vlpgqfx8e9q8.craas-07.cloud.itz.in.bund.de

- Informationstechnikzentrum Bund (ITZBund) -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 45:96:fa:0a:4a:1f:0b:41:b4:fa:98:9b:52:c1:d0:1d was issued on by D-Trust GmbH.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Informationstechnikzentrum Bund (ITZBund)

Company registration number: CSM040893354
Organization: Informationstechnikzentrum Bund (ITZBund)
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): 45:96:fa:0a:4a:1f:0b:41:b4:fa:98:9b:52:c1:d0:1d
Serial Number (int): 92500647655561378020189792768136171549
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ab:7f:bb:bb:9a:3a:87:23:e7:57:e8:1a:6e:a8:49:25:8b:4f:7f:4b
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): be:7b:9b:d4:e1:4d:01:67:a1:ed:04:81:3e:99:45:9c:51:22:d4:21
Fingerprint (sha256): 01:3d:31:64:87:d1:0b:5e:e2:22:11:07:a5:4c:57:f1:6a:4d:07:70:9c:db:ce:d6:18:84:b0:e4:e3:e0:c2:bd

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate vlpgqfx8e9q8.craas-07.cloud.itz.in.bund.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vlpgqfx8e9q8.craas-07.cloud.itz.in.bund.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vlpgqfx8e9q8.itz.cloud.intranet.bund.de
craas-07.cloud.itz.in.bund.de
craas-07.itz.cloud.intranet.bund.de
vlpgqfx8e9q8.craas-07.cloud.itz.in.bund.de

Other certificates including the domain name bund.de

(limited to 100 certificates)
eakte-i.cloud.bmel.in.bund.de
bundes.cloud.bmfsfj.in.bund.de
zib21.cloud.bescha.in.bund.de
schulung5.eakte.zoll.in.bund.de
bamf.bund.de
vwpp4op86nna.jrvaas5.cloud.itz.in.bund.de
vleaoq0wu5b9.git.cloud.bc-mgmt82.itz.in.bund.de
ctx02.bmwi.bund.de
20220922.cloud.bcsv.in.bund.de
oo-83b.cloud.bc-mgmt83.itz.in.bund.de
stu-extc.dvdv.bund.de
vlpftilh2f7n.wwpvsp10.cloud.bcsv.in.bund.de
vlps7w4zstxe.petclin.cloud.itz.in.bund.de
cafm-tn1.cloud.bcsv.in.bund.de
vlphxc094986.login07.cloud.base.in.bund.de
amt3a.cloud.zoll.in.bund.de
promadmz.jki.bund.de
vapvrlcm1jon.cloud.bc-mgmt01.itz.in.bund.de
upload.prod.gsb.bmel.in.bund.de
schulung17.eakte.zoll.in.bund.de
vwpcotx909j0.testcz1.cloud.bva.in.bund.de
access.bmjv.cloud.intranet.bund.de
mx1.bvl.bund.de
2306283d.cloud.bcsv.in.bund.de
bclogin3.bkamt.cloud.intranet.bund.de
artifactory.zssi.bva.in.bund.de
vlpvws2uyvwh.pvsplus1.cloud.zoll.in.bund.de
hosting.dwd.de
hosting.dwd.de
lernplattform.bund.de
amp4a.cloud.bpb.in.bund.de
vlpkrogq32qr.adminedge1c.cloud.bc-mgmt01.itz.in.bund.de
www.normenkontrollrat.bund.de
amp3ak.cloud.itz.in.bund.de
vlpzrtfbavdp.bmigate1.cloud.bmi.in.bund.de
access.itz.cloud.intranet.bund.de
editor.egesetz.zd.in.bund.de
vlpu6xc8ixat.my1stsalone60.cloud.bcsv.in.bund.de
vlpxub43mocj.testentw.cloud.stba.in.bund.de
redconf.itz.cloud.intranet.bund.de
hashdb.mwscan.bund.de
int.bpm-extern.bzst.itzbund.net
forum.bfdi.bund.de
personalhaushalt.prod.bmf.in.bund.de
admin.amp3a.gwk.cloud.intranet.bund.de
schulung.eakte.bsh.itz.res.bund.de
api.mwscan.bund.de
formularcenter.bvl.bund.de
vlpgqfx8e9q8.craas-07.cloud.itz.in.bund.de
bmfbox6.cloud.bmf.in.bund.de
gittest.bc-mgmt01.cloud.intranet.bund.de
vlpmwvu2fhzh.eibos105.cloud.bcsv.in.bund.de
travis.baw.res.bund.de
cafm-ti1.cloud.bcsv.in.bund.de
sicherheit.bund.de
vlpgwu8436ks.bfgprodok.cloud.bfg.in.bund.de
formularcenter.bvl.bund.de
vlppm5gze5at.pvs0416l.cloud.bcsv.in.bund.de
20230706.cloud.bcsv.in.bund.de
dzmgit05.bc-mgmt05.cloud.intranet.bund.de
redaktion.atu.gsb.bmi.in.bund.de
ref.xrechnung.bund.de
mob.bmz.bund.de
vlpv0rho8r42.pvsplus1.cloud.bmz.in.bund.de
eakte-t.cloud.bkm.in.bund.de
eakte-t.cloud.base.in.bund.de
vlpc092q2btk.btsapqp.cloud.zitis.in.bund.de
dec230b.cloud.itz.in.bund.de
redaktion.atu.gsb.bmjv.in.bund.de
vlpjeue6bavk.cpmhhoch.cloud.itz.in.bund.de
bn-12esx-41-1r02.oob.cloud.itz.in.bund.de
ivva-ref2.id-ref-bug.it.bund.de
list.sozialwerk.bund.de
vlpxybfa9frg.cbcr.cloud.itz.in.bund.de
oo-06c.cloud.bc-mgmt06.itz.in.bund.de
accesst.cloud.itz.in.bund.de
gigis-s.bkg.bund.de
fis-vl.bvl.bund.de
vlepcwwjpbhu.ntp753.cloud.bpbdev05.itz.in.bund.de
amp1.cloud.zitis.in.bund.de
appladebaw2.front.test.adeba.wsv.itzbund.net
www.bamf.de
git2.bcsv.cloud.intranet.bund.de
vlpmpsrojfsq.gwdpma2a.cloud.dpma.in.bund.de
vlppaksi2niz.mr15pp10.cloud.bcsv.in.bund.de
www.kvb.bund.de
amd3a.cloud.zoll.in.bund.de
sso.bvl.bund.de
eservice2022.itz.res.bund.de
oo-81c.cloud.bc-mgmt81.itz.in.bund.de
warnung.bund.de
vlpjaw7bbs1m.prodok-badv.cloud.badv.in.bund.de
vlph1rngvgyh.gwwsv2a.cloud.wsv.in.bund.de
webapp.staging.wire.zd.in.bund.de
vlpjbptohe77.gate745.cloud.eba.in.bund.de
cafm0322.cloud.bcsv.in.bund.de
amp3a.cloud.bpbdev01.itz.in.bund.de
vlpzw166d320.emakorv-cloud.cloud.itz.in.bund.de
vwpsl8qtdinb.bcwsus-05a.cloud.bcsv.in.bund.de
eakte-s.cloud.zitis.in.bund.de

Certificate

The complete raw certificate details for vlpgqfx8e9q8.craas-07.cloud.itz.in.bund.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 92500647655561378020189792768136171549
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-08 09:16:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-11 09:16:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM040893354'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Informationstechnikzentrum Bund (ITZBund)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vlpgqfx8e9q8.craas-07.cloud.itz.in.bund.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 758020387614732454081954319846871566106652696136701453175366782149786029937087104564811311608527437427638981193995977992980610773235703360497195226994288561291539557820574304404033810550842742671173729689328001481707373668312885281281213000701821338905221691433604448076612944785364879142443653245138136285510307023493935884302710883564173420349051421410928565006839461003889604677522310971442585398206636578687719623700501424290485958153355376097850547697642157411753540598943066330560406996835457612271176027514977416925303568641901181740571151097780293735161625968481648824289906857107909111147978355779995961688073422611217604862776445180802877401218564117236045913938973396355057258366303404212465685923197521573023841189740783454867800766535981813734797425346478826214598787115225389665221526052048921001375993008793886457069986302509035409532947969647461462859208694500710106729895294472704753930959870782996782126453570354562821243564757148030905091858246242915595084960796598259207881341076289677996483217160521484218585948824471563266868772540911273768060302481757813489728394540521440060513366711181790677140342874418816701379902325322568148753217950542504814790030334626026911472238875995575639275290016790872804044267119
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (156 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlpgqfx8e9q8.itz.cloud.intranet.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craas-07.cloud.itz.in.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craas-07.itz.cloud.intranet.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlpgqfx8e9q8.craas-07.cloud.itz.in.bund.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab7fbbbb9a3a8723e757e81a6ea849258b4f7f4b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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