sartorius.de

- Sartorius AG -

Issued by SwissSign Server Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 42:d4:17:fa:8f:ac:d6:3f:a4:9b:11:d1:db:18:2f:f9:29:51:22:f9 was issued on by SwissSign AG.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sartorius AG

Organization: Sartorius AG
State / Province: Niedersachsen
Locality: Göttingen
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 42:d4:17:fa:8f:ac:d6:3f:a4:9b:11:d1:db:18:2f:f9:29:51:22:f9
Serial Number (int): 381523237700607085360565195699412233154496373497
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: de:13:ac:22:e6:da:7e:51:93:15:04:e3:6f:bc:42:6c:95:55:71:31
AuthorityKeyId: e7:f1:e7:fd:2e:53:ad:11:e5:81:1a:57:a4:73:8f:12:7d:98:c8:ae

Fingerprint (sha1): 0f:77:b0:64:c4:ae:c1:27:0a:9e:3c:9b:2d:d1:f3:60:62:4f:89:9f
Fingerprint (sha256): 3d:51:77:04:dc:88:7e:bc:6c:26:13:56:3f:ab:57:9c:ef:64:96:a1:1a:fd:4f:ca:25:66:b8:f4:34:fc:29:e9

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE

Revocation information

OCSP Server: http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate sartorius.de

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sartorius.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sartorius.de
www.sartorius.de
www.sartorius.be
www.sartorius.es
www.sartorius.ie
www.sartorius.it
www.sartorius.ru
www.sartorius.com.cn
www.sartorius.co.jp
www.sartorius.co.uk
www.sartorius-austria.at
www.sartorius-france.fr
www.sartorius-switzerland.ch
sartorius.be
sartorius.es
sartorius.ie
sartorius.it
sartorius.ru
sartorius.com.cn
sartorius.co.jp
sartorius.co.uk
sartorius-austria.at
sartorius-france.fr
sartorius-switzerland.ch

Other certificates including the domain name sartorius.de

(limited to 100 certificates)
www.sartoriusglobal.com
serviceshop.sartorius.de
www.sartoriusglobal.com
serviceshop.sartorius.de
ir-berichte.sartorius.de
sartorius.de
www.sartorius.com
serviceshop.sartorius.de
www.sartorius.com
serviceshop.sartorius.de
serviceshop.sartorius.de

www.sartorius.de
serviceshop.sartorius.de
sartorius.com
www.sartorius.com
www.sartoriusglobal.com
www.sartorius.com
sartorius.de

www.sartoriusglobal.com
www.sartorius.com
www.sartorius.com

serviceshop.sartorius.de
serviceshop.sartorius.de
www.sartorius.de
serviceshop.sartorius.de

Certificate

The complete raw certificate details for sartorius.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJ4DCCCMigAwIBAgIUQtQX+o+s1j+kmxHR2xgv+SlRIvkwDQYJKoZIhvcNAQEL
BQAwUjELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEsMCoGA1UE
AxMjU3dpc3NTaWduIFNlcnZlciBHb2xkIENBIDIwMTQgLSBHMjIwHhcNMTkwOTAz
MDYyNzM0WhcNMjAwOTAzMDYyNzM0WjBoMQswCQYDVQQGEwJERTEWMBQGA1UECBMN
TmllZGVyc2FjaHNlbjETMBEGA1UEBwwKR8O2dHRpbmdlbjEVMBMGA1UEChMMU2Fy
dG9yaXVzIEFHMRUwEwYDVQQDEwxzYXJ0b3JpdXMuZGUwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQC5ZgTglusHld3hkTtw7pU+MJ5l6rlS5GNiD7fU3mCR
PtPRmh6iWRnbwVo1zYRTB+5F4Gf1UGvKnT5Oy0DL/mswYEaJ0zeFiaNowiMvbI0X
hbHoHm7xMGjnqj0F1Ovqv/PfhWcWoWo3tozF7MdL44TsDtFo+gvvVlCrCCvvqR05
Lgm0g3jYISH5TKOZV6QywuFlBjHGweBBxReiIMyVlgdz5SW5/QZ69R62t86KT2KW
gOsNkkrvgp8Xke4wB4cSfvDd00C7eQZkyTFBPoWEHjPRHs66MJkhxZ9BudyZvtJz
hsP7kUDNfm4n9srklRgT5Hbt1w5UdQS+biNdkWm6MVYvAgMBAAGjggaWMIIGkjCC
AdcGA1UdEQSCAc4wggHKggxzYXJ0b3JpdXMuZGWCEHd3dy5zYXJ0b3JpdXMuZGWC
EHd3dy5zYXJ0b3JpdXMuYmWCEHd3dy5zYXJ0b3JpdXMuZXOCEHd3dy5zYXJ0b3Jp
dXMuaWWCEHd3dy5zYXJ0b3JpdXMuaXSCEHd3dy5zYXJ0b3JpdXMucnWCFHd3dy5z
YXJ0b3JpdXMuY29tLmNughN3d3cuc2FydG9yaXVzLmNvLmpwghN3d3cuc2FydG9y
aXVzLmNvLnVrghh3d3cuc2FydG9yaXVzLWF1c3RyaWEuYXSCF3d3dy5zYXJ0b3Jp
dXMtZnJhbmNlLmZyghx3d3cuc2FydG9yaXVzLXN3aXR6ZXJsYW5kLmNoggxzYXJ0
b3JpdXMuYmWCDHNhcnRvcml1cy5lc4IMc2FydG9yaXVzLmllggxzYXJ0b3JpdXMu
aXSCDHNhcnRvcml1cy5ydYIQc2FydG9yaXVzLmNvbS5jboIPc2FydG9yaXVzLmNv
Lmpwgg9zYXJ0b3JpdXMuY28udWuCFHNhcnRvcml1cy1hdXN0cmlhLmF0ghNzYXJ0
b3JpdXMtZnJhbmNlLmZyghhzYXJ0b3JpdXMtc3dpdHplcmxhbmQuY2gwDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4E
FgQU3hOsIubaflGTFQTjb7xCbJVVcTEwHwYDVR0jBBgwFoAU5/Hn/S5TrRHlgRpX
pHOPEn2YyK4wgf8GA1UdHwSB9zCB9DBHoEWgQ4ZBaHR0cDovL2NybC5zd2lzc3Np
Z24ubmV0L0U3RjFFN0ZEMkU1M0FEMTFFNTgxMUE1N0E0NzM4RjEyN0Q5OEM4QUUw
gaiggaWggaKGgZ9sZGFwOi8vZGlyZWN0b3J5LnN3aXNzc2lnbi5uZXQvQ049RTdG
MUU3RkQyRTUzQUQxMUU1ODExQTU3QTQ3MzhGMTI3RDk4QzhBRSUyQ089U3dpc3NT
aWduJTJDQz1DSD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0P2Jhc2U/b2JqZWN0
Q2xhc3M9Y1JMRGlzdHJpYnV0aW9uUG9pbnQwcwYDVR0gBGwwajBUBglghXQBWQEC
AQswRzBFBggrBgEFBQcCARY5aHR0cDovL3JlcG9zaXRvcnkuc3dpc3NzaWduLmNv
bS9Td2lzc1NpZ24tR29sZC1DUC1DUFMucGRmMAgGBgQAj3oBBzAIBgZngQwBAgIw
gdUGCCsGAQUFBwEBBIHIMIHFMGQGCCsGAQUFBzAChlhodHRwOi8vc3dpc3NzaWdu
Lm5ldC9jZ2ktYmluL2F1dGhvcml0eS9kb3dubG9hZC9FN0YxRTdGRDJFNTNBRDEx
RTU4MTFBNTdBNDczOEYxMjdEOThDOEFFMF0GCCsGAQUFBzABhlFodHRwOi8vZ29s
ZC1zZXJ2ZXItZzIub2NzcC5zd2lzc3NpZ24ubmV0L0U3RjFFN0ZEMkU1M0FEMTFF
NTgxMUE1N0E0NzM4RjEyN0Q5OEM4QUUwggH1BgorBgEEAdZ5AgQCBIIB5QSCAeEB
3wB1AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbPXOptYAAAQD
AEYwRAIgaKyxD2OUmN4ON0L6syUZGf+cB0SQJ3evZaOgR55oMqACIBGtjmOc79az
pRdjSsBo4GPqq/WvQvZMXV4ZikRKrKxHAHcAb1N2rDHwMRnYmQCkURX/dxUcEdkC
wQApBo2yCJo32RMAAAFs9c6m3QAABAMASDBGAiEAgyu340/tuNsjG4UzQs/ljnNi
vtlPFxk3VAm08KZaGWUCIQDtITFnYZcFONMbOGMh1hlmyxjIBe94tvDpVyqIQS4r
1wB2ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABbPXOp9gAAAQD
AEcwRQIgEVfDdnKG34bbp2SSIGInELT6XcLhT/Bns2dm2BFoU50CIQCUodDwvmX1
L+1r8jwBQsC35IwP4impaV4uGhHzlvoG8AB1AO5Lvbd1zmC64UJpH6vhnmajD35f
sHLYgwDEe4l6qP3LAAABbPXOpeAAAAQDAEYwRAIgPvtxWOs7/OsAJg72J6gQShFu
r+kNv09CUA/ATwn000gCIFWZaUSxSTFjPtOQpF9YQXj+Ux8vzdTyQKoSrGRhMLNH
MA0GCSqGSIb3DQEBCwUAA4IBAQDLbyIVhl2I3Aj+n6n6qWLcEODVxU+vC6C0IrTz
hhrJx+OJac7Ks6NKvcUzlQ+KvyabLewZ/BnJB1oohjrPE6tJBfusugcuSCMgYIPG
xgj7pnIFdQmgPvoq1YQghehCiCwALks6pa0JPN8RT/y2THcw75mcCf8rTrzXfoVE
U0WYmtu04U5e+Ejo3QCj+zhLluKjWrvwCTiyn2Pa6Iz8g42jGOOYeuiRGZW1dTHw
wHs2zH28czizF9rY6AdsGyq8ieEdXsHf2W5nYNVeWW3fFJZDVszgO5feLG4+L2x+
2dF66umUZqI2cy8z2qgY1+UnhXtWgrdHivdxTGyOxxR6b/36
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWYE4JbrB5Xd4ZE7cO6V
PjCeZeq5UuRjYg+31N5gkT7T0ZoeolkZ28FaNc2EUwfuReBn9VBryp0+TstAy/5r
MGBGidM3hYmjaMIjL2yNF4Wx6B5u8TBo56o9BdTr6r/z34VnFqFqN7aMxezHS+OE
7A7RaPoL71ZQqwgr76kdOS4JtIN42CEh+UyjmVekMsLhZQYxxsHgQcUXoiDMlZYH
c+Uluf0GevUetrfOik9iloDrDZJK74KfF5HuMAeHEn7w3dNAu3kGZMkxQT6FhB4z
0R7OujCZIcWfQbncmb7Sc4bD+5FAzX5uJ/bK5JUYE+R27dcOVHUEvm4jXZFpujFW
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381523237700607085360565195699412233154496373497
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-03 06:27:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-03 06:27:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Göttingen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sartorius AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sartorius.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23404393888229442482726386128126567331233492809263212766770299019920885687897130469364241780387647317983079934525587528797617066353246819492654261327039354704228083167867937363267760226917170741458414805291512280267347452832621003765937395764185151666586397352299542293574047028332574543712290932877727560152344729265376559867427774565289292178952085915831905217418606672389357545070653151702368424986937324358955968053326229949817514265409559128867796404089503097275045476501533243957449850500002593511794217173629451591431067116118071415929983142157443661407484958141219530193509049333071416356518847344967655970351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (462 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sartorius.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sartorius.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sartorius.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sartorius.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sartorius.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sartorius.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sartorius.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sartorius.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sartorius.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sartorius.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sartorius-austria.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sartorius-france.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sartorius-switzerland.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sartorius.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sartorius.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sartorius.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sartorius.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sartorius.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sartorius.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sartorius.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sartorius.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sartorius-austria.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sartorius-france.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sartorius-switzerland.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de13ac22e6da7e51931504e36fbc426c95557131
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e7f1e7fd2e53ad11e5811a57a4738f127d98c8ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00cb6f2215865d88dc08fe9fa9faa962dc10e0d5c54faf0ba0b422b4f3861ac9c7e38969cecab3a34abdc533950f8abf269b2dec19fc19c9075a28863acf13ab4905fbacba072e4823206083c6c608fba672057509a03efa2ad5842085e842882c002e4b3aa5ad093cdf114ffcb64c7730ef999c09ff2b4ebcd77e85445345989adbb4e14e5ef848e8dd00a3fb384b96e2a35abbf00938b29f63dae88cfc838da318e3987ae8911995b57531f0c07b36cc7dbc7338b317dad8e8076c1b2abc89e11d5ec1dfd96e6760d55e596ddf14964356cce03b97de2c6e3e2f6c7ed9d17aeae99466a236732f33daa818d7e527857b5682b7478af7714c6c8ec7147a6ffdfa