pasclientcert.pas.cloudapi.de

- Microsoft Deutschland MCIO GmbH -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 56:07:2c:23:35:e2:aa:95:9a:0d:f7:a9:49:73:dc:fe was issued on by D-Trust GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Deutschland MCIO GmbH

Company registration number: CSM017901585
Organization: Microsoft Deutschland MCIO GmbH
Organization unit: Azure
State / Province: Bayern
Locality: Muenchen
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 56:07:2c:23:35:e2:aa:95:9a:0d:f7:a9:49:73:dc:fe
Serial Number (int): 114350848931197485853609540732807535870
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: e2:3a:9a:a7:29:dd:d9:cc:2f:f6:f3:19:85:03:e6:42:90:f7:a0:d9
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 65:28:da:7b:25:29:bf:50:2e:e6:db:44:d2:1b:42:6a:28:92:72:a0
Fingerprint (sha256): 03:00:b0:af:5a:84:eb:6c:a2:bc:bb:df:e8:d1:70:1f:f1:a9:04:83:ed:8d:e1:5b:2c:80:b0:3d:a1:77:26:37

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate pasclientcert.pas.cloudapi.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pasclientcert.pas.cloudapi.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pasclientcert.pas.cloudapi.de

Other certificates including the domain name cloudapi.de

(limited to 100 certificates)
wcf.global.networkwatcher.cloudapi.de
*.file.core.cloudapi.de
sqlvmrptoazuremsiauth.bfprod.database.cloudapi.de
dstssuperuser.dsts.core.cloudapi.de
*.blob.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
lg.admin.core.cloudapi.de
LG1N.agent.core.cloudapi.de
casworkers.cas.cloudapi.de
rpsdek.analysis.cloudapi.de
ss-encryption-prod.cloudapi.de
identity.blackforest.azurehealth.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
rp.geneva.keyvault.cacheinfra.cloudapi.de
clientauth.pas.cloudapi.de
germanycentral.mwctoken.pbidedicated.cloudapi.de
metricsclient.geneva.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
*.queue.core.cloudapi.de
antares.to.acis.azurewebsites.cloudapi.de
brokerclientauth.servicebus.cloudapi.de
RDFEMOCPClient.cloudapi.de
metricsclient.geneva.core.cloudapi.de
*.queue.core.cloudapi.de
*.account.core.cloudapi.de
*.blob.core.cloudapi.de
wavnetnmagent.core.cloudapi.de
client.warp-bfprod-lg.wf.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
ev2deployments.cacheinfra.cloudapi.de
metricsclient.geneva.core.cloudapi.de
encryption.internal.servicebus.cloudapi.de
prod.rmaclient.azcisbf.core.cloudapi.de
alp.cluster.prod.ips.cloudapi.de
tr2.germanynortheast1-a.worker.database.cloudapi.de
sakenc.tr4.germanynortheast1-a.database.cloudapi.de
metricsclient.geneva.core.cloudapi.de
*.de.internal.servicebus.cloudapi.de
lg1prdstr01.fc.core.cloudapi.de
wavnetnmagent.core.cloudapi.de
toposervice.cistenant.azcisbf.core.cloudapi.de
emails.cloudapi.de
mds.analysis.cloudapi.de
jitrunner.security.core.cloudapi.de
dcmtkustoloader.tenant.azcis.cloudapi.de
pasclientcert.pas.cloudapi.de
directorydifferentialquery.cloudapi.de
ams-gect-1-hos-rest-1-1.azurecloudapp.de
*.file.core.cloudapi.de
client.mds.germanynortheast1-a.database.cloudapi.de
auth.idpsignals.ests.bf.ips.cloudapi.de
m365fleetagc.sci.azcis.cloudapi.de
billing.dsms.tr6.germanycentral1-a.database.cloudapi.de
notificationhub.cloudapi.de
pilotfishbuildout.sci.azcis.cloudapi.de
*.dfs.core.cloudapi.de
pasclientcert.pas.cloudapi.de
metricsclient.geneva.core.cloudapi.de
pasclientcert.pas.cloudapi.de
dews-prod-lg1-001-api.azurewebsites.cloudapi.de
adnsarmfe.cloudapi.de
*.tun.p.azurewebsites.cloudapi.de
*.web.core.cloudapi.de
geomaster.azurewebsites.cloudapi.de
germanycentral-prod-a.azcp.fc.core.cloudapi.de
germanynortheast01.rnm.core.cloudapi.de
tokenencryptor.analysis.cloudapi.de
metricsclient.geneva.core.cloudapi.de
client.azcp-prod-lg1n.wf.core.cloudapi.de
tr3.germanynortheast1-a.worker.database.cloudapi.de
metricsclient.geneva.core.cloudapi.de
*.blob.core.cloudapi.de
directory.cloudapi.de
*.blob.core.cloudapi.de
germanycentral-dsms.dsms.core.cloudapi.de
SqlAliasClient.germanynortheast1-a.database.cloudapi.de
gatewaymonitoring.cloudapi.de
*.file.core.cloudapi.de
enc.gr-dews-prod-fr1.azurewebsites.cloudapi.de
DstsSuperUser.dsts.core.cloudapi.de
artifactconsumer.dnsservingplane.cloudapi.de
icm.azurewebsites.cloudapi.de
adebootstrap.diskencryption.core.cloudapi.de
*.file.core.cloudapi.de
bf.s2s.pbidedicated.cloudapi.de
*.pas.cloudapi.de
adeidentity-lg1prdapp03.diskencryption.core.cloudapi.de
ThrottlingClientCert.pas.cloudapi.de
germanycentral.admin.rsrp.storage.cloudapi.de
dews-prod-lg1-001.publish.azurewebsites.cloudapi.de
metricsclient.geneva.core.cloudapi.de
readonly-tr2.germanycentral1-a.worker.database.cloudapi.de
dialtonClientCert.activitylogalert.cloudapi.de
*.file.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
ma.azurewebsites.cloudapi.de
fr1prdstr05.fc.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de

Certificate

The complete raw certificate details for pasclientcert.pas.cloudapi.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIQVgcsIzXiqpWaDfepSXPc/jANBgkqhkiG9w0BAQsFADBM
MQswCQYDVQQGEwJERTEVMBMGA1UECgwMRC1UcnVzdCBHbWJIMSYwJAYDVQQDDB1E
LVRSVVNUIFNTTCBDbGFzcyAzIENBIDEgMjAwOTAeFw0xOTEyMjMxOTE0NTlaFw0y
MTEyMjMxOTE0NTlaMIGqMRUwEwYDVQQFEwxDU00wMTc5MDE1ODUxCzAJBgNVBAYT
AkRFMQ8wDQYDVQQIEwZCYXllcm4xETAPBgNVBAcTCE11ZW5jaGVuMQ4wDAYDVQQL
EwVBenVyZTEoMCYGA1UEChMfTWljcm9zb2Z0IERldXRzY2hsYW5kIE1DSU8gR21i
SDEmMCQGA1UEAxMdcGFzY2xpZW50Y2VydC5wYXMuY2xvdWRhcGkuZGUwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUJVQSG8DSrSJI5mxUXWhyt4826G65
at97ge2SEKxwpz2DA/CJcwR5mZ9lXruk8Mut8kMjAJwc8US0LSVD9H7GTZaEyyTk
Lory/lWgko+gdursD0aZjQ6i0zReEki8SaKjZJSJQ4dEY+MI4qMUq+gxamzDtxn/
M/BmXwVDgKA+7WkQLD48c/KMNCHQEMgBFXWKQWEw/McSlJ+bl1tpPWTmzrKrwBBD
eUc70wiCtUaDqiS923L49e0kqU7E9yAi0nL2pwu2PtmcrMNbUzm1QVGVvIPxJ9NF
12n94gUM7RJjyLGU8Ga4nq1y8D4CO5nkfkh2ZnlyAggFwMfiDNDS24M5AgMBAAGj
ggOJMIIDhTCCARYGCCsGAQUFBwEBBIIBCDCCAQQwMwYIKwYBBQUHMAGGJ2h0dHA6
Ly9zc2wtYzMtY2ExLTIwMDkub2NzcC5kLXRydXN0Lm5ldDBMBggrBgEFBQcwAoZA
aHR0cDovL3d3dy5kLXRydXN0Lm5ldC9jZ2ktYmluL0QtVFJVU1RfU1NMX0NsYXNz
XzNfQ0FfMV8yMDA5LmNydDB/BggrBgEFBQcwAoZzbGRhcDovL2RpcmVjdG9yeS5k
LXRydXN0Lm5ldC9DTj1ELVRSVVNUJTIwU1NMJTIwQ2xhc3MlMjAzJTIwQ0ElMjAx
JTIwMjAwOSxPPUQtVHJ1c3QlMjBHbWJILEM9REU/Y0FDZXJ0aWZpY2F0ZT9iYXNl
PzBlBgNVHSAEXjBcMFoGCysGAQQBpTQCgUgBMEswSQYIKwYBBQUHAgEWPWh0dHA6
Ly93d3cuZC10cnVzdC5uZXQvaW50ZXJuZXQvZmlsZXMvRC1UUlVTVF9DU01fUEtJ
X0NQUy5wZGYwEwYKKwYBBAHWeQIEAwEB/wQCBQAwMwYDVR0SBCwwKoEQaW5mb0Bk
LXRydXN0Lm5ldIYWaHR0cDovL3d3dy5kLXRydXN0Lm5ldDCCAR0GA1UdHwSCARQw
ggEQMIIBDKCCAQigggEEhnlsZGFwOi8vZGlyZWN0b3J5LmQtdHJ1c3QubmV0L0NO
PUQtVFJVU1QlMjBTU0wlMjBDbGFzcyUyMDMlMjBDQSUyMDElMjAyMDA5LE89RC1U
cnVzdCUyMEdtYkgsQz1ERT9jZXJ0aWZpY2F0ZXJldm9jYXRpb25saXN0hkBodHRw
Oi8vY3JsLmQtdHJ1c3QubmV0L2NybC9kLXRydXN0X3NzbF9jbGFzc18zX2NhXzFf
MjAwOS5kZXIuY3JshkVodHRwOi8vY2RuLmQtdHJ1c3QtY2xvdWRjcmwubmV0L2Ny
bC9kLXRydXN0X3NzbF9jbGFzc18zX2NhXzFfMjAwOS5jcmwwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMCgGA1UdEQQhMB+CHXBhc2NsaWVudGNlcnQucGFz
LmNsb3VkYXBpLmRlMB8GA1UdIwQYMBaAFFAZMpSaxLUETVbQwIMh1TVVsLF6MA4G
A1UdDwEB/wQEAwIFoDAdBgNVHQ4EFgQU4jqapynd2cwv9vMZhQPmQpD3oNkwDQYJ
KoZIhvcNAQELBQADggEBAHi5zaRjVlGzsMzvxoaBbkHmtpVWHtv//KShrhp8GNBa
NzF0xceTc3QPdAT983iD9PVKWppVTGIyGQL2fS4uDfXTkpGlptMOYNUDX84PBSQ9
5K5DwAVuhuJSrn36VWGsC4u9JiAhyy88yg+D/HR/uHKNieFyOAuZpXo34WvyNXds
SqoMu1j61WtNMjmyM7e7RZE02MRvRfGYGSe6tyR8gERTrXbGooDg4wetQINnkHQQ
SPK6F+nkXwFqiFTQgZlgr3e4cZIn24c+xGpkBP7rYNknlWPXyl7buhng18zKLlNv
iZmp8u7GJmLjne2AGWoQTK7DA7j3LRJCvysxr6f8VLQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CVUEhvA0q0iSOZsVF1o
crePNuhuuWrfe4HtkhCscKc9gwPwiXMEeZmfZV67pPDLrfJDIwCcHPFEtC0lQ/R+
xk2WhMsk5C6K8v5VoJKPoHbq7A9GmY0OotM0XhJIvEmio2SUiUOHRGPjCOKjFKvo
MWpsw7cZ/zPwZl8FQ4CgPu1pECw+PHPyjDQh0BDIARV1ikFhMPzHEpSfm5dbaT1k
5s6yq8AQQ3lHO9MIgrVGg6okvdty+PXtJKlOxPcgItJy9qcLtj7ZnKzDW1M5tUFR
lbyD8SfTRddp/eIFDO0SY8ixlPBmuJ6tcvA+AjuZ5H5IdmZ5cgIIBcDH4gzQ0tuD
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 114350848931197485853609540732807535870
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 19:14:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-23 19:14:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM017901585'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Azure'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Deutschland MCIO GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pasclientcert.pas.cloudapi.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26780927973541823064194418718414040174863136575053409254584280289444334398126006985371681807677979415792067371399373894009342457501703984970461390759615060038547827491554157983490467274444034318763950461080379383374963375588740037352227041337936594853655576774164942682066466788347430380102705013557827438935525895138646713850988075795552250130552794867925579304809768195032005991988555525248466332188893072854459062757560310353553999549211373652533839194295747456339041598504855791499641246945766865644510024534687369108106715489772884468113082579670239222427057435640656810447735491667883439653483143757421931627321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pasclientcert.pas.cloudapi.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e23a9aa729ddd9cc2ff6f3198503e64290f7a0d9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0078b9cda4635651b3b0ccefc686816e41e6b695561edbfffca4a1ae1a7c18d05a373174c5c79373740f7404fdf37883f4f54a5a9a554c62321902f67d2e2e0df5d39291a5a6d30e60d5035fce0f05243de4ae43c0056e86e252ae7dfa5561ac0b8bbd262021cb2f3cca0f83fc747fb8728d89e172380b99a57a37e16bf235776c4aaa0cbb58fad56b4d3239b233b7bb459134d8c46f45f1981927bab7247c804453ad76c6a280e0e307ad40836790741048f2ba17e9e45f016a8854d0819960af77b8719227db873ec46a6404feeb60d9279563d7ca5edbba19e0d7ccca2e536f8999a9f2eec62662e39ded80196a104caec303b8f72d1242bf2b31afa7fc54b4