readonly-tr2.germanycentral1-a.worker.database.cloudapi.de

- Microsoft Deutschland MCIO GmbH -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 62:52:25:d0:a8:38:a4:ed:8a:85:4c:63:b9:c0:b9:ff was issued on by D-Trust GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Deutschland MCIO GmbH

Company registration number: CSM017914297
Organization: Microsoft Deutschland MCIO GmbH
Organization unit: Azure
State / Province: Bayern
Locality: Muenchen
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 62:52:25:d0:a8:38:a4:ed:8a:85:4c:63:b9:c0:b9:ff
Serial Number (int): 130690878909996709834747893122773072383
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 8a:37:3e:48:fe:2c:be:36:0d:ff:fd:53:86:f1:e0:17:28:da:bb:d3
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 3a:e9:cb:83:68:fe:6b:1e:48:8a:35:f6:d3:ad:ea:c4:2d:3c:48:c2
Fingerprint (sha256): 04:4f:ea:d9:00:c7:50:8e:85:d0:92:33:97:e0:27:8d:4d:d7:d3:78:54:b5:f9:e7:d1:0c:cd:91:80:16:80:af

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate readonly-tr2.germanycentral1-a.worker.database.cloudapi.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for readonly-tr2.germanycentral1-a.worker.database.cloudapi.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

readonly-tr2.germanycentral1-a.worker.database.cloudapi.de

Other certificates including the domain name cloudapi.de

(limited to 100 certificates)
wcf.global.networkwatcher.cloudapi.de
*.file.core.cloudapi.de
sqlvmrptoazuremsiauth.bfprod.database.cloudapi.de
dstssuperuser.dsts.core.cloudapi.de
*.blob.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
lg.admin.core.cloudapi.de
LG1N.agent.core.cloudapi.de
casworkers.cas.cloudapi.de
rpsdek.analysis.cloudapi.de
ss-encryption-prod.cloudapi.de
identity.blackforest.azurehealth.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
rp.geneva.keyvault.cacheinfra.cloudapi.de
clientauth.pas.cloudapi.de
germanycentral.mwctoken.pbidedicated.cloudapi.de
metricsclient.geneva.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
*.queue.core.cloudapi.de
antares.to.acis.azurewebsites.cloudapi.de
brokerclientauth.servicebus.cloudapi.de
RDFEMOCPClient.cloudapi.de
metricsclient.geneva.core.cloudapi.de
*.queue.core.cloudapi.de
*.account.core.cloudapi.de
*.blob.core.cloudapi.de
wavnetnmagent.core.cloudapi.de
client.warp-bfprod-lg.wf.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
ev2deployments.cacheinfra.cloudapi.de
metricsclient.geneva.core.cloudapi.de
encryption.internal.servicebus.cloudapi.de
prod.rmaclient.azcisbf.core.cloudapi.de
alp.cluster.prod.ips.cloudapi.de
tr2.germanynortheast1-a.worker.database.cloudapi.de
sakenc.tr4.germanynortheast1-a.database.cloudapi.de
metricsclient.geneva.core.cloudapi.de
*.de.internal.servicebus.cloudapi.de
lg1prdstr01.fc.core.cloudapi.de
wavnetnmagent.core.cloudapi.de
toposervice.cistenant.azcisbf.core.cloudapi.de
emails.cloudapi.de
mds.analysis.cloudapi.de
jitrunner.security.core.cloudapi.de
dcmtkustoloader.tenant.azcis.cloudapi.de
pasclientcert.pas.cloudapi.de
directorydifferentialquery.cloudapi.de
ams-gect-1-hos-rest-1-1.azurecloudapp.de
*.file.core.cloudapi.de
client.mds.germanynortheast1-a.database.cloudapi.de
auth.idpsignals.ests.bf.ips.cloudapi.de
m365fleetagc.sci.azcis.cloudapi.de
billing.dsms.tr6.germanycentral1-a.database.cloudapi.de
notificationhub.cloudapi.de
pilotfishbuildout.sci.azcis.cloudapi.de
*.dfs.core.cloudapi.de
pasclientcert.pas.cloudapi.de
metricsclient.geneva.core.cloudapi.de
pasclientcert.pas.cloudapi.de
dews-prod-lg1-001-api.azurewebsites.cloudapi.de
adnsarmfe.cloudapi.de
*.tun.p.azurewebsites.cloudapi.de
*.web.core.cloudapi.de
geomaster.azurewebsites.cloudapi.de
germanycentral-prod-a.azcp.fc.core.cloudapi.de
germanynortheast01.rnm.core.cloudapi.de
tokenencryptor.analysis.cloudapi.de
metricsclient.geneva.core.cloudapi.de
client.azcp-prod-lg1n.wf.core.cloudapi.de
tr3.germanynortheast1-a.worker.database.cloudapi.de
metricsclient.geneva.core.cloudapi.de
*.blob.core.cloudapi.de
directory.cloudapi.de
*.blob.core.cloudapi.de
germanycentral-dsms.dsms.core.cloudapi.de
SqlAliasClient.germanynortheast1-a.database.cloudapi.de
gatewaymonitoring.cloudapi.de
*.file.core.cloudapi.de
enc.gr-dews-prod-fr1.azurewebsites.cloudapi.de
DstsSuperUser.dsts.core.cloudapi.de
artifactconsumer.dnsservingplane.cloudapi.de
icm.azurewebsites.cloudapi.de
adebootstrap.diskencryption.core.cloudapi.de
*.file.core.cloudapi.de
bf.s2s.pbidedicated.cloudapi.de
*.pas.cloudapi.de
adeidentity-lg1prdapp03.diskencryption.core.cloudapi.de
ThrottlingClientCert.pas.cloudapi.de
germanycentral.admin.rsrp.storage.cloudapi.de
dews-prod-lg1-001.publish.azurewebsites.cloudapi.de
metricsclient.geneva.core.cloudapi.de
readonly-tr2.germanycentral1-a.worker.database.cloudapi.de
dialtonClientCert.activitylogalert.cloudapi.de
*.file.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
ma.azurewebsites.cloudapi.de
fr1prdstr05.fc.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de

Certificate

The complete raw certificate details for readonly-tr2.germanycentral1-a.worker.database.cloudapi.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHRjCCBi6gAwIBAgIQYlIl0Kg4pO2KhUxjucC5/zANBgkqhkiG9w0BAQsFADBM
MQswCQYDVQQGEwJERTEVMBMGA1UECgwMRC1UcnVzdCBHbWJIMSYwJAYDVQQDDB1E
LVRSVVNUIFNTTCBDbGFzcyAzIENBIDEgMjAwOTAeFw0xOTEyMjYxNTA2MzdaFw0y
MTEyMjYxNTA2MzZaMIHHMRUwEwYDVQQFEwxDU00wMTc5MTQyOTcxCzAJBgNVBAYT
AkRFMQ8wDQYDVQQIEwZCYXllcm4xETAPBgNVBAcTCE11ZW5jaGVuMQ4wDAYDVQQL
EwVBenVyZTEoMCYGA1UEChMfTWljcm9zb2Z0IERldXRzY2hsYW5kIE1DSU8gR21i
SDFDMEEGA1UEAxM6cmVhZG9ubHktdHIyLmdlcm1hbnljZW50cmFsMS1hLndvcmtl
ci5kYXRhYmFzZS5jbG91ZGFwaS5kZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAMI9i1cZEYP/XPdNSIHcVg4muxLYXbuhNCnuBABMg59ZX9CFc58pPPTF
1Z1LMpQGQLXfIeE5xdRFHhCuO6pHyqnoWZnNAohHUeVIsazTCsC70k5zoqbBC0G1
VwjB/D+0md+02eqbvQYcNTKfuVCMp9JuT/giFDxp/R7ShvDk7375szkRH0B/zw7c
nE2bhXyw2fXkJJmocjiUH6CMP/CITB1Bg7/jI0FX0BEUvRHywc1AUAB1dUY/5qwf
yAttpDBmarsWzC8lTxxgsySHWtousBok4aIGB8Ab8O0e5ngxGXJxV6TEJI2eeWIc
a8CY8nyqU/vD62Wi8YeKzCZoPu1P+/sCAwEAAaOCA6YwggOiMIIBFgYIKwYBBQUH
AQEEggEIMIIBBDAzBggrBgEFBQcwAYYnaHR0cDovL3NzbC1jMy1jYTEtMjAwOS5v
Y3NwLmQtdHJ1c3QubmV0MEwGCCsGAQUFBzAChkBodHRwOi8vd3d3LmQtdHJ1c3Qu
bmV0L2NnaS1iaW4vRC1UUlVTVF9TU0xfQ2xhc3NfM19DQV8xXzIwMDkuY3J0MH8G
CCsGAQUFBzAChnNsZGFwOi8vZGlyZWN0b3J5LmQtdHJ1c3QubmV0L0NOPUQtVFJV
U1QlMjBTU0wlMjBDbGFzcyUyMDMlMjBDQSUyMDElMjAyMDA5LE89RC1UcnVzdCUy
MEdtYkgsQz1ERT9jQUNlcnRpZmljYXRlP2Jhc2U/MGUGA1UdIAReMFwwWgYLKwYB
BAGlNAKBSAEwSzBJBggrBgEFBQcCARY9aHR0cDovL3d3dy5kLXRydXN0Lm5ldC9p
bnRlcm5ldC9maWxlcy9ELVRSVVNUX0NTTV9QS0lfQ1BTLnBkZjATBgorBgEEAdZ5
AgQDAQH/BAIFADAzBgNVHRIELDAqgRBpbmZvQGQtdHJ1c3QubmV0hhZodHRwOi8v
d3d3LmQtdHJ1c3QubmV0MIIBHQYDVR0fBIIBFDCCARAwggEMoIIBCKCCAQSGeWxk
YXA6Ly9kaXJlY3RvcnkuZC10cnVzdC5uZXQvQ049RC1UUlVTVCUyMFNTTCUyMENs
YXNzJTIwMyUyMENBJTIwMSUyMDIwMDksTz1ELVRydXN0JTIwR21iSCxDPURFP2Nl
cnRpZmljYXRlcmV2b2NhdGlvbmxpc3SGQGh0dHA6Ly9jcmwuZC10cnVzdC5uZXQv
Y3JsL2QtdHJ1c3Rfc3NsX2NsYXNzXzNfY2FfMV8yMDA5LmRlci5jcmyGRWh0dHA6
Ly9jZG4uZC10cnVzdC1jbG91ZGNybC5uZXQvY3JsL2QtdHJ1c3Rfc3NsX2NsYXNz
XzNfY2FfMV8yMDA5LmNybDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
RQYDVR0RBD4wPII6cmVhZG9ubHktdHIyLmdlcm1hbnljZW50cmFsMS1hLndvcmtl
ci5kYXRhYmFzZS5jbG91ZGFwaS5kZTAfBgNVHSMEGDAWgBRQGTKUmsS1BE1W0MCD
IdU1VbCxejAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0OBBYEFIo3Pkj+LL42Df/9U4bx
4Bco2rvTMA0GCSqGSIb3DQEBCwUAA4IBAQAZSxdWdWjSuU66qeg7vFX+2pIcE7FO
bNwCk/o3YfTJBdEI2LFO8j61fD0iQ/4dWiRAh6+v0VcRInQXS6+FS+XyhNGO1IKf
TUprl8WGO6mwbUJZGELma9mqGwuZ8RKf4b+qvVXISBZDCsXdCJewAZX4S8rvXULY
JZw/tMV/GkEU3S7W2XDGqX+H8HfoOTJeRigA5kx4lV0TD1INByMsG37raCvfzwCj
YMHB6SMf/uDhhjypGE/41Za2ha7s1FFqmxB6uR0bUBLgC11sxJw6ahIf4/r9QGuy
zb0mYtySNVGfrk6yDlQDq+jOVqmJ/V2lqBL0qnRfL+LuzUG9sKf4huDn
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj2LVxkRg/9c901IgdxW
Dia7Ethdu6E0Ke4EAEyDn1lf0IVznyk89MXVnUsylAZAtd8h4TnF1EUeEK47qkfK
qehZmc0CiEdR5UixrNMKwLvSTnOipsELQbVXCMH8P7SZ37TZ6pu9Bhw1Mp+5UIyn
0m5P+CIUPGn9HtKG8OTvfvmzOREfQH/PDtycTZuFfLDZ9eQkmahyOJQfoIw/8IhM
HUGDv+MjQVfQERS9EfLBzUBQAHV1Rj/mrB/IC22kMGZquxbMLyVPHGCzJIda2i6w
GiThogYHwBvw7R7meDEZcnFXpMQkjZ55YhxrwJjyfKpT+8PrZaLxh4rMJmg+7U/7
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 130690878909996709834747893122773072383
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-26 15:06:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-26 15:06:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM017914297'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Azure'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Deutschland MCIO GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'readonly-tr2.germanycentral1-a.worker.database.cloudapi.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24520579787748977042713733989937627845574471200499630539653214520071911930202236808940056285685122653675295938781124787169867868223332927179386560424593174847526358444366154479588193344704451391042742926154496743084027439528658440583202864254544423592490620888084685903073597005768454752834050017577579661108317831627395390542554069319642318440180283096309847695369941524121565536178240498454824832434221751659635593583176607160465244031396179828032200998371278480358796265269635337680632933944947016648442925336708630533553937206910220103365804926373696939117595775613586770873097224662765019516181878589707554651131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readonly-tr2.germanycentral1-a.worker.database.cloudapi.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a373e48fe2cbe360dfffd5386f1e01728dabbd3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00194b17567568d2b94ebaa9e83bbc55feda921c13b14e6cdc0293fa3761f4c905d108d8b14ef23eb57c3d2243fe1d5a244087afafd157112274174baf854be5f284d18ed4829f4d4a6b97c5863ba9b06d42591842e66bd9aa1b0b99f1129fe1bfaabd55c84816430ac5dd0897b00195f84bcaef5d42d8259c3fb4c57f1a4114dd2ed6d970c6a97f87f077e839325e462800e64c78955d130f520d07232c1b7eeb682bdfcf00a360c1c1e9231ffee0e1863ca9184ff8d596b685aeecd4516a9b107ab91d1b5012e00b5d6cc49c3a6a121fe3fafd406bb2cdbd2662dc9235519fae4eb20e5403abe8ce56a989fd5da5a812f4aa745f2fe2eecd41bdb0a7f886e0e7