api.arbeitsagentur.de

- Bundesagentur für Arbeit -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 96:c1:5e:93:66:c4:1f:b5:28:39:de:f3:c8:2c:5e:72 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bundesagentur für Arbeit

Organization: Bundesagentur für Arbeit
Organization unit: Issued through Bundesagentur für Arbeit E-PKI Manager
Organization unit: InstantSSL Pro
Address: Regensburger Str. 104
Postal code: 90478
State / Province: Bayern
Locality: Nürnberg
Country: DE

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 96:c1:5e:93:66:c4:1f:b5:28:39:de:f3:c8:2c:5e:72
Serial Number (int): 200388230886281805719296825728579690098
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: b5:00:6f:95:31:af:2e:3b:26:c3:a2:d8:91:c2:26:44:c1:b6:cc:73
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): d1:83:7a:89:f8:ea:20:4e:80:01:c7:99:d0:e4:cc:02:91:53:14:30
Fingerprint (sha256): 08:3d:9c:b2:97:60:05:5a:4a:60:9b:9e:df:4f:58:29:e4:88:0b:7e:2a:eb:d8:f1:2f:c7:93:9a:e1:ea:54:75

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate api.arbeitsagentur.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.arbeitsagentur.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.arbeitsagentur.de
www.api.arbeitsagentur.de

Other certificates including the domain name arbeitsagentur.de

(limited to 100 certificates)
suche.arbeitsagentur.de
eepv.arbeitsagentur.de
geois.arbeitsagentur.de
kiss.arbeitsagentur.de
zkm1.arbeitsagentur.de
itsmfw.arbeitsagentur.de
ideenwerkstatt.arbeitsagentur.de
ideenwerkstatt.arbeitsagentur.de
erp.arbeitsagentur.de
statistik.arbeitsagentur.de
api.arbeitsagentur.de
webdav.arbeitsagentur.de
www.arbeitsagentur.de
www.pkiint.arbeitsagentur.de
bugzilla.arbeitsagentur.de
con.arbeitsagentur.de
mail1.arbeitsagentur.de
ideenwerkstatt.arbeitsagentur.de
downloadedstae.arbeitsagentur.de
bno.arbeitsagentur.de
bno.arbeitsagentur.de
jobboerse.arbeitsagentur.de
ideenwerkstatt.arbeitsagentur.de
kursnet-online.arbeitsagentur.de
arbeitsmarktmonitor.arbeitsagentur.de
statistik-daten.arbeitsagentur.de
sts-e.arbeitsagentur.de
accountverwaltung.arbeitsagentur.de
finasload.arbeitsagentur.de
ejustiz-test.arbeitsagentur.de
mail.arbeitsagentur.de
formular.arbeitsagentur.de
vburly001-vfz2.vk.arbeitsagentur.de
eid.arbeitsagentur.de
mam.arbeitsagentur.de
sip.arbeitsagentur.de
join.arbeitsagentur.de
jobboerse.arbeitsagentur.de
ideenwerkstatt.arbeitsagentur.de
sip4.arbeitsagentur.de
sso.arbeitsagentur.de
jobboerse.mobil.arbeitsagentur.de
lernnet.arbeitsagentur.de
formular.arbeitsagentur.de
jobboerse.preprod.arbeitsagentur.de
arbeitsmarktmonitor.arbeitsagentur.de
ideenwerkstatt.arbeitsagentur.de
zav.arbeitsagentur.de
terminal.arbeitsagentur.de
pilea.arbeitsagentur.de
myskills.arbeitsagentur.de
jobboerse.arbeitsagentur.de
ben.arbeitsagentur.de
jobboerse.mobil.arbeitsagentur.de
jobboerse.arbeitsagentur.de
mobil.arbeitsagentur.de
pxenpool-pxz1-vfz2.vk.arbeitsagentur.de
entgeltatlas.arbeitsagentur.de
itsmfw.arbeitsagentur.de
jobboerse2.arbeitsagentur.de
upload-zdh.arbeitsagentur.de
ideenwerkstatt.arbeitsagentur.de
cert-upload.arbeitsagentur.de
studiensuche.arbeitsagentur.de
zav.arbeitsagentur.de
anmeldung.arbeitsagentur.de
sip2.arbeitsagentur.de
jobboerse.arbeitsagentur.de
emaw.arbeitsagentur.de
rest.arbeitsagentur.de
bugzilla.arbeitsagentur.de
zkm.arbeitsagentur.de
ica.arbeitsagentur.de
vbwebapp001-vfz1.vk.arbeitsagentur.de
api-con.arbeitsagentur.de
pxenpool-pxz1-vfz1.vk.arbeitsagentur.de
downloadedstae.arbeitsagentur.de
sso2.arbeitsagentur.de
mam.arbeitsagentur.de
statistik-bi-mstr-vi.arbeitsagentur.de
upload-zdh.arbeitsagentur.de
dropsolid.arbeitsagentur.de
mta-sts.arbeitsagentur.de
terminal.arbeitsagentur.de
emaw.arbeitsagentur.de
ideenwerkstatt.arbeitsagentur.de
img.arbeitsagentur.de
sso.arbeitsagentur.de
www.pki.arbeitsagentur.de
controlling-analyse.arbeitsagentur.de
sip3.arbeitsagentur.de
adhoc.arbeitsagentur.de
www.kursnet-online.arbeitsagentur.de
faq.arbeitsagentur.de
mobil.arbeitsagentur.de
berufecheck.arbeitsagentur.de
www.elan.arbeitsagentur.de
lernen.arbeitsagentur.de
terminal.arbeitsagentur.de
kiss.arbeitsagentur.de

Certificate

The complete raw certificate details for api.arbeitsagentur.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHmjCCBoKgAwIBAgIRAJbBXpNmxB+1KDne88gsXnIwDQYJKoZIhvcNAQELBQAw
gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE
AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl
cnZlciBDQTAeFw0xOTAxMzEwMDAwMDBaFw0yMTAyMTYyMzU5NTlaMIIBADELMAkG
A1UEBhMCREUxDjAMBgNVBBETBTkwNDc4MQ8wDQYDVQQIEwZCYXllcm4xEjAQBgNV
BAcMCU7DvHJuYmVyZzEeMBwGA1UECRMVUmVnZW5zYnVyZ2VyIFN0ci4gMTA0MSIw
IAYDVQQKDBlCdW5kZXNhZ2VudHVyIGbDvHIgQXJiZWl0MT8wPQYDVQQLDDZJc3N1
ZWQgdGhyb3VnaCBCdW5kZXNhZ2VudHVyIGbDvHIgQXJiZWl0IEUtUEtJIE1hbmFn
ZXIxFzAVBgNVBAsTDkluc3RhbnRTU0wgUHJvMR4wHAYDVQQDExVhcGkuYXJiZWl0
c2FnZW50dXIuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGl1ng
IdgKXG6bJFT+xjt6ixQCOr5a760hpj2TY6pNay9IiKDz0XaZOMTZ+exf1M0mxbHI
T46BOLz8hFYmzdZ83+/ib6MU8KGAVr/TWzmk22NStj2cNnHo4A8bIOMpr39FGc2y
pxw+n4Hk+sTzi2/LLN2YASPUA4EB4Q6L3zkvOqrfkAf2d2eguhKYK3X7R0MtLtir
FkI6Lxp1vQ6i8Yq+zOib/bSdj5APZkn9FirJltkNw5kAmN6CRIfuNIfxbpStN+bi
akqvG9TbGCLCsTcs8I801hjgH9m/R2ZKZ6azvRpF/SVwIPPTK5ze90JhOGZWAT5m
AzmjFPqfPQZWLbJrAgMBAAGjggN1MIIDcTAfBgNVHSMEGDAWgBQX2dYlJ2f5McJJ
Q9kwNkSMbKlP6zAdBgNVHQ4EFgQUtQBvlTGvLjsmw6LYkcImRMG2zHMwDgYDVR0P
AQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMEoGA1UdIARDMEEwNQYMKwYBBAGyMQECAQMEMCUwIwYIKwYBBQUHAgEW
F2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECAjBaBgNVHR8EUzBRME+g
TaBLhklodHRwOi8vY3JsLnNlY3RpZ28uY29tL1NlY3RpZ29SU0FPcmdhbml6YXRp
b25WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3JsMIGKBggrBgEFBQcBAQR+MHww
VQYIKwYBBQUHMAKGSWh0dHA6Ly9jcnQuc2VjdGlnby5jb20vU2VjdGlnb1JTQU9y
Z2FuaXphdGlvblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcnQwIwYIKwYBBQUH
MAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMDsGA1UdEQQ0MDKCFWFwaS5hcmJl
aXRzYWdlbnR1ci5kZYIZd3d3LmFwaS5hcmJlaXRzYWdlbnR1ci5kZTCCAX4GCisG
AQQB1nkCBAIEggFuBIIBagFoAHcAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZk
No4e0YUAAAFopA0QJgAABAMASDBGAiEA+Cg/3T+EULQzal7xygOHqvFLTfmvtFdb
fL81eg8uLxoCIQDqyNZ1WuLQ7Pz/zU/B4yCN/+U6mM+uW7KJKk90I+mcBQB2AESU
ZS6w7s6vxEAH2Kj+KMDa5oK+2MsxtT/TM5a1toGoAAABaKQNEGkAAAQDAEcwRQIh
AOr0tRsiNLp7BvxkG9nS5HO95v0yEwR3lRhWPLfCIwcbAiBW/dYDDYklYMvNwv2R
gZuYxfDlCuvAB3h/9LvVnfYAkAB1AFzcQ5L+5qtFRLFemtRW5hA3+9X6R9yhc5Sy
Xub2xw7KAAABaKQNEHAAAAQDAEYwRAIgQDPRggA79IeIgvtQTjIAEgGVbLK1rYPL
2zolmx+DL6oCICr6LRWb1660pa8BlbVenqz6sN3kvhQcdSRaYwIyR1VCMA0GCSqG
SIb3DQEBCwUAA4IBAQBbG5yGXNm3v8ghvDSgFKNhmgO0BBeCTUhyytU3HTNW0kE7
CgzA0kMAa+UgE2EbP5wAdpmb/tHjDfHO+Cl05HQFn5loZIviU6rr6bk7t74jp+S5
DnABR3e9zga0dIjqQM6/WMnZZ7QBZIuGRXXhRIXCeIvQfJ2CHVt8mUn8Puek/6h8
DZP4py8otHzRtRgrFSCPTwQ1zVumFa7UpJbxZZwDqHvh0QH9HCtmoYCmAcffnGM4
WUuLpvfab2TBOPG3dOjBwUU9R3hq5Mgsb2YsOQyJ8WJnCzkSmDNkmbyjX87Ejbfg
sdPFuc6wfQxQn9Mm9b6vfivzlqvlP9Anu/Htpgs1
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpdZ4CHYClxumyRU/sY7
eosUAjq+Wu+tIaY9k2OqTWsvSIig89F2mTjE2fnsX9TNJsWxyE+OgTi8/IRWJs3W
fN/v4m+jFPChgFa/01s5pNtjUrY9nDZx6OAPGyDjKa9/RRnNsqccPp+B5PrE84tv
yyzdmAEj1AOBAeEOi985Lzqq35AH9ndnoLoSmCt1+0dDLS7YqxZCOi8adb0OovGK
vszom/20nY+QD2ZJ/RYqyZbZDcOZAJjegkSH7jSH8W6UrTfm4mpKrxvU2xgiwrE3
LPCPNNYY4B/Zv0dmSmems70aRf0lcCDz0yuc3vdCYThmVgE+ZgM5oxT6nz0GVi2y
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 200388230886281805719296825728579690098
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '90478'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nürnberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Regensburger Str. 104'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bundesagentur für Arbeit'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Issued through Bundesagentur für Arbeit E-PKI Manager'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InstantSSL Pro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.arbeitsagentur.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25069818380618755162376121809912171652021664640054608409514570181272691647609037665365866192743818436668980558069927824840219097162557864292653276988269664541720417089773209465426209047528335074185228831096525061189272734574204812920339464730551284251845998563126819896033558617622260593560529914075429481684011031298669918634920047434126838811880450219240578182603393052987345213454123637388974819785735543776050619602596919293409605884912340204032945132014801303961671100656220846387454695603350358728063800162712268334053885974441075995468479898186429397828134830331020285026358328629767979240315174191768649183851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5006f9531af2e3b26c3a2d891c22644c1b6cc73
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.arbeitsagentur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api.arbeitsagentur.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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