zib21.cloud.bescha.in.bund.de

- Informationstechnikzentrum Bund (ITZBund) -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 7d:1b:63:19:1f:a2:0f:f3:94:a3:1a:d6:8d:8a:65:8b was issued on by D-Trust GmbH.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Informationstechnikzentrum Bund (ITZBund)

Company registration number: CSM041394230
Organization: Informationstechnikzentrum Bund (ITZBund)
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): 7d:1b:63:19:1f:a2:0f:f3:94:a3:1a:d6:8d:8a:65:8b
Serial Number (int): 166295701437339705446932370412895102347
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 50:8c:3c:3f:bd:41:30:ab:35:86:61:84:41:4e:15:7b:0e:c7:64:f0
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 13:2a:50:17:55:07:29:d8:f0:68:6c:b8:e5:f7:cb:b6:42:f2:3d:6a
Fingerprint (sha256): 00:12:59:86:cc:fa:30:be:68:21:11:e6:79:6a:22:2a:c5:3c:98:08:d9:23:d6:ad:b5:d8:89:34:5e:cc:3f:26

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate zib21.cloud.bescha.in.bund.de

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zib21.cloud.bescha.in.bund.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vlprarp4oo05.bescha.cloud.intranet.bund.de
zib21.cloud.bescha.in.bund.de
vlplq474xpwt.zib21.cloud.bescha.in.bund.de
vlpqnnd7xdmn.bescha.cloud.intranet.bund.de
zib21.bescha.cloud.intranet.bund.de
vlpzkfw4ihyc.bescha.cloud.intranet.bund.de
vlpyet31ftaw.zib21.cloud.bescha.in.bund.de
vlpyet31ftaw.bescha.cloud.intranet.bund.de
vlplq474xpwt.bescha.cloud.intranet.bund.de

Other certificates including the domain name bund.de

(limited to 100 certificates)
eakte-i.cloud.bmel.in.bund.de
bundes.cloud.bmfsfj.in.bund.de
zib21.cloud.bescha.in.bund.de
schulung5.eakte.zoll.in.bund.de
bamf.bund.de
vwpp4op86nna.jrvaas5.cloud.itz.in.bund.de
vleaoq0wu5b9.git.cloud.bc-mgmt82.itz.in.bund.de
ctx02.bmwi.bund.de
20220922.cloud.bcsv.in.bund.de
oo-83b.cloud.bc-mgmt83.itz.in.bund.de
stu-extc.dvdv.bund.de
vlpftilh2f7n.wwpvsp10.cloud.bcsv.in.bund.de
vlps7w4zstxe.petclin.cloud.itz.in.bund.de
cafm-tn1.cloud.bcsv.in.bund.de
vlphxc094986.login07.cloud.base.in.bund.de
amt3a.cloud.zoll.in.bund.de
promadmz.jki.bund.de
vapvrlcm1jon.cloud.bc-mgmt01.itz.in.bund.de
upload.prod.gsb.bmel.in.bund.de
schulung17.eakte.zoll.in.bund.de
vwpcotx909j0.testcz1.cloud.bva.in.bund.de
access.bmjv.cloud.intranet.bund.de
mx1.bvl.bund.de
2306283d.cloud.bcsv.in.bund.de
bclogin3.bkamt.cloud.intranet.bund.de
artifactory.zssi.bva.in.bund.de
vlpvws2uyvwh.pvsplus1.cloud.zoll.in.bund.de
hosting.dwd.de
hosting.dwd.de
lernplattform.bund.de
amp4a.cloud.bpb.in.bund.de
vlpkrogq32qr.adminedge1c.cloud.bc-mgmt01.itz.in.bund.de
www.normenkontrollrat.bund.de
amp3ak.cloud.itz.in.bund.de
vlpzrtfbavdp.bmigate1.cloud.bmi.in.bund.de
access.itz.cloud.intranet.bund.de
editor.egesetz.zd.in.bund.de
vlpu6xc8ixat.my1stsalone60.cloud.bcsv.in.bund.de
vlpxub43mocj.testentw.cloud.stba.in.bund.de
redconf.itz.cloud.intranet.bund.de
hashdb.mwscan.bund.de
int.bpm-extern.bzst.itzbund.net
forum.bfdi.bund.de
personalhaushalt.prod.bmf.in.bund.de
admin.amp3a.gwk.cloud.intranet.bund.de
schulung.eakte.bsh.itz.res.bund.de
api.mwscan.bund.de
formularcenter.bvl.bund.de
vlpgqfx8e9q8.craas-07.cloud.itz.in.bund.de
bmfbox6.cloud.bmf.in.bund.de
gittest.bc-mgmt01.cloud.intranet.bund.de
vlpmwvu2fhzh.eibos105.cloud.bcsv.in.bund.de
travis.baw.res.bund.de
cafm-ti1.cloud.bcsv.in.bund.de
sicherheit.bund.de
vlpgwu8436ks.bfgprodok.cloud.bfg.in.bund.de
formularcenter.bvl.bund.de
vlppm5gze5at.pvs0416l.cloud.bcsv.in.bund.de
20230706.cloud.bcsv.in.bund.de
dzmgit05.bc-mgmt05.cloud.intranet.bund.de
redaktion.atu.gsb.bmi.in.bund.de
ref.xrechnung.bund.de
mob.bmz.bund.de
vlpv0rho8r42.pvsplus1.cloud.bmz.in.bund.de
eakte-t.cloud.bkm.in.bund.de
eakte-t.cloud.base.in.bund.de
vlpc092q2btk.btsapqp.cloud.zitis.in.bund.de
dec230b.cloud.itz.in.bund.de
redaktion.atu.gsb.bmjv.in.bund.de
vlpjeue6bavk.cpmhhoch.cloud.itz.in.bund.de
bn-12esx-41-1r02.oob.cloud.itz.in.bund.de
ivva-ref2.id-ref-bug.it.bund.de
list.sozialwerk.bund.de
vlpxybfa9frg.cbcr.cloud.itz.in.bund.de
oo-06c.cloud.bc-mgmt06.itz.in.bund.de
accesst.cloud.itz.in.bund.de
gigis-s.bkg.bund.de
fis-vl.bvl.bund.de
vlepcwwjpbhu.ntp753.cloud.bpbdev05.itz.in.bund.de
amp1.cloud.zitis.in.bund.de
appladebaw2.front.test.adeba.wsv.itzbund.net
www.bamf.de
git2.bcsv.cloud.intranet.bund.de
vlpuijube9md.pvs4z12.cloud.bmdv.in.bund.de
vlpmpsrojfsq.gwdpma2a.cloud.dpma.in.bund.de
vlppaksi2niz.mr15pp10.cloud.bcsv.in.bund.de
www.kvb.bund.de
amd3a.cloud.zoll.in.bund.de
sso.bvl.bund.de
eservice2022.itz.res.bund.de
oo-81c.cloud.bc-mgmt81.itz.in.bund.de
warnung.bund.de
vlpjaw7bbs1m.prodok-badv.cloud.badv.in.bund.de
vlph1rngvgyh.gwwsv2a.cloud.wsv.in.bund.de
webapp.staging.wire.zd.in.bund.de
vlpjbptohe77.gate745.cloud.eba.in.bund.de
cafm0322.cloud.bcsv.in.bund.de
amp3a.cloud.bpbdev01.itz.in.bund.de
vlpzw166d320.emakorv-cloud.cloud.itz.in.bund.de
vwpsl8qtdinb.bcwsus-05a.cloud.bcsv.in.bund.de

Certificate

The complete raw certificate details for zib21.cloud.bescha.in.bund.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 166295701437339705446932370412895102347
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 12:47:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-25 12:47:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM041394230'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Informationstechnikzentrum Bund (ITZBund)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zib21.cloud.bescha.in.bund.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 943708283201458690864722657309803576694244009871224256429202644621235681639372387017941041309996807201548427896039467799120992229220610880569570000970432551833022552962069251744990488192741538054518280951483166890817029705778745414019721759253628303759865453163472177194576818967403502790516423534672365780038926689423936462809296627322277126473424692569341714878935293567135200588767733218904269395490428292477770602372630166175209738126637861651378178889494083944409570087639322815869865264615984026392188863824958605947252333667790253788263270745153150234309587259241747010082625538901985667453688645192646093769766456658715900334248573404606695488836218525033415292266474766740291500334504514523603206204950365275585554431401728673818077185169107454266151038937796047595994704989780954881247161040392003886318091764496981780134966074387733857670559026967096377797254044485535855787077335383241851798998657791748135885845247527393044790358827989575794107022590957796827258792356335292228126581875716246518893294088807339264299316498873913047247668001850057805564156137899109895498195901421235154683330350940433350804326049857211774910720664586391825479203414062352307544308800196839143196102792040439894377868932624455251021101689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (380 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlprarp4oo05.bescha.cloud.intranet.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zib21.cloud.bescha.in.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlplq474xpwt.zib21.cloud.bescha.in.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlpqnnd7xdmn.bescha.cloud.intranet.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zib21.bescha.cloud.intranet.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlpzkfw4ihyc.bescha.cloud.intranet.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlpyet31ftaw.zib21.cloud.bescha.in.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlpyet31ftaw.bescha.cloud.intranet.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlplq474xpwt.bescha.cloud.intranet.bund.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							508c3c3fbd4130ab35866184414e157b0ec764f0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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