portal.felix-schoeller.com

- Felix Schoeller Service -

Issued by TC TrustCenter Class 2 L1 CA XI

About this certificate

This digital certificate with serial number 12:43:00:01:00:02:68:64:e6:77:dc:66:f3:b0 was issued on by TC TrustCenter GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [ContentCommitment DataEncipherment DigitalSignature KeyEncipherment] (00001111) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)

Felix Schoeller Service

Organization: Felix Schoeller Service
Organization unit: SAP Trust Community
Organization unit: SAP Web AS
Organization unit: I1234567890-MyCompany
Locality: Osnabrueck
Country: DE

TC TrustCenter GmbH

Organization: TC TrustCenter GmbH
Organization unit: TC TrustCenter Class 2 L1 CA
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 12:43:00:01:00:02:68:64:e6:77:dc:66:f3:b0
Serial Number (int): 370391660963156013743274650432432
Serial Number lenght: 109 bits, 14 octets

SubjectKeyId: 9a:33:5d:73:64:50:5f:26:66:7f:2c:80:20:81:f1:28:2c:de:55:b2
AuthorityKeyId: 66:b3:c6:91:f9:b6:cd:b2:5f:9a:37:56:46:0c:e2:6b:d5:b1:7c:b4

Fingerprint (sha1): 5a:e1:ff:14:91:19:06:47:0b:e9:a0:b2:61:10:21:ed:71:8f:ab:4f
Fingerprint (sha256): 07:22:9c:5c:c1:16:37:f8:72:51:43:b4:71:1e:22:62:00:b7:0e:03:83:21:43:36:69:3f:66:28:db:06:08:74

Issuing Certificate URL: http://www.trustcenter.de/certservices/cacerts/tc_class2_L1_CA_XI.crt

Revocation information

OCSP Server: http://ocsp.xi.tcclass2-ii.trustcenter.de
CRL Distribution Point: http://crl.xi.tcclass2-ii.trustcenter.de/crl/v2/tc_class2_L1_CA_XI.crl
CRL Distribution Point: ldap://www.trustcenter.de/CN=TC%20TrustCenter%20Class%202%20L1%20CA%20XI,O=TC%20TrustCenter,OU=cacerts,DC=trustcenter,DC=de?certificateRevocationList?base?

Check the revocation status for certificate portal.felix-schoeller.com

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.felix-schoeller.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name felix-schoeller.com

(limited to 100 certificates)
logon.felix-schoeller.com
erp42.felix-schoeller.com
www.felix-schoeller.com
portal.felix-schoeller.com
erp.felix-schoeller.com
sslvpn.felix-schoeller.com
experience-shop.felix-schoeller.com
karriere.felix-schoeller.com
portal.felix-schoeller.com
karriere.felix-schoeller.com
sslvpn.felix-schoeller.com
crmlivereporting.felix-schoeller.com
mobile.felix-schoeller.com
sip.felix-schoeller.com
www.felix-schoeller.com
felix-schoeller.com
experience-shop.felix-schoeller.com
sip.felix-schoeller.com
karriere.felix-schoeller.com
felix-schoeller.com
karriere.felix-schoeller.com
www.felix-schoeller.com
www.felix-schoeller.com
webportal.felix-schoeller.com
apps.felix-schoeller.com
www.felix-schoeller.com
simplifier.felix-schoeller.com
apps.felix-schoeller.com
mobile.felix-schoeller.com
vpn.felix-schoeller.com
www.felix-schoeller.com
edi.felix-schoeller.com
*.felix-schoeller.com
karriere.felix-schoeller.com
www.felix-schoeller.com
shop.felix-schoeller.com
karriere.felix-schoeller.com
www.felix-schoeller.com
simplifier-test.felix-schoeller.com
*.felix-schoeller.com
felix-schoeller.com
edi-test.felix-schoeller.com
shop.felix-schoeller.com
webportal.felix-schoeller.com
erp.felix-schoeller.com
coa.felix-schoeller.com
mobile.felix-schoeller.com
www.felix-schoeller.com
mobile.felix-schoeller.com
www.felix-schoeller.com
karriere.felix-schoeller.com
integration.ideas.felix-schoeller.com
vpn.felix-schoeller.com
karriere.felix-schoeller.com
secgateway.felix-schoeller.com
www.felix-schoeller.com
apps.felix-schoeller.com
karriere.felix-schoeller.com
erp.felix-schoeller.com
erp.felix-schoeller.com
felix-schoeller.com
portal.felix-schoeller.com
www.felix-schoeller.com
dekor.felix-schoeller.com
logon.felix-schoeller.com
shop.felix-schoeller.com
felix-schoeller.com
karriere.felix-schoeller.com
portal.felix-schoeller.com
karriere.felix-schoeller.com
connector.felix-schoeller.com
ideas.felix-schoeller.com
felix-schoeller.com
crmlivereporting.felix-schoeller.com
portal.felix-schoeller.com
www.felix-schoeller.com
dekor.felix-schoeller.com
webportal.felix-schoeller.com
ideas.felix-schoeller.com
www.felix-schoeller.com
*.felix-schoeller.com
karriere.felix-schoeller.com
sip.felix-schoeller.com
sslvpn.felix-schoeller.com
karriere.felix-schoeller.com
bewerbung.felix-schoeller.com
sslvpn.felix-schoeller.com
www.felix-schoeller.com
*.felix-schoeller.com
*.felix-schoeller.com
sip.felix-schoeller.com
vpn.felix-schoeller.com
karriere.felix-schoeller.com
sip.felix-schoeller.com
mobile.felix-schoeller.com
sslvpn.felix-schoeller.com
simplifier-entwicklung.felix-schoeller.com

Certificate

The complete raw certificate details for portal.felix-schoeller.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGPTCCBSWgAwIBAgIOEkMAAQACaGTmd9xm87AwDQYJKoZIhvcNAQEFBQAwfDEL
MAkGA1UEBhMCREUxHDAaBgNVBAoTE1RDIFRydXN0Q2VudGVyIEdtYkgxJTAjBgNV
BAsTHFRDIFRydXN0Q2VudGVyIENsYXNzIDIgTDEgQ0ExKDAmBgNVBAMTH1RDIFRy
dXN0Q2VudGVyIENsYXNzIDIgTDEgQ0EgWEkwHhcNMTExMjIzMTQxODA1WhcNMTMw
MTEyMTQxODA1WjCBvDELMAkGA1UEBhMCREUxEzARBgNVBAcTCk9zbmFicnVlY2sx
IDAeBgNVBAoTF0ZlbGl4IFNjaG9lbGxlciBTZXJ2aWNlMRwwGgYDVQQLExNTQVAg
VHJ1c3QgQ29tbXVuaXR5MRMwEQYDVQQLEwpTQVAgV2ViIEFTMR4wHAYDVQQLExVJ
MTIzNDU2Nzg5MC1NeUNvbXBhbnkxIzAhBgNVBAMTGnBvcnRhbC5mZWxpeC1zY2hv
ZWxsZXIuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/4G9tqEZ
XTqk4Qgw6y60XPxx0IaqKWL8uZLallNce8kM2ofmVWBT+TWX9dJHnqvvKQN1EBRc
tyNfZaIyXtVzpYbJy+0Q30Da1tkfARHcd3mkOD0+Gcrj6PpRqwp6MZ9DgFkZPOG0
IYjnR4dgApd7ZEkbasB/lE7VTlnOqboxzFbDKJuo2V5kbtjKjbPeQf4RMEo7ITtd
Gg4gSEu/yUJzPdEbDTCVl11Ht7G8n/3pfbU2V9ALOj39AWqeIrQibG0sNHd/nUNj
aINmOXOlwRF73C48bYVWjV4LVkxBguHFYv7H+7sxdFSeM08R85RucWbdlJc1LKpn
dJesDKXyDPtZnwIDAQABo4ICejCCAnYwgZoGCCsGAQUFBwEBBIGNMIGKMFEGCCsG
AQUFBzAChkVodHRwOi8vd3d3LnRydXN0Y2VudGVyLmRlL2NlcnRzZXJ2aWNlcy9j
YWNlcnRzL3RjX2NsYXNzMl9MMV9DQV9YSS5jcnQwNQYIKwYBBQUHMAGGKWh0dHA6
Ly9vY3NwLnhpLnRjY2xhc3MyLWlpLnRydXN0Y2VudGVyLmRlMB8GA1UdIwQYMBaA
FGazxpH5ts2yX5o3VkYM4mvVsXy0MAwGA1UdEwEB/wQCMAAwSgYDVR0gBEMwQTA/
BgkqghQALAEBAQIwMjAwBggrBgEFBQcCARYkaHR0cDovL3d3dy50cnVzdGNlbnRl
ci5kZS9ndWlkZWxpbmVzMA4GA1UdDwEB/wQEAwIE8DAdBgNVHQ4EFgQUmjNdc2RQ
XyZmfyyAIIHxKCzeVbIwgfoGA1UdHwSB8jCB7zCB7KCB6aCB5oZGaHR0cDovL2Ny
bC54aS50Y2NsYXNzMi1paS50cnVzdGNlbnRlci5kZS9jcmwvdjIvdGNfY2xhc3My
X0wxX0NBX1hJLmNybIaBm2xkYXA6Ly93d3cudHJ1c3RjZW50ZXIuZGUvQ049VEMl
MjBUcnVzdENlbnRlciUyMENsYXNzJTIwMiUyMEwxJTIwQ0ElMjBYSSxPPVRDJTIw
VHJ1c3RDZW50ZXIsT1U9Y2FjZXJ0cyxEQz10cnVzdGNlbnRlcixEQz1kZT9jZXJ0
aWZpY2F0ZVJldm9jYXRpb25MaXN0P2Jhc2U/MB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjARBglghkgBhvhCAQEEBAMCBsAwDQYJKoZIhvcNAQEFBQADggEB
AGUDrOHomaqqHcTtAkXHg832Qwy2+6Sgas1akC1XhnJ9pBPWX4Yg6j0FYDE4lRU2
jKBN32XhRBR/6rxkdPyKKDByVmhI64yrXW59VlnqwT69KdyD47/THRgADtTwaJYS
KYJaY4lNjDdaESai6UGr7CY0KovVfAkFAqhS4zzMByAiXDmwFh1IB9O2wQmIu/fF
IZgpjioicVfuYkAxu4fPcMHMU+S2LJG28XdaFSTdJcyaIchitin6fVdmdvBW5fdN
+Z5C5DDc6tb9Yv/BC+K+zSNAf7cEbbxyDj14NZlPX57B4qzCjBQ1Om6dXYOL7LWD
1B5asgueDy2BhjGjx0Qo/VY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/4G9tqEZXTqk4Qgw6y60
XPxx0IaqKWL8uZLallNce8kM2ofmVWBT+TWX9dJHnqvvKQN1EBRctyNfZaIyXtVz
pYbJy+0Q30Da1tkfARHcd3mkOD0+Gcrj6PpRqwp6MZ9DgFkZPOG0IYjnR4dgApd7
ZEkbasB/lE7VTlnOqboxzFbDKJuo2V5kbtjKjbPeQf4RMEo7ITtdGg4gSEu/yUJz
PdEbDTCVl11Ht7G8n/3pfbU2V9ALOj39AWqeIrQibG0sNHd/nUNjaINmOXOlwRF7
3C48bYVWjV4LVkxBguHFYv7H+7sxdFSeM08R85RucWbdlJc1LKpndJesDKXyDPtZ
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370391660963156013743274650432432
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter Class 2 L1 CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter Class 2 L1 CA XI'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-12-23 14:18:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-01-12 14:18:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Osnabrueck'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Felix Schoeller Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SAP Trust Community'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SAP Web AS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'I1234567890-MyCompany'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.felix-schoeller.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 32254745471433735332577110225053632237138747931614754632290264071590947029462808807275368554127740888138390759515032928710686450004926107426037091131199899541662862080110331623894038476033647292733494137674372742271589362401315866332040271268166552088120237848536560659523545291254420832563938638912415197853868480085788519524079987838631514428832671995967610894112807339024849938801140418601237004767528310459104950977010455466371563172406898728493407815306640542776643470649642545529967972526514655935723220972702378197758065406652888401934726978723907135302104829594066530187596783518244595470198388755468843178399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.trustcenter.de/certservices/cacerts/tc_class2_L1_CA_XI.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.xi.tcclass2-ii.trustcenter.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66b3c691f9b6cdb25f9a3756460ce26bd5b17cb4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.276.0.44.1.1.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.trustcenter.de/guidelines'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a335d7364505f26667f2c802081f1282cde55b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.xi.tcclass2-ii.trustcenter.de/crl/v2/tc_class2_L1_CA_XI.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://www.trustcenter.de/CN=TC%20TrustCenter%20Class%202%20L1%20CA%20XI,O=TC%20TrustCenter,OU=cacerts,DC=trustcenter,DC=de?certificateRevocationList?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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