iawmseg.kaufland.net

- Kaufland Stiftung & Co. KG -

Issued by SwissSign RSA TLS EV ICA 2021 - 1

About this certificate

This digital certificate with serial number 32:fd:33:e6:a8:49:58:fa:31:ab:db:66:b1:e9:67:5a:85:6a:a5:d7 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Kaufland Stiftung & Co. KG

Company registration number: HRA 102851
Organization: Kaufland Stiftung & Co. KG
Address: Rötelstr. 35
Postal code: 74172
State / Province: BW
Locality: Neckarsulm
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 32:fd:33:e6:a8:49:58:fa:31:ab:db:66:b1:e9:67:5a:85:6a:a5:d7
Serial Number (int): 291096148291638281091888491874764964693086479831
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 9f:17:91:40:fa:13:0b:ae:64:e9:3d:e2:54:5c:56:bb:db:54:06:03
AuthorityKeyId: da:34:d4:8e:10:23:f4:6a:2d:6c:b4:1f:f3:28:11:de:5e:01:c4:de

Fingerprint (sha1): c6:30:08:e3:97:b7:2e:a8:d4:a2:6b:44:f8:cb:59:d9:2c:a4:7a:4f
Fingerprint (sha256): 33:c5:b1:69:84:9d:39:37:0e:46:e6:66:29:bc:32:a9:fc:b4:b4:60:bc:e6:d8:ff:c4:79:72:84:48:ba:a8:f2

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE

Revocation information

OCSP Server: http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate iawmseg.kaufland.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for iawmseg.kaufland.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

iawmseg.kaufland.net
iqwmseg.kaufland.net

Other certificates including the domain name kaufland.net

(limited to 100 certificates)
mp.kaufland.net
collaboration.kaufland.de
courtamew.dev
portal-dev.eu.kaufland.net
portal.eu.kaufland.net
killer.logic-wiz.com
iawmseg.kaufland.net
auth-qs.kaufland.net
import.app.kaufland.net
concur.kaufland.net
auth.kaufland.net
iawmseg.kaufland.net
mss.kaufland.net
auth-qs.kaufland.net
collaboration.kaufland.de
api.kaufland.net
mss.kaufland.net
auth-e2.kaufland.net
hc-q.kaufland.net
hc.kaufland.net
int.360live.app
mss-t.kaufland.net
app-qs.kaufland.net
hc-q.kaufland.net
app-qs.kaufland.net
app-qs.kaufland.net
lyncdiscover.uc.kaufland.net
remote.eu.kaufland.com
www.medici.vc
hc-q.kaufland.net
mss-handheld-q.kaufland.net
remote.eu.kaufland.com
concur.kaufland.net
codesnap.co
out-uc17.lidl.net
baustandards-qs.kaufland.net
app.kaufland.net
auth-qs.kaufland.net
auth.kaufland.net
api-qs.kaufland.net
ipwmseg.kaufland.net
out-uc17.lidl.net
remote.eu.kaufland.com
iawmseg.kaufland.net
hc.kaufland.net
hc-a.kaufland.net
ipwmseg.kaufland.net
mp.kaufland.net
softnative.dev
iawmseg.kaufland.net
out-uc18.lidl.net
baustandards.kaufland.net
hc-q.kaufland.net
app-qs.kaufland.net
auth-e2.kaufland.net
iawmseg.kaufland.net
collaboration.kaufland.de
mss-handheld-a.kaufland.net
ad.adaptivemedia.tech
collaboration-q.kaufland.de
out-uc18.lidl.net
auth.kaufland.net
hc.kaufland.net
app-qs.kaufland.net
auth.kaufland.net
portal.eu.kaufland.net
out-uc18.lidl.net
out-uc18.lidl.net
www.elclamor.pe
kaufland.net
app.kaufland.net
import.app-qs.kaufland.net
collaboration.kaufland.de
www.jsonice.com
pm4ngos.ir
pay.kaufland.net
ipwmseg.kaufland.net
app.kaufland.net
auth.kaufland.net
portal.eu.kaufland.net
concur.kaufland.net
oc.kaufland.net
portal.eu.kaufland.net
api-qs.kaufland.net
baustandards-at.kaufland.net
ipwmseg.kaufland.net
baustandards-qs.kaufland.net
suxxusglobal.com
www.rominieloimoveis.com
import.app-qs.kaufland.net
*.cf.kaufland.net
app.kaufland.net
ci.cf.kaufland.net
api.kaufland.net
collaboration.kaufland.de
mirror.yglabs.app
collaboration.kaufland.de
gid.idwall.co
design-hub.kaufland.net
out-uc18.lidl.net

Certificate

The complete raw certificate details for iawmseg.kaufland.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWdAp58ZoQfVO8Wa/qqT
EE+V3/y3P+hYtuPZ8/G+mTe13QDwfI6NkE3lTrcO9Pp1P3JXPv3h+19RAtM2k5qx
BahDBNld6XHp49P8o7EbMm9KG0EO4gciAtaWg0pVmi37d5ShPL6SIneh8N+21L7K
DmqQkfgT/HyOvWxO4pIrlUgEtUDa2k2yW9CGV+4g7Lo+bv/zTB4/x/KOYAG3fex+
tTD/tm9sYmk1pjKhfKoW5+Na5QxLxOtD/prU0DVV/bx7ko7sA9oTDt6dvf0/snP2
YSfFQPy86jRjb77B4m4YVxtmAEYLngXtEj4Wr3kHZJULwHMBcaePpokl9i5RDTI1
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291096148291638281091888491874764964693086479831
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-20 09:18:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 09:18:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stuttgart'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 102851'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Neckarsulm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '74172'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rötelstr. 35'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kaufland Stiftung & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iawmseg.kaufland.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18860423173800426712325134291697242403244137803112317140643265873748748501117161552712329404687788588247327162077095157110440725711317798169709207373785443867930467433900595254478888503074730547182821966809783994931923040904362770400848496856851523589314793184625372175078459228404551771391761984978061437054601474225154125324649993878428143537235489581496907052518109677224480086223459374910555786494721992568391643760260747850400736416883755113711729384777478376826114180707580592012317196302210371909100178404019404959264757971112882436544187739737517645045569935418842130425211595077585989008683961990460499703041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iawmseg.kaufland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iqwmseg.kaufland.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f179140fa130bae64e93de2545c56bbdb540603
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da34d48e1023f46a2d6cb41ff32811de5e01c4de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (729 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (725 bytes)
							02d30076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001835a30a4650000040300473045022010feff0a22a03280dee0a4a43a1315b8be6d59ea35bc09a86bf77fbc8624ebc7022100b1ef3e4ba2fb1f0b296523985a9e2db630732bcebbf1c83fb1832cee5cfbf6e30076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001835a30a34800000403004730450220798ee16e8394fd7d21544d912e177c33a27441e842501aaf73cd5833b23f5ce9022100886841b13f4bc238d32287bc2d2bab50e8c9b31dc3e8ef0acb9abe77fc1150930077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001835a30a36b0000040300483046022100bc9ace0527376ff654db8b4dd7df7728db93b54bfb145dbcfa8f5ee819d80fc8022100d018b2d88f816ace7edc59fe4b10e287d946243bf07fb1592abb69f3c06bee91007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001835a30a37e0000040300483046022100c044bc69c9121c1bfb57acc2e5f01f94efa76190babd6fcd0c6360f71c0672a7022100a62f2ee1022fd707018e5ff00af1b4f862b476212aa45b3be8130a264be008cb007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001835a30a4e300000403004730450221009db77cd4fca718c74407be7237a05e4fa2b38bd222a55704d3fde4dba92c867402204db104e07a221c805f762e207f8d20ad4b27c5a3f6e06dcd153dbd4029c46dfa007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001835a30a56000000403004830460221008c36de3aad2bbd4e4cb7c9c6221aea095d42bf32ca98acd75fd8b3263a76f0df0221009dc509f635d05f310de49da56ebdb77b8c9d90eec95b7cd7e06c67edfa2f022d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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