hk-ucexe-p002.lidl.com.hk

- Lidl Stiftung & Co. KG -

Issued by SwissSign RSA TLS EV ICA 2021 - 1

About this certificate

This digital certificate with serial number 1f:3c:66:0f:e7:16:77:6a:4f:88:82:35:d3:64:18:07:ce:cb:47:a4 was issued on by SwissSign AG.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lidl Stiftung & Co. KG

Company registration number: HRA 102314
Organization: Lidl Stiftung & Co. KG
Address: Stiftsbergstr. 1
Postal code: 74172
State / Province: BW
Locality: Neckarsulm
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:3c:66:0f:e7:16:77:6a:4f:88:82:35:d3:64:18:07:ce:cb:47:a4
Serial Number (int): 178325649472019725585700249393778390111433213860
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 7a:55:9d:2a:ce:71:4f:53:4f:33:a4:d7:84:ce:24:c5:41:ad:68:79
AuthorityKeyId: da:34:d4:8e:10:23:f4:6a:2d:6c:b4:1f:f3:28:11:de:5e:01:c4:de

Fingerprint (sha1): 99:6e:01:a7:7b:82:f2:91:74:14:3d:ce:ed:d3:83:a5:f9:34:a2:bd
Fingerprint (sha256): 65:e7:f9:b2:13:f7:ba:82:00:29:58:d0:0b:60:38:1e:6f:e2:de:85:0e:21:8d:e8:a1:6f:cb:6c:7d:50:e4:1a

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE

Revocation information

OCSP Server: http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate hk-ucexe-p002.lidl.com.hk

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hk-ucexe-p002.lidl.com.hk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hk-ucexe-p002.lidl.com.hk
l-hk-c-mra-ext.lidl.com.hk
hk-ucexe-p001.lidl.com.hk
ucexe-p001.asia.lidl.net
hk-ucexe-p002.asia.lidl.net
collab-edge.lidl.sg
collab-edge.qats.com.hk
collab-edge.saps.com.hk
collab-edge.asia.lidl.net
collab-edge.lidl.com.hk

Other certificates including the domain name lidl.com.hk

(limited to 100 certificates)

Certificate

The complete raw certificate details for hk-ucexe-p002.lidl.com.hk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 178325649472019725585700249393778390111433213860
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-27 15:31:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-27 15:31:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stuttgart'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 102314'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Neckarsulm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '74172'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stiftsbergstr. 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lidl Stiftung & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hk-ucexe-p002.lidl.com.hk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 858205390733953505231443529339278943412350954011320371536721033455416609286929043079343394632907489952456721430617400252475094707699302398668417614753672923345309963894067535905666881260094726300476950113964617352622693284604037918372165545097407736520904785712776737775364870340656490053583627486613827165227395390560718440576115921317167083438653116827763752106439265067765430240899512872859897149183198503177534624111316947402034375180303462977663685854192126615693107426985041233491160360789232781187829503749116060877843009969772125701885910231208417174680015931686651984457342880415105610577270726821336743835849750730794058402071351542798758091866448977755947974879482521843760825038912229944799984523615104985182384222841096973504997573174036899201025081224515532964531958895906265658025052221019432551414339026900483699327995582701749513022611647722613429981929770137841178168791561008001319980946155167019983289164114697612448680445497567761978480969007987819423807973414964280352093189847857292549201649028586946644035342416195716233576964951706242095359575240939325107168967293159079211689528512045173138125804509890050445704441605533198982748465617462326702757204516021833333318793574877953444495960603116415331707587919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk-ucexe-p002.lidl.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l-hk-c-mra-ext.lidl.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk-ucexe-p001.lidl.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucexe-p001.asia.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk-ucexe-p002.asia.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.qats.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.saps.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.asia.lidl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.lidl.com.hk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a559d2ace714f534f33a4d784ce24c541ad6879
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da34d48e1023f46a2d6cb41ff32811de5e01c4de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (846 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (842 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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