wirelessportal.lidl.com

- Lidl Stiftung & Co. KG -

Issued by SwissSign EV Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 16:2c:37:92:40:ec:69:c8:73:29:cf:ab:23:93:b2:ee:53:e4:77:c4 was issued on by SwissSign AG.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lidl Stiftung & Co. KG

Company registration number: HRB 107937
Organization: Lidl Stiftung & Co. KG
State / Province: Baden-Württemberg
Locality: Neckarsulm
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 16:2c:37:92:40:ec:69:c8:73:29:cf:ab:23:93:b2:ee:53:e4:77:c4
Serial Number (int): 126583870690109753545069011122033969074322831300
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 59:73:97:f3:a7:d8:e4:98:b5:89:27:06:3b:f0:c4:3a:6a:e5:c7:04
AuthorityKeyId: ee:fd:46:ca:f7:27:5e:91:bc:5a:b6:e7:87:cd:0a:fa:55:0a:26:42

Fingerprint (sha1): 07:64:f4:ef:f9:c3:68:8c:b5:48:17:4f:c9:43:3f:bd:ba:64:fb:d2
Fingerprint (sha256): 30:fb:b6:1a:82:bd:8a:4e:43:ce:ba:ad:22:95:a5:c0:8f:4f:b9:fc:4b:ff:22:6a:a5:03:cb:14:b6:68:db:24

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642

Revocation information

OCSP Server: http://gold-ev-g2.ocsp.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642
CRL Distribution Point: http://crl.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642
CRL Distribution Point: ldap://directory.swisssign.net/CN=EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate wirelessportal.lidl.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wirelessportal.lidl.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wirelessportal.lidl.com
m-nm21.asp.lidl.net
wirelessregistration.lidl.net
mywirelessdevices.lidl.net
sponsor.lidl.net

Other certificates including the domain name lidl.com

(limited to 100 certificates)
www.lidl.com
cloud.lidlhome.lidl.com
services.lidl
remote.ch.lidl.com
remote.fr.lidl.com
webforms.lidl.com
cloud.messages.accounts.lidl.com
mylidl-q-ext.lidl.com
mobile.limo.lidl.com
iim-qs.lidl.com
mypoints-dev.lidl.com
remote.ch.lidl.com
aktionen.lidl.com
corporate.lidl
weeklyads.lidl.com
realestate.lidl
se1-ucexe-p001.lidl.net
mdm.limo.lidl.com
stikeez.lidl.com
services.lidl
cms-qs.limo.lidl.com
q.www.lidl.com
as-qs.limo.lidl.com
lisa.mdm.lidl.com
profile-uat.lidl.com
image.e.outdoors.org
home-uat.lidlplus.com
www.marketingcloud.lidl.com
remote.dk.lidl.com
services.lidl
media.lidl.com
myworkplace.lidl.com
image.e.outdoors.org
iblftl.lidl.com
remote.nl.lidl.com
remote.nl.lidl.com
vacancies.lidl.com
mobile2.limo.lidl.com
akamai-san31.exacttarget.com
www.marketingcloud.lidl.com
sfs.lidl.com
careers.lidl
i.mobileapi.lidl.com
corporate.lidl
ras-limo.lidl.com
services.lidl
customer-service.lidl.com
deluxe.lidl.com
www.lidlkick.com
accounts.lidl.com
www.lidl.com
customer-service.lidl.com
omnichannel.lidl.com
application.lidl.com
q.www.lidl.com
click.messages.accounts.lidl.com
services.lidl
portal.as.lidl.com
ess.lidl.com
mss-t.lidl.lidl.com
myreceipts-uat.lidl.com
careers.lidl
q.mobileapi.lidl.com
omnichannel.lidl.com
careers.lidl
sfs.lidl.com
services.lidl
www.lidl.com
accounts.lidl.com
view.lidlhome.lidl.com
application.lidl.com
services.lidl
q.www.lidl.com
remote.pt.lidl.com
remote2.gb.lidl.com
remote.es.lidl.com
corporate.lidl
i.preview.lidl.com
remote.eu.lidl.com
deluxe.lidl.com
vacancies.lidl.com
aboutme-trn.lidl.com
remote2.gb.lidl.com
services.lidl
size.lidl.com
vip-test.lidl.com
i.mobileapi.lidl.com
i.preview.lidl.com
aboutme-trn.lidl.com
retail.lidl
myreceipts.lidl.com
aboutme-trn.lidl.com
services.lidl
portal.eu.lidl.com
realestate.lidl
wirelessportal.lidl.com
gdprportal-uat.lidl.com
omnichannel.lidl.com
mylidl.lidl.com
q.www.lidl.com

Certificate

The complete raw certificate details for wirelessportal.lidl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5BgfHDsAYhgGR/zMO2Z
q+TyToutWb5TV2tSHgopBW+wkUpt5QbpfUe8JaAgLUbmrM36ko4HrDcrLTLAsH0W
y7iX5PKgGGzfLbcVlcIV4c72Qp1r3en/fMpYcCAAfIXdiSsulw52bexDGevbjpV1
x/DN5LvJx/4YbhBmR2lyu/0fIqaAnqXCLBOYdbPODByYw0gU1Y/r5SpUxcQajQVA
tJEtKwxryMXGQa4dle9rMhWWSRyGxG31m6lblCobEmrGkfxmlX+OSaZgPEqtz9uc
l4z23SraoA9vxkHzixJV383LO650KuMcsFKV516CyuDi20oDj4PZIB2kH1iBCH+z
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 126583870690109753545069011122033969074322831300
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign EV Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-18 08:22:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-18 08:22:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 107937'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Neckarsulm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lidl Stiftung & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wirelessportal.lidl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20143085391882062186063829390612317804924350339819254778959142999217200065921055815416964357225689035438218430261426318498242614163454118220148482333387467235746978344703435126210614358688938165640937744331496866275960951795787267731175293011614033729267411080902125763857268717683047494719612312521167522137558167523824750819795974163974585594737111084130042294923107890854139807091663598652742805426712484329937311457078682092275585692571269689972286609564942544767119976000708909709930659802379824910614705223641084639728037442488785551932033837133381735872311891565781644686158681969962890889502506629587284243211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wirelessportal.lidl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-nm21.asp.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wirelessregistration.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywirelessdevices.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sponsor.lidl.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							597397f3a7d8e498b58927063bf0c43a6ae5c704
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eefd46caf7275e91bc5ab6e787cd0afa550a2642
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.1 (SwissSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (196 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-ev-g2.ocsp.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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