grandeconcorsodeluxe.it
- Lidl Stiftung & Co. KG -
Issued by SwissSign RSA TLS EV ICA 2021 - 1
About this certificate
This digital certificate with serial number 15:69:26:1a:e2:f0:d9:30:b4:a3:4d:ab:cc:97:9b:c4:71:1d:e2:81 was issued on by SwissSign AG.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Lidl Stiftung & Co. KG
Company registration number:
HRA 102314
Organization: Lidl Stiftung & Co. KG
Organization: Lidl Stiftung & Co. KG
Address:
Stiftsbergstr. 1
Postal code: 74172
State / Province: BW
Locality: Neckarsulm
Country: DE
Postal code: 74172
State / Province: BW
Locality: Neckarsulm
Country: DE
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate will expire on
Certificate Details
Serial Number (hex): 15:69:26:1a:e2:f0:d9:30:b4:a3:4d:ab:cc:97:9b:c4:71:1d:e2:81Serial Number (int): 122233703849009375707709756080378612333609345665
Serial Number lenght: 157 bits, 20 octets
SubjectKeyId: bc:c6:5a:7b:93:1a:6c:85:d0:b2:4c:56:e5:7b:94:b8:06:fd:57:6d
AuthorityKeyId: da:34:d4:8e:10:23:f4:6a:2d:6c:b4:1f:f3:28:11:de:5e:01:c4:de
Fingerprint (sha1): 7f:6c:97:86:38:9f:18:74:8f:d2:f7:c1:32:eb:31:17:07:f4:d0:45
Fingerprint (sha256): 2e:32:3f:3e:0c:cb:bf:3e:60:a1:e2:53:71:8d:a7:4c:f9:1d:b7:b7:30:7b:1b:8f:2a:ed:49:33:30:9f:35:11
Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
Revocation information
OCSP Server: http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DECRL Distribution Point: http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint
Check the revocation status for certificate grandeconcorsodeluxe.it
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for grandeconcorsodeluxe.it
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
grandeconcorsodeluxe.it
www.grandeconcorsodeluxe.it
www.grandeconcorsodeluxe.it
Other certificates including the domain name grandeconcorsodeluxe.it
(limited to 100 certificates)
Certificate
The complete raw certificate details for grandeconcorsodeluxe.it in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKajCCCFKgAwIBAgIUFWkmGuLw2TC0o02rzJebxHEd4oEwDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRVYgSUNBIDIwMjEgLSAxMB4XDTIyMTIyMjE1 NDkxMloXDTIzMTIyMjE1NDkxMlowggEXMRMwEQYLKwYBBAGCNzwCAQMTAkRFMRMw EQYLKwYBBAGCNzwCAQITAkJXMRowGAYLKwYBBAGCNzwCAQETCVN0dXR0Z2FydDET MBEGA1UEBRMKSFJBIDEwMjMxNDEdMBsGA1UEDxMUUHJpdmF0ZSBPcmdhbml6YXRp b24xCzAJBgNVBAYTAkRFMQswCQYDVQQIEwJCVzETMBEGA1UEBxMKTmVja2Fyc3Vs bTEOMAwGA1UEERMFNzQxNzIxGTAXBgNVBAkTEFN0aWZ0c2JlcmdzdHIuIDExHzAd BgNVBAoMFkxpZGwgU3RpZnR1bmcgJiBDby4gS0cxIDAeBgNVBAMTF2dyYW5kZWNv bmNvcnNvZGVsdXhlLml0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA npIR+FBogrPJMMcVET0Yrh4f/sZFOtm1fH/mEHbashVNj9Hepv8ZCqhpBxzIiORP H+y6f6jFyWu+7Jj12J78Co9eqRHQjvaJ8Xyb95v3klURlpC4ZnccfnRVPT3Ar/NS 5zPTRAakIlGJVUyJj7IE3bIdshaGooi0ZrUVsqPOuGOFOo8QeTnoSFQ0BzCX3AHR 0ODgSmkvBS/I0qiGbHnU32LLszESd+43K8isPU6NNbw4KSjInonCJS9o2BYbf2Ou dh13qQPgH1Uixe8jaGvVjhdtYTDUA4xNfmz3OuXCd0ew304fY+nKrz3dpSKT9xcf ce53G9zx+pDzxT5j1NFRceq3wJ1K7wdlTbsghpTVSTGCTcmcs0buwDYI+Y5+YG6X ezn1FIV7DbgJoLGP+ripBlF6EEjERGW7WP6apuxCNbmGK/+4etW4jlD2Sxuvok0D hSYmqlFeptybAnoS9SOT1gPFiousiwmdLt19IZSNCHA2iDr2kiyWqWOqs70P2Wco 2fzLHifS/6JiJKYmCsiBwCo1AeA81DC2B5j97xwazQVF9YMEzZY1VTgPu4cfw17l 1pnNjbNM8qmDqaeiNvzPbAwBV7C4rL/JSdMj/x5pEb9MxbRgnRTnRiIc7Naz1vvh 7hYeI42Tvl6CUIVZL2DyM3WhQ889JYf22Kcgv6CQ+SMCAwEAAaOCBHEwggRtMD8G A1UdEQQ4MDaCF2dyYW5kZWNvbmNvcnNvZGVsdXhlLml0ght3d3cuZ3JhbmRlY29u Y29yc29kZWx1eGUuaXQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQUvMZae5MabIXQskxW5XuUuAb9V20wHwYD VR0jBBgwFoAU2jTUjhAj9GotbLQf8ygR3l4BxN4wgf8GA1UdHwSB9zCB9DBHoEWg Q4ZBaHR0cDovL2NybC5zd2lzc3NpZ24ubmV0L0RBMzRENDhFMTAyM0Y0NkEyRDZD QjQxRkYzMjgxMURFNUUwMUM0REUwgaiggaWggaKGgZ9sZGFwOi8vZGlyZWN0b3J5 LnN3aXNzc2lnbi5uZXQvQ049REEzNEQ0OEUxMDIzRjQ2QTJENkNCNDFGRjMyODEx REU1RTAxQzRERSUyQ089U3dpc3NTaWduJTJDQz1DSD9jZXJ0aWZpY2F0ZVJldm9j YXRpb25MaXN0P2Jhc2U/b2JqZWN0Q2xhc3M9Y1JMRGlzdHJpYnV0aW9uUG9pbnQw bgYDVR0gBGcwZTBQBghghXQBWQIBAzBEMEIGCCsGAQUFBwIBFjZodHRwczovL3Jl cG9zaXRvcnkuc3dpc3NzaWduLmNvbS9Td2lzc1NpZ25fQ1BTX1RMUy5wZGYwCAYG BACPegEEMAcGBWeBDAEBMIHGBggrBgEFBQcBAQSBuTCBtjBkBggrBgEFBQcwAoZY aHR0cDovL3N3aXNzc2lnbi5uZXQvY2dpLWJpbi9hdXRob3JpdHkvZG93bmxvYWQv REEzNEQ0OEUxMDIzRjQ2QTJENkNCNDFGRjMyODExREU1RTAxQzRERTBOBggrBgEF BQcwAYZCaHR0cDovL29jc3Auc3dpc3NzaWduLm5ldC9EQTM0RDQ4RTEwMjNGNDZB MkQ2Q0I0MUZGMzI4MTFERTVFMDFDNERFMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFq AWgAdgBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAYU6hjtfAAAE AwBHMEUCICjhtP4Et6EH6dgls9UBEE7NGrOHhrywVJQ7UoINE2bbAiEA+zWRFp4r CUXmm5KNWQ99zJ0vAhWiwTomVtdSn6bjXisAdgB6MoxU2LcttiDqOOBSHumEFnAy E4VNO9IrwTpXo1LrUgAAAYU6hjl/AAAEAwBHMEUCIQC44fp5J4lbWpmoKfH6h2/1 nvE/Yu/y1rWdyh506rb7IAIgfrGk/QMXz/dfNoiFMofzlycIrxFbV0W3myjkYLt7 jjgAdgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYU6hjrvAAAE AwBHMEUCIFBDMokVkcFHqF59oTpSTrPDSSGL9HLzDMlRTYxuM7/4AiEAq5mQfL0H rgE6vU8narfFD6UjpMJInCvUeV7nrPMnDAEwDQYJKoZIhvcNAQELBQADggIBAOCG u29ettEiHogR0HXIIbxCgXc2LhvxlBFLu6aKyHzZjeWFyZkJgC9Z3W3PM3Ng2iNk NA3EDPl5OcO377V1+UG43WphF6hMEx7FisNEYF9Jkg5/74WcjuEatgTKcldswIzA wvb4qLn5cCM5kE33H8ilnOJsCnc3wkeKkYSOL6DTEfcFB7MihgAjgn8rqIOH6lzJ S8FQvHLLnC51GQdFbxmzmABTNDPryGnOXR8AffF6o1ipoR+WOKnJtFzK76XfDBW3 t5XYRCkflejvmn0JntAevwHMiI9o3yc3mFYF4PTVXlhwLkyk5/II1vNXKga3sfU+ E/gFRznSS0+1scgnNv5JyOWs1hARKImwNoSgaqveQvEqdDgh+blXpKLkcaGjKiq6 l0155j7HKOCqUA8oWJyKzwsx1MFGhPWZLEzgst5xuFMQ9TRDTLTHr4lb5v6YSuFP p6t57bGsFpcWk6rKU3Qk13WsfykfFQh6S5bfw8jpMP+O/bGDJt4IGDxVzs8mczhO 8KaVcD1pl57GYa3lzSzvDlVIfmeSmrkEV1Y/tyjpIw/6ts1fRSNmyk0Yb5AVFla7 wy0DzBzizrszuGcyCMFL5+jYeeK5RSRwmUWdl5c9YxKjDOBdXLG1RkJGkR4Fehwc TkpfAvS2Hl+uh9karCJWXPr8RVHt+HjMIydCXdjw -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnpIR+FBogrPJMMcVET0Y rh4f/sZFOtm1fH/mEHbashVNj9Hepv8ZCqhpBxzIiORPH+y6f6jFyWu+7Jj12J78 Co9eqRHQjvaJ8Xyb95v3klURlpC4ZnccfnRVPT3Ar/NS5zPTRAakIlGJVUyJj7IE 3bIdshaGooi0ZrUVsqPOuGOFOo8QeTnoSFQ0BzCX3AHR0ODgSmkvBS/I0qiGbHnU 32LLszESd+43K8isPU6NNbw4KSjInonCJS9o2BYbf2Oudh13qQPgH1Uixe8jaGvV jhdtYTDUA4xNfmz3OuXCd0ew304fY+nKrz3dpSKT9xcfce53G9zx+pDzxT5j1NFR ceq3wJ1K7wdlTbsghpTVSTGCTcmcs0buwDYI+Y5+YG6Xezn1FIV7DbgJoLGP+rip BlF6EEjERGW7WP6apuxCNbmGK/+4etW4jlD2Sxuvok0DhSYmqlFeptybAnoS9SOT 1gPFiousiwmdLt19IZSNCHA2iDr2kiyWqWOqs70P2Wco2fzLHifS/6JiJKYmCsiB wCo1AeA81DC2B5j97xwazQVF9YMEzZY1VTgPu4cfw17l1pnNjbNM8qmDqaeiNvzP bAwBV7C4rL/JSdMj/x5pEb9MxbRgnRTnRiIc7Naz1vvh7hYeI42Tvl6CUIVZL2Dy M3WhQ889JYf22Kcgv6CQ+SMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 122233703849009375707709756080378612333609345665 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2021 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-22 15:49:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 15:49:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BW' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stuttgart' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 102314' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BW' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Neckarsulm' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '74172' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stiftsbergstr. 1' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lidl Stiftung & Co. KG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grandeconcorsodeluxe.it' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 646911553393483089327884166501726720240408190107273575052541875076565486715068663865251322844841475508287599433475122581589729450800473123877137169817481779270064896321612217588858652362863721052348245094394897098069660164370236191712230017774749659151551039144128978066432283640426953789277143389622943087446235514301176722221082959739654287103789231066008081858835005632222780885744905038649981360809317779945552665693571217113015590740568946620134918385416701241558924276419799603302693968854291368427924651892129841353697791275555041272589964839532984463778299683552958085500725736275232342359289055459798870327191011693261276319343521825562253143200098166859081337238999917593181888554569479902097598522083026241736188569143449462618024308398483843406703950565762324673226311748680124216437751244532258349865178341861034841420420307619305922239642362988011623146423149883362734923603675616433068536388774616411429620739618895565529344156377794411427361963598190620252616862563211826289031176203879410568501202376552499797793818896940568333147585169132461321309916284635853102139758403287694160971429172706802021412860466424126544362879147484770399646309295257315410249863730256541134152146471115269403105941411828416672458406179 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandeconcorsodeluxe.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandeconcorsodeluxe.it' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bcc65a7b931a6c85d0b24c56e57b94b806fd576d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da34d48e1023f46a2d6cb41ff32811de5e01c4de . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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