vlpzrtfbavdp.bmigate1.cloud.bmi.in.bund.de

- Informationstechnikzentrum Bund (ITZBund) -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 4f:4a:51:e0:cf:16:a3:c0:97:89:9d:0b:fd:06:16:9f was issued on by D-Trust GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Informationstechnikzentrum Bund (ITZBund)

Company registration number: CSM031255376
Organization: Informationstechnikzentrum Bund (ITZBund)
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 4f:4a:51:e0:cf:16:a3:c0:97:89:9d:0b:fd:06:16:9f
Serial Number (int): 105394902320916996883908927590337222303
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 8e:53:b5:97:38:ef:8f:c7:f9:48:8c:6e:72:f4:58:e3:ed:6a:7e:ce
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): af:31:86:5b:ab:69:a7:f5:59:d3:b7:20:09:a3:92:23:67:9d:e1:f0
Fingerprint (sha256): 00:d4:27:ad:4f:2b:2b:cf:bd:48:b8:12:76:6b:78:6c:b6:80:4b:89:1b:32:7e:98:e6:73:85:0d:99:50:6f:45

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate vlpzrtfbavdp.bmigate1.cloud.bmi.in.bund.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vlpzrtfbavdp.bmigate1.cloud.bmi.in.bund.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vlpzrtfbavdp.bmi.cloud.intranet.bund.de
vlpzrtfbavdp.bmigate1.cloud.bmi.in.bund.de

Other certificates including the domain name bund.de

(limited to 100 certificates)
bundes.cloud.bmfsfj.in.bund.de
schulung5.eakte.zoll.in.bund.de
bamf.bund.de
ctx02.bmwi.bund.de
20220922.cloud.bcsv.in.bund.de
stu-extc.dvdv.bund.de
vlps7w4zstxe.petclin.cloud.itz.in.bund.de
cafm-tn1.cloud.bcsv.in.bund.de
promadmz.jki.bund.de
upload.prod.gsb.bmel.in.bund.de
schulung17.eakte.zoll.in.bund.de
access.bmjv.cloud.intranet.bund.de
bclogin3.bkamt.cloud.intranet.bund.de
artifactory.zssi.bva.in.bund.de
vlpvws2uyvwh.pvsplus1.cloud.zoll.in.bund.de
hosting.dwd.de
hosting.dwd.de
lernplattform.bund.de
www.normenkontrollrat.bund.de
vlpzrtfbavdp.bmigate1.cloud.bmi.in.bund.de
access.itz.cloud.intranet.bund.de
editor.egesetz.zd.in.bund.de
vlpu6xc8ixat.my1stsalone60.cloud.bcsv.in.bund.de
vlpxub43mocj.testentw.cloud.stba.in.bund.de
redconf.itz.cloud.intranet.bund.de
hashdb.mwscan.bund.de
int.bpm-extern.bzst.itzbund.net
forum.bfdi.bund.de
personalhaushalt.prod.bmf.in.bund.de
schulung.eakte.bsh.itz.res.bund.de
formularcenter.bvl.bund.de
bmfbox6.cloud.bmf.in.bund.de
gittest.bc-mgmt01.cloud.intranet.bund.de
travis.baw.res.bund.de
cafm-ti1.cloud.bcsv.in.bund.de
sicherheit.bund.de
formularcenter.bvl.bund.de
dzmgit05.bc-mgmt05.cloud.intranet.bund.de
redaktion.atu.gsb.bmi.in.bund.de
ref.xrechnung.bund.de
mob.bmz.bund.de
eakte-t.cloud.base.in.bund.de
vlpc092q2btk.btsapqp.cloud.zitis.in.bund.de
redaktion.atu.gsb.bmjv.in.bund.de
ivva-ref2.id-ref-bug.it.bund.de
list.sozialwerk.bund.de
accesst.cloud.itz.in.bund.de
gigis-s.bkg.bund.de
fis-vl.bvl.bund.de
amp1.cloud.zitis.in.bund.de
appladebaw2.front.test.adeba.wsv.itzbund.net
www.bamf.de
vlppaksi2niz.mr15pp10.cloud.bcsv.in.bund.de
www.kvb.bund.de
sso.bvl.bund.de
eservice2022.itz.res.bund.de
warnung.bund.de
webapp.staging.wire.zd.in.bund.de
cafm0322.cloud.bcsv.in.bund.de
vlpzw166d320.emakorv-cloud.cloud.itz.in.bund.de
vwpsl8qtdinb.bcwsus-05a.cloud.bcsv.in.bund.de
ilp03812.iamservice.iaas.itz.cloud.intranet.bund.de
sportal.bmi.in.bund.de
hosting.dwd.de
eakte-i.cloud.bkm.in.bund.de
bcadminjumphost.bc-mgmt05.cloud.intranet.bund.de
cafm1028.cloud.bcsv.in.bund.de
sibboxaa.cloud.bcsv.in.bund.de
cafm-tn2.cloud.bcsv.in.bund.de
ampvsp.cloud.bmf.in.bund.de
test.zbp.bund.de
ivbb.citrix.brh.intranet.bund.de
amp7.cloud.bmdv.in.bund.de
confzent.itz.cloud.intranet.bund.de
dwh-integration.goaml.fiu.in.bund.de
flufus.baf.bund.de
int.anwendungen-luzina.zd.in.bund.de
vm-test.bescha.bund.de
enstransv-entw.zoll.in.bund.de
test.sign.npa-gsd.bva.bund.de
dvtu-int.itz.in.bund.de
api.portal.atu.beihilfe.bva.bund.de
ibis.intranet.bund.de
hosting.dwd.de
bedeakte25-sm.bmjv.intranet.bund.de
accessp.itz.cloud.intranet.bund.de
collabmi.cloud.bcsv.in.bund.de
amd1.cloud.zoll.in.bund.de
eab306mi.cloud.bcsv.in.bund.de
monitoring-nachhaltigkeit.bkamt.intranet.bund.de
helpdesk-p1.pwservice.zd.in.bund.de
vlpb8at2ozfk.gwbmdv2a.cloud.bmdv.in.bund.de
amp1.cloud.bafa.in.bund.de
dit.bund.de
register.wreg.bkarta.intranet.bund.de
amp4.cloud.bmdv.in.bund.de
stage.grc.bva.intranet.bund.de
access.bpa.cloud.intranet.bund.de
gigis.bkg.bund.de
vlpx9e8vdvdq.bcmon1.cloud.base.in.bund.de

Certificate

The complete raw certificate details for vlpzrtfbavdp.bmigate1.cloud.bmi.in.bund.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0IbsWkXZ6qH7ZgKqXy+q
GAcN6N8yo7VaWeY+Y59n3BbSicg7JPA0V4Gjr8Ug6TdfFGpIJPjOnNjf2AGYSpcv
LAAvPBPNeMj7wO59PMW8X8o1JEXhX8l4fELPH/NLuvthxP/5eZQFJaBUS7RNkbdX
y+Cf0zMoPek/IhAs3TNFXu1qYMeyuQmXzYWiwhs+Ds8vm9W+9H9L5HPB9/I6MlW2
TaC5Kj3qM26eEBAFCEuotnL58IHdwW1a8KtXv0cVbkq7+0FIv84VfvN+ScrHrHDI
vc4L0A3SRpW9vXO7bshhGY4yEnVgklLGw37peu9ivCHwt+pqolrG+KrPRSvBi8R6
D1XvRAgU/b93TPNiWcKDiFuhYilvuYD9VUsg8O2jKibJpKa6D+4VkGV1fpp3shVC
2xVyDhTDQrV83BKdoV5rIGVtwUjEDXTp+ZoDG/Nv9LdWTrn/XV6+ibdiMlAQj0Xa
L9YO0gZ02immz/fCzn3DML3/QGgMC54ahEdpuRPGz3JJZ95Qvt+C1kDeAyOHZoIh
gFq52V2GKCF7olTSLT385XIWw3iC6fVso7/VDidxmtPRWINWD+sT55GIVem2cyqk
xyG2DbfGAb+Uq4znm6RUpLLEAv/0J0zmL2GQAqtjKlJV9jUX34UzDoYbzAqPd7hK
7HNWIIdliaYedUq4WBTWUMkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 105394902320916996883908927590337222303
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-09 13:20:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-12 13:20:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM031255376'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Informationstechnikzentrum Bund (ITZBund)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vlpzrtfbavdp.bmigate1.cloud.bmi.in.bund.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 850716117892381239492930910033400808481789079527620530589366878091445504169763165258880158883103537988392935181667794312572904541848748698849700090270039620285084503331627771983704065880008577958948693142146132311102112053123126392539984359634434989517076327269512955395665703283654074186522919573182369815692541621219377492635975075842727609812775029777597090797323786877356794879561686370482217881678806003587478182759039031714651819011532848150861051944929111212678262487078646703148389718285252835144005814767324858271492544174374641404972834475317080524675790853163859013313124111507608528852074203257265855567734654313087927743816992235979204795235636207751181682762242682290153594795089488520827071571346818893181632479926184950987027067191237678120412310099214666996383189425257629227071067055681183115434585382124676359327671245744649310407649041200083613721873142279042370525801118174995641762976318491487080946216779304211325845908456441808018211861401351511886182851149973581814506213939910872621703682210309057076062652246741774047366857665975615825758308813976685260398186333601339406572833790935723838591798717769220387829063663754289370260137399360898445507383805012884120537125626962468833150142222383098366233301193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlpzrtfbavdp.bmi.cloud.intranet.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlpzrtfbavdp.bmigate1.cloud.bmi.in.bund.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e53b59738ef8fc7f9488c6e72f458e3ed6a7ece
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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