app-qs.kaufland.net

- Kaufland Stiftung & Co. KG -

Issued by SwissSign RSA TLS EV ICA 2021 - 1

About this certificate

This digital certificate with serial number 19:61:6e:fd:1f:d8:41:ec:7d:a7:b4:4a:b6:ee:1b:00:5d:49:d8:37 was issued on by SwissSign AG.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Kaufland Stiftung & Co. KG

Company registration number: HRA 102851
Organization: Kaufland Stiftung & Co. KG
Address: Rötelstr. 35
Postal code: 74172
State / Province: BW
Locality: Neckarsulm
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 19:61:6e:fd:1f:d8:41:ec:7d:a7:b4:4a:b6:ee:1b:00:5d:49:d8:37
Serial Number (int): 144897610040073724259254820276610455759212894263
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: ae:a7:64:86:ad:7a:85:44:d3:14:6c:98:bc:27:14:06:c2:5d:4e:f2
AuthorityKeyId: da:34:d4:8e:10:23:f4:6a:2d:6c:b4:1f:f3:28:11:de:5e:01:c4:de

Fingerprint (sha1): 3e:84:1a:fd:a0:b6:2c:de:71:de:00:8f:af:fb:4f:68:37:05:8b:04
Fingerprint (sha256): 4a:3d:52:81:23:29:f8:a9:63:07:44:64:d5:74:47:84:69:33:ba:14:2b:4c:11:4b:c1:7c:41:94:2b:2e:82:b8

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE

Revocation information

OCSP Server: http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate app-qs.kaufland.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app-qs.kaufland.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app-qs.kaufland.net
app-at.kaufland.net
app-et.kaufland.net

Other certificates including the domain name kaufland.net

(limited to 100 certificates)
mp.kaufland.net
collaboration.kaufland.de
courtamew.dev
portal-dev.eu.kaufland.net
portal.eu.kaufland.net
killer.logic-wiz.com
iawmseg.kaufland.net
auth-qs.kaufland.net
import.app.kaufland.net
concur.kaufland.net
auth.kaufland.net
iawmseg.kaufland.net
mss.kaufland.net
auth-qs.kaufland.net
collaboration.kaufland.de
api.kaufland.net
mss.kaufland.net
auth-e2.kaufland.net
hc-q.kaufland.net
hc.kaufland.net
int.360live.app
mss-t.kaufland.net
app-qs.kaufland.net
hc-q.kaufland.net
app-qs.kaufland.net
app-qs.kaufland.net
lyncdiscover.uc.kaufland.net
remote.eu.kaufland.com
www.medici.vc
hc-q.kaufland.net
mss-handheld-q.kaufland.net
remote.eu.kaufland.com
concur.kaufland.net
codesnap.co
out-uc17.lidl.net
baustandards-qs.kaufland.net
app.kaufland.net
auth-qs.kaufland.net
auth.kaufland.net
api-qs.kaufland.net
ipwmseg.kaufland.net
out-uc17.lidl.net
remote.eu.kaufland.com
iawmseg.kaufland.net
hc.kaufland.net
hc-a.kaufland.net
ipwmseg.kaufland.net
mp.kaufland.net
softnative.dev
iawmseg.kaufland.net
out-uc18.lidl.net
baustandards.kaufland.net
hc-q.kaufland.net
app-qs.kaufland.net
auth-e2.kaufland.net
iawmseg.kaufland.net
collaboration.kaufland.de
mss-handheld-a.kaufland.net
ad.adaptivemedia.tech
collaboration-q.kaufland.de
out-uc18.lidl.net
auth.kaufland.net
hc.kaufland.net
app-qs.kaufland.net
auth.kaufland.net
portal.eu.kaufland.net
out-uc18.lidl.net
out-uc18.lidl.net
www.elclamor.pe
kaufland.net
app.kaufland.net
import.app-qs.kaufland.net
collaboration.kaufland.de
www.jsonice.com
pm4ngos.ir
pay.kaufland.net
ipwmseg.kaufland.net
app.kaufland.net
auth.kaufland.net
portal.eu.kaufland.net
concur.kaufland.net
oc.kaufland.net
portal.eu.kaufland.net
api-qs.kaufland.net
baustandards-at.kaufland.net
ipwmseg.kaufland.net
baustandards-qs.kaufland.net
suxxusglobal.com
www.rominieloimoveis.com
import.app-qs.kaufland.net
*.cf.kaufland.net
app.kaufland.net
ci.cf.kaufland.net
api.kaufland.net
collaboration.kaufland.de
mirror.yglabs.app
collaboration.kaufland.de
gid.idwall.co
design-hub.kaufland.net
out-uc18.lidl.net

Certificate

The complete raw certificate details for app-qs.kaufland.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 144897610040073724259254820276610455759212894263
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-22 10:17:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 10:17:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stuttgart'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 102851'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Neckarsulm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '74172'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rötelstr. 35'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kaufland Stiftung & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app-qs.kaufland.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 797787140391624642298799921934429544782729873800517994499639103270936448246853267192193414382709823001054984311018759723134743137290125513749931982862373929931587775539705064696159096389530765077206656148476580307978624779414194124988668862920800980693474532174433623759444653242207071082224226271229418332968868066608306174963536288398868365041004110270112571516836490833873872351431233515491220342334353636786406309295301300555921599594589129116319226283380053292996158217966492428448514369464321594673580172691528378033910006692817001406356153913988984853262338579792161372182983955913175979780678803153409551874175592083694088777672817617858703624037539690382002433691487477332340940406868671647881520372564210848672469369644012101828015135582487003133940818867717121933143136727485590856746306433190682574416651021265963454359620628574595732751118011536328943588035004625071486556154285249237050708246724967544664678210958022123661372350990459463610327731770411300856492485438798856108341751077049640362177758127929496133648813875490282960203680710185326093204782821017430984311370423098464933814691131292872494637083654810457182919605223513048316295021205395931078405327000236561127502279054368190597157623163317571937487414347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-qs.kaufland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-at.kaufland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-et.kaufland.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aea76486ad7a8544d3146c98bc271406c25d4ef2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da34d48e1023f46a2d6cb41ff32811de5e01c4de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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