webmail.ihk.de

- IHK Gesellschaft fuer Informationsverarbeitung mbH -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 7b:ee:7f:e8:1a:64:ee:65:02:08:a3:04:9b:36:6e:25 was issued on by D-Trust GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

IHK Gesellschaft fuer Informationsverarbeitung mbH

Company registration number: CSM030937172
Organization: IHK Gesellschaft fuer Informationsverarbeitung mbH
State / Province: Nordrhein-Westfalen
Locality: Dortmund
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 7b:ee:7f:e8:1a:64:ee:65:02:08:a3:04:9b:36:6e:25
Serial Number (int): 164733404388997937038035744896555839013
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f5:d7:c8:03:ce:92:96:05:27:81:6a:05:9d:b2:dc:70:e4:1d:ab:49
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 18:be:8d:2c:29:7c:8b:97:ed:3d:08:30:46:41:4b:ed:3d:95:65:a1
Fingerprint (sha256): 00:74:55:c0:67:8d:b7:1f:7d:2b:c2:19:bc:1c:fd:6f:ea:ad:e4:27:79:eb:e2:65:5c:0f:02:9b:73:14:93:c8

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate webmail.ihk.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.ihk.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.ihk.de
*.webmail.ihk.de

Other certificates including the domain name ihk.de

(limited to 100 certificates)
cdn01.blog.ostwestfalen.ihk.de
ihkdigital.services.ihk.de
coburg.ihk.de
webmail.ihk.de
coburg.ihk.de
gemeinsam.niederrhein.ihk.de
bildung2.gfi.ihk.de
www.pruefungen.ostwestfalen.ihk.de
www.weingarten.ihk.de
events.wuerzburg.ihk.de
www.saarland.ihk.de
www.offenbach.ihk.de
ostwestfalen.ihk.de
tixxt.kiel.ihk.de
ostwestfalen.ihk.de
zq-digitalekompetenz.schwaben.ihk.de
vdi.hannover.ihk.de
adrprintsrv.gfi.ihk.de
box.wuerzburg.ihk.de
videokonferenz.ihk.de
unternehmen.gera.ihk.de
www.going-international.ihk.de
tagesspiegel.kiosk.plus
offenbach.ihk.de
profile.ihk.de
www.vergabe.ihk.de
vstdbv3.ihk.de
vpn.heilbronn.ihk.de
seleinfo.ihk.de
videokonferenz.kassel.ihk.de
regensburg.ihk.de
ostwestfalen.ihk.de
magazine.suncoastergroup.com
proxy1.juris.ihk.de
vergabe.ihk.de
evadatenarchiv.ihk.de
ostwestfalen.ihk.de
frankfurt-main.ihk.de
berlin.ihk.de
ostwestfalen.ihk.de
xihkpilotws.gfi.ihk.de
www.hanau.ihk.de
cert.ihk.de
www.services.abnahme.usbdb.ihk.de
gemeinsam.niederrhein.ihk.de
ecofinder.ihk.de
www.unternehmen.darmstadt.ihk.de
*.webmail.ihk.de
*.gfi.ihk.de
webservices.dresden.ihk.de
nas.kiel.ihk.de
cyber.frankfurt-main.ihk.de
webservices.dresden.ihk.de
pao.berlin.ihk.de
coburg.ihk.de
impulsnetzwerk.ihk.de
ihk.de
owi.ostwestfalen.ihk.de
frankfurt-main.ihk.de
sse.cottbus.ihk.de
ausbildung.darmstadt.ihk.de
zq-digitalekompetenz.schwaben.ihk.de
magdeburg.ihk.de
wireless1.ihk.de
www.frankfurt-main.ihk.de
ausgabe.vstdbv3.ihk.de
mainau.wuerzburg.ihk.de
www.pruefungen.ostwestfalen.ihk.de
stats.ostwestfalen.ihk.de
wlan.muenchen.ihk.de
pruefung.ihk.de
*.schwaben.ihk.de
webservices.dresden.ihk.de
unternehmen.gera.ihk.de
muenchen.ihk.de
quickplace.ihk.de
cyber.frankfurt-main.ihk.de
geoinfo.ihk.de
cloud.karlsruhe.ihk.de
ihk-sh.de
bonn.ihk.de
adrprintsrv.gfi.ihk.de
www.aachen.ihk.de
dataoutputservices.gfi.ihk.de
wis.ihk.de
karlsruhe.ihk.de
veranstaltung.mittlerer-niederrhein.ihk.de
connect.darmstadt.ihk.de
ostwestfalen.ihk.de
wm.ihk.de
www.pruefungen.ostwestfalen.ihk.de
proxy1.beck.ihk.de
cert.ihk.de
cottbus.ihk.de
mx01.ihk.de
kiosk.der-kleine-georg.de
www.dresden.ihk.de
ve-register.ihk.de
traveler.konstanz.ihk.de
login3.ihk.de

Certificate

The complete raw certificate details for webmail.ihk.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 164733404388997937038035744896555839013
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-05 10:13:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-29 09:45:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM030937172'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dortmund'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IHK Gesellschaft fuer Informationsverarbeitung mbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.ihk.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 912622907520863792680371272375987157193590786334062670286456736659226542874888119285267385876384457514141483140652980841137263990931554594617689680348183794230356122242563899527970834841161002319665656651328126519296766065099827722521094794366313054087300764624714172385995526578978339121356777873339256709593729783638799618170998821460488152269684424191992083291865912325159819902139948903079629680738153198054527276246992489725042545110495139164051177425535759223629386606073796976520384326652148065796595347375183027520206923434974733961718881768814873593866075176332537957652775525989316916472422951594031170107084220874037618381145637550263636103181095645522080305005593324576596564890010260399126143885063502525887613164173832245557921708706469396705382435831275305807525019421718875641156230884641876426378406993333021080660228764295123046186990095219339201600657370142598530153526775878499971326376782685932322932151453947040607886739370598189185072579661598708845211465260442017307019311520535102656584873991757279022045216762747958417488394846715137734868300731660051151123602829471220251343387745206073544968068688931390181752082890921025881905910448367174342852241386159912638304714325269012896189284852972063228270511889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webmail.ihk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f5d7c803ce92960527816a059db2dc70e41dab49
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003c6b2184bf5f5c19e2eadab58943842c1b98a88d142de2bf82204843477e54e602cbc5ca0e8100aa7b097fd13a8efa3e977f03d547f8e37ad77ece7e081ef64a7c47c639ee7bd2692dd4ca1c60e663fe202da4da863f8b2487d4d8feeab693090e5342bc68ed6637103e39008e7591b52d6f03124f8c9baf08ad728f3814ebcc1d31cb81056982a0d5fcd8740865135bd029dd5e4b283e5b2a6345fdf2e4735143da4f849ccca026116bc117977a347e7cf454266a0e7e73225ae1329a25b868baf26b5e131cf2386b16dc102f0866988eb738c4ed637fb4c0df457ee22b80e95de90e77a5d22b526c2a1c308403b4346aed34fada62c84f30edc611d9c55250