*.fabo-live.funkemedien.de

- FUNKE Corporate IT GmbH -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 23:2e:a2:6a:c5:03:7e:3e:f8:4d:fc:bf:29:53:f6:bd:75:c3:b0:b1 was issued on by SwissSign AG.

With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FUNKE Corporate IT GmbH

Organization: FUNKE Corporate IT GmbH
State / Province: Nordrhein-Westfalen
Locality: Essen
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 23:2e:a2:6a:c5:03:7e:3e:f8:4d:fc:bf:29:53:f6:bd:75:c3:b0:b1
Serial Number (int): 200854659780094683424911289679160572090681372849
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 21:de:f3:b7:cc:a2:50:54:db:16:31:be:4a:16:fc:9f:c3:c7:1c:5d
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): 5f:85:7e:aa:36:b7:91:ef:55:bd:72:15:0e:27:9d:d5:1a:14:f5:6c
Fingerprint (sha256): f3:dc:06:d0:97:2b:a1:10:6a:1e:cc:d5:06:a2:05:d9:75:45:af:21:a0:5f:90:7a:eb:ef:ea:45:c2:fa:12:4a

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate *.fabo-live.funkemedien.de

37

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.fabo-live.funkemedien.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.fabo-live.funkemedien.de
fabo-live.funkemedien.de
*.fabo-local.funkemedien.de
fabo-local.funkemedien.de
*.fabo-qa.funkemedien.de
fabo-qa.funkemedien.de
aboshop-backend.morgenpost.de
aboshop.morgenpost.de
aboshop.bzv-medienhaus.de
aboshop.braunschweiger-zeitung.de
aboshop.peiner-nachrichten.de
aboshop.helmstedter-nachrichten.de
aboshop.wolfenbuetteler-zeitung.de
aboshop.wolfsburger-nachrichten.de
aboshop.gifhorner-rundschau.de
aboshop.salzgitter-zeitung.de
aboshop-backend.abendblatt.de
aboshop.abendblatt.de
aboshop.bergedorfer-zeitung.de
hk-aboshop.bzv-medienhaus.de
aboshop.harzkurier.de
aboshop-backend.ikz-online.de
aboshop.ikz-online.de
aboshop.mediengruppe-thueringen.de
aboshop.thueringer-allgemeine.de
aboshop.tlz.de
aboshop.otz.de
aboshop.funkemediennrw.de
aboshop.waz.de
aboshop.wr.de
aboshop.wp.de
aboshop.nrz.de
hub-aboshop.funkemediennrw.de
kibana-aboshop.funkemedien.de
rabbitmq-aboshop.funkemediennrw.de
thueringen-kiosk.de
*.thueringen-kiosk.de

Other certificates including the domain name funkemedien.de

(limited to 100 certificates)
bzv-medienhaus.de
ws-reservix.funkemedien.de
casproxy.funkemedien.de
*.dabis.funkemedien.de
funkemedien.de
www.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
www.funkemedien.de
*.funkemedien.de
avmnac02.access.funkemedien.de
dcx.funkemedien.de
*.access.funkemedien.de
dcx.funkemedien.de
bzv-medienhaus.de
extern.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
apnac04v.funkemedien.de
www.funkemedien.de
bzv-medienhaus.de
hadznac01v.funkemedien.de
*.waz.de
marke.funkemedien.de
portal.dz-hagen.funkemedien.de
www.funkemedien.de
*.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
apnac03v.funkemedien.de
*.test.funkemedien.de
mail.funke-medien.de
*.fabo-live.funkemedien.de
*.funkemedien.de
events.funkemedien.de
rd-cb-ha.access.funkemedien.de
aboservice.bildderfrau.de
extern.funkemedien.de
connect.funkemedien.de
waz.de
login.funkemedien.de
*.funkemedien.de
hadznac01v.funkemedien.de
bwv.portal.funkemedien.de
con.funkemedien.de
funkemedien.de
sso.funkemedien.de
bzv-medienhaus.de
bzv-medienhaus.de
expe.funkemedien.de
rdweb.access.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
bzv-medienhaus.de
*.funkemedien.de
dcx.funkemedien.de
*.funkemedien.de
*.funkemedien.de
mail.funkemedien.de
expe.funkemedien.de
portal.dz-hagen.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
connect.funkemedien.de
sso.funkemedien.de
portal.dz-hagen.funkemedien.de
bzv-medienhaus.de
dcx.funkemedien.de
gate.funkemedien.de
email.funkemedien.de
datenschutz.funkemedien.de
mail.funke-medien.de
digas.axelspringer-syndication.de
*.funkemedien.de
*.funkemedien.de
portal.druckzentrum-essen.funkemedien.de
*.planer.funkemedien.de
blog.funkemedien.de
bwv.portal.funkemedien.de
apnac04v.funkemedien.de
*.funkemedien.de
bwv.portal.funkemedien.de
expe-cluster.funkemedien.de
volontariat.funkemedien.de
*.waz.de
funkemedien.de
mail.funkemedien.de
anzeigen.funkemedien.de
avmnac01.access.funkemedien.de
*.zpr.funkemedien.de
funkemedien.de
www.funkemedien.de
anzeigenbuchung-in-thueringen.de
*.fabo-live.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
*.funkemedien.de
*.waz.de
*.waz.de
dcx.funkemedien.de

Certificate

The complete raw certificate details for *.fabo-live.funkemedien.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILJDCCCQygAwIBAgIUIy6iasUDfj74Tfy/KVP2vXXDsLEwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgT1YgSUNBIDIwMjEgLSAxMB4XDTIzMDczMTA5
NDg1OFoXDTI0MDczMTA5NDg1OFowgYIxCzAJBgNVBAYTAkRFMRwwGgYDVQQIExNO
b3JkcmhlaW4tV2VzdGZhbGVuMQ4wDAYDVQQHEwVFc3NlbjEgMB4GA1UEChMXRlVO
S0UgQ29ycG9yYXRlIElUIEdtYkgxIzAhBgNVBAMMGiouZmFiby1saXZlLmZ1bmtl
bWVkaWVuLmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1pSfbp2
16bgQA0FA6amXpI5j7V+z3do9+MPKeQHNyRX9mETH/9uTBvRhHuiJsXtZPn+LePy
5xfTBaTnt1wp56HXcs0W70AxKHRYlN5lUWDB4m8WqjWSvExcSH6MIx8R9MbjMDmJ
+4xMPQ/JkHtVuYV4gkxMLxBKs1cl5eCqUFfSm/xqKrF9tkCDIVz1sWuwashPam5M
yfqsXcyNbjAqsOrIgdTvgmQGakFnPa4/lIPPCiNDp5ebGZB0iSC4iiddnbMSBgvM
RZYogvW2yF2n3i1TMpP53bUt0XEUtdHywnwtcAPkiR4F7OAJTPPrn+YdSESNA6ov
CzEkxtDCyjdbmQIDAQABo4IGwTCCBr0wggP5BgNVHREEggPwMIID7IIaKi5mYWJv
LWxpdmUuZnVua2VtZWRpZW4uZGWCGGZhYm8tbGl2ZS5mdW5rZW1lZGllbi5kZYIb
Ki5mYWJvLWxvY2FsLmZ1bmtlbWVkaWVuLmRlghlmYWJvLWxvY2FsLmZ1bmtlbWVk
aWVuLmRlghgqLmZhYm8tcWEuZnVua2VtZWRpZW4uZGWCFmZhYm8tcWEuZnVua2Vt
ZWRpZW4uZGWCHWFib3Nob3AtYmFja2VuZC5tb3JnZW5wb3N0LmRlghVhYm9zaG9w
Lm1vcmdlbnBvc3QuZGWCGWFib3Nob3AuYnp2LW1lZGllbmhhdXMuZGWCIWFib3No
b3AuYnJhdW5zY2h3ZWlnZXItemVpdHVuZy5kZYIdYWJvc2hvcC5wZWluZXItbmFj
aHJpY2h0ZW4uZGWCImFib3Nob3AuaGVsbXN0ZWR0ZXItbmFjaHJpY2h0ZW4uZGWC
ImFib3Nob3Aud29sZmVuYnVldHRlbGVyLXplaXR1bmcuZGWCImFib3Nob3Aud29s
ZnNidXJnZXItbmFjaHJpY2h0ZW4uZGWCHmFib3Nob3AuZ2lmaG9ybmVyLXJ1bmRz
Y2hhdS5kZYIdYWJvc2hvcC5zYWx6Z2l0dGVyLXplaXR1bmcuZGWCHWFib3Nob3At
YmFja2VuZC5hYmVuZGJsYXR0LmRlghVhYm9zaG9wLmFiZW5kYmxhdHQuZGWCHmFi
b3Nob3AuYmVyZ2Vkb3JmZXItemVpdHVuZy5kZYIcaGstYWJvc2hvcC5ienYtbWVk
aWVuaGF1cy5kZYIVYWJvc2hvcC5oYXJ6a3VyaWVyLmRlgh1hYm9zaG9wLWJhY2tl
bmQuaWt6LW9ubGluZS5kZYIVYWJvc2hvcC5pa3otb25saW5lLmRlgiJhYm9zaG9w
Lm1lZGllbmdydXBwZS10aHVlcmluZ2VuLmRlgiBhYm9zaG9wLnRodWVyaW5nZXIt
YWxsZ2VtZWluZS5kZYIOYWJvc2hvcC50bHouZGWCDmFib3Nob3Aub3R6LmRlghlh
Ym9zaG9wLmZ1bmtlbWVkaWVubnJ3LmRlgg5hYm9zaG9wLndhei5kZYINYWJvc2hv
cC53ci5kZYINYWJvc2hvcC53cC5kZYIOYWJvc2hvcC5ucnouZGWCHWh1Yi1hYm9z
aG9wLmZ1bmtlbWVkaWVubnJ3LmRlgh1raWJhbmEtYWJvc2hvcC5mdW5rZW1lZGll
bi5kZYIicmFiYml0bXEtYWJvc2hvcC5mdW5rZW1lZGllbm5ydy5kZYITdGh1ZXJp
bmdlbi1raW9zay5kZYIVKi50aHVlcmluZ2VuLWtpb3NrLmRlMA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFCHe
87fMolBU2xYxvkoW/J/DxxxdMB8GA1UdIwQYMBaAFKzQOsLCV1WRaRHMcGpZOIqM
rJw9MIH/BgNVHR8EgfcwgfQwR6BFoEOGQWh0dHA6Ly9jcmwuc3dpc3NzaWduLm5l
dC9BQ0QwM0FDMkMyNTc1NTkxNjkxMUNDNzA2QTU5Mzg4QThDQUM5QzNEMIGooIGl
oIGihoGfbGRhcDovL2RpcmVjdG9yeS5zd2lzc3NpZ24ubmV0L0NOPUFDRDAzQUMy
QzI1NzU1OTE2OTExQ0M3MDZBNTkzODhBOENBQzlDM0QlMkNPPVN3aXNzU2lnbiUy
Q0M9Q0g/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdD9iYXNlP29iamVjdENsYXNz
PWNSTERpc3RyaWJ1dGlvblBvaW50MG8GA1UdIARoMGYwUAYIYIV0AVkCAQIwRDBC
BggrBgEFBQcCARY2aHR0cHM6Ly9yZXBvc2l0b3J5LnN3aXNzc2lnbi5jb20vU3dp
c3NTaWduX0NQU19UTFMucGRmMAgGBgQAj3oBBzAIBgZngQwBAgIwgcYGCCsGAQUF
BwEBBIG5MIG2MGQGCCsGAQUFBzAChlhodHRwOi8vc3dpc3NzaWduLm5ldC9jZ2kt
YmluL2F1dGhvcml0eS9kb3dubG9hZC9BQ0QwM0FDMkMyNTc1NTkxNjkxMUNDNzA2
QTU5Mzg4QThDQUM5QzNEME4GCCsGAQUFBzABhkJodHRwOi8vb2NzcC5zd2lzc3Np
Z24ubmV0L0FDRDAzQUMyQzI1NzU1OTE2OTExQ0M3MDZBNTkzODhBOENBQzlDM0Qw
EwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggIBAIB6bccObGyJ
ai0sI1fJNXoRd+vLXp1g9JoesiGkH05ca0wHGPgt76DvfS4V2c9oOs9pS7jlyb6A
cnNxfEkwdnlguc0zA411UOruE7FU2GFyTAaCkYfAgm+grl2mL+CsavmCQiSocziw
0no6sPjFs0CD8wErxITfneeAyUcqyEbwrmhDAgHNO9W+XcfIpF20EgS6TcZEuKwr
SZ8vQZEl3wzs7nw1tG1R1DcoUZ+48xtio4BrgFlY4m6P1QHcKnCztnCcNMo2SRhn
Wst2Ov8Cctpe4DnakoccL09ov+GWipx2ivWQ4O//SS8aJWZgGYMWz8wC4RQFqPlT
aZhV7c0IPalHjCzacp8XN3YugDcXD++RZtNkuPER3/y64qze+Ol9YFqWSgstKNli
9mlvMf/FBlpSYPQdGcgsLh92B3kayrBbLJ+c3VW6SSn7PwwD69U9JLsAxIzV2Z1R
trhXcNpq+Q7tpA7WJ12qg5JGYn47PfGNcbgkbMDTHtY4DUEVS9hsnGI2xjQDDA9L
OfLGZCx3cMyjysK4cJ1dTaivc/KyPlYRaFzlYdRVlYd+WdoWYb2WQPdq2FVhVIdl
pHLteXZe1feeFqLhOJRN3xOVGiy6HJZmtwTs/7OEhkV+gsSksKxaKXg1qr1kEVZP
5plHFElPAv2EZNXiFyNn4tx87qoWUYvo
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1pSfbp216bgQA0FA6am
XpI5j7V+z3do9+MPKeQHNyRX9mETH/9uTBvRhHuiJsXtZPn+LePy5xfTBaTnt1wp
56HXcs0W70AxKHRYlN5lUWDB4m8WqjWSvExcSH6MIx8R9MbjMDmJ+4xMPQ/JkHtV
uYV4gkxMLxBKs1cl5eCqUFfSm/xqKrF9tkCDIVz1sWuwashPam5MyfqsXcyNbjAq
sOrIgdTvgmQGakFnPa4/lIPPCiNDp5ebGZB0iSC4iiddnbMSBgvMRZYogvW2yF2n
3i1TMpP53bUt0XEUtdHywnwtcAPkiR4F7OAJTPPrn+YdSESNA6ovCzEkxtDCyjdb
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 200854659780094683424911289679160572090681372849
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-31 09:48:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-31 09:48:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FUNKE Corporate IT GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.fabo-live.funkemedien.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23651102580752542635515647032408369414701255207476477616062947979648370300631638449739418026953166350724236768531789202022091896719985173899700146099779929186158601095474227312554082303921543039734931539117620333081761767254720943444090507124553921784374992146999880321944063999267895958967002468382979194822970652064442872016774143865297873325249199434564469142703111276983993244127827001309752854569318317631008138482602211937663278954992313816013503552094726888486089825808899507109862333217841640880710405466479094509950077744322427977388253924353134827671678633062546567146298020450851630237214604202495094250393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1008 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fabo-live.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabo-live.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fabo-local.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabo-local.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fabo-qa.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabo-qa.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop-backend.morgenpost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop.morgenpost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop.bzv-medienhaus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop.braunschweiger-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop.peiner-nachrichten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop.helmstedter-nachrichten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop.wolfenbuetteler-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop.wolfsburger-nachrichten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop.gifhorner-rundschau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop.salzgitter-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop-backend.abendblatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop.abendblatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop.bergedorfer-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk-aboshop.bzv-medienhaus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop.harzkurier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop-backend.ikz-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop.ikz-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop.mediengruppe-thueringen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop.thueringer-allgemeine.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop.tlz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop.otz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop.funkemediennrw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop.waz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop.wr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop.wp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop.nrz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub-aboshop.funkemediennrw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kibana-aboshop.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rabbitmq-aboshop.funkemediennrw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thueringen-kiosk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thueringen-kiosk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							21def3b7cca25054db1631be4a16fc9fc3c71c5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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