ipoprod-dzb.rz.bankenit.de

- Atruvia AG -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 58:45:a1:52:29:c1:6a:65:31:46:97:2e:26:89:ce:22 was issued on by D-Trust GmbH.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Atruvia AG

Company registration number: CSM029673603
Organization: Atruvia AG
State / Province: Baden-Wuerttemberg
Locality: Karlsruhe
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 58:45:a1:52:29:c1:6a:65:31:46:97:2e:26:89:ce:22
Serial Number (int): 117333604089889724533897362185638235682
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 82:06:90:11:e4:8b:13:a8:ed:54:a6:82:1e:e3:1c:5e:e7:5a:82:66
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 2f:6f:ab:b8:f8:0f:83:38:f9:bd:e1:27:47:fc:d1:f6:a7:95:cd:2e
Fingerprint (sha256): 05:2f:f0:bf:04:26:0a:3b:a8:33:19:b2:36:3a:a1:a8:62:06:3b:73:a4:5d:d0:55:46:95:7e:1a:af:7d:fb:c2

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate ipoprod-dzb.rz.bankenit.de

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ipoprod-dzb.rz.bankenit.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ipoprod11-dzb.rz.bankenit.de
ipoprod-dzb.rz.bankenit.de
ipoprod13-dzb.rz.bankenit.de
ipoprod14-dzb.rz.bankenit.de
ipoprod12-dzb.rz.bankenit.de

Other certificates including the domain name bankenit.de

(limited to 100 certificates)
*.8643.sys3.tb.rz.bankenit.de
mobilesync-inte.rz.bankenit.de
*.i0275.pb-fcsi.rz.bankenit.de
*.i0824.pb-fcsi.rz.bankenit.de
*.I1001.PB-FCSI.RZ.BANKENIT.DE
*.apps.caas-ekad-test02.rz.bankenit.de
*.wart3.tb.rz.bankenit.de
*.i8656.sys3.tb.rz.bankenit.de
brs-prod3.rz.bankenit.de
giti.rz.bankenit.de
*.i0764.pb-fcsi.rz.bankenit.de
INTE-ORCHESTRA.BANKENIT.DE
*.i4169.pb-fcsi.rz.bankenit.de
*.i0206.pb-fcsi.rz.bankenit.de
*.I9501.PB.RZ.BANKENIT.DE
*.i0209.pb-fcsi.rz.bankenit.de
*.I0948.PB-FCSI.RZ.BANKENIT.DE
*.i0080.pb-fcsi.rz.bankenit.de
*.i2105.pb-fcsi.rz.bankenit.de
SEUDB-DEV.RZ.BANKENIT.DE
trovodev.rz.bankenit.de
*.I0164.PB-FCSI.RZ.BANKENIT.DE
*.i1339.pb-fcsi.rz.bankenit.de
awbt-inte.pka.bankenit.de
GUESTMANAGER-LAB.PKA.BANKENIT.DE
*.I0371.PB-FCSI.RZ.BANKENIT.DE
*.I8204.ZUTU3.TB.RZ.BANKENIT.DE
api.dzb-vmsd-test01.rz.bankenit.de
*.i0066.pb-fcsi.rz.bankenit.de
webdav-uit-a.fiducia.de
*.I9528.PB-FCSI.RZ.BANKENIT.DE
*.i0201.pb-fcsi.rz.bankenit.de
*.i0142.pb-fcsi.rz.bankenit.de
*.i2316.pb-fcsi.rz.bankenit.de
*.i0784.pb-fcsi.rz.bankenit.de
*.I9501.PB-FCSI.RZ.BANKENIT.DE
*.i9523.pb-fcsi.rz.bankenit.de
*.i8638.wart3.tb.rz.bankenit.de
*.I5841.PB-FCSI.RZ.BANKENIT.DE
*.I6244.PB-FCSI.RZ.BANKENIT.DE
*.I8638.wart1.tb.rz.bankenit.de
*.i3206.pb-fcsi.rz.bankenit.de
sonar-dev.rz.bankenit.de
*.i0852.pb-fcsi.rz.bankenit.de
*.i0789.pb-fcsi.rz.bankenit.de
*.tp-mesh.apps.caas-zmsd-prod01.rz.bankenit.de
kad-caas1.rz.bankenit.de
brs-prod-u.rz.bankenit.de
*.I7609.PB-FCSI.RZ.BANKENIT.DE
api.egp-ekad-vp01.rz.bankenit.de
*.ext-imsd-caas1.rz.bankenit.de
*.i0671.pb-fcsi.rz.bankenit.de
*.i0372.pb-fcsi.rz.bankenit.de
*.i3669.pb-fcsi.rz.bankenit.de
*.i1871.pb-fcsi.rz.bankenit.de
www.meine-bankid-messe.rz.bankenit.de
ipoprod-dzb.rz.bankenit.de
*.i3625.pb-fcsi.rz.bankenit.de
*.i1871.pb-fcsi.rz.bankenit.de
*.i1593.pb-fcsi.rz.bankenit.de
*.i0524.pb-fcsi.rz.bankenit.de
*.i1634.pb-fcsi.rz.bankenit.de
tph-wartung.rz.bankenit.de
*.i0455.pb-fcsi.rz.bankenit.de
*.i0968.pb-fcsi.rz.bankenit.de
*.author-s.webcenter.rz.bankenit.de
*.i0221.pb-fcsi.rz.bankenit.de
*.i1769.pb-fcsi.rz.bankenit.de
*.i1156.pb-fcsi.rz.bankenit.de
ide.rz.bankenit.de
*.i0217.pb-fcsi.rz.bankenit.de
*.i0340.pb-fcsi.rz.bankenit.de
fus.rz.bankenit.de
*.i0257.pb-fcsi.rz.bankenit.de
*.I9515.PB-FCSI.RZ.BANKENIT.DE
*.i1609.pb-fcsi.rz.bankenit.de
*.i5170.pb-fcsi.rz.bankenit.de
*.apps.ext-caas-ekad-vp02.rz.bankenit.de
*.i1881.pb-fcsi.rz.bankenit.de
aqua.rz.bankenit.de
wbc.rz.bankenit.de
*.I0223.PB-FCSI.RZ.BANKENIT.DE
*.i0071.pb-fcsi.rz.bankenit.de
*.ext-lab-ekad-caas1.rz.bankenit.de
git.rz.bankenit.de
api.caas-imsd-prod01.rz.bankenit.de
xmc-nac03.netz.fiducia.de
codesearch.rz.bankenit.de
*.i1848.pb-fcsi.rz.bankenit.de
*.i1722.pb-fcsi.rz.bankenit.de
sonargraphlic-dev.rz.bankenIT.de
*.i0094.pb-fcsi.rz.bankenit.de
*.i0725.pb-fcsi.rz.bankenit.de
api.dso-ekad-test01.rz.bankenit.de
*.i0652.pb-fcsi.rz.bankenit.de
*.i0080.pb-fcsi.rz.bankenit.de
SONARGRAPHLIC-QA.RZ.BANKENIT.DE
banken-p03-prod.analysen.rz.bankenit.de
*.i0616.pb-fcsi.rz.bankenit.de
*.i1983.pb-fcsi.rz.bankenit.de

Certificate

The complete raw certificate details for ipoprod-dzb.rz.bankenit.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/KGzrQRBC4HI86UJ2F6
fFHtwYhsz1LoKPftex+rmtIK+ZdnZaoHRThL5TE6lptR2AfeuKZ5G4Mh920VSN8H
A+49N2m6hS2dIhRBr47FOZIT+rv1sDE7SuL1emZW9pozBif50amG0YhXg1oIIiZO
1t5Zv1qcWvFQ7TwyrsiPwMnjaASABYXuT2p0+5vJefx/a4gn2py/xPlaqCu825Ww
1TszQViP253Z5qAMmfIFpCUhk4CMxASHDkWyz/8FyigkNv/zSsKrx6tQmQxC32mc
DgexL3UNXgP+QmpT9RHO1GpJ1KmEWVuMaxw9AxEUDDe118U739+UtVpHDOQ9KxI1
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 117333604089889724533897362185638235682
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-04 08:25:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-07 08:25:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM029673603'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atruvia AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ipoprod-dzb.rz.bankenit.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25241017007877023261596853478052450239736705088065723927831280531852467192236722297262543339333519166626941741061276918086204519623350930483926885343867191069112044241818570645951865632620478982657819677009388620058635477911762010143930526106852626490392198635294728473450477599838167916803215771881364082737583596173468189116513533780078400219599628299983894393812887760967235118363043151739022733047082204369461488546281129671446032365105240290843628981342350180221853947239489868293800791664286547940856066187672349128865127984068461854115835564223483345231412147728272940499037781910465348708402768048707177952757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipoprod11-dzb.rz.bankenit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipoprod-dzb.rz.bankenit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipoprod13-dzb.rz.bankenit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipoprod14-dzb.rz.bankenit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipoprod12-dzb.rz.bankenit.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82069011e48b13a8ed54a6821ee31c5ee75a8266
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00116438f5576a34eec8805c6328bd2cc475af2ea3f52c0cc7725c3d685f7bb1ece29fadda3d17deda88889a420eea9f26316e3a18abd69a3e573678171be33ef269023a4f9efc15ec7cebc954350b9952190187875ea38557b8de560da0893a98342c6c58fea7a186e972337cad73a0f7920d9b0e5d069e76d1abc1130abd857d2aa26e392978c0b05992cfc335c36056de3df40629cf550dace60f308a4ea2ff86a146acbedb813f9f51c23d9dc196d8c87f59d3d4a22b83fed386510411d6f99b5e65cdad9a9fad719653316d776d6b1e4178e2f7884792b59256606f01c76e1f6cd7125449b8196b703f278cdc65f3a6c2f9da6f2faa555fc896cc15e8c7e5