*.zgt.de

- FUNKE Corporate IT GmbH -

Issued by SwissSign Server Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 1a:35:db:a9:ca:0f:f1:d3:1f:6d:b7:08:53:86:22:6f:b1:3e:30:2d was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FUNKE Corporate IT GmbH

Organization: FUNKE Corporate IT GmbH
Organization unit: Netzwerk und Sicherheit
State / Province: Nordrhein-Westfalen
Locality: Essen
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 1a:35:db:a9:ca:0f:f1:d3:1f:6d:b7:08:53:86:22:6f:b1:3e:30:2d
Serial Number (int): 149634834903867860178193541704300500372758081581
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 11:28:f4:02:a7:dc:0b:f6:fa:65:c3:00:7d:fb:bd:ab:99:9b:5c:80
AuthorityKeyId: e7:f1:e7:fd:2e:53:ad:11:e5:81:1a:57:a4:73:8f:12:7d:98:c8:ae

Fingerprint (sha1): 69:3c:ff:2b:e4:2e:98:f7:66:0a:80:47:1d:59:b1:39:e1:18:43:2d
Fingerprint (sha256): d7:c4:ae:48:fc:8f:de:eb:8a:3a:ec:0c:13:8c:0b:5f:63:c0:bc:e8:b7:47:93:90:90:cb:a5:22:b2:52:f2:b9

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE

Revocation information

OCSP Server: http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate *.zgt.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.zgt.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.zgt.de
zgt.de

Other certificates including the domain name zgt.de

(limited to 100 certificates)
sso.zgt.de
secure.zgt.de
mediaservice.zgt.de
*.zgt.de
sso.zgt.de
anzeigen.thueringer-allgemeine.de
anzeigen.thueringer-allgemeine.de
*.services.extern.zgt.de
lesershop.zgt.de
media101.zgt.de
extranet.zgt.de
*.zgt.de
mediaservice.zgt.de
secure.zgt.de
sso.zgt.de
*.zgt.de
sso.zgt.de
lesershop.zgt.de
anzeigen.thueringer-allgemeine.de
extranet.zgt.de
*.services.extern.zgt.de
sso.zgt.de
*.zgt.de
anzeigen.thueringer-allgemeine.de
secure.zgt.de
selligentdata.services.extern.zgt.de
sso.zgt.de
extranet.zgt.de
bestatter.zgt.de
*.zgt.de
sso.funkemedien.de
mediaservice.zgt.de
bestatter.zgt.de
sso.zgt.de
*.services.extern.zgt.de
sso.funkemedien.de
*.zgt.de
anzeigen.thueringer-allgemeine.de
newsapp.services.extern.zgt.de
extranet.zgt.de
*.zgt.de
sso.funkemedien.de
*.zgt.de
media101.zgt.de
anzeigen.thueringer-allgemeine.de
media101.zgt.de
anzeigen.thueringer-allgemeine.de
*.services.extern.zgt.de

Certificate

The complete raw certificate details for *.zgt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIITTCCBzWgAwIBAgIUGjXbqcoP8dMfbbcIU4Yib7E+MC0wDQYJKoZIhvcNAQEL
BQAwUjELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEsMCoGA1UE
AxMjU3dpc3NTaWduIFNlcnZlciBHb2xkIENBIDIwMTQgLSBHMjIwHhcNMTkwODEz
MDY0ODE3WhcNMjEwODEzMDY0ODE3WjCBkjELMAkGA1UEBhMCREUxHDAaBgNVBAgT
E05vcmRyaGVpbi1XZXN0ZmFsZW4xDjAMBgNVBAcTBUVzc2VuMSAwHgYDVQQKExdG
VU5LRSBDb3Jwb3JhdGUgSVQgR21iSDEgMB4GA1UECxMXTmV0endlcmsgdW5kIFNp
Y2hlcmhlaXQxETAPBgNVBAMMCCouemd0LmRlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA2QYZfZgHBVCH1aIE6w7jezFl6NRRthWODv4vqlgMdkbJH8KT
WZbF1kUwFs1nobIEN3MghbZia0Lmm72wi1qHsE+GBN+fwmUqxY5FRkhOyfb0IwSC
UZtGgzQdd8cu7gecj21BwuPcWyarJDLf0c82OvBylGpnkF1eE9VLzlJ02vJ6tnmF
R/mVpQ6U6mODuiNYSYQELtJYqYOCKo8qMwbZhNzOXmF/KDpWucdLBriX5mH9P+3p
MkwbIEyEc9tXLbYTECsnQvgOitRzQA2nDoy3HeCNp4qtXJiiJ9/4DHq0ZCfy+kb5
h7wM6h9wID2gK4EFcXX9C1f9cRYXUls5Nzno2wIDAQABo4IE2DCCBNQwGwYDVR0R
BBQwEoIIKi56Z3QuZGWCBnpndC5kZTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBQRKPQCp9wL9vplwwB9+72r
mZtcgDAfBgNVHSMEGDAWgBTn8ef9LlOtEeWBGlekc48SfZjIrjCB/wYDVR0fBIH3
MIH0MEegRaBDhkFodHRwOi8vY3JsLnN3aXNzc2lnbi5uZXQvRTdGMUU3RkQyRTUz
QUQxMUU1ODExQTU3QTQ3MzhGMTI3RDk4QzhBRTCBqKCBpaCBooaBn2xkYXA6Ly9k
aXJlY3Rvcnkuc3dpc3NzaWduLm5ldC9DTj1FN0YxRTdGRDJFNTNBRDExRTU4MTFB
NTdBNDczOEYxMjdEOThDOEFFJTJDTz1Td2lzc1NpZ24lMkNDPUNIP2NlcnRpZmlj
YXRlUmV2b2NhdGlvbkxpc3Q/YmFzZT9vYmplY3RDbGFzcz1jUkxEaXN0cmlidXRp
b25Qb2ludDBzBgNVHSAEbDBqMFQGCWCFdAFZAQIBCzBHMEUGCCsGAQUFBwIBFjlo
dHRwOi8vcmVwb3NpdG9yeS5zd2lzc3NpZ24uY29tL1N3aXNzU2lnbi1Hb2xkLUNQ
LUNQUy5wZGYwCAYGBACPegEHMAgGBmeBDAECAjCB1QYIKwYBBQUHAQEEgcgwgcUw
ZAYIKwYBBQUHMAKGWGh0dHA6Ly9zd2lzc3NpZ24ubmV0L2NnaS1iaW4vYXV0aG9y
aXR5L2Rvd25sb2FkL0U3RjFFN0ZEMkU1M0FEMTFFNTgxMUE1N0E0NzM4RjEyN0Q5
OEM4QUUwXQYIKwYBBQUHMAGGUWh0dHA6Ly9nb2xkLXNlcnZlci1nMi5vY3NwLnN3
aXNzc2lnbi5uZXQvRTdGMUU3RkQyRTUzQUQxMUU1ODExQTU3QTQ3MzhGMTI3RDk4
QzhBRTCCAfUGCisGAQQB1nkCBAIEggHlBIIB4QHfAHcARJRlLrDuzq/EQAfYqP4o
wNrmgr7YyzG1P9MzlrW2gagAAAFsibwRCQAABAMASDBGAiEAkpb01ZK38jA6oVKk
Hf4AjUVM9goWQX+t4UvedONLG+ICIQCg6E5fQhycpvmU8A3Q9ovh3aRD/x3IzkNo
AkP2C492QwB1AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABbIm8
EcwAAAQDAEYwRAIgbPNRrDSFOMy9nbM0uFYDKas1ZUgYv1jhHmU24nrvwsUCIDbP
vaQobgMnXwx5EJ2guCb6H4I7c4pX/QEbaWNfMdq1AHYAu9nfvB+KcbWTlCOXqpJ7
RzhXlQqrUugakJZkNo4e0YUAAAFsibwTYQAABAMARzBFAiBXu5MJNLij81l5QIHa
AJIvH5IVYpW33WoQOyS2KT9TTQIhAP4+y0SbyM24NlECf3KAqvucObA292D2fnWc
9DMusmwaAHUA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFsibwQ
QAAABAMARjBEAiAcPZbY09u1wRkl3wjCtomXpgZfl2d6qYpgxziSe6N+4AIgNYTz
UyQSWRxbLwEdOeOmJ0cfxzCo9Ne++eSIRfuOA/YwDQYJKoZIhvcNAQELBQADggEB
AHY4zPCnli6wF21Iiv1+zxdTLPaSrwFJreFfs9kTyx9iA0v5ASZbAoVUqfuFcUjc
N7nIzRKMX7IyTE9a1VNkTGdqR5VrA45KEbwaFxd7anrNPiO1uA2Q6+2SRcXi0WR3
Jr1AuWec8TnUNwOlvHcAaD45NZr13k1WPTEUvpSSvMRRp7Hvx/skgqB2tdm85xu0
lraP8i+0+Xb1r4C1sySlys/bYpz2OGhtqRXmc723ie3ibKvwrYCv6uHNwyzxiTRS
D4M1kwgOSGUNP41hKY4zqeNVZdEfX7VrVm5ja1Rx8SEmECgFUct4lj2NVcV+R8ux
UCx4Tgpipdp4X4LZA6D6jJY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QYZfZgHBVCH1aIE6w7j
ezFl6NRRthWODv4vqlgMdkbJH8KTWZbF1kUwFs1nobIEN3MghbZia0Lmm72wi1qH
sE+GBN+fwmUqxY5FRkhOyfb0IwSCUZtGgzQdd8cu7gecj21BwuPcWyarJDLf0c82
OvBylGpnkF1eE9VLzlJ02vJ6tnmFR/mVpQ6U6mODuiNYSYQELtJYqYOCKo8qMwbZ
hNzOXmF/KDpWucdLBriX5mH9P+3pMkwbIEyEc9tXLbYTECsnQvgOitRzQA2nDoy3
HeCNp4qtXJiiJ9/4DHq0ZCfy+kb5h7wM6h9wID2gK4EFcXX9C1f9cRYXUls5Nzno
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 149634834903867860178193541704300500372758081581
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-13 06:48:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-13 06:48:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FUNKE Corporate IT GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Netzwerk und Sicherheit'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.zgt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27396719989016117952206673996452637616387985701144752735339635730714592969667752267438857229382620814257583039389634508117171483359892688177249822390355267225376687540927817779265428159464598641210325628322660275793400667483076233767699807312770840947371708410934930659469263525509715341351378176858300989520404086975619239248888110706591254609386941011257968715550551450989576065342941156728339621942076280070253462711014943354245428575905431097130459234465357742162211408976116994418060994811595189508606057194652199185457615566999047038129634743485278166955676679914224728914318869236988461473409025975803927193819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zgt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zgt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1128f402a7dc0bf6fa65c3007dfbbdab999b5c80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e7f1e7fd2e53ad11e5811a57a4738f127d98c8ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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