sso.funkemedien.de
- FUNKE Corporate IT GmbH -
Issued by SwissSign RSA TLS OV ICA 2021 - 1
About this certificate
This digital certificate with serial number 57:73:e6:ae:86:7f:52:d9:1d:bc:f8:32:89:6e:52:d0:f4:a6:51:79 was issued on by SwissSign AG.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
FUNKE Corporate IT GmbH
Organization:
FUNKE Corporate IT GmbH
State / Province:
Nordrhein-Westfalen
Locality: Essen
Country: DE
Locality: Essen
Country: DE
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate has expire since
Certificate Details
Serial Number (hex): 57:73:e6:ae:86:7f:52:d9:1d:bc:f8:32:89:6e:52:d0:f4:a6:51:79Serial Number (int): 499266877973178862865096421622150141582762201465
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: 13:c4:67:d9:b0:02:3c:c0:79:65:04:36:81:ef:08:a7:35:69:ec:0d
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d
Fingerprint (sha1): cf:a3:2b:a5:c0:5d:b2:d4:06:6d:71:9f:8d:b7:65:d3:37:ab:9e:2d
Fingerprint (sha256): c7:58:f3:47:5d:25:2b:b0:1b:0b:fd:a7:a0:a3:c8:5e:9a:fd:af:f9:fa:44:bf:43:7d:82:bf:9c:71:7e:2c:44
Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D
Revocation information
OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3DCRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint
Check the revocation status for certificate sso.funkemedien.de
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sso.funkemedien.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sso.funkemedien.de
sso.zgt.de
sso.mediengruppe-thueringen.de
sso.thueringer-allgemeine.de
sso.tlz.de
sso.otz.de
sso.abendblatt.de
sso.derwesten.de
sso.morgenpost.de
sso.bzv-service.de
sso.zgt.de
sso.mediengruppe-thueringen.de
sso.thueringer-allgemeine.de
sso.tlz.de
sso.otz.de
sso.abendblatt.de
sso.derwesten.de
sso.morgenpost.de
sso.bzv-service.de
Other certificates including the domain name funkemedien.de
(limited to 100 certificates)
bzv-medienhaus.de
ws-reservix.funkemedien.de
casproxy.funkemedien.de
funkemedien.de
www.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
www.funkemedien.de
*.funkemedien.de
avmnac02.access.funkemedien.de
dcx.funkemedien.de
dcx.funkemedien.de
bzv-medienhaus.de
extern.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
apnac04v.funkemedien.de
www.funkemedien.de
bzv-medienhaus.de
hadznac01v.funkemedien.de
*.waz.de
portal.dz-hagen.funkemedien.de
www.funkemedien.de
apnac03v.funkemedien.de
*.test.funkemedien.de
mail.funke-medien.de
*.fabo-live.funkemedien.de
*.funkemedien.de
events.funkemedien.de
rd-cb-ha.access.funkemedien.de
aboservice.bildderfrau.de
extern.funkemedien.de
connect.funkemedien.de
*.funkemedien.de
hadznac01v.funkemedien.de
bwv.portal.funkemedien.de
con.funkemedien.de
funkemedien.de
sso.funkemedien.de
bzv-medienhaus.de
bzv-medienhaus.de
expe.funkemedien.de
rdweb.access.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
bzv-medienhaus.de
*.funkemedien.de
dcx.funkemedien.de
*.funkemedien.de
*.funkemedien.de
mail.funkemedien.de
expe.funkemedien.de
connect.funkemedien.de
portal.dz-hagen.funkemedien.de
bzv-medienhaus.de
dcx.funkemedien.de
gate.funkemedien.de
email.funkemedien.de
datenschutz.funkemedien.de
mail.funke-medien.de
digas.axelspringer-syndication.de
*.funkemedien.de
*.funkemedien.de
portal.druckzentrum-essen.funkemedien.de
*.planer.funkemedien.de
blog.funkemedien.de
bwv.portal.funkemedien.de
apnac04v.funkemedien.de
*.funkemedien.de
bwv.portal.funkemedien.de
expe-cluster.funkemedien.de
volontariat.funkemedien.de
*.waz.de
funkemedien.de
mail.funkemedien.de
anzeigen.funkemedien.de
avmnac01.access.funkemedien.de
*.zpr.funkemedien.de
funkemedien.de
www.funkemedien.de
anzeigenbuchung-in-thueringen.de
*.fabo-live.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
*.funkemedien.de
*.waz.de
*.waz.de
dcx.funkemedien.de
aisvxc03.funkemedien.de
app.access.funkemedien.de
bzv-medienhaus.de
*.funkemedien.de
*.funkemedien.de
*.funkemedien.de
webaccess.funkemedien.de
*.waz.de
bzv-medienhaus.de
ausbildung.funkemedien.de
ws-reservix.funkemedien.de
casproxy.funkemedien.de
funkemedien.de
www.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
www.funkemedien.de
*.funkemedien.de
avmnac02.access.funkemedien.de
dcx.funkemedien.de
dcx.funkemedien.de
bzv-medienhaus.de
extern.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
apnac04v.funkemedien.de
www.funkemedien.de
bzv-medienhaus.de
hadznac01v.funkemedien.de
*.waz.de
portal.dz-hagen.funkemedien.de
www.funkemedien.de
apnac03v.funkemedien.de
*.test.funkemedien.de
mail.funke-medien.de
*.fabo-live.funkemedien.de
*.funkemedien.de
events.funkemedien.de
rd-cb-ha.access.funkemedien.de
aboservice.bildderfrau.de
extern.funkemedien.de
connect.funkemedien.de
*.funkemedien.de
hadznac01v.funkemedien.de
bwv.portal.funkemedien.de
con.funkemedien.de
funkemedien.de
sso.funkemedien.de
bzv-medienhaus.de
bzv-medienhaus.de
expe.funkemedien.de
rdweb.access.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
bzv-medienhaus.de
*.funkemedien.de
dcx.funkemedien.de
*.funkemedien.de
*.funkemedien.de
mail.funkemedien.de
expe.funkemedien.de
connect.funkemedien.de
portal.dz-hagen.funkemedien.de
bzv-medienhaus.de
dcx.funkemedien.de
gate.funkemedien.de
email.funkemedien.de
datenschutz.funkemedien.de
mail.funke-medien.de
digas.axelspringer-syndication.de
*.funkemedien.de
*.funkemedien.de
portal.druckzentrum-essen.funkemedien.de
*.planer.funkemedien.de
blog.funkemedien.de
bwv.portal.funkemedien.de
apnac04v.funkemedien.de
*.funkemedien.de
bwv.portal.funkemedien.de
expe-cluster.funkemedien.de
volontariat.funkemedien.de
*.waz.de
funkemedien.de
mail.funkemedien.de
anzeigen.funkemedien.de
avmnac01.access.funkemedien.de
*.zpr.funkemedien.de
funkemedien.de
www.funkemedien.de
anzeigenbuchung-in-thueringen.de
*.fabo-live.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
*.funkemedien.de
*.waz.de
*.waz.de
dcx.funkemedien.de
aisvxc03.funkemedien.de
app.access.funkemedien.de
bzv-medienhaus.de
*.funkemedien.de
*.funkemedien.de
*.funkemedien.de
webaccess.funkemedien.de
*.waz.de
bzv-medienhaus.de
ausbildung.funkemedien.de
Certificate
The complete raw certificate details for sso.funkemedien.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKwzCCCKugAwIBAgIUV3PmroZ/UtkdvPgyiW5S0PSmUXkwDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgT1YgSUNBIDIwMjEgLSAxMB4XDTIyMDkwODA5 MTUzM1oXDTIzMDkwODA5MTUzM1owejELMAkGA1UEBhMCREUxHDAaBgNVBAgTE05v cmRyaGVpbi1XZXN0ZmFsZW4xDjAMBgNVBAcTBUVzc2VuMSAwHgYDVQQKExdGVU5L RSBDb3Jwb3JhdGUgSVQgR21iSDEbMBkGA1UEAxMSc3NvLmZ1bmtlbWVkaWVuLmRl MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkXF840ZJmP6K2VhljSp 0FGbDbfkaghyrNoRt/p4lNxb9nYALKBJ88vgpH9VWrsSKeQuZrCEUgCW+HUJNEKp OkB67gciJKiRsllUKsXu5S4woyVk6NNULHh0t1iEm6Em9NOKOm+G2UirCdDmw5B6 j6QNBwqB+Io5QMljMtPpe9JXdwO4O/FzFEx2LSw2yl8lX/a6pSA57z2/nO4Psyuc 6rTpxz06gLpIHk8qRgE78/UxrKqDo5HJUtxMvViRSdo96NJz7++K6w3aKRYJjH7l 4ZwyGZk+NrOxKhsIIBjRC+ExyPQjqaX1K9ZG7cxicSOqhQemaDElcBz7OIKhe1uF 3wIDAQABo4IGaTCCBmUwgc0GA1UdEQSBxTCBwoISc3NvLmZ1bmtlbWVkaWVuLmRl ggpzc28uemd0LmRlgh5zc28ubWVkaWVuZ3J1cHBlLXRodWVyaW5nZW4uZGWCHHNz by50aHVlcmluZ2VyLWFsbGdlbWVpbmUuZGWCCnNzby50bHouZGWCCnNzby5vdHou ZGWCEXNzby5hYmVuZGJsYXR0LmRlghBzc28uZGVyd2VzdGVuLmRlghFzc28ubW9y Z2VucG9zdC5kZYISc3NvLmJ6di1zZXJ2aWNlLmRlMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFBPEZ9mwAjzA eWUENoHvCKc1aewNMB8GA1UdIwQYMBaAFKzQOsLCV1WRaRHMcGpZOIqMrJw9MIH/ BgNVHR8EgfcwgfQwR6BFoEOGQWh0dHA6Ly9jcmwuc3dpc3NzaWduLm5ldC9BQ0Qw M0FDMkMyNTc1NTkxNjkxMUNDNzA2QTU5Mzg4QThDQUM5QzNEMIGooIGloIGihoGf bGRhcDovL2RpcmVjdG9yeS5zd2lzc3NpZ24ubmV0L0NOPUFDRDAzQUMyQzI1NzU1 OTE2OTExQ0M3MDZBNTkzODhBOENBQzlDM0QlMkNPPVN3aXNzU2lnbiUyQ0M9Q0g/ Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdD9iYXNlP29iamVjdENsYXNzPWNSTERp c3RyaWJ1dGlvblBvaW50MG8GA1UdIARoMGYwUAYIYIV0AVkCAQIwRDBCBggrBgEF BQcCARY2aHR0cHM6Ly9yZXBvc2l0b3J5LnN3aXNzc2lnbi5jb20vU3dpc3NTaWdu X0NQU19UTFMucGRmMAgGBgQAj3oBBzAIBgZngQwBAgIwgcYGCCsGAQUFBwEBBIG5 MIG2MGQGCCsGAQUFBzAChlhodHRwOi8vc3dpc3NzaWduLm5ldC9jZ2ktYmluL2F1 dGhvcml0eS9kb3dubG9hZC9BQ0QwM0FDMkMyNTc1NTkxNjkxMUNDNzA2QTU5Mzg4 QThDQUM5QzNEME4GCCsGAQUFBzABhkJodHRwOi8vb2NzcC5zd2lzc3NpZ24ubmV0 L0FDRDAzQUMyQzI1NzU1OTE2OTExQ0M3MDZBNTkzODhBOENBQzlDM0QwggLmBgor BgEEAdZ5AgQCBIIC1gSCAtIC0AB2AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+j qh0HE9MMAAABgxxiFoEAAAQDAEcwRQIhAMxT1E74m5FAak0Pgt5SxTrG5f5VPjyQ Wj+/bIA9/GOAAiBXZsyDHG8elt39Li+2OqOiHgd5ilqWgMDZaEqaEw1Q1QB3AG9T dqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABgxxiFUQAAAQDAEgwRgIh ANmAchcZlvoI9fuKrrqr78jQsylTIA/+5If+YOPKLQFuAiEA6kGOOUG9v9A0eE0s km9G8JCVy94FlXQyLDNNeS+Yi6EAdQB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9Ir wTpXo1LrUgAAAYMcYhUyAAAEAwBGMEQCIH/d0H02J9tWkow1SSgVBR36s7C5xU6P X2O2ZK74DuA1AiBfpfehmRB4bF68lLpT946HQMuOmeAGFepEuCkYp2AcTgB2AK33 vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABgxxiFUQAAAQDAEcwRQIg YfHsicb+06TFNZY0XBB58/afHlGz7Xv6quwnaOZtMMoCIQDOyZRBjrlEtvmwdNGj EBxGJIPY7a9Z9qhsoaSwzRg0nwB2ALNzdwfhhFD4Y4bWBancEQlKeS2xZwwLh9zw Aw55NqWaAAABgxxiF4EAAAQDAEcwRQIhAOgX1t60DtuRNfqaJuwVWd611QxBWFW3 yhDxWdxU8ticAiBEXgnQz/LxKXgdC3XsZFybPCZ+eHri8OyNdY3IgcshsgB2AOg+ 0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABgxxiFV0AAAQDAEcwRQIh ANHa8eFs+WHjf3kqQWRfWwwB/uB8c9NEy7hqT58ZCUAhAiAyoJj5PO4FghfMycln jYVk+27C0C9rxd0TRG9onz1LizANBgkqhkiG9w0BAQsFAAOCAgEAFZH8wILBliWY 9Bfkv5WUXpmtVjlpdr6macKOqakQRiD8h6X5emrPfF0giC4ZLVBgg1KCv6iq/2De Ls91m9PyABvfeEJrGqzAvCzpcwJ0gbL4BWkD9U8vnsZJa43D2TDTw7rX0aEUiT1+ Wgwzs69wItR9wn66dIYCRutPGc07/sw4n1ICZPcnAv0GWp3+wA7dPcPj08cSF+YW lqr8hJSFK2P0zLlQ+bPKvkl4MC5hD9oAMTFLu7kVYXkgtSXT5sF9Og8OhWNHK0Hu mTu9Mt44mV7VhPLRsD6S6gdv6ntU4JVlel058PNx6NoBZtPh2zcRgbwCstiqpt9D tF29LOFEw7YDuLx972gbj2kzKz+yeRGnfjMcowCKW2i2UWQWJFrhwedmlBwTwKCQ cw/Xzwe74jl9wa+/Hfs3lZlrI34KHpmar0TFxNY5ziuDfOyp8b4joK5ILAazcibO lhKS/1ODiHhvEDi6udxSFXC4t+ENx1Bgr9vKhqTxQ49/kunFzAVpvTavLk6oJL6w 8KpkLYa/fm9ssT/X8LO0hoqkwMCyMLwd824W3P66H/QI454Wf8SB7N/4tN2l2CcX x0iOjT3KXTuUn/CXuV5KgogQuAuZGJ+tHbK+f3UOB2/ksqbMPB3qR6nnOc13/ihn D5Xs9xjl5nQNSuiUslKJuNdwW1IiK+k= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkXF840ZJmP6K2VhljSp 0FGbDbfkaghyrNoRt/p4lNxb9nYALKBJ88vgpH9VWrsSKeQuZrCEUgCW+HUJNEKp OkB67gciJKiRsllUKsXu5S4woyVk6NNULHh0t1iEm6Em9NOKOm+G2UirCdDmw5B6 j6QNBwqB+Io5QMljMtPpe9JXdwO4O/FzFEx2LSw2yl8lX/a6pSA57z2/nO4Psyuc 6rTpxz06gLpIHk8qRgE78/UxrKqDo5HJUtxMvViRSdo96NJz7++K6w3aKRYJjH7l 4ZwyGZk+NrOxKhsIIBjRC+ExyPQjqaX1K9ZG7cxicSOqhQemaDElcBz7OIKhe1uF 3wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 499266877973178862865096421622150141582762201465 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-08 09:15:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-08 09:15:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Essen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FUNKE Corporate IT GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sso.funkemedien.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25029590853991191837832784619801167123797524677072094363325289112745678823606644376977262821484622468734248277751337198503229463570369854377488229481613215141292080603048265795815149391623428497581938411530631391749991079365323390065072376379865404589184861722945170849751367861921298959319386015495162094232641897959965598266657833764003732005688657875655845917267784085704817038058148469568924836431077198477054951621347905841615578709808344210949793525280267464017628758773206886663408669182473942213337603718974230708861271694774567897126868951344035128976635342521343330277665602448681251402490962466872772756959 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (197 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.funkemedien.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.zgt.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.mediengruppe-thueringen.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.thueringer-allgemeine.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.tlz.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.otz.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.abendblatt.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.derwesten.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.morgenpost.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.bzv-service.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 13c467d9b0023cc07965043681ef08a73569ec0d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (726 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (722 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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