staging.kitkat.de

Issued by Nestle External CA

About this certificate


This digital certificate with serial number 2e:40:d8:22:00:01:00:00:30:08 was issued on by Nestle .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: KeyUsage extension SHOULD be marked as critical when present
  • WARNING: Certificate contains unknown extension ([1.2.840.113549.1.9.15])

Nestle

Organization: Nestle
Organization unit: Globe
State / Province: Vaud
Locality: Vevey
Country: CH

Nestle

Organization: Nestle
Organization unit: IS/IT
State / Province: Vaud
Locality: Vevey
Country: CH

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 2e:40:d8:22:00:01:00:00:30:08
Serial Number (int): 218425023843186786709512
Serial Number lenght: 78 bits, 10 octets

SubjectKeyId: 9d:31:53:dc:ce:f1:5b:77:9f:1c:92:58:96:ba:54:bf:02:30:f3:6f
AuthorityKeyId: ab:12:9a:d0:62:96:3b:a6:95:83:ee:54:26:a8:cd:d7:6f:71:0b:e2

Fingerprint (sha1): 4f:b9:8e:0b:6c:fd:bc:93:0b:ae:8d:09:68:1a:33:5f:c5:4f:17:3d
Fingerprint (sha256): 3f:5a:a0:a1:fb:2f:ae:da:34:80:49:c6:fc:44:d6:36:7f:05:f7:60:e7:07:76:68:b3:0e:6d:87:33:27:e2:95

Issuing Certificate URL: http://crl.nestle.com/Nestle%20External%20CA(1).crt

Revocation information

OCSP Server: http://ocsp.nestle.com/ocsp
CRL Distribution Point: http://crl.nestle.com/Nestle%20External%20CA(1).crl

Check the revocation status for the current certificate on staging.kitkat.de
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: staging.kitkat.de

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGoDCCBIigAwIBAgIKLkDYIgABAAAwCDANBgkqhkiG9w0BAQUFADCBljELMAkG A1UEBhMCQ0gxDTALBgNVBAgTBFZhdWQxDjAMBgNVBAcTBVZldmV5MQ8wDQYDVQQK EwZOZXN0bGUxDjAMBgNVBAsTBUlTL0lUMRswGQYDVQQDExJOZXN0bGUgRXh0ZXJu YWwgQ0ExKjAoBgkqhkiG9w0BCQEWG3BraS1zZWN1cml0eS1leHRAbmVzdGxlLmNv bTAeFw0xNDA0MTExMzA2MTVaFw0xNzA0MTAxMzA2MTVaMGkxCzAJBgNVBAYTAkNI MQ0wCwYDVQQIEwRWYXVkMQ4wDAYDVQQHEwVWZXZleTEPMA0GA1UEChMGTmVzdGxl MQ4wDAYDVQQLEwVHbG9iZTEaMBgGA1UEAxMRc3RhZ2luZy5raXRrYXQuZGUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnaUKPUW1nid/8vt2+mznrlqvs nvvwxRvFroUj3RyPPrYmJD4hJBS8IVCb9D6j+L03NNTJD0OEYH1ED0RFAcHARf8m 1qaBifgprZtl6RaTgugZvbtcH2MzPy7EyK2xJhm7kkRw+AlAIFfmsGJoqXWl9Gtg bnDyW1M3XDCzxPAACY+cWpMZXmhrHLO1q6XIsc5l5Ckq+L5tAmGhZTQu4XCC/gUa 3DYfLE9+5gELsFXnbMB1uPWc70DJpeDBQI5vjj4UwxQPtNiwG67cwHfhAOa9H+F0 LuYzPbbNdzHZl3JE51CrUnhaVdX/fquIZcsb8eJQpw92k95rKert0MghJnfNAgMB AAGjggIaMIICFjALBgNVHQ8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEweAYJ KoZIhvcNAQkPBGswaTAOBggqhkiG9w0DAgICAIAwDgYIKoZIhvcNAwQCAgCAMAsG CWCGSAFlAwQBKjALBglghkgBZQMEAS0wCwYJYIZIAWUDBAECMAsGCWCGSAFlAwQB BTAHBgUrDgMCBzAKBggqhkiG9w0DBzAdBgNVHQ4EFgQUnTFT3M7xW3efHJJYlrpU vwIw828wHwYDVR0jBBgwFoAUqxKa0GKWO6aVg+5UJqjN129xC+IwRAYDVR0fBD0w OzA5oDegNYYzaHR0cDovL2NybC5uZXN0bGUuY29tL05lc3RsZSUyMEV4dGVybmFs JTIwQ0EoMSkuY3JsMHgGCCsGAQUFBwEBBGwwajA/BggrBgEFBQcwAoYzaHR0cDov L2NybC5uZXN0bGUuY29tL05lc3RsZSUyMEV4dGVybmFsJTIwQ0EoMSkuY3J0MCcG CCsGAQUFBzABhhtodHRwOi8vb2NzcC5uZXN0bGUuY29tL29jc3AwPQYJKwYBBAGC NxUHBDAwLgYmKwYBBAGCNxUIh6bQIoKMmAqG1YsMhZ66G4TTlQ12hOrMC4HF3EIC AWQCAQswGwYJKwYBBAGCNxUKBA4wDDAKBggrBgEFBQcDATAcBgNVHREEFTATghFz dGFnaW5nLmtpdGthdC5kZTANBgkqhkiG9w0BAQUFAAOCAgEApj/WazchF9Rqa/U2 TUtuLLXY0/lCai301oh6H0Ip099wde69TEmB2esDqn6eog4Zh96B87ur2PklJFFT Uy0SzNFIIvZp7sYn7N0qL6KTppN62SXF7vVjRP3ZPFm+8XmR0zQfIS0M1S9wiQfG 8LdERKQotIpVNmCeWZXP14kqrNBvSDy2mEu+Biupnvw2Vu9Sx8Al5xsjNeYUVRyD EyG1UF34K1UwfF5VyoDW+d7e9Bc4BKcNZyfHlUFJWtjEhjhz74awcYJHYTOjsF+r /sRkh6Qo6rVjfinO4gH1/WSvL9ELimvr5wtNOdfvlES6nhEt7wD5WyD4PE72pG/+ VVD8Ebl6mTvKtjJpqpsebgHJpaGnYTcw0eZvvwX3vjfKzlCao3PZ6jAgk97CeOPf zCAaopY6LxMmcEft4/PY1RQMUw7ucXXJvH+cK9bvyMoTyTh3luPykNalQj310BU4 4EPFHs8v1UawhiOMq0F234tgHojvBN8PR2Emdha4Syz4RQDjZMjqa3SdVxZ352V4 66RdX6GKr3iMmQcEnjlsLm+49WrJmnc2t2leSKVNPQxKxW7REPuvyPnpgHKG1DuE 4j2jRfmFTAsbGCCj8B0gPcV29WQdnzYd+oLSTSexvaj1vc/DiRyHJXT0i6cwkxYn 4kRXljjXDrbNtaxVFngDmOE1JHg= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2lCj1FtZ4nf/L7dvps5 65ar7J778MUbxa6FI90cjz62JiQ+ISQUvCFQm/Q+o/i9NzTUyQ9DhGB9RA9ERQHB wEX/JtamgYn4Ka2bZekWk4LoGb27XB9jMz8uxMitsSYZu5JEcPgJQCBX5rBiaKl1 pfRrYG5w8ltTN1wws8TwAAmPnFqTGV5oaxyztaulyLHOZeQpKvi+bQJhoWU0LuFw gv4FGtw2HyxPfuYBC7BV52zAdbj1nO9AyaXgwUCOb44+FMMUD7TYsBuu3MB34QDm vR/hdC7mMz22zXcx2ZdyROdQq1J4WlXV/36riGXLG/HiUKcPdpPeaynq7dDIISZ3 zQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 218425023843186786709512 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vaud' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vevey' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nestle' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IS/IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nestle External CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-11 13:06:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-10 13:06:15 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vaud' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vevey' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nestle' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Globe' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging.kitkat.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21133702569566050767230385907691732323644710201721141605968480182794399660908251095124313020728176677974722959312407288234338861890170234580558480072120556957108143787940491198438536906538736180729666198384538908700632860647326269063289001912942058291688710147643777335225177479043373521228299214286874112980230687994210163967750160749042973472754208097550796480789201499344188919682972463498684526776129839278910423659892407874117065938082151426881319153827926643349987721839309765565463375871035952860282926074628434831610014374763581319351245125237751929105976644435820650174258795506879988732746757122673179260877 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.15 (sMIMECapabilities) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.2 (rc2CBC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 128 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.4 (rc4) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 128 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.42 (aes256-CBC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.45 (aes256-wrap) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.2 (aes128-CBC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.1.5 (aes128-wrap) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.7 (desCBC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.3.7 (des-EDE3-CBC) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9d3153dccef15b779f1c925896ba54bf0230f36f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ab129ad062963ba69583ee5426a8cdd76f710be2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.nestle.com/Nestle%20External%20CA(1).crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.nestle.com/Nestle%20External%20CA(1).crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.nestle.com/ocsp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15312930.4393994.13976972.10984731.9751181.118.10135051.3239490 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 11 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.kitkat.de' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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