angebote.derwesten.de

- FUNKE Corporate IT GmbH -

Issued by SwissSign Server Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 15:e1:cc:e8:85:a6:ec:4a:8f:b0:cf:81:32:c7:3b:a3:1c:40:f6:56 was issued on by SwissSign AG.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FUNKE Corporate IT GmbH

Organization: FUNKE Corporate IT GmbH
Organization unit: Netzwerk und Sicherheit
State / Province: Nordrhein-Westfalen
Locality: Essen
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 15:e1:cc:e8:85:a6:ec:4a:8f:b0:cf:81:32:c7:3b:a3:1c:40:f6:56
Serial Number (int): 124924323886463262237712180417689766391273551446
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: ad:1e:6a:fe:cc:22:bf:ed:6a:20:1d:5d:63:4c:07:85:8e:37:ac:a8
AuthorityKeyId: e7:f1:e7:fd:2e:53:ad:11:e5:81:1a:57:a4:73:8f:12:7d:98:c8:ae

Fingerprint (sha1): f5:79:b0:b5:6d:d1:ba:61:ed:eb:49:50:46:d2:8b:20:a6:68:3d:69
Fingerprint (sha256): 82:68:95:2e:3f:3c:be:83:cf:56:d9:1f:c9:6c:16:bc:35:19:b7:6a:5a:d2:33:d5:19:c1:6c:4a:39:37:13:d9

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE

Revocation information

OCSP Server: http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate angebote.derwesten.de

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for angebote.derwesten.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

angebote.derwesten.de
angebote.ikz-online.de
angebote.lokalkompass.de
angebote.nrz.de
angebote.waz.de
angebote.wp.de
angebote.wr.de

Other certificates including the domain name derwesten.de

(limited to 100 certificates)
www.derwesten.de
runforrest.derwesten.de
www.weltsport.net
sso.funkemedien.de
derwesten.de
*.funkemedien.de
dev3.aws.funkedigital.de
funkedigital.de
data-fdf4690b14.derwesten.de
*.waz.de
secure.derwesten.de
eventum.derwesten.de
dev2.aws.funkedigital.de
derwesten.de
www.weltsport.net
www.derwesten.de
secure.derwesten.de
*.waz.de
tv.morgenpost.de
www.weltfussball.de
www.deutschland-spielt.de
www.weltsport.net
www.derwesten.de
agnes.derwesten.de
www.derwesten.de
sso.funkemedien.de
www.weltsport.net
www.weltsport.net
www.weltsport.net
www.derwesten.de
files1.derwesten.de
www.derwesten.de
www.weltsport.net
www.derwesten.de
www.weltsport.net
www.weltsport.net
www.weltsport.net
www.weltsport.net
www.derwesten.de
www.adventskalender.derwesten.de
www.weltsport.net
www.derwesten.de
angebote.derwesten.de
www.weltsport.net
dev1.aws.funkedigital.de
derwesten.de
www.derwesten.de
www.derwesten.de
www.weltsport.net
www.derwesten.de
www.weltfussball.de
www.derwesten.de
derosten.com
www.weltsport.net
www.weltfussball.de
www.derwesten.de
www.weltsport.net
www.derwesten.de
www.weltsport.net
*.waz.de
www.deutschland-spielt.de
cp.derwesten.de
shop.derwesten.de
www.weltsport.net
sso.funkemedien.de
www.derwesten.de
*.funkemedien.de
*.waz.de
*.waz.de
dev2.aws.funkedigital.de
uat.aws.bildderfrau.de
www.weltsport.net
*.funkemedien.de
aditory.derwesten.de
funkedigital.de
uat.aws.bildderfrau.de
dev5.aws.funkedigital.de
www.weltfussball.de
dev2.aws.funkedigital.de
www.weltsport.net
*.waz.de
www.weltfussball.de
sso.derwesten.de
www.derwesten.de
uat.aws.bildderfrau.de
www.weltfussball.de
funkedigital.de
derwesten.de
interaktiv.derwesten.de
*.waz.de
*.geschenke38.de
tippspiel.derwesten.de
www.weltsport.net
*.waz.de
dev1.aws.funkedigital.de
secure.derwesten.de
www.weltsport.net
derwesten.de
tv.morgenpost.de
www.derwesten.de

Certificate

The complete raw certificate details for angebote.derwesten.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIII1jCCB76gAwIBAgIUFeHM6IWm7EqPsM+BMsc7oxxA9lYwDQYJKoZIhvcNAQEL
BQAwUjELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEsMCoGA1UE
AxMjU3dpc3NTaWduIFNlcnZlciBHb2xkIENBIDIwMTQgLSBHMjIwHhcNMTgwODAx
MTExMDI1WhcNMjAwODAxMTExMDI1WjCBnzELMAkGA1UEBhMCREUxHDAaBgNVBAgT
E05vcmRyaGVpbi1XZXN0ZmFsZW4xDjAMBgNVBAcTBUVzc2VuMSAwHgYDVQQKExdG
VU5LRSBDb3Jwb3JhdGUgSVQgR21iSDEgMB4GA1UECxMXTmV0endlcmsgdW5kIFNp
Y2hlcmhlaXQxHjAcBgNVBAMTFWFuZ2Vib3RlLmRlcndlc3Rlbi5kZTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAKqmMk4TTaikPHggie/LWP10EI/R89ou
9up4M7g04oQyiBkMHL0qGCL8IGg+nOP4efek7sMca/uVQmwK+Q63psImoo0DNSeN
0NVyinsNHQapbGyI7WSLT6Yqv5BCS9oyXigU24/ltKyIQ7pU6rK0NLbPJmXlUFP7
JycMEpkcRlPsj6dSnJMUZ8nufhcw7b4MMDIta2rSP4j0lp/WpzzzzqOFbbHx7a1M
jvYOo3XgPVfv3E2oikiK9SO/hKiRujg4Y0ESN2vTgODfsXieAngIKxEOC6ylNvlW
lolRlna2AL0KtmdxSyG4a7XvlAtpta7em0RnvLe4WFqNZWYMVP2n1zUCAwEAAaOC
BVQwggVQMIGWBgNVHREEgY4wgYuCFWFuZ2Vib3RlLmRlcndlc3Rlbi5kZYIWYW5n
ZWJvdGUuaWt6LW9ubGluZS5kZYIYYW5nZWJvdGUubG9rYWxrb21wYXNzLmRlgg9h
bmdlYm90ZS5ucnouZGWCD2FuZ2Vib3RlLndhei5kZYIOYW5nZWJvdGUud3AuZGWC
DmFuZ2Vib3RlLndyLmRlMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFK0eav7MIr/taiAdXWNMB4WON6yoMB8G
A1UdIwQYMBaAFOfx5/0uU60R5YEaV6RzjxJ9mMiuMIH/BgNVHR8EgfcwgfQwR6BF
oEOGQWh0dHA6Ly9jcmwuc3dpc3NzaWduLm5ldC9FN0YxRTdGRDJFNTNBRDExRTU4
MTFBNTdBNDczOEYxMjdEOThDOEFFMIGooIGloIGihoGfbGRhcDovL2RpcmVjdG9y
eS5zd2lzc3NpZ24ubmV0L0NOPUU3RjFFN0ZEMkU1M0FEMTFFNTgxMUE1N0E0NzM4
RjEyN0Q5OEM4QUUlMkNPPVN3aXNzU2lnbiUyQ0M9Q0g/Y2VydGlmaWNhdGVSZXZv
Y2F0aW9uTGlzdD9iYXNlP29iamVjdENsYXNzPWNSTERpc3RyaWJ1dGlvblBvaW50
MHMGA1UdIARsMGowVAYJYIV0AVkBAgEJMEcwRQYIKwYBBQUHAgEWOWh0dHA6Ly9y
ZXBvc2l0b3J5LnN3aXNzc2lnbi5jb20vU3dpc3NTaWduLUdvbGQtQ1AtQ1BTLnBk
ZjAIBgYEAI96AQcwCAYGZ4EMAQICMIHVBggrBgEFBQcBAQSByDCBxTBkBggrBgEF
BQcwAoZYaHR0cDovL3N3aXNzc2lnbi5uZXQvY2dpLWJpbi9hdXRob3JpdHkvZG93
bmxvYWQvRTdGMUU3RkQyRTUzQUQxMUU1ODExQTU3QTQ3MzhGMTI3RDk4QzhBRTBd
BggrBgEFBQcwAYZRaHR0cDovL2dvbGQtc2VydmVyLWcyLm9jc3Auc3dpc3NzaWdu
Lm5ldC9FN0YxRTdGRDJFNTNBRDExRTU4MTFBNTdBNDczOEYxMjdEOThDOEFFMIIB
9QYKKwYBBAHWeQIEAgSCAeUEggHhAd8AdQBvU3asMfAxGdiZAKRRFf93FRwR2QLB
ACkGjbIImjfZEwAAAWT1Lo+CAAAEAwBGMEQCIBi5/bPnjSR5hcB7S6/HHvbs0gqf
yDEzF2zVvFRE9XCRAiB9t0+KAX7JDg9PPHSsLIZAHljrbMP3QSP49a8kfa72sAB2
ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABZPUukWkAAAQDAEcw
RQIhAO+Un2qHIzgtRl8Qn4sXUSceVM81U10/o1ofxxfA5IxDAiAMKLfYGizoFk+j
DzSzATLh+E5vfAtgw1wXxXekuGcDDgB1AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyI
jT0RxM227L7MAAABZPUukNQAAAQDAEYwRAIgMaHEuuceJe5YpaDSpqMHgQbnLNFG
cr9MQMle7TJpBDsCIG7nCRqmJXLStF0Nt2csUbozmwhHCOo71adj1l5E9lQRAHcA
7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFk9S6PdQAABAMASDBG
AiEA3dIEApeLl9gPLNg/sBRLPMJZoC+5a+QuQdiTkS5AggcCIQCW4hx7/i5Minnm
pQ3eZnbbJWdtDXDQj7OgFulDP+9nxTANBgkqhkiG9w0BAQsFAAOCAQEAjMjwOeXw
/61gkZRJV9tD/2Ym3ONm36ZDZ/PcO/ntIhllpx6fodeJXBZC+vnJU6/cKpX6EHxt
ZWVuXo9o5JYf/DEtWz+U+aSdtOblhbg//qlmFhezHP8pYeAbSyLg5KgMhrlLlPCZ
dc3v04bGFUtgQz8eDMjf6X2Si5cQ2UU6SEqKBBupCvmVbme5kg8SKfQGyPdz7WdH
wL51hHqE1qlQtZIJBuoCDBYxv4jXkX1Kxv1eqSc3ROqmcAhCc5qKl3J6wBnAASNa
Pjk42grjCw8SscAkgT5gmGpgZkhxgl3FGdyHnFCiiznp1JTl5vBdpxjqoYLU5RtG
8NEocPc++NrLqQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqYyThNNqKQ8eCCJ78tY
/XQQj9Hz2i726ngzuDTihDKIGQwcvSoYIvwgaD6c4/h596Tuwxxr+5VCbAr5Drem
wiaijQM1J43Q1XKKew0dBqlsbIjtZItPpiq/kEJL2jJeKBTbj+W0rIhDulTqsrQ0
ts8mZeVQU/snJwwSmRxGU+yPp1KckxRnye5+FzDtvgwwMi1ratI/iPSWn9anPPPO
o4VtsfHtrUyO9g6jdeA9V+/cTaiKSIr1I7+EqJG6ODhjQRI3a9OA4N+xeJ4CeAgr
EQ4LrKU2+VaWiVGWdrYAvQq2Z3FLIbhrte+UC2m1rt6bRGe8t7hYWo1lZgxU/afX
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 124924323886463262237712180417689766391273551446
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-01 11:10:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-01 11:10:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FUNKE Corporate IT GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Netzwerk und Sicherheit'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'angebote.derwesten.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21542466394759482980433437492503273328642873109130506205864010518722041600588693002983525186914525382523686729098161854241322724939515625909046055113808911468744142721866944208614320314319720114189932028089089298322200747529927582503279793772971259534418464919767441308260536210087379448418834059260676097353028798754059534381292718475818654102617310550759124496946596235640795286841170886486252318449204987812792047612906982507916218850530922492595105291238486709854163604590613313333885779807714627243398819373225754284721760247488429809461759033178213057993388894550643857313086892065193817225576102060756908365621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (142 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angebote.derwesten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angebote.ikz-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angebote.lokalkompass.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angebote.nrz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angebote.waz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angebote.wp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angebote.wr.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad1e6afecc22bfed6a201d5d634c07858e37aca8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e7f1e7fd2e53ad11e5811a57a4738f127d98c8ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.9
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							01df0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000164f52e8f820000040300463044022018b9fdb3e78d247985c07b4bafc71ef6ecd20a9fc83133176cd5bc5444f5709102207db74f8a017ec90e0f4f3c74ac2c86401e58eb6cc3f74123f8f5af247daef6b0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000164f52e91690000040300473045022100ef949f6a8723382d465f109f8b1751271e54cf35535d3fa35a1fc717c0e48c4302200c28b7d81a2ce8164fa30f34b30132e1f84e6f7c0b60c35c17c577a4b867030e007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000164f52e90d40000040300463044022031a1c4bae71e25ee58a5a0d2a6a3078106e72cd14672bf4c40c95eed3269043b02206ee7091aa62572d2b45d0db7672c51ba339b084708ea3bd5a763d65e44f65411007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000164f52e8f750000040300483046022100ddd20402978b97d80f2cd83fb0144b3cc259a02fb96be42e41d893912e40820702210096e21c7bfe2e4c8a79e6a50dde6676db25676d0d70d08fb3a016e9433fef67c5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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