aqua.rz.bankenit.de

- Atruvia AG -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 4f:7f:33:0a:7e:74:ad:a9:fd:b3:fb:5f:36:fe:0b:f6 was issued on by D-Trust GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Atruvia AG

Company registration number: CSM032123117
Organization: Atruvia AG
State / Province: Baden-Württemberg
Locality: Karlsruhe
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 4f:7f:33:0a:7e:74:ad:a9:fd:b3:fb:5f:36:fe:0b:f6
Serial Number (int): 105669468602349855183806420289127844854
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4c:88:65:22:89:17:87:2c:0f:77:a1:74:99:21:9c:89:42:d4:b9:a1
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): fa:df:a8:fc:56:98:63:69:36:23:dc:d2:d0:21:07:42:ac:ef:e2:52
Fingerprint (sha256): 06:c7:31:e4:07:ba:cf:11:d5:5d:6f:23:88:4a:62:f9:47:f7:f2:a0:4f:fb:f5:e2:81:2f:63:1b:7c:b2:d2:03

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate aqua.rz.bankenit.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aqua.rz.bankenit.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aqua.rz.bankenit.de

Other certificates including the domain name bankenit.de

(limited to 100 certificates)
*.8643.sys3.tb.rz.bankenit.de
mobilesync-inte.rz.bankenit.de
*.i0275.pb-fcsi.rz.bankenit.de
*.i0824.pb-fcsi.rz.bankenit.de
*.I1001.PB-FCSI.RZ.BANKENIT.DE
*.apps.caas-ekad-test02.rz.bankenit.de
*.wart3.tb.rz.bankenit.de
*.i8656.sys3.tb.rz.bankenit.de
brs-prod3.rz.bankenit.de
giti.rz.bankenit.de
*.i0764.pb-fcsi.rz.bankenit.de
INTE-ORCHESTRA.BANKENIT.DE
*.i4169.pb-fcsi.rz.bankenit.de
*.i0206.pb-fcsi.rz.bankenit.de
*.I9501.PB.RZ.BANKENIT.DE
*.i0209.pb-fcsi.rz.bankenit.de
*.I0948.PB-FCSI.RZ.BANKENIT.DE
*.i0080.pb-fcsi.rz.bankenit.de
*.i2105.pb-fcsi.rz.bankenit.de
SEUDB-DEV.RZ.BANKENIT.DE
trovodev.rz.bankenit.de
*.I0164.PB-FCSI.RZ.BANKENIT.DE
*.i1339.pb-fcsi.rz.bankenit.de
awbt-inte.pka.bankenit.de
GUESTMANAGER-LAB.PKA.BANKENIT.DE
*.I0371.PB-FCSI.RZ.BANKENIT.DE
*.I8204.ZUTU3.TB.RZ.BANKENIT.DE
api.dzb-vmsd-test01.rz.bankenit.de
*.i0066.pb-fcsi.rz.bankenit.de
webdav-uit-a.fiducia.de
*.I9528.PB-FCSI.RZ.BANKENIT.DE
*.i0201.pb-fcsi.rz.bankenit.de
*.i0142.pb-fcsi.rz.bankenit.de
*.i2316.pb-fcsi.rz.bankenit.de
*.i0784.pb-fcsi.rz.bankenit.de
*.I9501.PB-FCSI.RZ.BANKENIT.DE
*.i9523.pb-fcsi.rz.bankenit.de
*.i8638.wart3.tb.rz.bankenit.de
*.I5841.PB-FCSI.RZ.BANKENIT.DE
*.I6244.PB-FCSI.RZ.BANKENIT.DE
*.I8638.wart1.tb.rz.bankenit.de
*.i3206.pb-fcsi.rz.bankenit.de
sonar-dev.rz.bankenit.de
*.i0852.pb-fcsi.rz.bankenit.de
*.i0789.pb-fcsi.rz.bankenit.de
*.tp-mesh.apps.caas-zmsd-prod01.rz.bankenit.de
kad-caas1.rz.bankenit.de
brs-prod-u.rz.bankenit.de
*.I7609.PB-FCSI.RZ.BANKENIT.DE
api.egp-ekad-vp01.rz.bankenit.de
*.ext-imsd-caas1.rz.bankenit.de
*.i0671.pb-fcsi.rz.bankenit.de
*.i0372.pb-fcsi.rz.bankenit.de
*.i3669.pb-fcsi.rz.bankenit.de
*.i1871.pb-fcsi.rz.bankenit.de
www.meine-bankid-messe.rz.bankenit.de
ipoprod-dzb.rz.bankenit.de
*.i3625.pb-fcsi.rz.bankenit.de
*.i1871.pb-fcsi.rz.bankenit.de
*.i1593.pb-fcsi.rz.bankenit.de
*.i0524.pb-fcsi.rz.bankenit.de
*.i1634.pb-fcsi.rz.bankenit.de
tph-wartung.rz.bankenit.de
*.i0455.pb-fcsi.rz.bankenit.de
*.i0968.pb-fcsi.rz.bankenit.de
*.author-s.webcenter.rz.bankenit.de
*.i0221.pb-fcsi.rz.bankenit.de
*.i1769.pb-fcsi.rz.bankenit.de
*.i1156.pb-fcsi.rz.bankenit.de
ide.rz.bankenit.de
*.i0217.pb-fcsi.rz.bankenit.de
*.i0340.pb-fcsi.rz.bankenit.de
fus.rz.bankenit.de
*.i0257.pb-fcsi.rz.bankenit.de
*.I9515.PB-FCSI.RZ.BANKENIT.DE
*.i1609.pb-fcsi.rz.bankenit.de
*.i5170.pb-fcsi.rz.bankenit.de
*.apps.ext-caas-ekad-vp02.rz.bankenit.de
*.i1881.pb-fcsi.rz.bankenit.de
aqua.rz.bankenit.de
wbc.rz.bankenit.de
*.I0223.PB-FCSI.RZ.BANKENIT.DE
*.i0071.pb-fcsi.rz.bankenit.de
*.ext-lab-ekad-caas1.rz.bankenit.de
git.rz.bankenit.de
api.caas-imsd-prod01.rz.bankenit.de
xmc-nac03.netz.fiducia.de
codesearch.rz.bankenit.de
*.i1848.pb-fcsi.rz.bankenit.de
*.i1722.pb-fcsi.rz.bankenit.de
sonargraphlic-dev.rz.bankenIT.de
*.i0094.pb-fcsi.rz.bankenit.de
*.i0725.pb-fcsi.rz.bankenit.de
api.dso-ekad-test01.rz.bankenit.de
*.i0652.pb-fcsi.rz.bankenit.de
*.i0080.pb-fcsi.rz.bankenit.de
SONARGRAPHLIC-QA.RZ.BANKENIT.DE
banken-p03-prod.analysen.rz.bankenit.de
*.i0616.pb-fcsi.rz.bankenit.de
*.i1983.pb-fcsi.rz.bankenit.de

Certificate

The complete raw certificate details for aqua.rz.bankenit.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7WoOQxXMT5yyxmDotC/
yluNYa0ZBSAhl8knElU9H2jg54+frIxlEwQhOJoV+ehMcq8Os8tZzg0UBwuNho2b
CNDXKIyDyZ82asQFPFb7seyuL5iZNQH2dWrl8a6r4YakZW7D7kFLnB3AUcs0Ojdo
aoRdLzTnik79tsv50xKGDHOqDphpZK/s/Ta7naE5xjOVpEKJCFeDHAAH2uVwAv1b
NW4VbHoLMzQ2DF8+3GTyUFR8o58Ai8b86AZQwg41eT45HCowJXmJM/mxZmDn4NVa
XuzF+QRf79OLpfSf5MhvhUiCp3wE9PoSTy7/XWIGVjhKbqbc4d6WfuEl9n6dtj/5
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 105669468602349855183806420289127844854
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-07 13:07:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-10 13:07:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM032123117'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atruvia AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aqua.rz.bankenit.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17131749635164925931441591188031766449063259250091492421966030597664883340392491601406175969172840698568917823036677648796601573586610531296837963361117837824172856278271242784580610399387426108448025592063219889772293655585476741544925227757424085554740914918398377226506627177071078941902577932590213716268115335923869266889341046219954510980822576101642137204844042150743290581623491144381689818832657739523762908655503294326161995634154358880395340428969566613630244499819326258167464128006672016614668473798766778294161726507202666052469008070846034539811605397536694561742245154113334615022967971003940999264547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqua.rz.bankenit.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4c8865228917872c0f77a17499219c8942d4b9a1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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