baustandards-qs.kaufland.net

- Kaufland Stiftung & Co. KG -

Issued by SwissSign RSA TLS EV ICA 2021 - 1

About this certificate

This digital certificate with serial number 36:5e:71:90:e8:75:83:6a:b8:d0:fd:5c:46:1a:71:47:fd:72:83:27 was issued on by SwissSign AG.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Kaufland Stiftung & Co. KG

Company registration number: HRA 102851
Organization: Kaufland Stiftung & Co. KG
Address: Rötelstr. 35
Postal code: 74172
State / Province: BW
Locality: Neckarsulm
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 36:5e:71:90:e8:75:83:6a:b8:d0:fd:5c:46:1a:71:47:fd:72:83:27
Serial Number (int): 310391664671111397612494191210853210668089377575
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 24:76:4b:db:12:78:8e:ed:42:10:2f:b8:8a:40:10:f6:2b:e3:07:1c
AuthorityKeyId: da:34:d4:8e:10:23:f4:6a:2d:6c:b4:1f:f3:28:11:de:5e:01:c4:de

Fingerprint (sha1): d2:8c:e1:0b:56:b6:64:b9:ac:a5:b6:c4:cd:c6:7c:83:26:7f:be:21
Fingerprint (sha256): 6e:ab:f9:d0:ff:90:a6:e5:d2:38:b5:26:3a:04:89:39:6d:38:8a:ba:79:a3:cf:70:7e:c3:be:e0:ac:3a:2a:c6

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE

Revocation information

OCSP Server: http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE
CRL Distribution Point: ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate baustandards-qs.kaufland.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for baustandards-qs.kaufland.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

baustandards-qs.kaufland.net
baustandards-et.kaufland.net
baustandards-at.kaufland.net

Other certificates including the domain name kaufland.net

(limited to 100 certificates)
mp.kaufland.net
collaboration.kaufland.de
courtamew.dev
portal-dev.eu.kaufland.net
portal.eu.kaufland.net
killer.logic-wiz.com
iawmseg.kaufland.net
auth-qs.kaufland.net
import.app.kaufland.net
concur.kaufland.net
auth.kaufland.net
iawmseg.kaufland.net
mss.kaufland.net
auth-qs.kaufland.net
collaboration.kaufland.de
api.kaufland.net
mss.kaufland.net
auth-e2.kaufland.net
hc-q.kaufland.net
hc.kaufland.net
int.360live.app
mss-t.kaufland.net
app-qs.kaufland.net
hc-q.kaufland.net
app-qs.kaufland.net
app-qs.kaufland.net
lyncdiscover.uc.kaufland.net
remote.eu.kaufland.com
www.medici.vc
hc-q.kaufland.net
mss-handheld-q.kaufland.net
remote.eu.kaufland.com
concur.kaufland.net
codesnap.co
out-uc17.lidl.net
baustandards-qs.kaufland.net
app.kaufland.net
auth-qs.kaufland.net
auth.kaufland.net
api-qs.kaufland.net
ipwmseg.kaufland.net
out-uc17.lidl.net
remote.eu.kaufland.com
iawmseg.kaufland.net
hc.kaufland.net
hc-a.kaufland.net
ipwmseg.kaufland.net
mp.kaufland.net
softnative.dev
iawmseg.kaufland.net
out-uc18.lidl.net
baustandards.kaufland.net
hc-q.kaufland.net
app-qs.kaufland.net
auth-e2.kaufland.net
iawmseg.kaufland.net
collaboration.kaufland.de
mss-handheld-a.kaufland.net
ad.adaptivemedia.tech
collaboration-q.kaufland.de
out-uc18.lidl.net
auth.kaufland.net
hc.kaufland.net
app-qs.kaufland.net
auth.kaufland.net
portal.eu.kaufland.net
out-uc18.lidl.net
out-uc18.lidl.net
www.elclamor.pe
kaufland.net
app.kaufland.net
import.app-qs.kaufland.net
collaboration.kaufland.de
www.jsonice.com
pm4ngos.ir
pay.kaufland.net
ipwmseg.kaufland.net
app.kaufland.net
auth.kaufland.net
portal.eu.kaufland.net
concur.kaufland.net
oc.kaufland.net
portal.eu.kaufland.net
api-qs.kaufland.net
baustandards-at.kaufland.net
ipwmseg.kaufland.net
baustandards-qs.kaufland.net
suxxusglobal.com
www.rominieloimoveis.com
import.app-qs.kaufland.net
*.cf.kaufland.net
app.kaufland.net
ci.cf.kaufland.net
api.kaufland.net
collaboration.kaufland.de
mirror.yglabs.app
collaboration.kaufland.de
gid.idwall.co
design-hub.kaufland.net
out-uc18.lidl.net

Certificate

The complete raw certificate details for baustandards-qs.kaufland.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310391664671111397612494191210853210668089377575
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-09 09:54:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-09 09:54:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stuttgart'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 102851'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Neckarsulm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '74172'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rötelstr. 35'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kaufland Stiftung & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'baustandards-qs.kaufland.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 721346737475271314275304333516935006624652929514150264359699061828439751564562847947585190682252439840313774969883009022939068783468340837281404896948235626804527508797141422332164871112060054121441424314305476825356387113373466878913393122766762023526882334817196029370700469999876607729166681891156734238392196083073008217587253889357125059586326920974293509675924081380422021194832055153642226561103638747158833714954434025133739744969119679197777498070671708918587530028615895235009305004755878643002790208024311733800862927952296122320898841594835408317753109127519287381711409390261110934394835340607029654874512376854441253607690067173275191026487456594575371150802523349447339744888779281897955587126145319572732656971286141722770564293750099573160826398561603413737395567719967096636465722740164564745689895815331359027576475477648891114538272798008422019034827071833369602020324531984753464693381876860016990992262892707536996677412601657311584982013493263629542489482082164106513774043943596881513937270919710861022654232785929412689241573078608778343310373153779553725253126311070433582549527230932159176240558235125069475770149228521497328411738569426389753248685794641380381418230772680399675125972939348889674268815189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baustandards-qs.kaufland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baustandards-et.kaufland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baustandards-at.kaufland.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24764bdb12788eed42102fb88a4010f62be3071c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da34d48e1023f46a2d6cb41ff32811de5e01c4de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/DA34D48E1023F46A2D6CB41FF32811DE5E01C4DE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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