import.app-qs.kaufland.net

- Kaufland Stiftung & Co. KG -

Issued by SwissSign RSA TLS EV ICA 2021 - 1

About this certificate

This digital certificate with serial number 21:f8:90:06:16:74:17:9e:ce:92:3d:7f:93:90:1e:8c:95:cd:30:52 was issued on by SwissSign AG.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Kaufland Stiftung & Co. KG

Company registration number: HRA 102851
Organization: Kaufland Stiftung & Co. KG
Address: Rötelstr. 35
Postal code: 74172
State / Province: BW
Locality: Neckarsulm
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 21:f8:90:06:16:74:17:9e:ce:92:3d:7f:93:90:1e:8c:95:cd:30:52
Serial Number (int): 193939826487136475260201956782290349152705261650
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: dc:c5:8a:ff:a2:02:b0:41:8f:fa:bf:2f:44:c0:9c:73:50:20:d0:32
AuthorityKeyId: da:34:d4:8e:10:23:f4:6a:2d:6c:b4:1f:f3:28:11:de:5e:01:c4:de

Fingerprint (sha1): c6:d4:9c:33:a5:87:56:fe:43:09:d6:ef:13:43:b6:23:1a:2c:55:7c
Fingerprint (sha256): 52:36:55:91:e4:52:0a:58:ce:a2:96:ad:1c:bc:45:a0:f1:ea:ed:b9:34:10:73:a7:02:86:ec:62:10:46:10:34

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE

Revocation information

OCSP Server: http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate import.app-qs.kaufland.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for import.app-qs.kaufland.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

import.app-qs.kaufland.net
import.app-at.kaufland.net
import.app-et.kaufland.net

Other certificates including the domain name kaufland.net

(limited to 100 certificates)
mp.kaufland.net
collaboration.kaufland.de
courtamew.dev
portal-dev.eu.kaufland.net
portal.eu.kaufland.net
killer.logic-wiz.com
iawmseg.kaufland.net
auth-qs.kaufland.net
import.app.kaufland.net
concur.kaufland.net
auth.kaufland.net
iawmseg.kaufland.net
mss.kaufland.net
auth-qs.kaufland.net
collaboration.kaufland.de
api.kaufland.net
mss.kaufland.net
auth-e2.kaufland.net
hc-q.kaufland.net
hc.kaufland.net
int.360live.app
mss-t.kaufland.net
app-qs.kaufland.net
hc-q.kaufland.net
app-qs.kaufland.net
app-qs.kaufland.net
lyncdiscover.uc.kaufland.net
remote.eu.kaufland.com
www.medici.vc
hc-q.kaufland.net
mss-handheld-q.kaufland.net
remote.eu.kaufland.com
concur.kaufland.net
codesnap.co
out-uc17.lidl.net
baustandards-qs.kaufland.net
app.kaufland.net
auth-qs.kaufland.net
auth.kaufland.net
api-qs.kaufland.net
ipwmseg.kaufland.net
out-uc17.lidl.net
remote.eu.kaufland.com
iawmseg.kaufland.net
hc.kaufland.net
hc-a.kaufland.net
ipwmseg.kaufland.net
mp.kaufland.net
softnative.dev
iawmseg.kaufland.net
out-uc18.lidl.net
baustandards.kaufland.net
hc-q.kaufland.net
app-qs.kaufland.net
auth-e2.kaufland.net
iawmseg.kaufland.net
collaboration.kaufland.de
mss-handheld-a.kaufland.net
ad.adaptivemedia.tech
collaboration-q.kaufland.de
out-uc18.lidl.net
auth.kaufland.net
hc.kaufland.net
app-qs.kaufland.net
auth.kaufland.net
portal.eu.kaufland.net
out-uc18.lidl.net
out-uc18.lidl.net
www.elclamor.pe
kaufland.net
app.kaufland.net
import.app-qs.kaufland.net
collaboration.kaufland.de
www.jsonice.com
pm4ngos.ir
pay.kaufland.net
ipwmseg.kaufland.net
app.kaufland.net
auth.kaufland.net
portal.eu.kaufland.net
concur.kaufland.net
oc.kaufland.net
portal.eu.kaufland.net
api-qs.kaufland.net
baustandards-at.kaufland.net
ipwmseg.kaufland.net
baustandards-qs.kaufland.net
suxxusglobal.com
www.rominieloimoveis.com
import.app-qs.kaufland.net
*.cf.kaufland.net
app.kaufland.net
ci.cf.kaufland.net
api.kaufland.net
collaboration.kaufland.de
mirror.yglabs.app
collaboration.kaufland.de
gid.idwall.co
design-hub.kaufland.net
out-uc18.lidl.net

Certificate

The complete raw certificate details for import.app-qs.kaufland.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJHzCCBwegAwIBAgIUIfiQBhZ0F57Okj1/k5AejJXNMFIwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgRVYgSUNBIDIwMjEgLSAxMB4XDTIyMTAyNjA5
MDgzM1oXDTIzMTAyNjA5MDgzM1owggEbMRMwEQYLKwYBBAGCNzwCAQMTAkRFMRMw
EQYLKwYBBAGCNzwCAQITAkJXMRowGAYLKwYBBAGCNzwCAQETCVN0dXR0Z2FydDET
MBEGA1UEBRMKSFJBIDEwMjg1MTEdMBsGA1UEDxMUUHJpdmF0ZSBPcmdhbml6YXRp
b24xCzAJBgNVBAYTAkRFMQswCQYDVQQIEwJCVzETMBEGA1UEBxMKTmVja2Fyc3Vs
bTEOMAwGA1UEERMFNzQxNzIxFjAUBgNVBAkMDVLDtnRlbHN0ci4gMzUxIzAhBgNV
BAoMGkthdWZsYW5kIFN0aWZ0dW5nICYgQ28uIEtHMSMwIQYDVQQDExppbXBvcnQu
YXBwLXFzLmthdWZsYW5kLm5ldDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
ggIBAKm7thxh4/vxJ4fEXHtRWAHGv/oWo+mztNl2rB1jFt6YT1rsrcnrlWiwVZYu
cjtBX5SVJ/U2gI7iCWDgXO5am8bE1XTJyK92CmXHWrI0Oz9B8vpA21ErGSYz7uES
DkqZ2dyVS6NtJUBNE4lx+tLkuNfiFJwOVvVJdWbrkMKI0w/1SlVLshQopiDZSuQQ
qOQZzmobW1H0xHY3Oewl7GRSc7cBhYzQUhtrrSYS403qBCzZPyBIXwifThmXMJvA
1df7kjUtv3tVwyx88Ux2mpBII88++eYEXsvHHEsWcGR7S/VrdaOWFeXpCkjv/MgY
ltYr8pSS2I8s/g6FMdhyMkf8OIe4MCf9yPogP3PxezDK5bWLhECGw353yk9igwGs
vFJEo+w9i4xAjd0jC5/Lurr6xnTmULNBsprwfuTqnXyP08Sh07UFGleTOapxcOCc
eD5xCl2HiuD74J0Zm3AodFpoZ+de+ynfioow2ctjDjCvBYQx2Sb+9OWXleO+i16t
FyOOafI7zvReg2Rneqb776jrefKOBBa+bixMxwj4yKYH7NRDEkrsphlJsRx6pwHO
tfYOrequqwA1TMLtNDlY+o8Pe99IOaMTkqexVVl2M4HACjT7MqYekDXK2evWhyeZ
MoLMZ/5OdvwB4iliEZmLi2MOnrzQfrQT+Z60fxW2ilgH+lLVAgMBAAGjggMiMIID
HjBdBgNVHREEVjBUghppbXBvcnQuYXBwLXFzLmthdWZsYW5kLm5ldIIaaW1wb3J0
LmFwcC1hdC5rYXVmbGFuZC5uZXSCGmltcG9ydC5hcHAtZXQua2F1ZmxhbmQubmV0
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
HQYDVR0OBBYEFNzFiv+iArBBj/q/L0TAnHNQINAyMB8GA1UdIwQYMBaAFNo01I4Q
I/RqLWy0H/MoEd5eAcTeMIH/BgNVHR8EgfcwgfQwR6BFoEOGQWh0dHA6Ly9jcmwu
c3dpc3NzaWduLm5ldC9EQTM0RDQ4RTEwMjNGNDZBMkQ2Q0I0MUZGMzI4MTFERTVF
MDFDNERFMIGooIGloIGihoGfbGRhcDovL2RpcmVjdG9yeS5zd2lzc3NpZ24ubmV0
L0NOPURBMzRENDhFMTAyM0Y0NkEyRDZDQjQxRkYzMjgxMURFNUUwMUM0REUlMkNP
PVN3aXNzU2lnbiUyQ0M9Q0g/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdD9iYXNl
P29iamVjdENsYXNzPWNSTERpc3RyaWJ1dGlvblBvaW50MG4GA1UdIARnMGUwUAYI
YIV0AVkCAQMwRDBCBggrBgEFBQcCARY2aHR0cHM6Ly9yZXBvc2l0b3J5LnN3aXNz
c2lnbi5jb20vU3dpc3NTaWduX0NQU19UTFMucGRmMAgGBgQAj3oBBDAHBgVngQwB
ATCBxgYIKwYBBQUHAQEEgbkwgbYwZAYIKwYBBQUHMAKGWGh0dHA6Ly9zd2lzc3Np
Z24ubmV0L2NnaS1iaW4vYXV0aG9yaXR5L2Rvd25sb2FkL0RBMzRENDhFMTAyM0Y0
NkEyRDZDQjQxRkYzMjgxMURFNUUwMUM0REUwTgYIKwYBBQUHMAGGQmh0dHA6Ly9v
Y3NwLnN3aXNzc2lnbi5uZXQvREEzNEQ0OEUxMDIzRjQ2QTJENkNCNDFGRjMyODEx
REU1RTAxQzRERTATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOC
AgEAKqfwO0izVtJb/Ku5fhQ4T+2XSD9icWuys8WJms47l2WnoiAvipPVkdpH8A1Q
E370i2sZnZ9vVw8xYjOZBMF/dXoR0tg5/uRBZWjvSss6OE2wc38zRyRbLrOj2Glu
s9RGKZWc6/3icY6QrsRqmiBU2t9w/x4xVT8jAFgzT3IaKmq0NfkQwZtKKggPeNXw
FZx73c7ooJi3m7mbT21RKh/9/U9xEaVpe+b2H3Dt8BQF1awCL1KwRAvr6vRGNsIU
jfn4pZgVf+yABRi+DjSfg+vHSBKFl4vuH9ra2QElLfVTBIfySrCB5iM0BnoJrAVe
izSlUjjIsvNAJRdbhM2kEOXCT0g7VS8uiBCL9DK6Uo/cSMXsecAU67GPyMSpHwmj
vaUPHsrpJJHJKfp+QUg0VFQvg4fgL6ClESckCzcaLTcOjihEd5uS/hZsFr4mYpH+
XjSOF858rGn7jMspBmUFZiVL0h4lAgKTnBCvNsXh1CclMy7Qi1FZnNqmtcradh3d
+t5Bsq0HQLLMoV4+qTiyHE9yP0Mx1qLOxTe3zfV6riBhzhX0nl61RE67KJmYf+X0
ZgJV+xhiygJ6jgqmEQFn/4faZbxMlgG2lIQMJBKxWXLLgdeLc2888bJ73eRGSHL2
ZHX3F5KdFhlNzGhRc+siwdfnzIaaPgI4yKxUSorY6HZsANI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 193939826487136475260201956782290349152705261650
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-26 09:08:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 09:08:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stuttgart'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 102851'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Neckarsulm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '74172'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rötelstr. 35'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kaufland Stiftung & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'import.app-qs.kaufland.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 692451236477784250606771276105664746149910395672824747254950666095144335388065628311038969810605143615232326277865265804103659021185863587582313002399775768503308750039923430354322780536811234930237153316999541270514894347472074477831851459122254865933885403953566796889441336595363958125621445236395091352865225540277547486634708265443122532455043379225356191578907826100754544410376884068369140932842014035500086943285666419878178866906184380082627650057591188285755464152416260396797219379484116916043897849344292796315344714479834595240979362458727306456527904556501318265630341679688789304499326960771738319559628631296013321879341057959328853554277142415763859401030920203538555711662992741311222413435058654172936710383174545310701437054863710042327426018230789655646142960003566891852194472756402689469591192655469105848870644329017715706408640374348680864683525989957535179428000698616358245214867827400056511072849503730266864384648183511960518045601110761887412977914341491909741879722376676473452397818414309486775960667887013712812297204583796337427183720576715629808927650580603681837929729851612335519743022344109178291515791839098282113039502247377285988585745002749213356047958286789456809778557501599744713249411797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.app-qs.kaufland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.app-at.kaufland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.app-et.kaufland.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dcc58affa202b0418ffabf2f44c09c735020d032
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da34d48e1023f46a2d6cb41ff32811de5e01c4de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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