connect.darmstadt.ihk.de

- Industrie- und Handelskammer Darmstadt (IHK Darmstadt) -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 03:8f:48:af:62:5a:a4:7f:d5:06:01:e6:f2:c4:f1:7f was issued on by D-Trust GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Industrie- und Handelskammer Darmstadt (IHK Darmstadt)

Company registration number: CSM016922846
Organization: Industrie- und Handelskammer Darmstadt (IHK Darmstadt)
State / Province: Hessen
Locality: Darmstadt
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8f:48:af:62:5a:a4:7f:d5:06:01:e6:f2:c4:f1:7f
Serial Number (int): 4731656666984241998567665043249623423
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: d1:89:7a:fe:dc:9b:39:e5:1d:3a:c2:1a:a7:40:d9:72:9d:18:f4:78
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 41:9d:c4:53:32:fd:2c:53:2e:af:94:dd:4d:a7:e2:9c:84:a5:d4:b9
Fingerprint (sha256): 0d:93:00:43:65:d1:8a:73:4c:1c:ec:80:9c:2c:0d:0a:39:13:3b:61:57:4e:10:b5:fe:f8:21:c8:e6:e0:b1:ee

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate connect.darmstadt.ihk.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for connect.darmstadt.ihk.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

connect.darmstadt.ihk.de
*.connect.darmstadt.ihk.de

Other certificates including the domain name ihk.de

(limited to 100 certificates)
cdn01.blog.ostwestfalen.ihk.de
ihkdigital.services.ihk.de
coburg.ihk.de
webmail.ihk.de
coburg.ihk.de
gemeinsam.niederrhein.ihk.de
bildung2.gfi.ihk.de
www.pruefungen.ostwestfalen.ihk.de
www.weingarten.ihk.de
events.wuerzburg.ihk.de
www.saarland.ihk.de
www.offenbach.ihk.de
ostwestfalen.ihk.de
tixxt.kiel.ihk.de
ostwestfalen.ihk.de
zq-digitalekompetenz.schwaben.ihk.de
vdi.hannover.ihk.de
adrprintsrv.gfi.ihk.de
box.wuerzburg.ihk.de
videokonferenz.ihk.de
unternehmen.gera.ihk.de
www.going-international.ihk.de
tagesspiegel.kiosk.plus
offenbach.ihk.de
profile.ihk.de
www.vergabe.ihk.de
vstdbv3.ihk.de
vpn.heilbronn.ihk.de
seleinfo.ihk.de
videokonferenz.kassel.ihk.de
regensburg.ihk.de
ostwestfalen.ihk.de
magazine.suncoastergroup.com
proxy1.juris.ihk.de
vergabe.ihk.de
evadatenarchiv.ihk.de
ostwestfalen.ihk.de
frankfurt-main.ihk.de
berlin.ihk.de
ostwestfalen.ihk.de
xihkpilotws.gfi.ihk.de
www.hanau.ihk.de
cert.ihk.de
www.services.abnahme.usbdb.ihk.de
gemeinsam.niederrhein.ihk.de
ecofinder.ihk.de
www.unternehmen.darmstadt.ihk.de
*.webmail.ihk.de
*.gfi.ihk.de
webservices.dresden.ihk.de
nas.kiel.ihk.de
cyber.frankfurt-main.ihk.de
webservices.dresden.ihk.de
pao.berlin.ihk.de
coburg.ihk.de
impulsnetzwerk.ihk.de
ihk.de
owi.ostwestfalen.ihk.de
frankfurt-main.ihk.de
sse.cottbus.ihk.de
ausbildung.darmstadt.ihk.de
zq-digitalekompetenz.schwaben.ihk.de
magdeburg.ihk.de
wireless1.ihk.de
www.frankfurt-main.ihk.de
ausgabe.vstdbv3.ihk.de
mainau.wuerzburg.ihk.de
www.pruefungen.ostwestfalen.ihk.de
stats.ostwestfalen.ihk.de
wlan.muenchen.ihk.de
pruefung.ihk.de
*.schwaben.ihk.de
webservices.dresden.ihk.de
unternehmen.gera.ihk.de
muenchen.ihk.de
quickplace.ihk.de
cyber.frankfurt-main.ihk.de
geoinfo.ihk.de
cloud.karlsruhe.ihk.de
ihk-sh.de
bonn.ihk.de
adrprintsrv.gfi.ihk.de
www.aachen.ihk.de
dataoutputservices.gfi.ihk.de
wis.ihk.de
karlsruhe.ihk.de
veranstaltung.mittlerer-niederrhein.ihk.de
connect.darmstadt.ihk.de
ostwestfalen.ihk.de
wm.ihk.de
www.pruefungen.ostwestfalen.ihk.de
proxy1.beck.ihk.de
cert.ihk.de
cottbus.ihk.de
mx01.ihk.de
kiosk.der-kleine-georg.de
www.dresden.ihk.de
ve-register.ihk.de
traveler.konstanz.ihk.de
login3.ihk.de

Certificate

The complete raw certificate details for connect.darmstadt.ihk.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/GeBNTvFMf6atrPjEXE
5BrXVm4aRNL7bHc0tA6x1wK96UUedXXK1k7nbpehZwlPTKIJK8NP3FQiMP2fD7dw
HtBdLvNyE+k3I/YdfvCfTus01IfJNXZxJNxuis4vPyZ1pyiEgkgQ4yRVWeNNJSRE
K23eU2QL2yngdmYHJir2GysqtrDQYufhNAGVE1MNZBDu+ktGowEUHwQ+0S5zTmiE
VfILpLqC5YxMk5UvG16puD2JPEHrbmVExySPuHq2xFNdyinNUIYZ3/BCRcVXA0jp
3MaFH5jTb/ZrPQeNWJuXSvrHx6xbXEyWhmWxbQ872l2OHeHJusfk3jSO+8yDrxj4
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4731656666984241998567665043249623423
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-03 14:41:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-07 14:41:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM016922846'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Darmstadt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Industrie- und Handelskammer Darmstadt (IHK Darmstadt)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'connect.darmstadt.ihk.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29785147579163771081558222419577011642178571644047409520471551179670332708922559375351933422007279603219226038362015683278942621820930144204129412037556330167322282853150669239002108690871312741339978122550304766995443413608059235453267703397021661571804868024297982920057684288583844898041710437543170045394595040908664902397051061151625298567024384211133984712116502264229215125887276465740040553829931517614310941018913136118634392174701414788648838680575520645185685670346883205601726216455489457794714907099418981648733703779913843246079975750518441499362028371890215134943351325997390136319701337814561076082741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1329 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1325 bytes)
							052b0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016cf792c69200000403004730450221008bcbed88228e7bbc5ab7c5dbbd95852be46dd02a7975cb0eae7005630cc8634a022062bec54611fb42fafc9b78157244115612f37d1131d0316af3a958bd053fb051007600eec095ee8d72640f92e3c3b91bc712a3696a097b4b6a1a1438e647b2cbedc5f90000016cf792c5d7000004030047304502200bab39972bfbfb9347a0ec3d9adc275a52b1ab636fcfaa15c6af30fbbfb78b80022100c1b32981d3914e409fc99f71c1a02b4717d05102ab97c39640747bddde944aee007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000016cf792c504000004030047304502210098a9c0b66a9457f7c8598a16aaf5cb8b142d478bef3977e0b17d502082b167d102202fb0daf00574c2471224560d5d6e664c609bedbe46eaa3def616accd1b989ce6007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016cf792c5040000040300473045022100fd10471a50ae212313a0c2c731e6a4857e31be0e77367e44845f96d3753f461702200ae934d251a7507e5013b97ec7644cb671bf5cc7d7939ec5d2f3d9bf91b0665b0077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000016cf792c8e00000040300483046022100c3954df9de7a5149a7689220d4e06118a82b62a27111e25daffadd4997bac6c8022100f732b6dc362ec90ac3d73f8906e822a4260bfa0edfca10f7daf6a983c1df6575007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016cf792c7220000040300483046022100c6ad22acd995238c901a5eefb3d2b02da8dbc57685a847a27a3cc43a327d28150221009eb76b3ea0fa271a584457fdf01b7889d86baba83fea80c5d8053f78a8e5c7100076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000016cf792c971000004030047304502206dc773ceae9b1e4ef696a7b4dc1e3a77688b37a14f210a660711924f72610dc80221008b628287ef0c8a36946de207d582261228a2f6935679e03c57d63ed7371a4405007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016cf792ca9400000403004730450221009249990ccfa4930d653310d5c6b2436ddbbe129249cfd3bd58442829f493d63002204d2795f09cc21303ca547eca91ef45aa9f90135d6eba093aa3cd35a46d57c47a0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016cf792cb6f00000403004830460221008b01cc75ee1dbc78b3efb1e8c3616a0acc5d6d0403be7dc7975b088462f6943a022100fb2f3fed8914f7aa38d6f9d64ca2daa2f2da32cff660e620995da9e89278ef000077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000016cf792ceea0000040300483046022100f411f4593a33d1ae9863360a4c485a112eaab724eae0615ef845a4f597c9c603022100cb5f27f8fd7f2b33ac75d91ff3cd7838a444fd5bbeef4facb5cda987fe1cbf780075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016cf792cc5900000403004630440220603562daaef55ca3eddac5a19654314f215308fac90be95fe6015715837c2a0c02200ae564df799b867749b2c3c83c863023484b51e0193303206295e64d5f99f25b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.darmstadt.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connect.darmstadt.ihk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1897afedc9b39e51d3ac21aa740d9729d18f478
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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