perso-i.mini.com
- BMW AG -
Issued by TC TrustCenter Class 2 L1 CA XI
About this certificate
This digital certificate with serial number f0:40:00:01:00:02:34:4e:87:94:1f:de:5f:5a was issued on by TC TrustCenter GmbH.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
- KeyUsage [ContentCommitment DataEncipherment DigitalSignature KeyEncipherment] (00001111) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
BMW AG
Organization:
BMW AG
Organization unit: PKI Services
Organization unit: PKI Services
State / Province:
Bayern
Locality: München
Country: DE
Locality: München
Country: DE
TC TrustCenter GmbH
Organization:
TC TrustCenter GmbH
Organization unit: TC TrustCenter Class 2 L1 CA
Organization unit: TC TrustCenter Class 2 L1 CA
Country:
DE
This certificate has expire since
Certificate Details
Serial Number (hex): f0:40:00:01:00:02:34:4e:87:94:1f:de:5f:5aSerial Number (int): 4872848908486280301555112130535258
Serial Number lenght: 112 bits, 14 octets
SubjectKeyId: 67:a4:c7:67:e7:dd:0a:13:d8:98:7a:54:07:9a:4a:74:a3:db:12:53
AuthorityKeyId: 66:b3:c6:91:f9:b6:cd:b2:5f:9a:37:56:46:0c:e2:6b:d5:b1:7c:b4
Fingerprint (sha1): e1:72:25:0f:30:2c:07:8e:2a:98:83:47:c4:6d:55:75:3d:42:8e:1b
Fingerprint (sha256): 04:a7:2f:26:3a:12:e2:f7:68:4e:1f:a9:2c:c6:56:ea:25:f0:1a:e7:00:b4:df:d2:21:50:eb:85:9a:fd:fb:9a
Issuing Certificate URL: http://www.trustcenter.de/certservices/cacerts/tc_class2_L1_CA_XI.crt
Revocation information
OCSP Server: http://ocsp.xi.tcclass2-ii.trustcenter.deCRL Distribution Point: http://crl.xi.tcclass2-ii.trustcenter.de/crl/v2/tc_class2_L1_CA_XI.crl
CRL Distribution Point: ldap://www.trustcenter.de/CN=TC%20TrustCenter%20Class%202%20L1%20CA%20XI,O=TC%20TrustCenter,OU=cacerts,DC=trustcenter,DC=de?certificateRevocationList?base?
Check the revocation status for certificate perso-i.mini.com
10
DNS Names
1
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for perso-i.mini.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Content Commitment
Key Encipherment
Data Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
perso-i.mini.com
perso-i.mini.at
perso-i.mini.be
perso-i.mini.ch
perso-i.mini.de
perso-i.mini.es
perso-i.mini.fr
perso-i.mini.it
perso-i.mini.lu
perso-i.mini.nl
[email protected]
perso-i.mini.at
perso-i.mini.be
perso-i.mini.ch
perso-i.mini.de
perso-i.mini.es
perso-i.mini.fr
perso-i.mini.it
perso-i.mini.lu
perso-i.mini.nl
[email protected]
Other certificates including the domain name mini.com
(limited to 100 certificates)
con.api.mini
www.mini.com.bo
integ-s-de.mini.com
configure.bmw.com
bmw-int1.com
www.bmw.com
configure.bmw.com
c2b-services-i.bmw.com
UCP14RP.bmw.de
mini-connected-i.mini.com
www.mini.rs
dev.wcmp.bmw
con.api.mini
maintenance.mini.com
prod.34.slot.cdn.salesforce-communities.com
ssl.mini.com
www.mini.com.bo
configure.bmw.com
perso-i.mini.com
configure.mini.com
www.m1.bmw-int6.com
mini-connected-gfius.mini.com
con.api.mini
bmw-int1.com
qa-bps.bmw.com
prod.34.slot.cdn.salesforce-communities.com
ssl.mini.com
www.bmw.com
dev.wcmp.bmw
www.mini.com
www-origin-proda1.bmw.com
con.api.mini
bmw-int1.com
www.bmw.com
access14.bmw.de
qa-bps.bmw.com
www.bmw.com
www.p93.mini.com
www.bmw.de
con.api.mini
www.p93.mini.com
www.mini.rs
prod.34.slot.cdn.salesforce-communities.com
secure.mini.com
bps.bmw.com
prod.34.slot.cdn.salesforce-communities.com
www.bmw.com
con.api.mini
bmw-int1.com
www.p93.mini.com
configure.bmw.com
bps.bmw.com
www.bmw.com
configure.mini.com
bmw01.secure.stage.lithium.com
bmw-int1.com
www.mini.com.bo
dev.wcmp.bmw
www.mini.com
mini-next.configure.bmw.cloud
www.bmw.com
www.mini.rs
www.bmw.com
c2b-services-i.mini.com
www.bmw.com
configure.bmw.com
prod.34.slot.cdn.salesforce-communities.com
bmw01.secure.lithium.com
www.mini.com
www.bmw.com
c2b.mini.com
bmw-int1.com
bmw-int1.com
configure.mini.com
configure.bmw.com
www.mini.com
www.bmw.com
configure.mini.com
mini-connected-i.mini.com
www.bmw.com
int.bmw-connecteddrive.at
bmw-int1.com
mini.configure.bmw.cloud
www.mini.com
configure.bmw.com
dev.wcmp.bmw
www.bmw.de
www.bmw.com
bmw-int1.com
www.m1.bmw-int6.com
bmw-int1.com
qa-bps.bmw.com
configure.bmw.com
prod.34.slot.cdn.salesforce-communities.com
www.bmw.de
www.bmw.com
www.bmw.com
mini.configure.bmw.cloud
www.mini.com
configure.mini.com
www.mini.com.bo
integ-s-de.mini.com
configure.bmw.com
bmw-int1.com
www.bmw.com
configure.bmw.com
c2b-services-i.bmw.com
UCP14RP.bmw.de
mini-connected-i.mini.com
www.mini.rs
dev.wcmp.bmw
con.api.mini
maintenance.mini.com
prod.34.slot.cdn.salesforce-communities.com
ssl.mini.com
www.mini.com.bo
configure.bmw.com
perso-i.mini.com
configure.mini.com
www.m1.bmw-int6.com
mini-connected-gfius.mini.com
con.api.mini
bmw-int1.com
qa-bps.bmw.com
prod.34.slot.cdn.salesforce-communities.com
ssl.mini.com
www.bmw.com
dev.wcmp.bmw
www.mini.com
www-origin-proda1.bmw.com
con.api.mini
bmw-int1.com
www.bmw.com
access14.bmw.de
qa-bps.bmw.com
www.bmw.com
www.p93.mini.com
www.bmw.de
con.api.mini
www.p93.mini.com
www.mini.rs
prod.34.slot.cdn.salesforce-communities.com
secure.mini.com
bps.bmw.com
prod.34.slot.cdn.salesforce-communities.com
www.bmw.com
con.api.mini
bmw-int1.com
www.p93.mini.com
configure.bmw.com
bps.bmw.com
www.bmw.com
configure.mini.com
bmw01.secure.stage.lithium.com
bmw-int1.com
www.mini.com.bo
dev.wcmp.bmw
www.mini.com
mini-next.configure.bmw.cloud
www.bmw.com
www.mini.rs
www.bmw.com
c2b-services-i.mini.com
www.bmw.com
configure.bmw.com
prod.34.slot.cdn.salesforce-communities.com
bmw01.secure.lithium.com
www.mini.com
www.bmw.com
c2b.mini.com
bmw-int1.com
bmw-int1.com
configure.mini.com
configure.bmw.com
www.mini.com
www.bmw.com
configure.mini.com
mini-connected-i.mini.com
www.bmw.com
int.bmw-connecteddrive.at
bmw-int1.com
mini.configure.bmw.cloud
www.mini.com
configure.bmw.com
dev.wcmp.bmw
www.bmw.de
www.bmw.com
bmw-int1.com
www.m1.bmw-int6.com
bmw-int1.com
qa-bps.bmw.com
configure.bmw.com
prod.34.slot.cdn.salesforce-communities.com
www.bmw.de
www.bmw.com
www.bmw.com
mini.configure.bmw.cloud
www.mini.com
configure.mini.com
Certificate
The complete raw certificate details for perso-i.mini.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGwzCCBaugAwIBAgIPAPBAAAEAAjROh5Qf3l9aMA0GCSqGSIb3DQEBBQUAMHwx CzAJBgNVBAYTAkRFMRwwGgYDVQQKExNUQyBUcnVzdENlbnRlciBHbWJIMSUwIwYD VQQLExxUQyBUcnVzdENlbnRlciBDbGFzcyAyIEwxIENBMSgwJgYDVQQDEx9UQyBU cnVzdENlbnRlciBDbGFzcyAyIEwxIENBIFhJMB4XDTE0MDQxNTE4MjI0OVoXDTE1 MDQxNTE4MjIzMlowdDELMAkGA1UEBhMCREUxDzANBgNVBAgTBkJheWVybjERMA8G A1UEBwwITcO8bmNoZW4xDzANBgNVBAoTBkJNVyBBRzEVMBMGA1UECxMMUEtJIFNl cnZpY2VzMRkwFwYDVQQDExBwZXJzby1pLm1pbmkuY29tMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAxn/Ui4jop9BdL3ISdAeNj2nRrtlktCg0gfmDeboO ulb+cw4K5TlgEy5jQKW0gi4uW2Pm287Y+zQsc6fDIF6Zxah/q2R78wjizG9E91kt 2pro1KR+3xgu/fC4u2MeuLervOdBoOeuYZgo4CEfQBhJPasS++vc+xOAnuNeatji y9+7s0ihFp9Pp+1zgIOKwQ/9nVDQZ7EnqyRmrHoqldnfkBu6dMSr+R2F2LGzl9d0 L9OJnCwq8mOOYOjKSYWBsWI48kgP4rzEteFOuD/UNZIiecMND4yGU19KIMZzVko7 UrxBGk0Jirk3zckH12H+EgxAk3KmofUBgQPDA1winQuXDQIDAQABo4IDSDCCA0Qw gZoGCCsGAQUFBwEBBIGNMIGKMFEGCCsGAQUFBzAChkVodHRwOi8vd3d3LnRydXN0 Y2VudGVyLmRlL2NlcnRzZXJ2aWNlcy9jYWNlcnRzL3RjX2NsYXNzMl9MMV9DQV9Y SS5jcnQwNQYIKwYBBQUHMAGGKWh0dHA6Ly9vY3NwLnhpLnRjY2xhc3MyLWlpLnRy dXN0Y2VudGVyLmRlMB8GA1UdIwQYMBaAFGazxpH5ts2yX5o3VkYM4mvVsXy0MAwG A1UdEwEB/wQCMAAwSgYDVR0gBEMwQTA/BgkqghQALAEBAQIwMjAwBggrBgEFBQcC ARYkaHR0cDovL3d3dy50cnVzdGNlbnRlci5kZS9ndWlkZWxpbmVzMA4GA1UdDwEB /wQEAwIE8DAdBgNVHQ4EFgQUZ6THZ+fdChPYmHpUB5pKdKPbElMwgfoGA1UdHwSB 8jCB7zCB7KCB6aCB5oZGaHR0cDovL2NybC54aS50Y2NsYXNzMi1paS50cnVzdGNl bnRlci5kZS9jcmwvdjIvdGNfY2xhc3MyX0wxX0NBX1hJLmNybIaBm2xkYXA6Ly93 d3cudHJ1c3RjZW50ZXIuZGUvQ049VEMlMjBUcnVzdENlbnRlciUyMENsYXNzJTIw MiUyMEwxJTIwQ0ElMjBYSSxPPVRDJTIwVHJ1c3RDZW50ZXIsT1U9Y2FjZXJ0cyxE Qz10cnVzdGNlbnRlcixEQz1kZT9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0P2Jh c2U/MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjARBglghkgBhvhCAQEE BAMCBsAwgcsGA1UdEQSBwzCBwIETaXRwcy5zc2xjZXJ0QGJtdy5kZYIQcGVyc28t aS5taW5pLmNvbYIPcGVyc28taS5taW5pLmF0gg9wZXJzby1pLm1pbmkuYmWCD3Bl cnNvLWkubWluaS5jaIIPcGVyc28taS5taW5pLmRlgg9wZXJzby1pLm1pbmkuZXOC D3BlcnNvLWkubWluaS5mcoIPcGVyc28taS5taW5pLml0gg9wZXJzby1pLm1pbmku bHWCD3BlcnNvLWkubWluaS5ubDANBgkqhkiG9w0BAQUFAAOCAQEAtO/iy6Ggcd3n hdHQGVlPqBXGeKjQIP6cpdaCJ5R/ZbMZd0pVgmInoGwKNiz8ailv/tJkkSC/ntcL 0suqYNx7OBl8m1JaWR50qvWbR/UOhDHIK2pl2zyxWiOAbtlx/4AVImP0yRo07mwS gtgI3pG43N/RvkJJ5CthsuKD0382H+jdPmga2eJ1kvMgqEomKRy3HpTnlBwUeGvv nDhHdKvwT0QSFNfUdP9nPhnWHjXjbmJYsQI0W8ZR5Ok/sASLg2AnRrG1RxEDZvs0 CAqBpVWkjX/06UAR97FKcaHW/fLgM1hdzdi7rjYFMcjSPyIq5ad7ABbD2YZlfqt5 LUinJThlWg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn/Ui4jop9BdL3ISdAeN j2nRrtlktCg0gfmDeboOulb+cw4K5TlgEy5jQKW0gi4uW2Pm287Y+zQsc6fDIF6Z xah/q2R78wjizG9E91kt2pro1KR+3xgu/fC4u2MeuLervOdBoOeuYZgo4CEfQBhJ PasS++vc+xOAnuNeatjiy9+7s0ihFp9Pp+1zgIOKwQ/9nVDQZ7EnqyRmrHoqldnf kBu6dMSr+R2F2LGzl9d0L9OJnCwq8mOOYOjKSYWBsWI48kgP4rzEteFOuD/UNZIi ecMND4yGU19KIMZzVko7UrxBGk0Jirk3zckH12H+EgxAk3KmofUBgQPDA1winQuX DQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4872848908486280301555112130535258 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter Class 2 L1 CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter Class 2 L1 CA XI' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-15 18:22:49 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-15 18:22:32 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'München' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BMW AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'perso-i.mini.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25058219830955444632132799559903103877632396052047446851698730141151752277917712798192708407512873222138784244087599073065367964984613092448990131014297787733858807807574193888404288028375689917427100391366026770810262048440577552170098065883708353551186935682368478022900739188057946675720497194701635333291972924121502837945649215143187212403110673996124141897130168325325824376247180661746953243854004696947077592678354122815930045609392097347444063483853655274435497841219719337570559193204724867105007884866532672951320657154671669620607368115034612665702306605933551536459017617090769384098885518521878883047181 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.trustcenter.de/certservices/cacerts/tc_class2_L1_CA_XI.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.xi.tcclass2-ii.trustcenter.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66b3c691f9b6cdb25f9a3756460ce26bd5b17cb4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.276.0.44.1.1.1.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.trustcenter.de/guidelines' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04f0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 67a4c767e7dd0a13d8987a54079a4a74a3db1253 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.xi.tcclass2-ii.trustcenter.de/crl/v2/tc_class2_L1_CA_XI.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://www.trustcenter.de/CN=TC%20TrustCenter%20Class%202%20L1%20CA%20XI,O=TC%20TrustCenter,OU=cacerts,DC=trustcenter,DC=de?certificateRevocationList?base?' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits) 06c0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (195 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perso-i.mini.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perso-i.mini.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perso-i.mini.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perso-i.mini.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perso-i.mini.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perso-i.mini.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perso-i.mini.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perso-i.mini.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perso-i.mini.lu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perso-i.mini.nl' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00b4efe2cba1a071dde785d1d019594fa815c678a8d020fe9ca5d68227947f65b319774a55826227a06c0a362cfc6a296ffed2649120bf9ed70bd2cbaa60dc7b38197c9b525a591e74aaf59b47f50e8431c82b6a65db3cb15a23806ed971ff80152263f4c91a34ee6c1282d808de91b8dcdfd1be4249e42b61b2e283d37f361fe8dd3e681ad9e27592f320a84a26291cb71e94e7941c14786bef9c384774abf04f441214d7d474ff673e19d61e35e36e6258b102345bc651e4e93fb0048b83602746b1b547110366fb34080a81a555a48d7ff4e94011f7b14a71a1d6fdf2e033585dcdd8bbae360531c8d23f222ae5a77b0016c3d986657eab792d48a72538655a