mail.funke-medien.de

- FUNKE Corporate IT GmbH -

Issued by SwissSign Server Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 53:c8:9f:75:78:2a:57:f6:88:16:a4:50:1f:50:f0:f9:2f:b8:f2:ae was issued on by SwissSign AG.

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FUNKE Corporate IT GmbH

Organization: FUNKE Corporate IT GmbH
Organization unit: Netzwerk und Sicherheit
State / Province: Nordrhein-Westfalen
Locality: Essen
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 53:c8:9f:75:78:2a:57:f6:88:16:a4:50:1f:50:f0:f9:2f:b8:f2:ae
Serial Number (int): 478320273844312104832804321289654825365913793198
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 5b:8e:74:91:d2:82:bd:f1:32:8b:87:61:17:79:ca:90:a5:2d:48:3a
AuthorityKeyId: e7:f1:e7:fd:2e:53:ad:11:e5:81:1a:57:a4:73:8f:12:7d:98:c8:ae

Fingerprint (sha1): 1b:99:b6:28:c3:63:6c:8a:8b:61:ef:8e:82:b8:54:d1:55:a9:9a:77
Fingerprint (sha256): 8d:2c:f2:b4:eb:6a:ea:42:43:d7:fc:1a:ad:6f:23:13:7a:e0:06:3a:0d:9e:d3:a2:4d:ab:e7:bb:78:f9:db:4e

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE

Revocation information

OCSP Server: http://ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate mail.funke-medien.de

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.funke-medien.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.funke-medien.de
*.funke-medien.de
*.abendblatt.de
*.bergedorfer-zeitung.de
*.berliner-woche.de
*.berliner-wochenblatt.de
*.bildderfrau.de
*.dasistberlin.de
*.fm-abendblatt.de
*.fmgres.de
*.funkemedien.de
*.hamburger-wochenblatt.de
*.hoerzu.de
*.morgenpost.de
*.niendorfer-wochenblatt.de
*.nie-wo.de
*.spandauer-volksblatt.de
*.technik-bz.de
*.tvdigital.de
*.wbv-dz.de
autodiscover.eilt.abendblatt.de
autodiscover.eilt.morgenpost.de
autodiscover.wj.abendblatt.de
abendblatt.de
bergedorfer-zeitung.de
berliner-woche.de
berliner-wochenblatt.de
bildderfrau.de
dasistberlin.de
fm-abendblatt.de
fmgres.de
funkemedien.de
funke-medien.de
hamburger-wochenblatt.de
hoerzu.de
morgenpost.de
niendorfer-wochenblatt.de
nie-wo.de
spandauer-volksblatt.de
technik-bz.de
tvdigital.de
wbv-dz.de

Other certificates including the domain name funke-medien.de

(limited to 100 certificates)
mail.funke-medien.de
logs-grpc.zpr.funke-medien.de
mail.funke-medien.de
mail.funke-medien.de
ftp.funke-medien.de
*.zpr.funke-medien.de
*.zpr.funke-medien.de
mail.funke-medien.de
proxy.funke-medien.de
mail.funke-medien.de
vpn.funke-medien.de
*.zpr.funke-medien.de
esnac01v.funkemedien.de
esnac01v.funkemedien.de
mail.funke-medien.de
mail.funke-medien.de
vpn.funke-medien.de
proxy.funke-medien.de
*.zpr.funke-medien.de
*.zpr.funke-medien.de
*.zpr.funke-medien.de
mail.funke-medien.de
proxy.funke-medien.de
vpn.funke-medien.de
proxy.funke-medien.de

Certificate

The complete raw certificate details for mail.funke-medien.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4oDSmHA+vXwopVUKPrl
/7x5NxjiNxUSj2gmL1xMbB+bjeTcAowyNREcpR9sf6sJQF8OjgnxdxuxHdXNPVMM
PJVb/hlPEjW/8TfTl1KORbwl0TFIkrJKN0Zn8ETm0HjUcyYr3u4lDLakZSCDCcpJ
oW1EBGDr3r9y9Olwp0IJraI4ZtXtyxizwX+t9LzGjmUzGZGEvDmIWkfrIcpVf/5w
0DpUrXx7Uyzg+3vjO7WHRDDkT7SsGmeZ9ZhDV3/DRuauK0Kv+Z6yOyp+5Geoa3xp
v1Co7GlfFVEcfwLzlmES8tm36EWAquyHA+mL6mdS3mwRyus1MisJyRztVQXLn7Mw
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 478320273844312104832804321289654825365913793198
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-14 14:45:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-14 14:45:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FUNKE Corporate IT GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Netzwerk und Sicherheit'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.funke-medien.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20644900384147327481231891649315811686862338059047337170593078805161805430963748755973353815862041311243494010585475635667857054324378064753781163800282641816661189980733494865113414490520181811445848614007521358111057121488274585157182119207977339179133414181205433805089226166032400972794199813618613285108815746594723604918967125262062094345812326763491148372390683017797895350719356772844709118100966163527897531493586477559531158665671511129319023486244182752970019346074029424652097302668469713893808312677859355163340616749401182270189609760713381428933393559861990380008961063593873685671364616319182197436439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (827 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.funke-medien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funke-medien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abendblatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bergedorfer-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.berliner-woche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.berliner-wochenblatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bildderfrau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dasistberlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fm-abendblatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fmgres.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hamburger-wochenblatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoerzu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morgenpost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.niendorfer-wochenblatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nie-wo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spandauer-volksblatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.technik-bz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvdigital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wbv-dz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eilt.abendblatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eilt.morgenpost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.wj.abendblatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abendblatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bergedorfer-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berliner-woche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berliner-wochenblatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bildderfrau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dasistberlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fm-abendblatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmgres.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funke-medien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamburger-wochenblatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoerzu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morgenpost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niendorfer-wochenblatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nie-wo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spandauer-volksblatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technik-bz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvdigital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbv-dz.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b8e7491d282bdf1328b87611779ca90a52d483a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e7f1e7fd2e53ad11e5811a57a4738f127d98c8ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.13
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							01df0075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a8000001748d13c6c1000004030046304402202bbd4352839f416d11d015c90e75b566edefde020cab42cb17c481935e6e79f902205468616de42f9560114daf77c0bd3a73e461c94a2448a0a6813e20f6c271af590076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001748d13c792000004030047304502204c6102daee87cdd40a326ba3aa31a5cdd02ac23d16f8614d597735a217080f46022100c34b3701528feabc9c3998da216fa099f385f39ce13744b49cbb11d5b9b574fd0075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001748d13af3e00000403004630440220712bf6eaf6508d349585e763cfacadc7d9a47132ea70ed99f1014bd78061cd320220332923f9a13a629a55be03e3a74868d783e709643776c860a4b186aced93dda6007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001748d13afa30000040300483046022100fad07b1bf394b7848a24fbcb0c320849de1469aae353b639ad0c01bdf6fc010e022100e12bb7277da8ab608a097976140e8cb15fe4e75d3637e1a6910a16c2f76f6030
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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