*.services.extern.zgt.de
- FUNKE Corporate IT GmbH -
Issued by SwissSign Server Gold CA 2014 - G22
About this certificate
This digital certificate with serial number 62:0d:2a:10:63:60:b5:16:af:9a:cb:44:7e:c3:6e:ed:88:fd:1f:8b was issued on by SwissSign AG.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
FUNKE Corporate IT GmbH
Organization:
FUNKE Corporate IT GmbH
Organization unit: Netzwerk und Sicherheit
Organization unit: Netzwerk und Sicherheit
State / Province:
Nordrhein-Westfalen
Locality: Essen
Country: DE
Locality: Essen
Country: DE
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate has expire since
Certificate Details
Serial Number (hex): 62:0d:2a:10:63:60:b5:16:af:9a:cb:44:7e:c3:6e:ed:88:fd:1f:8bSerial Number (int): 559774669520939881135693500314362261473215717259
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: c9:4a:80:60:0a:74:60:0e:df:03:59:92:c9:87:de:20:0e:fb:d5:35
AuthorityKeyId: e7:f1:e7:fd:2e:53:ad:11:e5:81:1a:57:a4:73:8f:12:7d:98:c8:ae
Fingerprint (sha1): f2:2d:07:c3:01:1d:6a:3c:d7:39:38:68:90:90:0e:f6:de:0e:ad:30
Fingerprint (sha256): fb:1f:5b:ae:cb:2a:ee:1e:19:7a:9c:3f:7c:bc:2a:bb:52:4f:56:35:0d:bf:9c:2a:27:84:b6:cf:dc:d5:f0:73
Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
Revocation information
OCSP Server: http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AECRL Distribution Point: http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint
Check the revocation status for certificate *.services.extern.zgt.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.services.extern.zgt.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.services.extern.zgt.de
services.extern.zgt.de
services.extern.zgt.de
Other certificates including the domain name zgt.de
(limited to 100 certificates)
sso.zgt.de
secure.zgt.de
mediaservice.zgt.de
*.zgt.de
sso.zgt.de
anzeigen.thueringer-allgemeine.de
anzeigen.thueringer-allgemeine.de
*.services.extern.zgt.de
lesershop.zgt.de
media101.zgt.de
extranet.zgt.de
*.zgt.de
mediaservice.zgt.de
secure.zgt.de
sso.zgt.de
*.zgt.de
sso.zgt.de
lesershop.zgt.de
anzeigen.thueringer-allgemeine.de
extranet.zgt.de
*.services.extern.zgt.de
sso.zgt.de
*.zgt.de
anzeigen.thueringer-allgemeine.de
secure.zgt.de
selligentdata.services.extern.zgt.de
sso.zgt.de
extranet.zgt.de
bestatter.zgt.de
*.zgt.de
sso.funkemedien.de
mediaservice.zgt.de
bestatter.zgt.de
sso.zgt.de
*.services.extern.zgt.de
sso.funkemedien.de
*.zgt.de
anzeigen.thueringer-allgemeine.de
newsapp.services.extern.zgt.de
extranet.zgt.de
*.zgt.de
sso.funkemedien.de
*.zgt.de
media101.zgt.de
anzeigen.thueringer-allgemeine.de
media101.zgt.de
anzeigen.thueringer-allgemeine.de
*.services.extern.zgt.de
secure.zgt.de
mediaservice.zgt.de
*.zgt.de
sso.zgt.de
anzeigen.thueringer-allgemeine.de
anzeigen.thueringer-allgemeine.de
*.services.extern.zgt.de
lesershop.zgt.de
media101.zgt.de
extranet.zgt.de
*.zgt.de
mediaservice.zgt.de
secure.zgt.de
sso.zgt.de
*.zgt.de
sso.zgt.de
lesershop.zgt.de
anzeigen.thueringer-allgemeine.de
extranet.zgt.de
*.services.extern.zgt.de
sso.zgt.de
*.zgt.de
anzeigen.thueringer-allgemeine.de
secure.zgt.de
selligentdata.services.extern.zgt.de
sso.zgt.de
extranet.zgt.de
bestatter.zgt.de
*.zgt.de
sso.funkemedien.de
mediaservice.zgt.de
bestatter.zgt.de
sso.zgt.de
*.services.extern.zgt.de
sso.funkemedien.de
*.zgt.de
anzeigen.thueringer-allgemeine.de
newsapp.services.extern.zgt.de
extranet.zgt.de
*.zgt.de
sso.funkemedien.de
*.zgt.de
media101.zgt.de
anzeigen.thueringer-allgemeine.de
media101.zgt.de
anzeigen.thueringer-allgemeine.de
*.services.extern.zgt.de
Certificate
The complete raw certificate details for *.services.extern.zgt.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIfTCCB2WgAwIBAgIUYg0qEGNgtRavmstEfsNu7Yj9H4swDQYJKoZIhvcNAQEL BQAwUjELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEsMCoGA1UE AxMjU3dpc3NTaWduIFNlcnZlciBHb2xkIENBIDIwMTQgLSBHMjIwHhcNMTkwMTI5 MDkxMTMzWhcNMjEwMTI5MDkxMTMzWjCBojELMAkGA1UEBhMCREUxHDAaBgNVBAgT E05vcmRyaGVpbi1XZXN0ZmFsZW4xDjAMBgNVBAcTBUVzc2VuMSAwHgYDVQQKExdG VU5LRSBDb3Jwb3JhdGUgSVQgR21iSDEgMB4GA1UECxMXTmV0endlcmsgdW5kIFNp Y2hlcmhlaXQxITAfBgNVBAMMGCouc2VydmljZXMuZXh0ZXJuLnpndC5kZTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ+STz4oXjpVwrEh4tOfKyBW0w6X Z82hKmDLcFsoEJaOb7yMN5LtLJ4Hhqve7d/GZlJaWUkuEa4E16t2oUtNgFoVWgQb RA3P1vR+5DmNDShsYcnB62A5hx8+9xptwIlj9HtqnxmZW/dWCkqM7vPJSB2v+0OG sw3uhZ5k75OPvNoEjEx90Q0MJMGdcwYS3jnSv8sLYXqt/MJM+lrkxg5LBJMWSGGd Bp8KrA/+rj3jIk6fOgA4e6OdkGIh6mnn9jgNIHTc9aSvpppWB8zfjHnG0KFOsK4M pxl+ByIXXqcU8w3kv34BY6QoHLiiIkvYXZD3hvw/Ads+wKmaz4DGoFE3pPUCAwEA AaOCBPgwggT0MDsGA1UdEQQ0MDKCGCouc2VydmljZXMuZXh0ZXJuLnpndC5kZYIW c2VydmljZXMuZXh0ZXJuLnpndC5kZTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBTJSoBgCnRgDt8DWZLJh94g DvvVNTAfBgNVHSMEGDAWgBTn8ef9LlOtEeWBGlekc48SfZjIrjCB/wYDVR0fBIH3 MIH0MEegRaBDhkFodHRwOi8vY3JsLnN3aXNzc2lnbi5uZXQvRTdGMUU3RkQyRTUz QUQxMUU1ODExQTU3QTQ3MzhGMTI3RDk4QzhBRTCBqKCBpaCBooaBn2xkYXA6Ly9k aXJlY3Rvcnkuc3dpc3NzaWduLm5ldC9DTj1FN0YxRTdGRDJFNTNBRDExRTU4MTFB NTdBNDczOEYxMjdEOThDOEFFJTJDTz1Td2lzc1NpZ24lMkNDPUNIP2NlcnRpZmlj YXRlUmV2b2NhdGlvbkxpc3Q/YmFzZT9vYmplY3RDbGFzcz1jUkxEaXN0cmlidXRp b25Qb2ludDBzBgNVHSAEbDBqMFQGCWCFdAFZAQIBCzBHMEUGCCsGAQUFBwIBFjlo dHRwOi8vcmVwb3NpdG9yeS5zd2lzc3NpZ24uY29tL1N3aXNzU2lnbi1Hb2xkLUNQ LUNQUy5wZGYwCAYGBACPegEHMAgGBmeBDAECAjCB1QYIKwYBBQUHAQEEgcgwgcUw ZAYIKwYBBQUHMAKGWGh0dHA6Ly9zd2lzc3NpZ24ubmV0L2NnaS1iaW4vYXV0aG9y aXR5L2Rvd25sb2FkL0U3RjFFN0ZEMkU1M0FEMTFFNTgxMUE1N0E0NzM4RjEyN0Q5 OEM4QUUwXQYIKwYBBQUHMAGGUWh0dHA6Ly9nb2xkLXNlcnZlci1nMi5vY3NwLnN3 aXNzc2lnbi5uZXQvRTdGMUU3RkQyRTUzQUQxMUU1ODExQTU3QTQ3MzhGMTI3RDk4 QzhBRTCCAfUGCisGAQQB1nkCBAIEggHlBIIB4QHfAHYARJRlLrDuzq/EQAfYqP4o wNrmgr7YyzG1P9MzlrW2gagAAAFomODKmAAABAMARzBFAiA3S0D+rES93l5PqfMI 4E4ku5tX7cALPhryIdf7PJJ70wIhAJBhr9NEa75LH4kfx/K4RVDFgAHhimZQX2Zm 3pObVvZ7AHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFomODK 3QAABAMARzBFAiEAq7BY3jAVBRgeHatne562pkvq/mOtg99DBmlhBBrvUSgCIHC0 eVsVzYFVImvFdSG/4h+c2cGkJNG/IcYWGk7fCHyoAHUAu9nfvB+KcbWTlCOXqpJ7 RzhXlQqrUugakJZkNo4e0YUAAAFomODKVQAABAMARjBEAiBuAyGy2R5nv3kHfHyN nFqGqdo53nca4yscF03DNm3GEgIgOv4WLHdhpisLcJdDY3a4Lu5cKAGmOCHdYG8C nliuZaIAdgDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWiY4MoC AAAEAwBHMEUCIQC/ovuxqwQ1olTx6wBvFzGLleABxarMd5yR6JZiLyCtVgIgehIQ DY+ZDvA1MP8NbL1Mnn2aULVLMsTVprL4PJgfxuYwDQYJKoZIhvcNAQELBQADggEB AHv6SodWT1DE+yovchoC5615+goJXjHk4G0iyFNNwUEoZCW2b1I4I3cthfWptNfH SzbUglMNTDzPILooGDJBkJcTz54eViXyuHZ+HXG2npgKdMuBlvruHeIXAf3IxZoo FiF2sUl1dGUitNCL6QFQoPP2Ni1ZabpNhLCpYwqz1VP44MV27CL8sbYyOV4dEvN+ IJFkFAoK9F1/TZ8oRw0HXLqcfbJhWi4RqF/FTIiKMP48FG3TOd1vEemyWBQxkQmG k/JCHDMHss16sGqoeWZJNciD5pN4IbQkeAgiqI1AH+u0PcdMZpHE8rqQKyzDSwJE mxVkPRzATxbSRndlLKK8J6Y= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5JPPiheOlXCsSHi058r IFbTDpdnzaEqYMtwWygQlo5vvIw3ku0sngeGq97t38ZmUlpZSS4RrgTXq3ahS02A WhVaBBtEDc/W9H7kOY0NKGxhycHrYDmHHz73Gm3AiWP0e2qfGZlb91YKSozu88lI Ha/7Q4azDe6FnmTvk4+82gSMTH3RDQwkwZ1zBhLeOdK/ywtheq38wkz6WuTGDksE kxZIYZ0GnwqsD/6uPeMiTp86ADh7o52QYiHqaef2OA0gdNz1pK+mmlYHzN+MecbQ oU6wrgynGX4HIhdepxTzDeS/fgFjpCgcuKIiS9hdkPeG/D8B2z7AqZrPgMagUTek 9QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 559774669520939881135693500314362261473215717259 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2014 - G22' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-29 09:11:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-29 09:11:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Essen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FUNKE Corporate IT GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Netzwerk und Sicherheit' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.services.extern.zgt.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20144038413852618479972257678404657895259982373527792324718729346298670471148223259202843809421731932235978974032178088911836061381227086260700217732298910943598898170089324015663775207926267043130818019666838919323683961035420601950677831063422337156266972751235120792579383689210244889538394334781452155900377222512764992245080499481719815551702143344514375900929110935038170886401310477800263911109539075999402676168573026665725747214356467161674958314190807742285710263506843110876892420825730511802380377196026906244292266555583292156285498340106100124635523460509652479787662951311521245868439426880632560002293 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.services.extern.zgt.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.extern.zgt.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c94a80600a74600edf035992c987de200efbd535 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e7f1e7fd2e53ad11e5811a57a4738f127d98c8ae . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.11 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes) 01df0076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016898e0ca9800000403004730450220374b40feac44bdde5e4fa9f308e04e24bb9b57edc00b3e1af221d7fb3c927bd30221009061afd3446bbe4b1f891fc7f2b84550c58001e18a66505f6666de939b56f67b0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016898e0cadd0000040300473045022100abb058de301505181e1dab677b9eb6a64beafe63ad83df43066961041aef5128022070b4795b15cd8155226bc57521bfe21f9cd9c1a424d1bf21c6161a4edf087ca8007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016898e0ca55000004030046304402206e0321b2d91e67bf79077c7c8d9c5a86a9da39de771ae32b1c174dc3366dc61202203afe162c7761a62b0b7097436376b82eee5c2801a63821dd606f029e58ae65a2007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016898e0ca020000040300473045022100bfa2fbb1ab0435a254f1eb006f17318b95e001c5aacc779c91e896622f20ad5602207a12100d8f990ef03530ff0d6cbd4c9e7d9a50b54b32c4d5a6b2f83c981fc6e6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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