amp1.cloud.bafa.in.bund.de

- Informationstechnikzentrum Bund (ITZBund) -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 63:ed:da:e7:37:67:24:b2:79:41:95:2b:91:6f:bb:f9 was issued on by D-Trust GmbH.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Informationstechnikzentrum Bund (ITZBund)

Company registration number: CSM032406287
Organization: Informationstechnikzentrum Bund (ITZBund)
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 63:ed:da:e7:37:67:24:b2:79:41:95:2b:91:6f:bb:f9
Serial Number (int): 132828585822324930621698573986029353977
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 29:a9:37:b6:b7:ca:60:1e:07:e1:f8:af:25:ec:83:20:22:74:b2:a7
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 77:9d:71:a2:c5:27:56:72:3a:90:5f:03:d1:cd:15:45:5f:b5:b2:ce
Fingerprint (sha256): 03:02:a3:9f:e9:b0:a6:2c:1e:cf:b4:e0:d0:05:e8:77:69:46:81:a6:34:44:03:b9:62:8b:f7:70:26:7b:0f:3b

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate amp1.cloud.bafa.in.bund.de

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for amp1.cloud.bafa.in.bund.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vlpt5bod1fme.bafa.cloud.intranet.bund.de
amp1.cloud.bafa.in.bund.de
vlpbtop83zml.bafa.cloud.intranet.bund.de
amp1.bafa.cloud.intranet.bund.de
vlpcyjal64su.amp1.cloud.bafa.in.bund.de
vlpt5bod1fme.amp1.cloud.bafa.in.bund.de
vlpcyjal64su.bafa.cloud.intranet.bund.de
vlpcfuzuothf.bafa.cloud.intranet.bund.de

Other certificates including the domain name bund.de

(limited to 100 certificates)
eakte-i.cloud.bmel.in.bund.de
bundes.cloud.bmfsfj.in.bund.de
schulung5.eakte.zoll.in.bund.de
bamf.bund.de
vleaoq0wu5b9.git.cloud.bc-mgmt82.itz.in.bund.de
ctx02.bmwi.bund.de
20220922.cloud.bcsv.in.bund.de
oo-83b.cloud.bc-mgmt83.itz.in.bund.de
stu-extc.dvdv.bund.de
vlps7w4zstxe.petclin.cloud.itz.in.bund.de
cafm-tn1.cloud.bcsv.in.bund.de
vlphxc094986.login07.cloud.base.in.bund.de
amt3a.cloud.zoll.in.bund.de
promadmz.jki.bund.de
upload.prod.gsb.bmel.in.bund.de
schulung17.eakte.zoll.in.bund.de
access.bmjv.cloud.intranet.bund.de
bclogin3.bkamt.cloud.intranet.bund.de
artifactory.zssi.bva.in.bund.de
vlpvws2uyvwh.pvsplus1.cloud.zoll.in.bund.de
hosting.dwd.de
hosting.dwd.de
lernplattform.bund.de
vlpkrogq32qr.adminedge1c.cloud.bc-mgmt01.itz.in.bund.de
www.normenkontrollrat.bund.de
vlpzrtfbavdp.bmigate1.cloud.bmi.in.bund.de
access.itz.cloud.intranet.bund.de
editor.egesetz.zd.in.bund.de
vlpu6xc8ixat.my1stsalone60.cloud.bcsv.in.bund.de
vlpxub43mocj.testentw.cloud.stba.in.bund.de
redconf.itz.cloud.intranet.bund.de
hashdb.mwscan.bund.de
int.bpm-extern.bzst.itzbund.net
forum.bfdi.bund.de
personalhaushalt.prod.bmf.in.bund.de
schulung.eakte.bsh.itz.res.bund.de
api.mwscan.bund.de
formularcenter.bvl.bund.de
vlpgqfx8e9q8.craas-07.cloud.itz.in.bund.de
bmfbox6.cloud.bmf.in.bund.de
gittest.bc-mgmt01.cloud.intranet.bund.de
vlpmwvu2fhzh.eibos105.cloud.bcsv.in.bund.de
travis.baw.res.bund.de
cafm-ti1.cloud.bcsv.in.bund.de
sicherheit.bund.de
vlpgwu8436ks.bfgprodok.cloud.bfg.in.bund.de
formularcenter.bvl.bund.de
dzmgit05.bc-mgmt05.cloud.intranet.bund.de
redaktion.atu.gsb.bmi.in.bund.de
ref.xrechnung.bund.de
mob.bmz.bund.de
vlpv0rho8r42.pvsplus1.cloud.bmz.in.bund.de
eakte-t.cloud.base.in.bund.de
vlpc092q2btk.btsapqp.cloud.zitis.in.bund.de
dec230b.cloud.itz.in.bund.de
redaktion.atu.gsb.bmjv.in.bund.de
vlpjeue6bavk.cpmhhoch.cloud.itz.in.bund.de
ivva-ref2.id-ref-bug.it.bund.de
list.sozialwerk.bund.de
oo-06c.cloud.bc-mgmt06.itz.in.bund.de
accesst.cloud.itz.in.bund.de
gigis-s.bkg.bund.de
fis-vl.bvl.bund.de
vlepcwwjpbhu.ntp753.cloud.bpbdev05.itz.in.bund.de
amp1.cloud.zitis.in.bund.de
appladebaw2.front.test.adeba.wsv.itzbund.net
www.bamf.de
vlpmpsrojfsq.gwdpma2a.cloud.dpma.in.bund.de
vlppaksi2niz.mr15pp10.cloud.bcsv.in.bund.de
www.kvb.bund.de
amd3a.cloud.zoll.in.bund.de
sso.bvl.bund.de
eservice2022.itz.res.bund.de
oo-81c.cloud.bc-mgmt81.itz.in.bund.de
warnung.bund.de
vlpjaw7bbs1m.prodok-badv.cloud.badv.in.bund.de
vlph1rngvgyh.gwwsv2a.cloud.wsv.in.bund.de
webapp.staging.wire.zd.in.bund.de
vlpjbptohe77.gate745.cloud.eba.in.bund.de
cafm0322.cloud.bcsv.in.bund.de
amp3a.cloud.bpbdev01.itz.in.bund.de
vlpzw166d320.emakorv-cloud.cloud.itz.in.bund.de
vwpsl8qtdinb.bcwsus-05a.cloud.bcsv.in.bund.de
ilp03812.iamservice.iaas.itz.cloud.intranet.bund.de
sportal.bmi.in.bund.de
hosting.dwd.de
eakte-i.cloud.bkm.in.bund.de
bcadminjumphost.bc-mgmt05.cloud.intranet.bund.de
cafm1028.cloud.bcsv.in.bund.de
sibboxaa.cloud.bcsv.in.bund.de
cafm-tn2.cloud.bcsv.in.bund.de
ampvsp.cloud.bmf.in.bund.de
test.zbp.bund.de
vapil484joni.cloud.bc-mgmt01.itz.in.bund.de
ivbb.citrix.brh.intranet.bund.de
vlerfu14470s.login83.cloud.bpbdev01.itz.in.bund.de
vlpss8rhue2a.konsole04.cloud.bkamt.in.bund.de
amp7.cloud.bmdv.in.bund.de
confzent.itz.cloud.intranet.bund.de
dwh-integration.goaml.fiu.in.bund.de

Certificate

The complete raw certificate details for amp1.cloud.bafa.in.bund.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 132828585822324930621698573986029353977
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-05 16:59:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 16:59:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM032406287'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Informationstechnikzentrum Bund (ITZBund)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'amp1.cloud.bafa.in.bund.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 731523904551707473492489249589567676344648708597176929221755336891193434982246682141339621901400493531507620652450330780833307151680552752023503984789722177123497319109689510575303270870303703918537733464741389635170020422229817188538956893387682644845726423669521667929625767575628078054108317000598719461915840854705092627554118797768759176540961493667279277095029057221230618556552481485129794461710769175198411637310582058350070531941602698253041202168343413745048984634736359296655871329190851404624944196957718303793122649388828541481298339879360368270050032019473931525459430770981468664749409822689210254520830403785967746995581394155742585143504681347165077125244134363452199787828643792587400835940354313047758616973013306011356607030174713363259718320071298254351543818557865878056121766050448406945224103222159956514503860517560378309539561266030543016482010411119465838294007217994077884200970567581381934988377709750065681038545917456827233634839958554310108562406602689933023522782140268753380620308934832981250819186231864842671323731293357073823192942185263455217455183004533053934304330794719740770535865260824701125766085739055001100756863300226665132412049812783116906335239910438552433554013905765314428171324499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (316 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlpt5bod1fme.bafa.cloud.intranet.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp1.cloud.bafa.in.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlpbtop83zml.bafa.cloud.intranet.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp1.bafa.cloud.intranet.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlpcyjal64su.amp1.cloud.bafa.in.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlpt5bod1fme.amp1.cloud.bafa.in.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlpcyjal64su.bafa.cloud.intranet.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlpcfuzuothf.bafa.cloud.intranet.bund.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29a937b6b7ca601e07e1f8af25ec83202274b2a7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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