frankfurt-main.ihk.de
- Industrie- und Handelskammer Frankfurt am Main -
Issued by D-TRUST SSL Class 3 CA 1 2009
About this certificate
This digital certificate with serial number 63:6c:d2:3c:8c:61:b3:80:e6:0a:48:f1:ff:db:f1:48 was issued on by D-Trust GmbH.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Industrie- und Handelskammer Frankfurt am Main
Company registration number:
CSM040941749
Organization: Industrie- und Handelskammer Frankfurt am Main
Organization: Industrie- und Handelskammer Frankfurt am Main
State / Province:
Hessen
Locality: Frankfurt am Main
Country: DE
Locality: Frankfurt am Main
Country: DE
D-Trust GmbH
Organization:
D-Trust GmbH
Country:
DE
This certificate will expire on
Certificate Details
Serial Number (hex): 63:6c:d2:3c:8c:61:b3:80:e6:0a:48:f1:ff:db:f1:48Serial Number (int): 132158603746580965368858222442156126536
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: bf:58:53:3f:37:20:ad:f3:09:dc:b2:ff:bb:c0:29:29:d5:a2:a5:3c
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a
Fingerprint (sha1): 3c:2c:18:4d:86:f0:ae:9e:5e:29:54:76:dc:bb:0a:dc:0b:18:16:17
Fingerprint (sha256): 05:1e:30:aa:63:c6:53:b1:4a:1f:08:35:f9:fd:20:d5:2e:20:18:cb:6a:97:a5:05:7a:fc:8d:38:85:f9:fe:35
Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Revocation information
OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.netCRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl
Check the revocation status for certificate frankfurt-main.ihk.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for frankfurt-main.ihk.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
frankfurt-main.ihk.de
*.frankfurt-main.ihk.de
*.frankfurt-main.ihk.de
Other certificates including the domain name ihk.de
(limited to 100 certificates)
cdn01.blog.ostwestfalen.ihk.de
ihkdigital.services.ihk.de
coburg.ihk.de
webmail.ihk.de
coburg.ihk.de
gemeinsam.niederrhein.ihk.de
bildung2.gfi.ihk.de
www.pruefungen.ostwestfalen.ihk.de
www.weingarten.ihk.de
events.wuerzburg.ihk.de
www.saarland.ihk.de
www.offenbach.ihk.de
ostwestfalen.ihk.de
tixxt.kiel.ihk.de
ostwestfalen.ihk.de
zq-digitalekompetenz.schwaben.ihk.de
vdi.hannover.ihk.de
adrprintsrv.gfi.ihk.de
box.wuerzburg.ihk.de
videokonferenz.ihk.de
unternehmen.gera.ihk.de
www.going-international.ihk.de
tagesspiegel.kiosk.plus
offenbach.ihk.de
profile.ihk.de
www.vergabe.ihk.de
vstdbv3.ihk.de
vpn.heilbronn.ihk.de
seleinfo.ihk.de
videokonferenz.kassel.ihk.de
regensburg.ihk.de
ostwestfalen.ihk.de
magazine.suncoastergroup.com
proxy1.juris.ihk.de
vergabe.ihk.de
evadatenarchiv.ihk.de
ostwestfalen.ihk.de
frankfurt-main.ihk.de
berlin.ihk.de
ostwestfalen.ihk.de
xihkpilotws.gfi.ihk.de
www.hanau.ihk.de
cert.ihk.de
www.services.abnahme.usbdb.ihk.de
gemeinsam.niederrhein.ihk.de
ecofinder.ihk.de
www.unternehmen.darmstadt.ihk.de
*.webmail.ihk.de
*.gfi.ihk.de
webservices.dresden.ihk.de
nas.kiel.ihk.de
cyber.frankfurt-main.ihk.de
webservices.dresden.ihk.de
pao.berlin.ihk.de
coburg.ihk.de
impulsnetzwerk.ihk.de
ihk.de
owi.ostwestfalen.ihk.de
frankfurt-main.ihk.de
sse.cottbus.ihk.de
ausbildung.darmstadt.ihk.de
zq-digitalekompetenz.schwaben.ihk.de
magdeburg.ihk.de
wireless1.ihk.de
www.frankfurt-main.ihk.de
ausgabe.vstdbv3.ihk.de
mainau.wuerzburg.ihk.de
www.pruefungen.ostwestfalen.ihk.de
stats.ostwestfalen.ihk.de
wlan.muenchen.ihk.de
pruefung.ihk.de
*.schwaben.ihk.de
webservices.dresden.ihk.de
unternehmen.gera.ihk.de
muenchen.ihk.de
quickplace.ihk.de
cyber.frankfurt-main.ihk.de
geoinfo.ihk.de
cloud.karlsruhe.ihk.de
ihk-sh.de
bonn.ihk.de
adrprintsrv.gfi.ihk.de
www.aachen.ihk.de
dataoutputservices.gfi.ihk.de
wis.ihk.de
karlsruhe.ihk.de
veranstaltung.mittlerer-niederrhein.ihk.de
connect.darmstadt.ihk.de
ostwestfalen.ihk.de
wm.ihk.de
www.pruefungen.ostwestfalen.ihk.de
proxy1.beck.ihk.de
cert.ihk.de
cottbus.ihk.de
mx01.ihk.de
kiosk.der-kleine-georg.de
www.dresden.ihk.de
ve-register.ihk.de
traveler.konstanz.ihk.de
login3.ihk.de
ihkdigital.services.ihk.de
coburg.ihk.de
webmail.ihk.de
coburg.ihk.de
gemeinsam.niederrhein.ihk.de
bildung2.gfi.ihk.de
www.pruefungen.ostwestfalen.ihk.de
www.weingarten.ihk.de
events.wuerzburg.ihk.de
www.saarland.ihk.de
www.offenbach.ihk.de
ostwestfalen.ihk.de
tixxt.kiel.ihk.de
ostwestfalen.ihk.de
zq-digitalekompetenz.schwaben.ihk.de
vdi.hannover.ihk.de
adrprintsrv.gfi.ihk.de
box.wuerzburg.ihk.de
videokonferenz.ihk.de
unternehmen.gera.ihk.de
www.going-international.ihk.de
tagesspiegel.kiosk.plus
offenbach.ihk.de
profile.ihk.de
www.vergabe.ihk.de
vstdbv3.ihk.de
vpn.heilbronn.ihk.de
seleinfo.ihk.de
videokonferenz.kassel.ihk.de
regensburg.ihk.de
ostwestfalen.ihk.de
magazine.suncoastergroup.com
proxy1.juris.ihk.de
vergabe.ihk.de
evadatenarchiv.ihk.de
ostwestfalen.ihk.de
frankfurt-main.ihk.de
berlin.ihk.de
ostwestfalen.ihk.de
xihkpilotws.gfi.ihk.de
www.hanau.ihk.de
cert.ihk.de
www.services.abnahme.usbdb.ihk.de
gemeinsam.niederrhein.ihk.de
ecofinder.ihk.de
www.unternehmen.darmstadt.ihk.de
*.webmail.ihk.de
*.gfi.ihk.de
webservices.dresden.ihk.de
nas.kiel.ihk.de
cyber.frankfurt-main.ihk.de
webservices.dresden.ihk.de
pao.berlin.ihk.de
coburg.ihk.de
impulsnetzwerk.ihk.de
ihk.de
owi.ostwestfalen.ihk.de
frankfurt-main.ihk.de
sse.cottbus.ihk.de
ausbildung.darmstadt.ihk.de
zq-digitalekompetenz.schwaben.ihk.de
magdeburg.ihk.de
wireless1.ihk.de
www.frankfurt-main.ihk.de
ausgabe.vstdbv3.ihk.de
mainau.wuerzburg.ihk.de
www.pruefungen.ostwestfalen.ihk.de
stats.ostwestfalen.ihk.de
wlan.muenchen.ihk.de
pruefung.ihk.de
*.schwaben.ihk.de
webservices.dresden.ihk.de
unternehmen.gera.ihk.de
muenchen.ihk.de
quickplace.ihk.de
cyber.frankfurt-main.ihk.de
geoinfo.ihk.de
cloud.karlsruhe.ihk.de
ihk-sh.de
bonn.ihk.de
adrprintsrv.gfi.ihk.de
www.aachen.ihk.de
dataoutputservices.gfi.ihk.de
wis.ihk.de
karlsruhe.ihk.de
veranstaltung.mittlerer-niederrhein.ihk.de
connect.darmstadt.ihk.de
ostwestfalen.ihk.de
wm.ihk.de
www.pruefungen.ostwestfalen.ihk.de
proxy1.beck.ihk.de
cert.ihk.de
cottbus.ihk.de
mx01.ihk.de
kiosk.der-kleine-georg.de
www.dresden.ihk.de
ve-register.ihk.de
traveler.konstanz.ihk.de
login3.ihk.de
Certificate
The complete raw certificate details for frankfurt-main.ihk.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIILZzCCCk+gAwIBAgIQY2zSPIxhs4DmCkjx/9vxSDANBgkqhkiG9w0BAQsFADBM MQswCQYDVQQGEwJERTEVMBMGA1UECgwMRC1UcnVzdCBHbWJIMSYwJAYDVQQDDB1E LVRSVVNUIFNTTCBDbGFzcyAzIENBIDEgMjAwOTAeFw0yNDAzMTIwODE1MTZaFw0y NTAzMTUwODE1MTZaMIGqMRUwEwYDVQQFEwxDU00wNDA5NDE3NDkxCzAJBgNVBAYT AkRFMQ8wDQYDVQQIEwZIZXNzZW4xGjAYBgNVBAcTEUZyYW5rZnVydCBhbSBNYWlu MTcwNQYDVQQKEy5JbmR1c3RyaWUtIHVuZCBIYW5kZWxza2FtbWVyIEZyYW5rZnVy dCBhbSBNYWluMR4wHAYDVQQDExVmcmFua2Z1cnQtbWFpbi5paGsuZGUwggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDuCi2FZx0s1R2NDwEuEqARYEd9EKk/ SIdQVGpGEEwb6e9cchSxcintKz3HGwZWGQY596dlNTM5AXf73ljjVhIUoxwi3Xtu Q1EC76T2DbQuyjS2pVxnQivUOdWmi8EIuGbJX2UMW5wo3PFMODGWreOa9GRySpZk gfl8Or8frWo4IJNHwV8D4woKzE4b1PTdYgUyo+W1+G/VRwtbHcViyoKfsH5ntDLd EAxv0yFHruZ7AYj10x73ghUYrlPD14RU3/f1vYPDBzasVRDxnPAxloBnKAlVGxLP 4qmqZex0PyjoCK9G2bxWTrSoU6J8IlE7njrprYGvRCBEeVOzboNFrBL3N3RlF3ru OwUWa236K7HMUCH84sATu2/4w8eFDO40kXUW52RDX7gW2hoW1QoltM+hczoEHhNB adqL20Poehdq+KgXSOqihYGBuA/EiEDNkop8Q8Tfm58hxNDiSfleEIjTDQrR/BBx MmeVwCKCfR2kg/PDM0azxAmp4/jkEyaeYtthA8a731gGL4A9pg32W4mMu5zDOfNd v8Jexy0cpHGc1gShPIdiqqluRsP7m7OZdP0LrEZLRzSY4rhFFthpM6VilA3jcJ6S pD4D9HQ9UPbM9K6lzHqnq+JWs5jeC8nQtT9CrQVmoR76ZrB8RAR5WvfgML3xzzmA bGxFQYA3embv4QIDAQABo4IG5DCCBuAwgZMGCCsGAQUFBwEBBIGGMIGDMDMGCCsG AQUFBzABhidodHRwOi8vc3NsLWMzLWNhMS0yMDA5Lm9jc3AuZC10cnVzdC5uZXQw TAYIKwYBBQUHMAKGQGh0dHA6Ly93d3cuZC10cnVzdC5uZXQvY2dpLWJpbi9ELVRS VVNUX1NTTF9DbGFzc18zX0NBXzFfMjAwOS5jcnQweQYDVR0gBHIwcDAIBgZngQwB AgIwCAYGBACPegEHMFoGCysGAQQBpTQCgUgBMEswSQYIKwYBBQUHAgEWPWh0dHA6 Ly93d3cuZC10cnVzdC5uZXQvaW50ZXJuZXQvZmlsZXMvRC1UUlVTVF9DU01fUEtJ X0NQUy5wZGYwggRMBgorBgEEAdZ5AgQCBIIEPASCBDgENgB1ABNK3xq1mEIJeAxv 70x6kaQWtyNJzlhXat+u2qfCq+AiAAABjjG67KEAAAQDAEYwRAIgPBQXKTq6DWib npl8ZWJc222bwRIsFVTAUbPReowjhOwCIGZuVKipp07pc2eMlNQHxKDYE5Xf0DL4 ORbu445mJKwqAHcA5tIxY0B3jMEQQQbXcbnOwdJA9paEhvu6hzId/R43jlAAAAGO MbrtdgAABAMASDBGAiEAtPNBkqmMokRaV1uD4fJZ6ZpK798AMbuiT6QuP9kylv0C IQCt75MpD09YvDMJYY/OJ8j3k2UqDDAFHhoyuLIxaChFvgB2ACjigTj9gyFF6anW qnU3bYN3qIUSs8B/ckFIIdy96YxmAAABjjG68AUAAAQDAEcwRQIgUU39HJGlmKz0 TngoYOlC78xmEKTqrli3hw2qQ+u40KMCIQCxR9Vkm7eicyrDIr4mtAhHyDQ9Yj+i Ll99mHzTsHBliQB2AH1ZHhLheCp7HGFnfF79+NCHXBSgTpWeuQMv2Q6MLnm4AAAB jjG67yAAAAQDAEcwRQIhAOXkUz58H0LMdEhK0iMF7vynB4/I4C5Th1xH70lpc0zM AiBCK4tzGIW4cOA2OIb4YqTz88SDcK3PksZYGCvEOLDifgB2AM8RVu7VLnyv84db 2Wkum+kacWdKsBfsrAHSW3fOzDsIAAABjjG67icAAAQDAEcwRQIgVp+tIcHdFO4Z ieOYLdVZZqS7OaPNPz+Txu53ebSZpVoCIQC/XIlN7AxtQjMCJ7uj5gsNrj876gEY hmrkLLbdezWJrgB1AE51oydcmhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAAB jjG67mYAAAQDAEYwRAIgMXC/SwTpEhs9lHC63e3pZ3rmzUZIvS+fEVuHILHd4Q0C ICIbNOREtTZuezHpEM6d+I9Is8psTVHnqavbxnwetg8VAHYA4JKz/AwdyOdoNh/e YbmWTQpSeBmKctZyxLBNpW1vVAQAAAGOMbrwQwAABAMARzBFAiEAuNp8Hq3EFsNz ESPotmG2oXVsUG+vmUeKBwyZ4aveV9ECICVgfmBGbrCXoiwlDwitAHv5ZPDKzBSG qSGqHq+W8YqNAHYAouMK5EXvva2bfjjtR2d3U9eCW4SU1yteGyzEuVCkR+cAAAGO MbrxCQAABAMARzBFAiBXQ/SX7qKZwpG1Dp58RjzQfWl1mjOZl1UuFBDKJgBP8AIh AOB26K0SUnyiPeORIwIfYj6JvxoyCmkb5qCneWHWyGKFAHUAKCyL3YEP+QkSCs4W 1uDsIBvqgqOkrxnZ7/tZ6D/cQmgAAAGOMbrzLwAABAMARjBEAiAB2JnHYAsPiwXB vLSv1MXsC25YcIm2TZ3rDUrQWG4YCAIgE+pmHxM0EoW2BbTSvguyCzoBF5IX2OyK T+l49mEf/MUwMwYDVR0SBCwwKoEQaW5mb0BkLXRydXN0Lm5ldIYWaHR0cDovL3d3 dy5kLXRydXN0Lm5ldDCBnQYDVR0fBIGVMIGSMIGPoIGMoIGJhkBodHRwOi8vY3Js LmQtdHJ1c3QubmV0L2NybC9kLXRydXN0X3NzbF9jbGFzc18zX2NhXzFfMjAwOS5k ZXIuY3JshkVodHRwOi8vY2RuLmQtdHJ1c3QtY2xvdWRjcmwubmV0L2NybC9kLXRy dXN0X3NzbF9jbGFzc18zX2NhXzFfMjAwOS5jcmwwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMDkGA1UdEQQyMDCCFWZyYW5rZnVydC1tYWluLmloay5kZYIX Ki5mcmFua2Z1cnQtbWFpbi5paGsuZGUwHwYDVR0jBBgwFoAUUBkylJrEtQRNVtDA gyHVNVWwsXowDgYDVR0PAQH/BAQDAgWgMB0GA1UdDgQWBBS/WFM/NyCt8wncsv+7 wCkp1aKlPDANBgkqhkiG9w0BAQsFAAOCAQEAR8uWbBrIDRrlyx1QT8zfqXtLBLmM NyQxrE+em8/5JuIQdFmh6g4BdkIEU1S5UtHPA034NYGc0q/yUFbqnfnzm227QabA Wet12Q9ZEH35qCpiFA9Is4vfq6u5m4FChB0hhiSrwgZEXl7h2wOsSgq/pilFXYtW SLhAlBlr8rQ5alCvkN8NwbV32UKgfpjcfZKYvptEhFcs5+14UeINspJvy8GFy7jv w/wsqiUkBzStxfdnFnYO9yYRfCXBkVbGi3LzBJkm60mV+jm3OAPZWUvhyYrCQBWY RAHo8tNGYw0j3fBrEqSQVV07hYxk1aF+zop1Jq9HaveKIdXVztEo0t4cFA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7gothWcdLNUdjQ8BLhKg EWBHfRCpP0iHUFRqRhBMG+nvXHIUsXIp7Ss9xxsGVhkGOfenZTUzOQF3+95Y41YS FKMcIt17bkNRAu+k9g20Lso0tqVcZ0Ir1DnVpovBCLhmyV9lDFucKNzxTDgxlq3j mvRkckqWZIH5fDq/H61qOCCTR8FfA+MKCsxOG9T03WIFMqPltfhv1UcLWx3FYsqC n7B+Z7Qy3RAMb9MhR67mewGI9dMe94IVGK5Tw9eEVN/39b2Dwwc2rFUQ8ZzwMZaA ZygJVRsSz+KpqmXsdD8o6AivRtm8Vk60qFOifCJRO5466a2Br0QgRHlTs26DRawS 9zd0ZRd67jsFFmtt+iuxzFAh/OLAE7tv+MPHhQzuNJF1FudkQ1+4FtoaFtUKJbTP oXM6BB4TQWnai9tD6HoXavioF0jqooWBgbgPxIhAzZKKfEPE35ufIcTQ4kn5XhCI 0w0K0fwQcTJnlcAign0dpIPzwzNGs8QJqeP45BMmnmLbYQPGu99YBi+APaYN9luJ jLucwznzXb/CXsctHKRxnNYEoTyHYqqpbkbD+5uzmXT9C6xGS0c0mOK4RRbYaTOl YpQN43CekqQ+A/R0PVD2zPSupcx6p6viVrOY3gvJ0LU/Qq0FZqEe+mawfEQEeVr3 4DC98c85gGxsRUGAN3pm7+ECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 132158603746580965368858222442156126536 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 08:15:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-15 08:15:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM040941749' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Frankfurt am Main' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Industrie- und Handelskammer Frankfurt am Main' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'frankfurt-main.ihk.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 971117482993457322334533678893634317784907320833121310131807636768054932552222826804504274413705022609585659390068252717066412133739093332560271560308644709721410179113370008981322848015979366336973619370796080357653455432141863649261473808585658293267690054821990652959934542683277854407506581824689958628905004565776800262739995671359821339958939546582029742757755213902296500232631326218537195661318937597275921440427081906564356563378434962600187306271188380688878522981706693599623916317918624374792103539528058238220090961356166187941856505775509753812823687699985207408170325017632282914343991473644746344342418630941650157604886455280369523481715842119322092351251497472918728663081915476582722072125050716820939334778210247224959158871132308974691396731216497944666759673491858828770749569279629601308190229272561257737518357505839889046934210650377800778964221711522323825969371448255870363222959986726181610249154525368083618346099434542370889229284068315738457758529208291384272364658590378009566518331053648634593918540653629086482131112109809141020809663819873857638037612158129857820223278648055289338657769684853731895004838492827270403266247736533239823718570892545976693926449532635728397442732815732899323604037601 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1084 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1080 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankfurt-main.ihk.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frankfurt-main.ihk.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bf58533f3720adf309dcb2ffbbc02929d5a2a53c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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