*.ehpp.schwarz

- Schwarz IT KG -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 64:71:ea:ec:05:63:6f:8f:6f:81:d3:0d:9a:7a:89:fa:6a:f6:23:41 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Schwarz IT KG

Organization: Schwarz IT KG
State / Province: BW
Locality: Neckarsulm
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 64:71:ea:ec:05:63:6f:8f:6f:81:d3:0d:9a:7a:89:fa:6a:f6:23:41
Serial Number (int): 573439525878526978157023167659625663786164560705
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 80:7f:82:d8:57:e9:19:86:35:d7:6e:a1:89:c2:51:6f:2e:e2:00:17
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): 4c:b0:f8:67:bc:93:92:9d:3f:f5:55:ef:24:25:d5:e6:55:49:44:19
Fingerprint (sha256): 70:93:8d:39:82:b1:f3:43:ff:74:6e:f5:78:e3:96:6c:e7:df:fe:65:3c:1c:ba:f7:d7:3b:16:91:ef:09:88:ab

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate *.ehpp.schwarz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ehpp.schwarz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ehpp.schwarz
ehpp.schwarz

Other certificates including the domain name ehpp.schwarz

(limited to 100 certificates)
*.ehpp.schwarz
*.ehpp.schwarz
*.ehpp.schwarz
*.ext.ehpp.schwarz
*.test.ehpp.schwarz
*.dev.ehpp.schwarz
*.ext.ehpp.schwarz
*.ehpp.schwarz
*.dev.ehpp.schwarz
*.ehpp.schwarz
*.test.ehpp.schwarz
*.test.ehpp.schwarz
*.ext.ehpp.schwarz
*.ext.ehpp.schwarz
*.test.ehpp.schwarz
*.dev.ehpp.schwarz
*.dev.ehpp.schwarz
*.ehpp.schwarz

Certificate

The complete raw certificate details for *.ehpp.schwarz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIUDCCBjigAwIBAgIUZHHq7AVjb49vgdMNmnqJ+mr2I0EwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgT1YgSUNBIDIwMjIgLSAxMB4XDTI0MDEwMzE3
NTM0MVoXDTI1MDEwMzE3NTM0MVowYDELMAkGA1UEBhMCREUxCzAJBgNVBAgMAkJX
MRMwEQYDVQQHDApOZWNrYXJzdWxtMRYwFAYDVQQKDA1TY2h3YXJ6IElUIEtHMRcw
FQYDVQQDDA4qLmVocHAuc2Nod2FyejCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAJAE7zdMw1fGcNfXUvjKmr7CuEPsxgCcwT/sBQJvKjhfUCPGdMGJZTAt
PxaJZ46/n/dulyPQMZdk4T9T671rVIQ4doWd2EziHDsAFuCcF3suG5mxCNO44Jmr
g24OExzSfbQfkMShSnan23yBICC7+xKiLR+C6ahKiZP1t2gjjEEb4f1071jfHrie
wfF04KIpCtwLtdFtW/LN0QFs7zTGUVbvrHoch7h2Ugi8LGcXqv4pwLo+XFP9G2na
2t726ahDqh1ty/Q4d4hdyHZsmOxQmfWMQjStCIXDTV89js1Ki7la46TknXqeeZQZ
aBPMhvQ3XiZy6uuv1DmRa7JhhRAt/2cCAwEAAaOCBBAwggQMMIGyBggrBgEFBQcB
AQSBpTCBojBMBggrBgEFBQcwAoZAaHR0cDovL2FpYS5zd2lzc3NpZ24uY2gvYWly
LTBmMmJmOWE1LWRkMzctNDhjOS1hODViLTEyYWNkY2I4YmU0NTBSBggrBgEFBQcw
AYZGaHR0cDovL29jc3Auc3dpc3NzaWduLmNoL3NpZ24vb2NzLWFhY2NjZWQ1LTY2
ZTgtNDA2OS05YjFiLWZkMjlhYjczZWZlYzBvBgNVHSAEaDBmMAgGBmeBDAECAjAI
BgYEAI96AQcwUAYIYIV0AVkCAQIwRDBCBggrBgEFBQcCARY2aHR0cHM6Ly9yZXBv
c2l0b3J5LnN3aXNzc2lnbi5jb20vU3dpc3NTaWduX0NQU19UTFMucGRmMFEGA1Ud
HwRKMEgwRqBEoEKGQGh0dHA6Ly9jcmwuc3dpc3NzaWduLmNoL2NkcC05NmI2MmY1
YS02YjczLTRkYTQtODdmNy1jZTQwMDJjMWNkMzQwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDAnBgNVHREEIDAegg4qLmVocHAu
c2Nod2FyeoIMZWhwcC5zY2h3YXJ6MB0GA1UdDgQWBBSAf4LYV+kZhjXXbqGJwlFv
LuIAFzAfBgNVHSMEGDAWgBR8bwpvEw/ZjCRvJjTzXGtDbbcjtjCCAfcGCisGAQQB
1nkCBAIEggHnBIIB4wHhAHYAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT
0wwAAAGM0HWuYgAABAMARzBFAiEA9bGMNxzqUlywM6PaBq5aqDY/C2OYsIhFEK0x
Shl+UfsCIDJ22/J2p1FsWNHRXulx4Z4pmJE65Vro4t4aMWMwGz5xAHcAzxFW7tUu
fK/zh1vZaS6b6RpxZ0qwF+ysAdJbd87MOwgAAAGM0HWvKAAABAMASDBGAiEAiHAS
RRjFolC6yLMzzeX7oI6paFP3qFw4zs1BzQ/GXZcCIQDGq7azfQ5LgxDGQdKmc+IJ
pWfk894/79s9pKM7XGIWhgB1AMz7D2qFcQll/pWbU87psnwi6YVcDZeNtql+VMD+
TA2wAAABjNB1sAsAAAQDAEYwRAIgftu0HFzvmpE6VzhRQ6sSLnJ4AgibXRj8qt77
lfAKikUCIBpISpj/OUFEGzW7JvBWkZlxndFuyA4NV4L2Ows4/E5RAHcATnWjJ1ya
EMM4W2zU3z9S6x3w4I4bjWnAsfpksWKaOd8AAAGM0HWxFQAABAMASDBGAiEA7BjY
ZFtijOUKzD8z3OP7NL67BPGZD3Cl6g+8E+oXofQCIQCs/ouyrRJMVTJKIllL4dhJ
X7RGF7IJd1FWuCdtncsybjANBgkqhkiG9w0BAQsFAAOCAgEAAIQBtKI6bTk7M4tn
VG+XMnk+0hSp10PJcRSKO84DDbawWN0URdy/BAdCqp2o1BgI2yUlsVVly6KPN3P4
sqleAjIa2YBc0m/cRzdzQl42MrXMwwaQUviyAFvIXeVVLTJfKSTkzdYc/w7UCGjt
rKu7vC5It1fUL3sosHpdt/BPzxZ0SGlkphH3vrI+MtHlTuzzXex+idR9qIjzNLh/
6oDBeDngSDFI54Xh4sKioGDyZ4LkoGIDrUVeoEd7QEV75h7hr0LxU0v+bjkiTHLw
MjXAzlIDJw7Um+fhdx9rXo7xieOwEugUTsqqFTyqouQE+Hum0Et1ttKUYleAEf1U
D0yfJhbfTjbtSAfOI1aF7CKjd9GHQGOVLs/lzrW+onYGbA/sntCFf1u/B2zRqkfX
7qQd40GCkPRq157u1has8s6COrjTAyHvKZBV18CCB+oS7t9deNkse+ZXc0PbSzs2
mdhDWx7UqWcPRfDtfXagLx1ckYAcCfCthqQOXaGZMYI7ZzAcaPDQEU8R5+pUW17v
olt3NhdDlqU3d75ilkHNUVhVZCx9AWpQW+HUxTD+FPLotwdrOtrWAIVvqmzDhy6g
VX4O52nMXze5RG44O5rVjvsWPdC1AS0jTwXOhvYlRcJRs5iWpxNZ9oLOskqgv6Nj
EJcKLulfuBsoJUkN/S527o8Qy60=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkATvN0zDV8Zw19dS+Mqa
vsK4Q+zGAJzBP+wFAm8qOF9QI8Z0wYllMC0/Folnjr+f926XI9Axl2ThP1PrvWtU
hDh2hZ3YTOIcOwAW4JwXey4bmbEI07jgmauDbg4THNJ9tB+QxKFKdqfbfIEgILv7
EqItH4LpqEqJk/W3aCOMQRvh/XTvWN8euJ7B8XTgoikK3Au10W1b8s3RAWzvNMZR
Vu+sehyHuHZSCLwsZxeq/inAuj5cU/0badra3vbpqEOqHW3L9Dh3iF3IdmyY7FCZ
9YxCNK0IhcNNXz2OzUqLuVrjpOSdep55lBloE8yG9DdeJnLq66/UOZFrsmGFEC3/
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 573439525878526978157023167659625663786164560705
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 17:53:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-03 17:53:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Neckarsulm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Schwarz IT KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ehpp.schwarz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18180749176961613345979856122411349373321158499250772816897654157163505406695552260287337092986094943712609700643244481471107141757285360970295706819624659195260026890189018278513829245367941801657870821733822261773989056924316896666654362806780402087345142630871451923511809254795659199120215928310947148551711563335711557329237886659465855731005833343602298932651134404714365338231781604005853313710427144931103567210215592819815611608879519097501455748687395379663520462085389739534475513042303665947237844262689128786267387405842601692159223509268574249876009614921541012741416771145811456068857812818388474265447
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ehpp.schwarz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehpp.schwarz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							807f82d857e9198635d76ea189c2516f2ee20017
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							01e10076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018cd075ae620000040300473045022100f5b18c371cea525cb033a3da06ae5aa8363f0b6398b0884510ad314a197e51fb02203276dbf276a7516c58d1d15ee971e19e2998913ae55ae8e2de1a3163301b3e71007700cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018cd075af2800000403004830460221008870124518c5a250bac8b333cde5fba08ea96853f7a85c38cecd41cd0fc65d97022100c6abb6b37d0e4b8310c641d2a673e209a567e4f3de3fefdb3da4a33b5c621686007500ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db00000018cd075b00b000004030046304402207edbb41c5cef9a913a57385143ab122e727802089b5d18fcaadefb95f00a8a4502201a484a98ff3941441b35bb26f0569199719dd16ec80e0d5782f63b0b38fc4e510077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018cd075b1150000040300483046022100ec18d8645b628ce50acc3f33dce3fb34bebb04f1990f70a5ea0fbc13ea17a1f4022100acfe8bb2ad124c55324a22594be1d8495fb44617b209775156b8276d9dcb326e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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