trainstate-cockpit.mo-cs-dev.public.siemens.com

- Siemens -

Issued by Siemens Issuing CA Internet Server 2017

About this certificate

This digital certificate with serial number 0b:e8:3e:8f:e8:b1:f5:76 was issued on by Siemens.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Siemens

Organization: Siemens
Organization unit: Siemens Trust Center
State / Province: Bayern
Locality: Muenchen
Country: DE

Siemens

Company registration number: ZZZZZZB9
Organization: Siemens
Organization unit: Siemens Trust Center
State / Province: Bayern
Locality: Muenchen
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:e8:3e:8f:e8:b1:f5:76
Serial Number (int): 858004516819301750
Serial Number lenght: 60 bits, 8 octets

SubjectKeyId: 2f:a9:fd:69:4e:21:ab:26:f5:b8:fa:aa:4b:95:9a:37:91:72:b4:f7
AuthorityKeyId: 89:70:89:f3:ff:2e:6f:4f:92:83:1d:3f:aa:23:df:4e:e6:63:50:30

Fingerprint (sha1): e1:ae:97:16:26:f9:a1:8f:3c:c3:98:8a:8c:39:51:d8:67:f1:f0:6c
Fingerprint (sha256): 01:be:4c:01:37:5b:8e:fc:d5:a1:7f:31:8c:59:d8:63:14:a6:19:45:26:48:a5:24:e7:a0:fa:a9:cc:60:a3:05

Issuing Certificate URL: http://ah.siemens.com/pki?ZZZZZZB9.crt
Issuing Certificate URL: ldap://al.siemens.net/CN=ZZZZZZB9,L=PKI?cACertificat
Issuing Certificate URL: ldap://al.siemens.com/CN=ZZZZZZB9,o=Trustcenter?cACertificate
Issuing Certificate URL: http://ocsp1.pki-services.siemens.com/certificates/search.cgi?alias=SiemensIssuingCAInternetServer2017

Revocation information

OCSP Server: http://ocsp1.pki-services.siemens.com
CRL Distribution Point: http://ch.siemens.com/pki?ZZZZZZB9.crl
CRL Distribution Point: ldap://cl.siemens.net/CN=ZZZZZZB9,L=PKI?certificateRevocationList
CRL Distribution Point: ldap://cl.siemens.com/CN=ZZZZZZB9,o=Trustcenter?certificateRevocationList
CRL Distribution Point: http://ocsp1.pki-services.siemens.com/crls/search.cgi?alias=SiemensIssuingCAInternetServer2017

Check the revocation status for certificate trainstate-cockpit.mo-cs-dev.public.siemens.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for trainstate-cockpit.mo-cs-dev.public.siemens.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

trainstate-cockpit.mo-cs-dev.public.siemens.com

Other certificates including the domain name siemens.com

(limited to 100 certificates)
brandville.siemens.com
industryservice.siemens.com
tciq10lb.gplm.siemens.com
application-hu.siemens.com
npm.siemens.com
plsccmcmg.industrysoftware.automation.siemens.com
tgsprs.siemens-emis.com
www.medical.siemens.com
sow-int.siemens.com
railmall.siemens.com
ura-mx.siemens.com
vdi-mil.industrysoftware.automation.siemens.com
identityloc2.industrysoftware.automation.siemens.com
mds-mailsync.siemens.com
siemens.com
sts-online.siemens.com
redirects-stage.test.dc.siemens.com
fss.us-east-1.sws.siemens.com
turn65.circuit.siemens.com
btpresales-q.siemens.com
jumphost-us.hccloud.siemens.com
volttest.siemens.com
ppm.usa.siemens.com
dev-publish.aemweb.industrysoftware.automation.siemens.com
w3.energy.siemens.com
api-ws.qa.sensproducts.siemens.com
sensproductsyslog.cloud.siemens.com
www.siemens.com
emmt.siemens.com
mailman.industrysoftware.automation.siemens.com
sharepoint-maintenance.siemens.com
vdesktop-aae2.siemens.com
hit.sbt.siemens.com
dev.ws.duve.siemens.com
portal2.industryservice.siemens.com
myid-qa.siemens.com
EGMRS.siemens.com
citiauth.industrysoftware.automation.siemens.com
origin.dev.cms.c2.dc.siemens.com
beta04.industryservice.siemens.com
solidedge.siemens.com
*.test.teamplay.siemens.com
MysiteQA13.industrysoftware.automation.siemens.com
api-myshare.siemens.com
2013-internet-valid.catestsite.siemens.com
primavera-rdweb.siemens.com
c4b.gss.siemens.com
failover.www.siemens.com
console.monitoring.dev.eu-central-1.sws.siemens.com
ura-mum-in.siemens.com
sw.siemens.com
testing-dgswsus.energy.siemens.com
esurvey.siemens.com
turn02.circuit-test.siemens.com
community.plm.automation.siemens.com
api.dc.siemens.com
circuit-test.siemens.com
mspki.na.entitlement.siemens.com
www.motores.siemens.com
www.pia-selector.automation.siemens.com
productadvisor-demo.mindsphere.siemens.com
winlog01.industrysoftware.automation.siemens.com
elearning-test.healthcare.siemens.com
datahub.mindsphere.siemens.com
extranet.webapp.swe.siemens.com
tcim30v01.gplm.siemens.com
www.csm.energy.siemens.com
data.cdn.siemens.com
smda2.siemens.com
shop.healthcare.siemens.com
login.ias.plm.automation.siemens.com
skb.healthcare.siemens.com
login.siemenswelt.siemens.com
cpq.healthcare.siemens.com
w802.siemens.com
ussciport.medical.siemens.com
s2c-supplier-qa.siemens.com
webtac2.industrysoftware.automation.siemens.com
www.sitrain-int.siemens.com
getpaid.siemens.com
www.ea-testreports.siemens.com
siecus.siemens.com
www.csm.energy.siemens.com
sfdcauth.energy.siemens.com
ura-tok.industrysoftware.automation.siemens.com
health-advisor-dev.mindsphere.siemens.com
ld-academy-test.siemens.com
engage.siemens.com
extranet-backend-ma1.eps.siemens.com
productinformation.healthcare.siemens.com
assetperformance.navigator.siemens.com
dev-fileshare.siemens.com
w3.siemens.com
amc2csg.siemens.com
test-myregistration.siemens.com
*.eightfold.ai
www.healthcare.siemens.com
mspki.rs.entitlement.siemens.com
robotics3dvdi.siemens.com
amc2csg.siemens.com

Certificate

The complete raw certificate details for trainstate-cockpit.mo-cs-dev.public.siemens.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43sCDarvWCwW+6YwWvgc
lVxFXu4iBPLMQpQaZbBRofG/CUup8oGB6ynTca58TrC3CqUZ5ERZpESN97clkpbg
7HWG7VdHiaSR+8xbDATTnNaZa8u6nTl/Rn1Ov/TQB7i9C6HhuV4jeVka8s7og08p
mozxmGWzJfvn2Us4pfxKkjuEowRFJA9GpGqcKQo9t/b2NB8ZLySVcXRBLffrWjN1
DmOunTTVOuq7fB+Nt8jpb5NRPHLeMi+kLznWc9XElfL42qkO35th0vB01a8tHBiv
H4JMt8nWUNc6MjYicnUiLZBW2NtekkBXajRAsfkjnwzOoFEr3Vb030doZfL3QaaV
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 858004516819301750
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Siemens'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZZZZZZB9'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Siemens Trust Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Siemens Issuing CA Internet Server 2017'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-12 14:39:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-20 21:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Siemens'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Siemens Trust Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'trainstate-cockpit.mo-cs-dev.public.siemens.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28716752743213008275694396694369444452441479125521677807859666082331843230964604660164801677497126512676598619334514702173101119468253101707775283290253998077641951829269660571727608481434869596050718366845513982972544243375630813012542859019854337447782779968415917391463335727795987033275400867864844413107447425616317701739321896362787803288031677906302286437713166352511377663799654266308358080984970055343037349342379761084672136686304571591031373706208257887406526589524296593416248668196068458386466756270064210078707549730364458119668569118387523200709663754979675478178380713771752302522047093923776765007229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ah.siemens.com/pki?ZZZZZZB9.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://al.siemens.net/CN=ZZZZZZB9,L=PKI?cACertificat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://al.siemens.com/CN=ZZZZZZB9,o=Trustcenter?cACertificate'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp1.pki-services.siemens.com/certificates/search.cgi?alias=SiemensIssuingCAInternetServer2017'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp1.pki-services.siemens.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2fa9fd694e21ab26f5b8faaa4b959a379172b4f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 897089f3ff2e6f4f92831d3faa23df4ee6635030
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (142 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4329.7.2.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.siemens.com/pki/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.1800.0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (306 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ch.siemens.com/pki?ZZZZZZB9.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://cl.siemens.net/CN=ZZZZZZB9,L=PKI?certificateRevocationList'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://cl.siemens.com/CN=ZZZZZZB9,o=Trustcenter?certificateRevocationList'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp1.pki-services.siemens.com/crls/search.cgi?alias=SiemensIssuingCAInternetServer2017'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trainstate-cockpit.mo-cs-dev.public.siemens.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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