www.datenschutz-berlin.de

- Berliner Beauftragte fuer Datenschutz und Informationsfreiheit -

Issued by D-TRUST SSL Class 3 CA 1 EV 2009

About this certificate

This digital certificate with serial number 18:46:a4 was issued on by D-Trust GmbH.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • SAN DNSName contains duplicate values (awslabs certlint)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Berliner Beauftragte fuer Datenschutz und Informationsfreiheit

Company registration number: Grdgs.-Dat.: 15.10.1999
Organization: Berliner Beauftragte fuer Datenschutz und Informationsfreiheit
Address: Friedrichstr. 219
Postal code: 10969
State / Province: Berlin
Locality: Berlin
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 18:46:a4
Serial Number (int): 1590948
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: 14:f4:00:4c:c0:70:ed:b0:b4:f4:e3:56:fd:5c:71:4b:50:c3:c8:f4
AuthorityKeyId: ac:ed:a5:9d:7a:a2:b6:43:f1:18:8a:25:6a:6c:b1:cc:a8:f2:5a:d4

Fingerprint (sha1): 6b:84:f6:ae:82:8e:0f:e6:f0:dc:7f:84:8f:98:aa:31:5f:b7:4a:2e
Fingerprint (sha256): e3:72:ac:d1:5c:0c:cc:f4:72:9f:d6:d8:c8:c8:e3:fa:89:04:c7:ed:1c:3e:b5:df:3e:9a:18:61:54:71:a8:35

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_EV_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%20EV%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-ev-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%20EV%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_ev_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_ev_2009.crl

Check the revocation status for certificate www.datenschutz-berlin.de

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.datenschutz-berlin.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.datenschutz-berlin.de
www.datenschutz-berlin.de
datenschutz-berlin.de
mail.datenschutz-berlin.de
mail2.datenschutz-berlin.de
prod.iwgdpt.org
www.berlin.datenschutz.de
www.informationsfreiheit.de
www.freedom-of-information.de

Other certificates including the domain name datenschutz-berlin.de

(limited to 100 certificates)
kontakt.datenschutz-berlin.de
www.datenschutz-berlin.de
kontakt.datenschutz-berlin.de
av-konferenz.datenschutz-berlin.de
www.datenschutz-berlin.de
www.datenschutz-berlin.de
kontakt.datenschutz-berlin.de
stage.datenschutz-berlin.de
av-konferenz.datenschutz-berlin.de
www.datenschutz-berlin.de
cloud.datenschutz-berlin.de
mail2.datenschutz-berlin.de
www.datenschutz-berlin.de
www.datenschutz-berlin.de
mta-sts.datenschutz-berlin.de
www.datenschutz-berlin.de
www.datenschutz-berlin.de
kontakt.datenschutz-berlin.de
kontakt.datenschutz-berlin.de
www.datenschutz-berlin.de
kontakt.datenschutz-berlin.de
www.datenschutz-berlin.de
www.datenschutz-berlin.de
www.datenschutz-berlin.de
www.datenschutz-berlin.de
www.datenschutz-berlin.de
www.datenschutz-berlin.de
www.datenschutz-berlin.de
kontakt.datenschutz-berlin.de
kontakt.datenschutz-berlin.de
kontakt.datenschutz-berlin.de
www.datenschutz-berlin.de
cloud.datenschutz-berlin.de
www.datenschutz-berlin.de
kontakt.datenschutz-berlin.de
www.datenschutz-berlin.de
www.datenschutz-berlin.de
www.datenschutz-berlin.de
kontakt.datenschutz-berlin.de
mail2.datenschutz-berlin.de
www.datenschutz-berlin.de
www.datenschutz-berlin.de
datenschutz-berlin.de
kontakt.datenschutz-berlin.de

Certificate

The complete raw certificate details for www.datenschutz-berlin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIkDCCB3igAwIBAgIDGEakMA0GCSqGSIb3DQEBCwUAME8xCzAJBgNVBAYTAkRF
MRUwEwYDVQQKDAxELVRydXN0IEdtYkgxKTAnBgNVBAMMIEQtVFJVU1QgU1NMIENs
YXNzIDMgQ0EgMSBFViAyMDA5MB4XDTE2MDcxNTA2MTcxNFoXDTE4MDcxNTA4MDg0
MFowggFiMRMwEQYDVQQuEwo4MjEwNzU3NDM3MRMwEQYLKwYBBAGCNzwCAQMTAkRF
MRcwFQYLKwYBBAGCNzwCAQIMBkJlcmxpbjEXMBUGCysGAQQBgjc8AgEBDAZCZXJs
aW4xGjAYBgNVBA8MEUdvdmVybm1lbnQgRW50aXR5MSAwHgYDVQQFExdHcmRncy4t
RGF0LjogMTUuMTAuMTk5OTELMAkGA1UEBhMCREUxDzANBgNVBAgTBkJlcmxpbjEP
MA0GA1UEBxMGQmVybGluMQ4wDAYDVQQRDAUxMDk2OTEaMBgGA1UECRMRRnJpZWRy
aWNoc3RyLiAyMTkxRzBFBgNVBAoTPkJlcmxpbmVyIEJlYXVmdHJhZ3RlIGZ1ZXIg
RGF0ZW5zY2h1dHogdW5kIEluZm9ybWF0aW9uc2ZyZWloZWl0MSIwIAYDVQQDExl3
d3cuZGF0ZW5zY2h1dHotYmVybGluLmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAohW1YUilZjVqsk0C3fOn1x23z/X0tgZBQWvmAx8MeP2Uw6Fzaw4D
4uylKv55l6+vN16Ig45ikj+lB8FE/BB5Da+8J7qvFqohG78obp6fi76jErftI85S
jyEaKOIvTGmONCOvP1Z74MujL/8BbTd3lkmZAZTxj3hBt6zq3tfhauXLPRHDIZZx
N08p3AAT4xGNbHnW+4U2vjFd5BtxKlHb1rlcaTCmMcY6Cs6cpVkNcEEJU9QdrVyT
PWgp6xxOjsCMS/WurDSHCnkMOHG+6WSf+8EFlZ7xASQEu24ViF9173IOIqfSwIQ5
nLGX3znp59MX7DH5RN7UiWuChcWCPklB9QIDAQABo4IEXjCCBFowHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFKztpZ16orZD8RiKJWps
scyo8lrUMIIBIgYIKwYBBQUHAQEEggEUMIIBEDA2BggrBgEFBQcwAYYqaHR0cDov
L3NzbC1jMy1jYTEtZXYtMjAwOS5vY3NwLmQtdHJ1c3QubmV0ME8GCCsGAQUFBzAC
hkNodHRwOi8vd3d3LmQtdHJ1c3QubmV0L2NnaS1iaW4vRC1UUlVTVF9TU0xfQ2xh
c3NfM19DQV8xX0VWXzIwMDkuY3J0MIGEBggrBgEFBQcwAoZ4bGRhcDovL2RpcmVj
dG9yeS5kLXRydXN0Lm5ldC9DTj1ELVRSVVNUJTIwU1NMJTIwQ2xhc3MlMjAzJTIw
Q0ElMjAxJTIwRVYlMjAyMDA5LE89RC1UcnVzdCUyMEdtYkgsQz1ERT9jQUNlcnRp
ZmljYXRlP2Jhc2U/MGYGA1UdIARfMF0wWwYLKwYBBAGlNAKBSgEwTDBKBggrBgEF
BQcCARY+aHR0cDovL3d3dy5kLXRydXN0Lm5ldC9pbnRlcm5ldC9maWxlcy9ELVRS
VVNUX1Jvb3RfUEtJX0NQUy5wZGYwggEoBgNVHR8EggEfMIIBGzCCARegggEToIIB
D4Z+bGRhcDovL2RpcmVjdG9yeS5kLXRydXN0Lm5ldC9DTj1ELVRSVVNUJTIwU1NM
JTIwQ2xhc3MlMjAzJTIwQ0ElMjAxJTIwRVYlMjAyMDA5LE89RC1UcnVzdCUyMEdt
YkgsQz1ERT9jZXJ0aWZpY2F0ZXJldm9jYXRpb25saXN0hkNodHRwOi8vY3JsLmQt
dHJ1c3QubmV0L2NybC9kLXRydXN0X3NzbF9jbGFzc18zX2NhXzFfZXZfMjAwOS5k
ZXIuY3JshkhodHRwOi8vY2RuLmQtdHJ1c3QtY2xvdWRjcmwubmV0L2NybC9kLXRy
dXN0X3NzbF9jbGFzc18zX2NhXzFfZXZfMjAwOS5jcmwwMwYDVR0SBCwwKoEQaW5m
b0BkLXRydXN0Lm5ldIYWaHR0cDovL3d3dy5kLXRydXN0Lm5ldDAdBgNVHQ4EFgQU
FPQATMBw7bC09ONW/VxxS1DDyPQwDgYDVR0PAQH/BAQDAgWgMIH5BgNVHREEgfEw
ge6CGXd3dy5kYXRlbnNjaHV0ei1iZXJsaW4uZGWCGXd3dy5kYXRlbnNjaHV0ei1i
ZXJsaW4uZGWCFWRhdGVuc2NodXR6LWJlcmxpbi5kZYIabWFpbC5kYXRlbnNjaHV0
ei1iZXJsaW4uZGWCG21haWwyLmRhdGVuc2NodXR6LWJlcmxpbi5kZYIPcHJvZC5p
d2dkcHQub3Jnghl3d3cuYmVybGluLmRhdGVuc2NodXR6LmRlght3d3cuaW5mb3Jt
YXRpb25zZnJlaWhlaXQuZGWCHXd3dy5mcmVlZG9tLW9mLWluZm9ybWF0aW9uLmRl
MA0GCSqGSIb3DQEBCwUAA4IBAQBhr7IW96qM7o1d/Vgtjx/LhpPoLuIG51px5myX
HHXcFG8Th5UVj0L92v+LcHeswwthRPf4HB1pQMfXU0dpWELdYEAMusUxWuKuULSf
n8wTtPceP5tezgMYvnsB1Yf7bgq4RxKSO7aqCkTvZFu+7EPuuWDuh+b0BXgWyApl
vtTYLJxJK+vxLig4ZEpy2b7D8DEWAbv2vdY8C55ogE0RTsYUTNO8Zbe4q53L1f/V
InJgsKW5T3XRQerMRvzkVyE085eJzVL1OSrvThvpbc9j2bi6sYMLoKI6T+I6XsNj
yLzEJ62aBk73fVkOgqeRM8/hUDXzCkqVIhkLngxrl1dDGwJf
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohW1YUilZjVqsk0C3fOn
1x23z/X0tgZBQWvmAx8MeP2Uw6Fzaw4D4uylKv55l6+vN16Ig45ikj+lB8FE/BB5
Da+8J7qvFqohG78obp6fi76jErftI85SjyEaKOIvTGmONCOvP1Z74MujL/8BbTd3
lkmZAZTxj3hBt6zq3tfhauXLPRHDIZZxN08p3AAT4xGNbHnW+4U2vjFd5BtxKlHb
1rlcaTCmMcY6Cs6cpVkNcEEJU9QdrVyTPWgp6xxOjsCMS/WurDSHCnkMOHG+6WSf
+8EFlZ7xASQEu24ViF9173IOIqfSwIQ5nLGX3znp59MX7DH5RN7UiWuChcWCPklB
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1590948
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 EV 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-15 06:17:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-15 08:08:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.46 (dnQualifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '8210757437'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Grdgs.-Dat.: 15.10.1999'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '10969'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Friedrichstr. 219'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berliner Beauftragte fuer Datenschutz und Informationsfreiheit'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.datenschutz-berlin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20461310272560475097431999038856277760172278487260108299311465920022124706374767130498077892055988721399983295560440767050552302410273219683515819791459188634433356757577907636710273331213850855915016389200437116143268544571815852681144418465382325475797901832322052633821652622794258730040386012295197407588983912403252778785419575161046747246277407466996667669128979177405802972439850274391670633457245884532138200763816334075821972079042334430223106786733424202775915063580252194536952515871655710839110311912632331255299499487425166730142410715856872617202687616769822311733044256209373521836700337992350785159669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aceda59d7aa2b643f1188a256a6cb1cca8f25ad4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-ev-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_EV_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%20EV%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.202.1 (D-TRUST EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_Root_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (287 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%20EV%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_ev_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_ev_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14f4004cc070edb0b4f4e356fd5c714b50c3c8f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datenschutz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datenschutz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datenschutz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.datenschutz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail2.datenschutz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.iwgdpt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berlin.datenschutz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.informationsfreiheit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freedom-of-information.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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