out-uc17.lidl.net

- Schwarz IT GmbH & Co. KG -

Issued by SwissSign Server Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 3f:7a:8e:f4:5c:4e:f1:b0:8d:9a:d0:63:fb:ee:d8:b6:7d:ee:dc:4e was issued on by SwissSign AG.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Schwarz IT GmbH & Co. KG

Organization: Schwarz IT GmbH & Co. KG
Organization unit: UC
State / Province: Baden-Württemberg
Locality: Neckarsulm
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:7a:8e:f4:5c:4e:f1:b0:8d:9a:d0:63:fb:ee:d8:b6:7d:ee:dc:4e
Serial Number (int): 362399562572321341529837932070580756665248701518
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 88:0f:26:00:05:e6:7b:df:0c:00:62:2d:70:09:b8:fc:f1:95:4e:cf
AuthorityKeyId: e7:f1:e7:fd:2e:53:ad:11:e5:81:1a:57:a4:73:8f:12:7d:98:c8:ae

Fingerprint (sha1): 24:d1:4b:db:89:30:13:c9:62:1d:e6:67:ee:f6:66:23:03:9d:bd:49
Fingerprint (sha256): 31:48:2a:20:9e:ef:4f:5f:fe:0b:db:05:d0:48:e9:a6:b6:a9:5a:2b:96:2b:bb:5e:37:27:49:d3:0f:27:2b:a3

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE

Revocation information

OCSP Server: http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate out-uc17.lidl.net

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for out-uc17.lidl.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

out-uc17.lidl.net
ext-mra-e.lidl.net
out-uc18.lidl.net
out-uc17.asp.lidl.net
out-uc18.asp.lidl.net
collab-edge.kaufland.net
collab-edge.sbg.de
collab-edge.lidl.net
collab-edge.lidl.de
collab-edge.siv-dl.de
collab-edge.lidl.us
collab-edge.mail.schwarz
collab-edge.lidl.com
collab-edge.kaufland.com
collab-edge.kaufland.de

Other certificates including the domain name lidl.net

(limited to 100 certificates)
cms-esaint.lidl.net
exp1.ucie.lidl.net
lsap29.asp.lidl.net
se1-ucexe-p001.lidl.net
abz-ssl-client-si.lidl.net
exp2.ucie.lidl.net
se1-ucexe-p001.lidl.net
qie-ssl-client-ie.lidl.net
hk-ucexe-p002.lidl.com.hk
lhr.hr.lidl.net
fizz.lidl.net
qdk-ssl-client-dk.lidl.net
l-tas154.asp.lidl.net
se1-ucexe-p001.lidl.net
ps4-ssl-client-eric.lidl.net
fizz.lidl.net
*.retail.lidl.net
qeu-ssl-client-eric.lidl.net
l-as525.asp.lidl.net
wirelessportal.lidl.com
hk-ucexe-p002.lidl.com.hk
se1-ucexe-p001.lidl.net
hgb-ssl-client-gb.lidl.net
heu-ssl-client-eric.lidl.net
exp2.ucie.lidl.net
fizz.lidl.net
se1-ucexe-p002.lidl.net
fizz.lidl.net
l-tas408.asp.lidl.net
fizz.lidl.net
*.sdl-career.lidl.net
heu-ssl-client-eric.lidl.net
qgb-ssl-client-gb.lidl.net
abz-ssl-client-eric.lidl.net
pf3-ssl-client-eric.lidl.net
exp1.ucie.lidl.net
se1-ucexe-p001.lidl.net
qps-ssl-client.lidl.net
se1-ucexe-p001.lidl.net
hsi-ssl-client-si.lidl.net
*.vdc.lidl.net
se1-ucexe-p001.lidl.net
out-uc17.lidl.net
abz-ssl-client-cssz.lidl.net
hcz-ssl-client-cssz.lidl.net
exp1.ucie.lidl.net
ebz-ssl-client-eric.lidl.net
heu-ssl-client-eric.lidl.net
qsi-ssl-client-si.lidl.net
wirelessportal.lidl.com
out-uc17.lidl.net
*.vdc.lidl.net
jss.lidl.net
fmmobile-qs.lidl.net
wirelessportal.lidl.com
pf3-ssl-client-eric.lidl.net
qie-ssl-client-ie.lidl.net
qps-ssl-client.lidl.net
out-uc18.lidl.net
ebz-ssl-client-eric.lidl.net
qeu-ssl-client-eric.lidl.net
heu-ssl-client-eric.lidl.net
ebz-ssl-client-eric.lidl.net
se1-ucexe-p001.lidl.net
wirelessportal.lidl.com
hps-ssl-client.lidl.net
abz-ssl-client-dk.lidl.net
qsi-ssl-client-si.lidl.net
hdk-ssl-client-dk.lidl.net
se1-ucexe-p001.lidl.net
out-uc18.lidl.net
qs4-ssl-client-eric.lidl.net
out-uc18.lidl.net
out-uc18.lidl.net
se1-ucexe-p001.lidl.net
fizz.lidl.net
abz-ssl-client-dk.lidl.net
ebz-ssl-client-dk.lidl.net
hdk-ssl-client-dk.lidl.net
qf3-ssl-client-eric.lidl.net
se1-ucexe-p002.lidl.net
abz-ssl-client-eric.lidl.net
abz-ssl-client-si.lidl.net
se1-ucexe-p001.lidl.net
es4-ssl-client-eric.lidl.net
qgb-ssl-client-gb.lidl.net
exp2.ucie.lidl.net
*.vdc.lidl.net
jss.lidl.net
abz-ssl-client-eric.lidl.net
ssl-client-eee.lidl.net
se1-ucexe-p002.lidl.net
ebz-ssl-client-si.lidl.net
*.esaint.lidl.net
ssl-client-eee.lidl.net
qde-ssl-client-eric.lidl.net
hk-ucexe-p002.lidl.com.hk
heu-ssl-client-eric.lidl.net
eumctx02.lidl.net
hps-ssl-client.lidl.net

Certificate

The complete raw certificate details for out-uc17.lidl.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 362399562572321341529837932070580756665248701518
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 13:57:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-27 13:57:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Neckarsulm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Schwarz IT GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'out-uc17.lidl.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 859059472805387729471967828890244891300107285994502985559621411516270424085869369371167990863200807957909794761533237841146739256936079592404219040179350716109884344555779394861199163160309740638693883364787972287901975112660354056840070727677145414236145463242120404790762562005158021196393285973034217372561158131592842675328303238794829636342727299921856776980322527802910984604638053942907010208837098861385616789684012091237261428161502514598435523637357817797717088843437627356990368299797228879688782678646720735626458377946698280886550309145317698661238938162221646152394080117375088377009037125154654607888167727334754446784786996652778674969806710945669529972191083347771323629195309278095077954093451367725570312556596116542906117682114424789854011481507377008999277494803494112592928417145579127940486023083740434773197123737818545327723297353820613766548783373466664060635922832888445553599506864014071801774503766441523663568554923908800966318727900642947597195016262628557140763018582526652001496188580454400933590059056874927762778592371836618229311849777337714618822682776788669380268815309206364463089476954993845469253237499989326578428871075787528197267108982782334446173193625436432004968363651987635893315365399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (340 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'out-uc17.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ext-mra-e.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'out-uc18.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'out-uc17.asp.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'out-uc18.asp.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.kaufland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.sbg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.siv-dl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.mail.schwarz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.kaufland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.kaufland.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							880f260005e67bdf0c00622d7009b8fcf1954ecf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e7f1e7fd2e53ad11e5811a57a4738f127d98c8ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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