RdfeSubscriptionProvisioningClientCert.database.cloudapi.de

- Microsoft Deutschland MCIO GmbH -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 44:07:c4:81:31:6c:c9:35:9d:39:3a:a3:98:78:ae:64 was issued on by D-Trust GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Deutschland MCIO GmbH

Company registration number: CSM018599952
Organization: Microsoft Deutschland MCIO GmbH
Organization unit: Azure
State / Province: Bayern
Locality: Muenchen
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 44:07:c4:81:31:6c:c9:35:9d:39:3a:a3:98:78:ae:64
Serial Number (int): 90427835379395582872795168637405671012
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 30:dd:08:c9:7d:17:fd:c4:4f:f6:4f:88:cb:f4:a9:ae:92:af:5d:2e
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 61:ad:95:83:6d:75:a8:26:22:90:b7:72:90:6d:63:97:35:ce:f8:93
Fingerprint (sha256): 04:dc:77:fd:de:1a:e3:43:80:e7:92:21:7f:58:5d:d4:a3:f7:99:93:19:3d:90:24:22:1d:d6:dc:99:fa:6e:a2

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate RdfeSubscriptionProvisioningClientCert.database.cloudapi.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for RdfeSubscriptionProvisioningClientCert.database.cloudapi.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

RdfeSubscriptionProvisioningClientCert.database.cloudapi.de

Other certificates including the domain name cloudapi.de

(limited to 100 certificates)
wcf.global.networkwatcher.cloudapi.de
*.file.core.cloudapi.de
sqlvmrptoazuremsiauth.bfprod.database.cloudapi.de
dstssuperuser.dsts.core.cloudapi.de
*.blob.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
lg.admin.core.cloudapi.de
LG1N.agent.core.cloudapi.de
casworkers.cas.cloudapi.de
rpsdek.analysis.cloudapi.de
ss-encryption-prod.cloudapi.de
identity.blackforest.azurehealth.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
rp.geneva.keyvault.cacheinfra.cloudapi.de
clientauth.pas.cloudapi.de
germanycentral.mwctoken.pbidedicated.cloudapi.de
metricsclient.geneva.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
*.queue.core.cloudapi.de
antares.to.acis.azurewebsites.cloudapi.de
brokerclientauth.servicebus.cloudapi.de
RDFEMOCPClient.cloudapi.de
metricsclient.geneva.core.cloudapi.de
*.queue.core.cloudapi.de
*.account.core.cloudapi.de
*.blob.core.cloudapi.de
wavnetnmagent.core.cloudapi.de
client.warp-bfprod-lg.wf.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
ev2deployments.cacheinfra.cloudapi.de
metricsclient.geneva.core.cloudapi.de
encryption.internal.servicebus.cloudapi.de
prod.rmaclient.azcisbf.core.cloudapi.de
alp.cluster.prod.ips.cloudapi.de
tr2.germanynortheast1-a.worker.database.cloudapi.de
sakenc.tr4.germanynortheast1-a.database.cloudapi.de
metricsclient.geneva.core.cloudapi.de
*.de.internal.servicebus.cloudapi.de
lg1prdstr01.fc.core.cloudapi.de
wavnetnmagent.core.cloudapi.de
toposervice.cistenant.azcisbf.core.cloudapi.de
emails.cloudapi.de
mds.analysis.cloudapi.de
jitrunner.security.core.cloudapi.de
dcmtkustoloader.tenant.azcis.cloudapi.de
pasclientcert.pas.cloudapi.de
directorydifferentialquery.cloudapi.de
ams-gect-1-hos-rest-1-1.azurecloudapp.de
*.file.core.cloudapi.de
client.mds.germanynortheast1-a.database.cloudapi.de
auth.idpsignals.ests.bf.ips.cloudapi.de
m365fleetagc.sci.azcis.cloudapi.de
billing.dsms.tr6.germanycentral1-a.database.cloudapi.de
notificationhub.cloudapi.de
pilotfishbuildout.sci.azcis.cloudapi.de
*.dfs.core.cloudapi.de
pasclientcert.pas.cloudapi.de
metricsclient.geneva.core.cloudapi.de
pasclientcert.pas.cloudapi.de
dews-prod-lg1-001-api.azurewebsites.cloudapi.de
adnsarmfe.cloudapi.de
*.tun.p.azurewebsites.cloudapi.de
*.web.core.cloudapi.de
geomaster.azurewebsites.cloudapi.de
germanycentral-prod-a.azcp.fc.core.cloudapi.de
germanynortheast01.rnm.core.cloudapi.de
tokenencryptor.analysis.cloudapi.de
metricsclient.geneva.core.cloudapi.de
client.azcp-prod-lg1n.wf.core.cloudapi.de
tr3.germanynortheast1-a.worker.database.cloudapi.de
metricsclient.geneva.core.cloudapi.de
*.blob.core.cloudapi.de
directory.cloudapi.de
*.blob.core.cloudapi.de
germanycentral-dsms.dsms.core.cloudapi.de
SqlAliasClient.germanynortheast1-a.database.cloudapi.de
gatewaymonitoring.cloudapi.de
*.file.core.cloudapi.de
enc.gr-dews-prod-fr1.azurewebsites.cloudapi.de
DstsSuperUser.dsts.core.cloudapi.de
artifactconsumer.dnsservingplane.cloudapi.de
icm.azurewebsites.cloudapi.de
adebootstrap.diskencryption.core.cloudapi.de
*.file.core.cloudapi.de
bf.s2s.pbidedicated.cloudapi.de
*.pas.cloudapi.de
adeidentity-lg1prdapp03.diskencryption.core.cloudapi.de
ThrottlingClientCert.pas.cloudapi.de
germanycentral.admin.rsrp.storage.cloudapi.de
dews-prod-lg1-001.publish.azurewebsites.cloudapi.de
metricsclient.geneva.core.cloudapi.de
readonly-tr2.germanycentral1-a.worker.database.cloudapi.de
dialtonClientCert.activitylogalert.cloudapi.de
*.file.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de
ma.azurewebsites.cloudapi.de
fr1prdstr05.fc.core.cloudapi.de
metricsclient.geneva.core.cloudapi.de

Certificate

The complete raw certificate details for RdfeSubscriptionProvisioningClientCert.database.cloudapi.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHSDCCBjCgAwIBAgIQRAfEgTFsyTWdOTqjmHiuZDANBgkqhkiG9w0BAQsFADBM
MQswCQYDVQQGEwJERTEVMBMGA1UECgwMRC1UcnVzdCBHbWJIMSYwJAYDVQQDDB1E
LVRSVVNUIFNTTCBDbGFzcyAzIENBIDEgMjAwOTAeFw0yMDAzMTEyMTIwMjBaFw0y
MjAzMTEyMTIwMTNaMIHIMRUwEwYDVQQFEwxDU00wMTg1OTk5NTIxCzAJBgNVBAYT
AkRFMQ8wDQYDVQQIEwZCYXllcm4xETAPBgNVBAcTCE11ZW5jaGVuMQ4wDAYDVQQL
EwVBenVyZTEoMCYGA1UEChMfTWljcm9zb2Z0IERldXRzY2hsYW5kIE1DSU8gR21i
SDFEMEIGA1UEAxM7UmRmZVN1YnNjcmlwdGlvblByb3Zpc2lvbmluZ0NsaWVudENl
cnQuZGF0YWJhc2UuY2xvdWRhcGkuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDOr2lju+GqPZ6w4hsEWfaDzuHr6oxFBl/f3YlD9zX26x8iTsE3E/2Z
PTzHR+cLuXfIrgnfE9IdUU6ig+czbguzNO2RjmsymsoxYk1gDGO3klxL6pOZcrq3
3wTPv/kLC3b2gIHDRXpvCYFC4uJC0oMrQ6EIChw1TrpP93EDeaI49qtJ2Cohxm//
Aqm4CmYA58uooyr/PGq5L3Y5wv0JBObEBrNcIDHrqJyedjxS6NB1jJGwie8W5Tj7
sdAbqQHzcJU8n2JUkzf7P+swQXjv4O2Z6eYmrmGAjc/EJDnYdBghTX6WZGWWLXKz
fOJqp1tt1gLBq2BkuUgsdGTvmkUW6J9lAgMBAAGjggOnMIIDozCCARYGCCsGAQUF
BwEBBIIBCDCCAQQwMwYIKwYBBQUHMAGGJ2h0dHA6Ly9zc2wtYzMtY2ExLTIwMDku
b2NzcC5kLXRydXN0Lm5ldDBMBggrBgEFBQcwAoZAaHR0cDovL3d3dy5kLXRydXN0
Lm5ldC9jZ2ktYmluL0QtVFJVU1RfU1NMX0NsYXNzXzNfQ0FfMV8yMDA5LmNydDB/
BggrBgEFBQcwAoZzbGRhcDovL2RpcmVjdG9yeS5kLXRydXN0Lm5ldC9DTj1ELVRS
VVNUJTIwU1NMJTIwQ2xhc3MlMjAzJTIwQ0ElMjAxJTIwMjAwOSxPPUQtVHJ1c3Ql
MjBHbWJILEM9REU/Y0FDZXJ0aWZpY2F0ZT9iYXNlPzBlBgNVHSAEXjBcMFoGCysG
AQQBpTQCgUgBMEswSQYIKwYBBQUHAgEWPWh0dHA6Ly93d3cuZC10cnVzdC5uZXQv
aW50ZXJuZXQvZmlsZXMvRC1UUlVTVF9DU01fUEtJX0NQUy5wZGYwEwYKKwYBBAHW
eQIEAwEB/wQCBQAwMwYDVR0SBCwwKoEQaW5mb0BkLXRydXN0Lm5ldIYWaHR0cDov
L3d3dy5kLXRydXN0Lm5ldDCCAR0GA1UdHwSCARQwggEQMIIBDKCCAQigggEEhnls
ZGFwOi8vZGlyZWN0b3J5LmQtdHJ1c3QubmV0L0NOPUQtVFJVU1QlMjBTU0wlMjBD
bGFzcyUyMDMlMjBDQSUyMDElMjAyMDA5LE89RC1UcnVzdCUyMEdtYkgsQz1ERT9j
ZXJ0aWZpY2F0ZXJldm9jYXRpb25saXN0hkBodHRwOi8vY3JsLmQtdHJ1c3QubmV0
L2NybC9kLXRydXN0X3NzbF9jbGFzc18zX2NhXzFfMjAwOS5kZXIuY3JshkVodHRw
Oi8vY2RuLmQtdHJ1c3QtY2xvdWRjcmwubmV0L2NybC9kLXRydXN0X3NzbF9jbGFz
c18zX2NhXzFfMjAwOS5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MEYGA1UdEQQ/MD2CO1JkZmVTdWJzY3JpcHRpb25Qcm92aXNpb25pbmdDbGllbnRD
ZXJ0LmRhdGFiYXNlLmNsb3VkYXBpLmRlMB8GA1UdIwQYMBaAFFAZMpSaxLUETVbQ
wIMh1TVVsLF6MA4GA1UdDwEB/wQEAwIFoDAdBgNVHQ4EFgQUMN0IyX0X/cRP9k+I
y/SprpKvXS4wDQYJKoZIhvcNAQELBQADggEBAHdp2kiRPPqyNkWOXW/xHuEME87E
+pJLkDT0iAlDfYvZp5xdmo+6K8a7nrJW8nLx9dp+BwmiNMA02219aZl1iWGdq5iY
vpCzkjwW8qujolxJ04LgI1IqRB6e40/6gylWMYfA0Dp6ppwL/W2pP1Wijku4I09f
NPMXeIKxmjkN5RexABbgd9/MYaPX7Q5AS6aUJos307wdQ+sT4stjUdJZPeaIiu3/
vkrsnzno2MOqzBCPnLKI3rdlCRzkxRWHMhgY7Iu4tOgU06RFrTMb2KH1lHr8tHxd
k5AhppS0xTkiXPCnzvwssYP3Pyl2FMIzzVCXVPYsDt3BOux+4proq0N4lkY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq9pY7vhqj2esOIbBFn2
g87h6+qMRQZf392JQ/c19usfIk7BNxP9mT08x0fnC7l3yK4J3xPSHVFOooPnM24L
szTtkY5rMprKMWJNYAxjt5JcS+qTmXK6t98Ez7/5Cwt29oCBw0V6bwmBQuLiQtKD
K0OhCAocNU66T/dxA3miOParSdgqIcZv/wKpuApmAOfLqKMq/zxquS92OcL9CQTm
xAazXCAx66icnnY8UujQdYyRsInvFuU4+7HQG6kB83CVPJ9iVJM3+z/rMEF47+Dt
menmJq5hgI3PxCQ52HQYIU1+lmRlli1ys3ziaqdbbdYCwatgZLlILHRk75pFFuif
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 90427835379395582872795168637405671012
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 21:20:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-11 21:20:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM018599952'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Azure'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Deutschland MCIO GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RdfeSubscriptionProvisioningClientCert.database.cloudapi.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26091589545315295396710972670649930087792130086563375445383067962092798809791242983961237795167618262302510204509917128190570365537510989143623273518348696176293157185756837086599683607652136387788529684563673057167721925580257768153960516508500383538298546549586728694899211953388292328067978347970278949656159023801393526312051591201623762419249967400597059823387263495633657019712472198841230620721391689372527921152685377611396518096357512036116619497552463246818112576999752783019910352198146158487451571023118089553976155528836393037800886523856660737224802947511797702846231892691698498539633119498814741847909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'RdfeSubscriptionProvisioningClientCert.database.cloudapi.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							30dd08c97d17fdc44ff64f88cbf4a9ae92af5d2e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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