app.kaufland.net

- Schwarz IT GmbH & Co. KG -

Issued by SwissSign EV Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 52:d6:57:a5:13:e9:ef:e5:d1:e4:09:e2:8e:95:cb:95:80:68:38:2e was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Schwarz IT GmbH & Co. KG

Company registration number: HRA 730995
Organization: Schwarz IT GmbH & Co. KG
State / Province: Baden-Württemberg
Locality: Neckarsulm
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 52:d6:57:a5:13:e9:ef:e5:d1:e4:09:e2:8e:95:cb:95:80:68:38:2e
Serial Number (int): 472917237621977002227765723184302776052196325422
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 0f:7f:03:95:b1:80:2c:8e:23:1e:d9:22:52:53:53:42:ae:bd:71:55
AuthorityKeyId: ee:fd:46:ca:f7:27:5e:91:bc:5a:b6:e7:87:cd:0a:fa:55:0a:26:42

Fingerprint (sha1): 16:47:12:fc:c3:43:af:3e:68:48:5b:10:a6:eb:09:4f:d6:0d:6d:18
Fingerprint (sha256): 60:fe:a8:7a:09:d6:76:09:a1:29:cd:7b:fd:27:c9:6d:9c:a3:9b:72:43:ce:1f:e3:02:a1:46:55:12:67:93:03

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642

Revocation information

OCSP Server: http://gold-ev-g2.ocsp.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642
CRL Distribution Point: http://crl.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642
CRL Distribution Point: ldap://directory.swisssign.net/CN=EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate app.kaufland.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.kaufland.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.kaufland.net
www.app.kaufland.net

Other certificates including the domain name kaufland.net

(limited to 100 certificates)
mp.kaufland.net
collaboration.kaufland.de
courtamew.dev
portal-dev.eu.kaufland.net
portal.eu.kaufland.net
killer.logic-wiz.com
iawmseg.kaufland.net
auth-qs.kaufland.net
import.app.kaufland.net
concur.kaufland.net
auth.kaufland.net
iawmseg.kaufland.net
mss.kaufland.net
auth-qs.kaufland.net
collaboration.kaufland.de
api.kaufland.net
mss.kaufland.net
auth-e2.kaufland.net
hc-q.kaufland.net
hc.kaufland.net
int.360live.app
mss-t.kaufland.net
app-qs.kaufland.net
hc-q.kaufland.net
app-qs.kaufland.net
app-qs.kaufland.net
lyncdiscover.uc.kaufland.net
remote.eu.kaufland.com
www.medici.vc
hc-q.kaufland.net
mss-handheld-q.kaufland.net
remote.eu.kaufland.com
concur.kaufland.net
codesnap.co
out-uc17.lidl.net
baustandards-qs.kaufland.net
app.kaufland.net
auth-qs.kaufland.net
auth.kaufland.net
api-qs.kaufland.net
ipwmseg.kaufland.net
out-uc17.lidl.net
remote.eu.kaufland.com
iawmseg.kaufland.net
hc.kaufland.net
hc-a.kaufland.net
ipwmseg.kaufland.net
mp.kaufland.net
softnative.dev
iawmseg.kaufland.net
out-uc18.lidl.net
baustandards.kaufland.net
hc-q.kaufland.net
app-qs.kaufland.net
auth-e2.kaufland.net
iawmseg.kaufland.net
collaboration.kaufland.de
mss-handheld-a.kaufland.net
ad.adaptivemedia.tech
collaboration-q.kaufland.de
out-uc18.lidl.net
auth.kaufland.net
hc.kaufland.net
app-qs.kaufland.net
auth.kaufland.net
portal.eu.kaufland.net
out-uc18.lidl.net
out-uc18.lidl.net
www.elclamor.pe
kaufland.net
app.kaufland.net
import.app-qs.kaufland.net
collaboration.kaufland.de
www.jsonice.com
pm4ngos.ir
pay.kaufland.net
ipwmseg.kaufland.net
app.kaufland.net
auth.kaufland.net
portal.eu.kaufland.net
concur.kaufland.net
oc.kaufland.net
portal.eu.kaufland.net
api-qs.kaufland.net
baustandards-at.kaufland.net
ipwmseg.kaufland.net
baustandards-qs.kaufland.net
suxxusglobal.com
www.rominieloimoveis.com
import.app-qs.kaufland.net
*.cf.kaufland.net
app.kaufland.net
ci.cf.kaufland.net
api.kaufland.net
collaboration.kaufland.de
mirror.yglabs.app
collaboration.kaufland.de
gid.idwall.co
design-hub.kaufland.net
out-uc18.lidl.net

Certificate

The complete raw certificate details for app.kaufland.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 472917237621977002227765723184302776052196325422
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign EV Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 19:27:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-04 19:27:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stuttgart'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 730995'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Neckarsulm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Schwarz IT GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.kaufland.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 755696723659323990942694858992436888215489353755182274669197926489494222972752447063793254983353828619306483073337073413856477600615980751966609794600114226853420373280424794044363927439657098733323783334970052670059030141755226632499658366684509710289763194171620355239371981172068297087995142305667659753335355997553049914596240374646604539263707101032493324313577804083996868466235855388784738484496965231908787543078873434718595272724104863880398265008252909834711887498547459771946906110755720562900751098445662839521032416606045645724311483010691371355841188851040762489407183903233486816373796260158332524657036920861461357039927056027534775553085555040929135275730649260731080074920834722914149554521797994584608947642333488598952450836639299754630508585966563544647502266672397038160440124435071739328744961211000348063592709930181828475805124928719821116561564235344995006910780345631672996744477883987745416406750744526375119237418784209963660990638855312904007793004920611944043856815720497782586923324337606527432540965589630151157743489994069879447591312702477520318264022620628449677723762664587744420999762506476059741598101854574871204320945619234020282113813636672420779597596982829020723941306011036237727872959861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.kaufland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.app.kaufland.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0f7f0395b1802c8e231ed92252535342aebd7155
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eefd46caf7275e91bc5ab6e787cd0afa550a2642
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.1 (SwissSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (196 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-ev-g2.ocsp.swisssign.net/EEFD46CAF7275E91BC5AB6E787CD0AFA550A2642'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006d662ca622024232f92a9e11c25dee6b508bd68c02480c0021d61b99da7d56f694867832b8e847c5ff928346673c2c1ef5dee9af91a9289db99263082da72f750af53520815860589e3cfd9b87c19502fb8e120023d12156698a506cbad4d3a5c7fedd1b921d6abd7f3412dda0d3f6f1331e35fbbdb529f79670c9a3564d1193b18da4934dd57ce3fdff8479704b1b6662ba5854ecd8cb24aa6254d5db5f908a6e82cc28b8c5a90d3ad54f437f403c2a925500b66ada9554ae87d85ad08e0d26761e5cd8ddb6c8e61cdd1186fa25cf434c766d391354de49f7bf4df580de7860933e2834f556887320309259b6ce3b9928e32b9412064aafaa080c1870753fba