api.dso-ekad-test01.rz.bankenit.de

- Atruvia AG -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 49:eb:1b:1d:0e:7f:85:91:e6:fb:ca:00:e1:d8:0e:e0 was issued on by D-Trust GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Atruvia AG

Company registration number: CSM032124958
Organization: Atruvia AG
State / Province: Baden-Württemberg
Locality: Karlsruhe
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 49:eb:1b:1d:0e:7f:85:91:e6:fb:ca:00:e1:d8:0e:e0
Serial Number (int): 98254383381217509206203938997439827680
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: b2:df:7d:90:32:7a:08:51:24:d9:7c:cc:8a:33:79:cb:f3:eb:5a:84
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): c5:ee:01:7a:ef:5a:17:6c:2d:d0:0e:69:6b:d2:b7:bc:49:78:72:27
Fingerprint (sha256): 08:6c:55:aa:04:77:98:7f:50:29:7f:6d:f3:fc:a5:70:7d:4d:54:9a:b3:e1:e3:bd:da:b3:5b:bc:e2:cb:92:24

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate api.dso-ekad-test01.rz.bankenit.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.dso-ekad-test01.rz.bankenit.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.dso-ekad-test01.rz.bankenit.de

Other certificates including the domain name bankenit.de

(limited to 100 certificates)
*.8643.sys3.tb.rz.bankenit.de
mobilesync-inte.rz.bankenit.de
*.i0275.pb-fcsi.rz.bankenit.de
*.i0824.pb-fcsi.rz.bankenit.de
*.I1001.PB-FCSI.RZ.BANKENIT.DE
*.apps.caas-ekad-test02.rz.bankenit.de
*.wart3.tb.rz.bankenit.de
*.i8656.sys3.tb.rz.bankenit.de
brs-prod3.rz.bankenit.de
giti.rz.bankenit.de
*.i0764.pb-fcsi.rz.bankenit.de
INTE-ORCHESTRA.BANKENIT.DE
*.i4169.pb-fcsi.rz.bankenit.de
*.i0206.pb-fcsi.rz.bankenit.de
*.I9501.PB.RZ.BANKENIT.DE
*.i0209.pb-fcsi.rz.bankenit.de
*.I0948.PB-FCSI.RZ.BANKENIT.DE
*.i0080.pb-fcsi.rz.bankenit.de
*.i2105.pb-fcsi.rz.bankenit.de
SEUDB-DEV.RZ.BANKENIT.DE
trovodev.rz.bankenit.de
*.I0164.PB-FCSI.RZ.BANKENIT.DE
*.i1339.pb-fcsi.rz.bankenit.de
awbt-inte.pka.bankenit.de
GUESTMANAGER-LAB.PKA.BANKENIT.DE
*.I0371.PB-FCSI.RZ.BANKENIT.DE
*.I8204.ZUTU3.TB.RZ.BANKENIT.DE
api.dzb-vmsd-test01.rz.bankenit.de
*.i0066.pb-fcsi.rz.bankenit.de
webdav-uit-a.fiducia.de
*.I9528.PB-FCSI.RZ.BANKENIT.DE
*.i0201.pb-fcsi.rz.bankenit.de
*.i0142.pb-fcsi.rz.bankenit.de
*.i2316.pb-fcsi.rz.bankenit.de
*.i0784.pb-fcsi.rz.bankenit.de
*.I9501.PB-FCSI.RZ.BANKENIT.DE
*.i9523.pb-fcsi.rz.bankenit.de
*.i8638.wart3.tb.rz.bankenit.de
*.I5841.PB-FCSI.RZ.BANKENIT.DE
*.I6244.PB-FCSI.RZ.BANKENIT.DE
*.I8638.wart1.tb.rz.bankenit.de
*.i3206.pb-fcsi.rz.bankenit.de
sonar-dev.rz.bankenit.de
*.i0852.pb-fcsi.rz.bankenit.de
*.i0789.pb-fcsi.rz.bankenit.de
*.tp-mesh.apps.caas-zmsd-prod01.rz.bankenit.de
kad-caas1.rz.bankenit.de
brs-prod-u.rz.bankenit.de
*.I7609.PB-FCSI.RZ.BANKENIT.DE
api.egp-ekad-vp01.rz.bankenit.de
*.ext-imsd-caas1.rz.bankenit.de
*.i0671.pb-fcsi.rz.bankenit.de
*.i0372.pb-fcsi.rz.bankenit.de
*.i3669.pb-fcsi.rz.bankenit.de
*.i1871.pb-fcsi.rz.bankenit.de
www.meine-bankid-messe.rz.bankenit.de
ipoprod-dzb.rz.bankenit.de
*.i3625.pb-fcsi.rz.bankenit.de
*.i1871.pb-fcsi.rz.bankenit.de
*.i1593.pb-fcsi.rz.bankenit.de
*.i0524.pb-fcsi.rz.bankenit.de
*.i1634.pb-fcsi.rz.bankenit.de
tph-wartung.rz.bankenit.de
*.i0455.pb-fcsi.rz.bankenit.de
*.i0968.pb-fcsi.rz.bankenit.de
*.author-s.webcenter.rz.bankenit.de
*.i0221.pb-fcsi.rz.bankenit.de
*.i1769.pb-fcsi.rz.bankenit.de
*.i1156.pb-fcsi.rz.bankenit.de
ide.rz.bankenit.de
*.i0217.pb-fcsi.rz.bankenit.de
*.i0340.pb-fcsi.rz.bankenit.de
fus.rz.bankenit.de
*.i0257.pb-fcsi.rz.bankenit.de
*.I9515.PB-FCSI.RZ.BANKENIT.DE
*.i1609.pb-fcsi.rz.bankenit.de
*.i5170.pb-fcsi.rz.bankenit.de
*.apps.ext-caas-ekad-vp02.rz.bankenit.de
*.i1881.pb-fcsi.rz.bankenit.de
aqua.rz.bankenit.de
wbc.rz.bankenit.de
*.I0223.PB-FCSI.RZ.BANKENIT.DE
*.i0071.pb-fcsi.rz.bankenit.de
*.ext-lab-ekad-caas1.rz.bankenit.de
git.rz.bankenit.de
api.caas-imsd-prod01.rz.bankenit.de
xmc-nac03.netz.fiducia.de
codesearch.rz.bankenit.de
*.i1848.pb-fcsi.rz.bankenit.de
*.i1722.pb-fcsi.rz.bankenit.de
sonargraphlic-dev.rz.bankenIT.de
*.i0094.pb-fcsi.rz.bankenit.de
*.i0725.pb-fcsi.rz.bankenit.de
api.dso-ekad-test01.rz.bankenit.de
*.i0652.pb-fcsi.rz.bankenit.de
*.i0080.pb-fcsi.rz.bankenit.de
SONARGRAPHLIC-QA.RZ.BANKENIT.DE
banken-p03-prod.analysen.rz.bankenit.de
*.i0616.pb-fcsi.rz.bankenit.de
*.i1983.pb-fcsi.rz.bankenit.de

Certificate

The complete raw certificate details for api.dso-ekad-test01.rz.bankenit.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/qygtGs9sE+dgFEQbVY
kZ1YBNN5M9NvYQJamMoJwHSixRbtLRNGYKGNehhE01nXbOmIj6ZIwV4cRGyba2Zl
PMnhU+R95SemPr3NziwzwDKdnMq1laOKCPsn4ungwIXVWrlALVHpNJp8cITQKedu
zaz11N+fdiT0FbKdaCmmTIqDpLNCGuhrWz9TisuJLQY77hAaR0SYKVRLtF3C10Dg
LwKJqxPVwXPUGU0pF4J+vey2oDXCq0uDUqCXBr5fnWXVRSoQ3aB8WQdTQrblBYi4
OMI+uTKePxAoas3/t3GTluqZKhgbuAg1VWXLUArcXMfpkG/1/bnY+t0rl98QPbV+
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 98254383381217509206203938997439827680
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-07 14:30:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-10 14:30:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM032124958'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atruvia AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.dso-ekad-test01.rz.bankenit.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23225233259188314741512913708652079126247657381101729574322401135107664137855179988494799711723600411141807999748401247718834462840805642427228972265418238671893071572379123700083747513835145454997696872536103774656306217994186357203407729993834351829387216285317683639632498255860113034216438375344007190882834121981874986978062904116237333637860658994045913623278119968651847465072946058250219398460349503052421486950298420668982372403115750720107172008600673169902422507908873964133551029592252979185262438862027347364235962936928572123289077007610255900225215803288621942532839187962660226067738250083428661034647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.dso-ekad-test01.rz.bankenit.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b2df7d90327a085124d97ccc8a3379cbf3eb5a84
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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