Zalando SE

- Zalando SE -

Issued by DigiCert Verified Mark Europe RSA4096 SHA256 2023 CA1

About this certificate

This digital certificate with serial number 0b:80:fb:be:9a:92:86:4c:47:7e:55:cc:6b:f6:c3:ba was issued on by DigiCert, Inc..

With 34 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Zalando SE

Company registration number: HRB 158855
Organization: Zalando SE
Address: Valeska-Gert-Str. 5
Locality: Berlin
Country: DE

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:80:fb:be:9a:92:86:4c:47:7e:55:cc:6b:f6:c3:ba
Serial Number (int): 15291227937525755704258114664386708410
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8d:51:38:a3:a0:86:f3:4f:19:6d:0f:1e:01:c3:c1:a2:d9:33:64:08
AuthorityKeyId: 14:ca:b5:ec:e9:14:ea:97:4e:47:22:fc:15:7c:bc:b7:63:3b:44:2f

Fingerprint (sha1): 30:aa:9c:8c:bb:31:71:33:cf:f9:ac:57:00:35:b3:a9:aa:9a:f6:86
Fingerprint (sha256): 8c:b5:b2:7b:40:f3:1e:cb:08:51:04:3f:50:7b:cc:8a:ae:36:82:52:d1:d6:b8:bc:82:fa:25:ee:26:73:5f:28

Issuing Certificate URL: http://cacerts.digicert.eu/DigiCertVerifiedMarkEuropeRSA4096SHA2562023CA1.crt

Revocation information

CRL Distribution Point: http://crl.digicert.eu/DigiCertVerifiedMarkEuropeRSA4096SHA2562023CA1.crl

Check the revocation status for certificate Zalando SE

34

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Zalando SE

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lounge.zalando.fi
lounge.zalando.dk
lounge.zalando.se
lounge.zalando.cz
lounge.zalando.pl
lounge.zalando.ch
lounge.zalando.at
lounge.zalando.be
lounge.zalando.nl
lounge.zalando.de
prive.zalando.es
prive.zalando.it
prive.zalando.fr
service-mail.zalando-lounge.lt
my.zalando-lounge.ro
my.zalando-lounge.lt
my.zalando-lounge.sk
service-mail.zalando-prive.it
service-mail.zalando-prive.es
service-mail.zalando-prive.fr
service-mail.zalando-lounge.ro
service-mail.zalando-lounge.sk
service-mail.zalando-lounge.fi
service-mail.zalando-lounge.dk
service-mail.zalando-lounge.se
service-mail.zalando-lounge.cz
service-mail.zalando-lounge.pl
service-mail.zalando-lounge.co.uk
service-mail.zalando-lounge.ch
service-mail.zalando-lounge.at
service-mail.zalando-lounge.be
service-mail.zalando-lounge.nl
service-mail.zalando-lounge.de
lounge.zalando.co.uk

Certificate

The complete raw certificate details for Zalando SE in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINUjCCCzqgAwIBAgIQC4D7vpqShkxHflXMa/bDujANBgkqhkiG9w0BAQsFADBm
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xPjA8BgNVBAMT
NURpZ2lDZXJ0IFZlcmlmaWVkIE1hcmsgRXVyb3BlIFJTQTQwOTYgU0hBMjU2IDIw
MjMgQ0ExMB4XDTI0MDYyNzAwMDAwMFoXDTI1MDIyMDIzNTk1OVowggE8MRMwEQYL
KwYBBAGCNzwCAQMTAkRFMRcwFQYLKwYBBAGCNzwCAQITBkJlcmxpbjEfMB0GCysG
AQQBgjc8AgEBEw5DaGFybG90dGVuYnVyZzEdMBsGA1UEDxMUUHJpdmF0ZSBPcmdh
bml6YXRpb24xEzARBgNVBAUTCkhSQiAxNTg4NTUxCzAJBgNVBAYTAkRFMQ8wDQYD
VQQHEwZCZXJsaW4xHDAaBgNVBAkTE1ZhbGVza2EtR2VydC1TdHIuIDUxEzARBgNV
BAoTClphbGFuZG8gU0UxEzARBgNVBAMTClphbGFuZG8gU0UxHzAdBgorBgEEAYOe
XwENEw9SZWdpc3RlcmVkIE1hcmsxEjAQBgorBgEEAYOeXwEDEwJERTEcMBoGCisG
AQQBg55fAQQTDDMwMjAxNzAwNDkwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAJDDJHBW2dqoFfBvx8Zkqb0c993qlasRvMYIK3E8krT06CoyUxVeTYC0
ydFWxBE5M0sR0y/HdoYOT4/SQfRcJOKzAwinsEaQmYdqsE4OrgnJ6mWfwi01YF/K
Z6chB/Smu/TzGt1yMf8RjGNn/rIdMKO5EhVK9kTGH6mMbQV0r2uzy5oIBpeU0nw6
qSb7VGVtSqMBYZtlkjS/ISTS0zYY68/X/jZKrAuUEAS8eT4GkSm3RIpw6+0IHAMu
fTn5g2nI9vkKSZGwGhSLq2D1zNr8pU4W4031eiqpYdxMKFLGC1/C5wlMr8Wg03vq
Y3V6/fl1oNBz63YCAJVqQvZDT9OSnpMCAwEAAaOCCCIwgggeMB8GA1UdIwQYMBaA
FBTKtezpFOqXTkci/BV8vLdjO0QvMB0GA1UdDgQWBBSNUTijoIbzTxltDx4Bw8Gi
2TNkCDCCA3kGA1UdEQSCA3AwggNsghFsb3VuZ2UuemFsYW5kby5maYIRbG91bmdl
LnphbGFuZG8uZGuCEWxvdW5nZS56YWxhbmRvLnNlghFsb3VuZ2UuemFsYW5kby5j
eoIRbG91bmdlLnphbGFuZG8ucGyCEWxvdW5nZS56YWxhbmRvLmNoghFsb3VuZ2Uu
emFsYW5kby5hdIIRbG91bmdlLnphbGFuZG8uYmWCEWxvdW5nZS56YWxhbmRvLm5s
ghFsb3VuZ2UuemFsYW5kby5kZYIQcHJpdmUuemFsYW5kby5lc4IQcHJpdmUuemFs
YW5kby5pdIIQcHJpdmUuemFsYW5kby5mcoIec2VydmljZS1tYWlsLnphbGFuZG8t
bG91bmdlLmx0ghRteS56YWxhbmRvLWxvdW5nZS5yb4IUbXkuemFsYW5kby1sb3Vu
Z2UubHSCFG15LnphbGFuZG8tbG91bmdlLnNrgh1zZXJ2aWNlLW1haWwuemFsYW5k
by1wcml2ZS5pdIIdc2VydmljZS1tYWlsLnphbGFuZG8tcHJpdmUuZXOCHXNlcnZp
Y2UtbWFpbC56YWxhbmRvLXByaXZlLmZygh5zZXJ2aWNlLW1haWwuemFsYW5kby1s
b3VuZ2Uucm+CHnNlcnZpY2UtbWFpbC56YWxhbmRvLWxvdW5nZS5za4Iec2Vydmlj
ZS1tYWlsLnphbGFuZG8tbG91bmdlLmZpgh5zZXJ2aWNlLW1haWwuemFsYW5kby1s
b3VuZ2UuZGuCHnNlcnZpY2UtbWFpbC56YWxhbmRvLWxvdW5nZS5zZYIec2Vydmlj
ZS1tYWlsLnphbGFuZG8tbG91bmdlLmN6gh5zZXJ2aWNlLW1haWwuemFsYW5kby1s
b3VuZ2UucGyCIXNlcnZpY2UtbWFpbC56YWxhbmRvLWxvdW5nZS5jby51a4Iec2Vy
dmljZS1tYWlsLnphbGFuZG8tbG91bmdlLmNogh5zZXJ2aWNlLW1haWwuemFsYW5k
by1sb3VuZ2UuYXSCHnNlcnZpY2UtbWFpbC56YWxhbmRvLWxvdW5nZS5iZYIec2Vy
dmljZS1tYWlsLnphbGFuZG8tbG91bmdlLm5sgh5zZXJ2aWNlLW1haWwuemFsYW5k
by1sb3VuZ2UuZGWCFGxvdW5nZS56YWxhbmRvLmNvLnVrMFAGA1UdIARJMEcwNwYK
YIZIAYb9bAACBTApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNv
bS9DUFMwDAYKKwYBBAGDnl8BATATBgNVHSUEDDAKBggrBgEFBQcDHzBaBgNVHR8E
UzBRME+gTaBLhklodHRwOi8vY3JsLmRpZ2ljZXJ0LmV1L0RpZ2lDZXJ0VmVyaWZp
ZWRNYXJrRXVyb3BlUlNBNDA5NlNIQTI1NjIwMjNDQTEuY3JsMGkGCCsGAQUFBwEB
BF0wWzBZBggrBgEFBQcwAoZNaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuZXUvRGln
aUNlcnRWZXJpZmllZE1hcmtFdXJvcGVSU0E0MDk2U0hBMjU2MjAyM0NBMS5jcnQw
DAYDVR0TAQH/BAIwADCCAwwGCCsGAQUFBwEMBIIC/jCCAvqiggL2oIIC8jCCAu4w
ggLqMIIC5hYNaW1hZ2Uvc3ZnK3htbDAjMCEwCQYFKw4DAhoFAAQU/0BNBhs7/cB5
i00DtvAoGvIYgVswggKuFoICqmRhdGE6aW1hZ2Uvc3ZnK3htbDtiYXNlNjQsSDRz
SUFBQUFBQUFBQ20yU3dXNmNNQkNHejltbm1McW5TcmF4alplRkZSQTFWVGVLbEVx
Ukt1WFFTOFdDQTFZcElQQXV1MzM2amlGcGU2aUU4ZmlmOFQrZk1lbnQ1V2NMWnpO
T3R1OHlJcmtnWUxxeXIyeFhaK1RrWGxoTWJ2Tk4rbzR4dURlZEdRdlhqM3Y0V1BW
SEF3OXRlNXJjSW9IYWNja2xoYS9QOS9ENU12U2pnNmYyVkxPSER2Z2lQcTg5OWhC
eEllRHVaTnNLeEFjQXh0QitPdGYvUWlnQ3gySXlUMlAvWWx1VEVXZTdLeHNtQXJi
S3lHTnhOZU4zU1FESnV5a2pqWFBEUGdqbWVlWnp5UHV4RHBRUUlrREwxNUw5cGJY
ZGovOFZ5aVJKZ2lWTE5qZHd0bWErNnk4WkVTQWcwdmdzQnZ0cEtFcUVHRVl6bWZG
c1NJNjFxYk91TmZsamYrcHFBOGNyZkN2YW9xdjZORmdUNldoS0IwamZadVM5VHFR
NEhBak10bkpOUnJ4dlkyemR1Q1hPMDhBWDUrbFF1T1p0eStFUUpRTHZBcy83Ulcv
NWpxcVlSeVZUWE9HSTJaWnJIRnVXNElnYlVUTE5KU1kwaTFtSWFTbFIxMXl2R3dU
cUlWZFVZRTJJVm9LSG01c1M1YTBQbWVTYStzMktobHlXdUF3eDBFelJIWS93TGRI
MkxFcEJOVSt3UHFZSlhjWFNMeFRldWZSNFM3eGF2QnFqN3VjZC9kc3pSQ3pCSTNU
Mi9tK1V5TC9pYnpFUjRya1VYYzVWSWhuejV0S0RZSGMvbzhVbnZmT01uaHNqU1VQ
ZjdNOUgra1VDL0tIODllZS9BVHhCd0JqZEFnQUEwEwYKKwYBBAHWeQIEAwEB/wQC
BQAwDQYJKoZIhvcNAQELBQADggIBABoBDQ12VcyrSz41/XcEa7o9WE6dd8/SEHHb
S0gihvBQHG1tk7R+OUtHxRfPRUDfsmM0MKCgbwrIGjZZwCeURUS+UoONznhCIGW2
ts2vFpWAW2zR84bFpPCRMR/hQ5Dqnfa+Na6xsz/UH3RM3cKasbl6DYFB98pNREIA
bnwC2KeAGleEEXn0Av95FJEee+785VUPSljbcjy4CMh2sF3q3q7Ar0nolCQIfHpi
spQ8RgLvC8SMaMe4CHx29u/ElGsv/iWBH27CN48GlhTRXVLTGPtOkLTkTxreTjfk
0ZJ+pYidGY1LqgcM8eNE//UTzO7mUaO1hhqCudy8SCkYIjrw5JhmSSpnkkQyzERn
SgfzdLX1we93GFbZlbIrP+SRbOrbqJicQ4X8OcnfdMnkgOwbaoEiMtJ3sIfV4eRS
ha2O7VnLA0NVDDH/JM+dTS17T5pyNTQdgB0PzRjbNqAQKxr8TNwhR0GXdZv+b9eQ
Pa+qJR8v3XApkUGx0S5qMvFptF1WUxKS/y0tqkLnLk2R1qt3pni0COSar7NRKit1
9NGYy5hlVOqbYbvYjDQdTh6K7ngeu4Rto5+rIF1vG6S5PbBNtD90uQ8xIMfNB37f
5fDMCKFm+wRWI011t5eEzx3aXqvJZYrKqCT87JIJlmgiFDbgcNp2+D8MupZr3ewF
8zHu9M2O
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMMkcFbZ2qgV8G/HxmSp
vRz33eqVqxG8xggrcTyStPToKjJTFV5NgLTJ0VbEETkzSxHTL8d2hg5Pj9JB9Fwk
4rMDCKewRpCZh2qwTg6uCcnqZZ/CLTVgX8pnpyEH9Ka79PMa3XIx/xGMY2f+sh0w
o7kSFUr2RMYfqYxtBXSva7PLmggGl5TSfDqpJvtUZW1KowFhm2WSNL8hJNLTNhjr
z9f+NkqsC5QQBLx5PgaRKbdEinDr7QgcAy59OfmDacj2+QpJkbAaFIurYPXM2vyl
ThbjTfV6Kqlh3EwoUsYLX8LnCUyvxaDTe+pjdXr9+XWg0HPrdgIAlWpC9kNP05Ke
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15291227937525755704258114664386708410
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark Europe RSA4096 SHA256 2023 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Charlottenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 158855'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Valeska-Gert-Str. 5'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zalando SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zalando SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '302017004909'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18274544189029663008989969908244860008597501119936896928839553912134062446793839053603838067385630793373805401086954531417338848344074852652542591843160673702619980873785257080482810709762976645553019403009476561711193806193921855329408355817859467336301725144878288840140556061607140472300037360424212602720009412137625252910113892363761446388840526102936597066154135268262158981485497042385280380162764150490103905664500322555301441833572150421114483834199733916315069173000260763765864173872719025776393334907895650095914851316022026223708835759882851716818927417323142938507586974745614318343109873753928605277843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14cab5ece914ea974e4722fc157cbcb7633b442f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d5138a3a086f34f196d0f1e01c3c1a2d9336408
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (880 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lounge.zalando.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lounge.zalando.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lounge.zalando.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lounge.zalando.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lounge.zalando.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lounge.zalando.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lounge.zalando.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lounge.zalando.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lounge.zalando.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lounge.zalando.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prive.zalando.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prive.zalando.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prive.zalando.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-mail.zalando-lounge.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.zalando-lounge.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.zalando-lounge.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.zalando-lounge.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-mail.zalando-prive.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-mail.zalando-prive.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-mail.zalando-prive.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-mail.zalando-lounge.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-mail.zalando-lounge.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-mail.zalando-lounge.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-mail.zalando-lounge.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-mail.zalando-lounge.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-mail.zalando-lounge.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-mail.zalando-lounge.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-mail.zalando-lounge.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-mail.zalando-lounge.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-mail.zalando-lounge.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-mail.zalando-lounge.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-mail.zalando-lounge.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-mail.zalando-lounge.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lounge.zalando.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.eu/DigiCertVerifiedMarkEuropeRSA4096SHA2562023CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.eu/DigiCertVerifiedMarkEuropeRSA4096SHA2562023CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (766 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															ff404d061b3bfdc0798b4d03b6f0281af218815b
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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