ma9I4C7abwhZaHCkR0lZGDxfXTVmAUw6fFAk2rdwCxCGPDahDJ/ChDylUKRn8c4 Y+R17ViVfhoYcpr3/i+ek/hiNktY9OaPtgmE6xezYq8qoICkKVc3KPRUdr+7+UE8 HAYOQoPhwWwOFFL7uHgsVjvxPii81uB8pxL0Bds65l7+d4C+umWuPLzeoWz8io6r wiYz4m4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArki0PeehHZ5q+Vl2LU9i 2ISxAaYKgA9hTQyPeNRre2zmNLTzvJMQIMcawgrUl7vz7hedDb/rauKZ6rsb0CPu o/uQgnJCGvFNfCmARQzSLhmTHRD+TKa/LWe3FDlEvggPjgIhpnIJc6MkgNwu/GrS Qq11ov0hwQ+/GXBeW1ATK/4FDEbfgXcegyXe/+69LsvBOPeWjNrgwmLABIQM/cla //UCi4csCryHxGa0w4L725J8SAc9fRLMBWlOrEvDr0P9nPhxa8pqRL+NL+Yhnv+Z b8KK1MZtEZ3sK1lvNEN4TniogT3PERnrzV5IF/927Zzsy5CTEiSDvOvpZHzTBQhg dQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 514981929242872268499127659865643444011693596477 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-16 07:02:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-16 07:02:58 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Essen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FUNKE Corporate IT GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.funkemedien.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22001316777021812161450686533570462445506943813635011833072294766662829561547209376128740387162261621513130527043652127308290653741105173270233164541765347154476760797262172006013515176515121492885733353466247778346674579791334703507309324154978001527279206353748279297948495019682236752761264768111493149173281566067990347635613427307016811689202243413878137584812167378997875389730946039895975922229929350760405643150879001908082500508898711184186844977757385991265177942902220778397679977579911791276326601003522717295864732720359423773742223379602552360316869298488130167676700098121763068294688496980153411854453 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funkemedien.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funkemedien.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8a66bd53f78829d17ffb54d34a50bbe6a00d5d9c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (729 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (725 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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