SqlAliasClient.germanynortheast1-a.database.cloudapi.de

- Microsoft Deutschland MCIO GmbH -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 69:b5:77:ca:1f:14:03:8a:8f:b7:d1:45:c5:1b:73:71 was issued on by D-Trust GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Deutschland MCIO GmbH

Company registration number: CSM018294394
Organization: Microsoft Deutschland MCIO GmbH
Organization unit: Azure
State / Province: Bayern
Locality: Muenchen
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 69:b5:77:ca:1f:14:03:8a:8f:b7:d1:45:c5:1b:73:71
Serial Number (int): 140511174909260863429800501244373726065
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 88:81:9e:df:e6:ae:c1:a3:22:2f:d7:be:04:32:9d:02:81:1f:9f:1a
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 58:0d:54:58:8b:e5:a4:35:6c:e9:27:23:07:57:30:14:b7:bb:cd:c0
Fingerprint (sha256): 03:8e:70:2f:c2:b0:15:81:bd:90:0b:af:8f:c3:3b:da:e7:68:6e:f7:4f:2d:06:f6:e5:b2:27:d2:c4:a8:24:93

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate SqlAliasClient.germanynortheast1-a.database.cloudapi.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for SqlAliasClient.germanynortheast1-a.database.cloudapi.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

SqlAliasClient.germanynortheast1-a.database.cloudapi.de

Other certificates including the domain name cloudapi.de

(limited to 100 certificates)
wcf.global.networkwatcher.cloudapi.de
*.file.core.cloudapi.de
sqlvmrptoazuremsiauth.bfprod.database.cloudapi.de
dstssuperuser.dsts.core.cloudapi.de
*.blob.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
lg.admin.core.cloudapi.de
LG1N.agent.core.cloudapi.de
casworkers.cas.cloudapi.de
rpsdek.analysis.cloudapi.de
ss-encryption-prod.cloudapi.de
identity.blackforest.azurehealth.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
rp.geneva.keyvault.cacheinfra.cloudapi.de
clientauth.pas.cloudapi.de
germanycentral.mwctoken.pbidedicated.cloudapi.de
metricsclient.geneva.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
*.queue.core.cloudapi.de
antares.to.acis.azurewebsites.cloudapi.de
brokerclientauth.servicebus.cloudapi.de
RDFEMOCPClient.cloudapi.de
metricsclient.geneva.core.cloudapi.de
*.queue.core.cloudapi.de
*.account.core.cloudapi.de
*.blob.core.cloudapi.de
wavnetnmagent.core.cloudapi.de
client.warp-bfprod-lg.wf.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
ev2deployments.cacheinfra.cloudapi.de
metricsclient.geneva.core.cloudapi.de
encryption.internal.servicebus.cloudapi.de
prod.rmaclient.azcisbf.core.cloudapi.de
alp.cluster.prod.ips.cloudapi.de
tr2.germanynortheast1-a.worker.database.cloudapi.de
sakenc.tr4.germanynortheast1-a.database.cloudapi.de
metricsclient.geneva.core.cloudapi.de
*.de.internal.servicebus.cloudapi.de
lg1prdstr01.fc.core.cloudapi.de
wavnetnmagent.core.cloudapi.de
toposervice.cistenant.azcisbf.core.cloudapi.de
emails.cloudapi.de
mds.analysis.cloudapi.de
jitrunner.security.core.cloudapi.de
dcmtkustoloader.tenant.azcis.cloudapi.de
pasclientcert.pas.cloudapi.de
directorydifferentialquery.cloudapi.de
ams-gect-1-hos-rest-1-1.azurecloudapp.de
*.file.core.cloudapi.de
client.mds.germanynortheast1-a.database.cloudapi.de
auth.idpsignals.ests.bf.ips.cloudapi.de
m365fleetagc.sci.azcis.cloudapi.de
billing.dsms.tr6.germanycentral1-a.database.cloudapi.de
notificationhub.cloudapi.de
pilotfishbuildout.sci.azcis.cloudapi.de
*.dfs.core.cloudapi.de
pasclientcert.pas.cloudapi.de
metricsclient.geneva.core.cloudapi.de
pasclientcert.pas.cloudapi.de
dews-prod-lg1-001-api.azurewebsites.cloudapi.de
adnsarmfe.cloudapi.de
*.tun.p.azurewebsites.cloudapi.de
*.web.core.cloudapi.de
geomaster.azurewebsites.cloudapi.de
germanycentral-prod-a.azcp.fc.core.cloudapi.de
germanynortheast01.rnm.core.cloudapi.de
tokenencryptor.analysis.cloudapi.de
metricsclient.geneva.core.cloudapi.de
client.azcp-prod-lg1n.wf.core.cloudapi.de
tr3.germanynortheast1-a.worker.database.cloudapi.de
metricsclient.geneva.core.cloudapi.de
*.blob.core.cloudapi.de
directory.cloudapi.de
*.blob.core.cloudapi.de
germanycentral-dsms.dsms.core.cloudapi.de
SqlAliasClient.germanynortheast1-a.database.cloudapi.de
gatewaymonitoring.cloudapi.de
*.file.core.cloudapi.de
enc.gr-dews-prod-fr1.azurewebsites.cloudapi.de
DstsSuperUser.dsts.core.cloudapi.de
artifactconsumer.dnsservingplane.cloudapi.de
icm.azurewebsites.cloudapi.de
adebootstrap.diskencryption.core.cloudapi.de
*.file.core.cloudapi.de
bf.s2s.pbidedicated.cloudapi.de
*.pas.cloudapi.de
adeidentity-lg1prdapp03.diskencryption.core.cloudapi.de
ThrottlingClientCert.pas.cloudapi.de
germanycentral.admin.rsrp.storage.cloudapi.de
dews-prod-lg1-001.publish.azurewebsites.cloudapi.de
metricsclient.geneva.core.cloudapi.de
readonly-tr2.germanycentral1-a.worker.database.cloudapi.de
dialtonClientCert.activitylogalert.cloudapi.de
*.file.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
ma.azurewebsites.cloudapi.de
fr1prdstr05.fc.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de

Certificate

The complete raw certificate details for SqlAliasClient.germanynortheast1-a.database.cloudapi.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIQabV3yh8UA4qPt9FFxRtzcTANBgkqhkiG9w0BAQsFADBM
MQswCQYDVQQGEwJERTEVMBMGA1UECgwMRC1UcnVzdCBHbWJIMSYwJAYDVQQDDB1E
LVRSVVNUIFNTTCBDbGFzcyAzIENBIDEgMjAwOTAeFw0yMDAyMTAxOTM3MTdaFw0y
MjAyMTAxOTM3MTZaMIHEMRUwEwYDVQQFEwxDU00wMTgyOTQzOTQxCzAJBgNVBAYT
AkRFMQ8wDQYDVQQIEwZCYXllcm4xETAPBgNVBAcTCE11ZW5jaGVuMQ4wDAYDVQQL
EwVBenVyZTEoMCYGA1UEChMfTWljcm9zb2Z0IERldXRzY2hsYW5kIE1DSU8gR21i
SDFAMD4GA1UEAxM3U3FsQWxpYXNDbGllbnQuZ2VybWFueW5vcnRoZWFzdDEtYS5k
YXRhYmFzZS5jbG91ZGFwaS5kZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMitNV+TJfwyobwUJX1u646VkyG73MLpmcbEX2laSyII3Z0vglaapPebAi35
cSZa6Fwv2tj71yxOY9fjzH2eq1B7YKdHqDE6MhhheE68c9rQ5qpF96xnhLi1HjcG
Z+4z/wBrmWrwKuV+Shp0Z0gmAFohJHidq/oy6i8tSNVIRexoZM9EA4zKP1QW++0Q
5SLHrnh6QmZ0GyoJ3e7w4O2xUBx6cuFCNZRz7neE6y/qXzTHs1fitmxn8j+w89pv
i9vaZKGHBwNO4klSW8Hb9h2+9jDivT7Hyuxvq2YMeGwANF+Ay8kwyWGwXOes9n2U
QapCvwJUxVf7j9KLseFbCf0YbxcCAwEAAaOCA6MwggOfMIIBFgYIKwYBBQUHAQEE
ggEIMIIBBDAzBggrBgEFBQcwAYYnaHR0cDovL3NzbC1jMy1jYTEtMjAwOS5vY3Nw
LmQtdHJ1c3QubmV0MEwGCCsGAQUFBzAChkBodHRwOi8vd3d3LmQtdHJ1c3QubmV0
L2NnaS1iaW4vRC1UUlVTVF9TU0xfQ2xhc3NfM19DQV8xXzIwMDkuY3J0MH8GCCsG
AQUFBzAChnNsZGFwOi8vZGlyZWN0b3J5LmQtdHJ1c3QubmV0L0NOPUQtVFJVU1Ql
MjBTU0wlMjBDbGFzcyUyMDMlMjBDQSUyMDElMjAyMDA5LE89RC1UcnVzdCUyMEdt
YkgsQz1ERT9jQUNlcnRpZmljYXRlP2Jhc2U/MGUGA1UdIAReMFwwWgYLKwYBBAGl
NAKBSAEwSzBJBggrBgEFBQcCARY9aHR0cDovL3d3dy5kLXRydXN0Lm5ldC9pbnRl
cm5ldC9maWxlcy9ELVRSVVNUX0NTTV9QS0lfQ1BTLnBkZjATBgorBgEEAdZ5AgQD
AQH/BAIFADAzBgNVHRIELDAqgRBpbmZvQGQtdHJ1c3QubmV0hhZodHRwOi8vd3d3
LmQtdHJ1c3QubmV0MIIBHQYDVR0fBIIBFDCCARAwggEMoIIBCKCCAQSGeWxkYXA6
Ly9kaXJlY3RvcnkuZC10cnVzdC5uZXQvQ049RC1UUlVTVCUyMFNTTCUyMENsYXNz
JTIwMyUyMENBJTIwMSUyMDIwMDksTz1ELVRydXN0JTIwR21iSCxDPURFP2NlcnRp
ZmljYXRlcmV2b2NhdGlvbmxpc3SGQGh0dHA6Ly9jcmwuZC10cnVzdC5uZXQvY3Js
L2QtdHJ1c3Rfc3NsX2NsYXNzXzNfY2FfMV8yMDA5LmRlci5jcmyGRWh0dHA6Ly9j
ZG4uZC10cnVzdC1jbG91ZGNybC5uZXQvY3JsL2QtdHJ1c3Rfc3NsX2NsYXNzXzNf
Y2FfMV8yMDA5LmNybDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwQgYD
VR0RBDswOYI3U3FsQWxpYXNDbGllbnQuZ2VybWFueW5vcnRoZWFzdDEtYS5kYXRh
YmFzZS5jbG91ZGFwaS5kZTAfBgNVHSMEGDAWgBRQGTKUmsS1BE1W0MCDIdU1VbCx
ejAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0OBBYEFIiBnt/mrsGjIi/XvgQynQKBH58a
MA0GCSqGSIb3DQEBCwUAA4IBAQCb3rKjII764KyMV/es18k3/CeYyJecd7n6aBoV
apb9Yr3cTeSMvzCiesADeAVatcvYtya5JrYJAgACdB9D+cyK8VFebfSzBetw9jCO
Qy//6U8RrFrJ+VEo3zW826HC9xE08+AjIa6axe6kgt8uiKKMCZ2TYz0Vq030zMHJ
kSl67XrFfMlp7ljiRdDxaTaQapVGQUt1nvwq2+fvYvMK8fpxlsvpZoM1boqvfKC6
IYq+SpcyBtChyv2mAvzRekFBwiZgZF1QXFNGNrCtD86sgEf8VrdghmSTf4g7yDil
DLLpz5ot307lm/jd5EiAK4p3WuaBURvRHzk+rGJ090bBvtVz
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK01X5Ml/DKhvBQlfW7r
jpWTIbvcwumZxsRfaVpLIgjdnS+CVpqk95sCLflxJlroXC/a2PvXLE5j1+PMfZ6r
UHtgp0eoMToyGGF4Trxz2tDmqkX3rGeEuLUeNwZn7jP/AGuZavAq5X5KGnRnSCYA
WiEkeJ2r+jLqLy1I1UhF7Ghkz0QDjMo/VBb77RDlIseueHpCZnQbKgnd7vDg7bFQ
HHpy4UI1lHPud4TrL+pfNMezV+K2bGfyP7Dz2m+L29pkoYcHA07iSVJbwdv2Hb72
MOK9PsfK7G+rZgx4bAA0X4DLyTDJYbBc56z2fZRBqkK/AlTFV/uP0oux4VsJ/Rhv
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 140511174909260863429800501244373726065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 19:37:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-10 19:37:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM018294394'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Azure'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Deutschland MCIO GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SqlAliasClient.germanynortheast1-a.database.cloudapi.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25333073282795916698689316707648958617960708601545845004290751156937530543714504937996992785705030676953025557666454782048212942278713835578794560620009951576140479637772487188651232254385691587860942057465022882895761926139726307362580097483254303578212771208616613028807795372873164456941860238303754177554465632539841347357138460008765725752858350332860724689630587100247703320661163990571488282471399352428738233709372912552689706314888173538453214461874607396921249902172777938421116044376620194126959097841791477776125805033447240493563473971506398935004506089722414530820900783495016927870702496290833266405143
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'SqlAliasClient.germanynortheast1-a.database.cloudapi.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88819edfe6aec1a3222fd7be04329d02811f9f1a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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