mail.huk.de

- HUK-COBURG Haftpflicht-Unterstuetzungs-Kasse Deutschlands a.G. -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 66:e4:d7:2d:a8:0b:0f:ce:08:b9:84:ed:ea:cb:c6:d5 was issued on by D-Trust GmbH.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

HUK-COBURG Haftpflicht-Unterstuetzungs-Kasse Deutschlands a.G.

Company registration number: CSM040012995
Organization: HUK-COBURG Haftpflicht-Unterstuetzungs-Kasse Deutschlands a.G.
State / Province: Bayern
Locality: Coburg
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): 66:e4:d7:2d:a8:0b:0f:ce:08:b9:84:ed:ea:cb:c6:d5
Serial Number (int): 136769463589146312456686548156068644565
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4d:2b:a4:97:a7:2f:c1:af:d5:ae:82:53:c5:42:66:76:b1:5c:49:ac
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): ad:b2:f6:06:fe:fd:7a:3b:8b:fb:c7:ce:09:a5:cb:d1:1b:89:5f:46
Fingerprint (sha256): 0f:00:a9:8a:dd:ba:1d:b0:61:b9:c4:31:21:44:aa:dc:79:17:8f:f1:eb:3a:f1:54:3f:96:40:cf:2e:e3:4f:f2

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate mail.huk.de

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.huk.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.huk.de
oa.huk.de
mail.hukvm.de
mail.hukras.de
mail.vrk-ad.de
oa2.huk.de
mail2.hukvm.de
mail2.hukras.de
mail2.vrk-ad.de
mail2.huk.de
autodiscover.hukvm.de
autodiscover.hukras.de
autodiscover.dmz.huk.de
autodiscover.vrk-ad.de
vtpews.huk.de
vtpews2.huk.de

Other certificates including the domain name huk.de

(limited to 100 certificates)
huk.de
appconnect.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
dev.bot-tas.huk.de
ci-euw1.ireland.delivery.aimatch.net
vtpcert.huk.de
ci-euw1.ireland.delivery.aimatch.net
vtppin2.huk.de
auth1test.huk.de
mail.huk.de
ip.huk.de
partner3t.huk.de
vtpcert.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
vtp.huk.de
oa.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
appconnect1.huk.de
partner3.huk.de
ci-euw1.ireland.delivery.aimatch.net
api1.huk.de
vtppin2.huk.de
auth2.huk.de
icf.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
www.cagt.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
officeonline.huk.de
oa.huk.de
ci-euw1.ireland.delivery.aimatch.net
somni.huk.de
dev.bot-telematik.huk.de
*.webcon1.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
api1.huk.de
vpngw.huk-coburg.de
auth1.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
dev.bot-tas.huk.de
ci-euw1.ireland.delivery.aimatch.net
ip.huk.de
vtpcert.huk.de
api.huk.de
auth1.huk.de
ci-euw1.ireland.delivery.aimatch.net
csr.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
oa.huk.de
*.webcon1.huk.de
oa.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
vtpservice2.huk.de
ci-euw1.ireland.delivery.aimatch.net
appconnect.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
www.huk.de
ci-euw1.ireland.delivery.aimatch.net
somni.huk.de
ci-euw1.ireland.delivery.aimatch.net
auth1.huk.de
mail.huk.de
ci-euw1.ireland.delivery.aimatch.net
prod.bot-tas.huk.de
icftest.huk.de
partner3t.huk.de
ci-euw1.ireland.delivery.aimatch.net

Certificate

The complete raw certificate details for mail.huk.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIkzCCB3ugAwIBAgIQZuTXLagLD84IuYTt6svG1TANBgkqhkiG9w0BAQsFADBM
MQswCQYDVQQGEwJERTEVMBMGA1UECgwMRC1UcnVzdCBHbWJIMSYwJAYDVQQDDB1E
LVRSVVNUIFNTTCBDbGFzcyAzIENBIDEgMjAwOTAeFw0yMzEyMjExNDI1NThaFw0y
NDEyMjQxNDI1NThaMIGlMRUwEwYDVQQFEwxDU00wNDAwMTI5OTUxCzAJBgNVBAYT
AkRFMQ8wDQYDVQQIEwZCYXllcm4xDzANBgNVBAcTBkNvYnVyZzFHMEUGA1UEChM+
SFVLLUNPQlVSRyBIYWZ0cGZsaWNodC1VbnRlcnN0dWV0enVuZ3MtS2Fzc2UgRGV1
dHNjaGxhbmRzIGEuRy4xFDASBgNVBAMTC21haWwuaHVrLmRlMIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEA4VWQQKc5mqq7OikdNhlEYMTM0LgrvHHmT1PC
K/kVn5DsBNH+aXy0nnTFZSogj8p8c2N43ol3sO2BmMSKxMigRqI8ZgqVgM6Wf8tB
Gw264yZyOe736W3D4jSVcJ1+eGp5utyaDikDHVMWKvbsgtJb1KgegVGniJDthWnJ
c34cYhxyu8rbYkvb/XAw5zx9xfveMoDFqxYD+lPsLGSqn7xVbOa3do/J72ax2IEb
KZBTHUWthPFffbzKhARGQw6U8hzHthu4ri+fKL6YjDYSkwIeZ2mlwMuAaxRgFz7t
XXIIqelZ13ozZ+nfki6UmqKP6lHGQa8eTfynJDKpYdXV435c2Hox2m/hu0A9XuLO
Qjrs8v3EcSyClucfLgnD+QBXXVSU8gGPClj8kQ+Q7BqNS5U+7BgByvzxyXUAfLJ/
2Xi3pLU8OQ1LC77SdMbYR/RCb6aqUTssMoEBJtazUZXS9WkOHGSRIlaYyPPPrQ9H
Ymu6QcmVEWV+Pp6POMKy+j+T5x+JAA06xAt9N9fj7Dx4oKUGrMfG5pgWTyF2fqU3
eUjng/+aTcFHeMSU6p73woxvyaJAlsrrE/TYLqptcLckGAFZgpkyqPfWQeR8Bs8J
J0JkFuWQAqRBuvhRejqJMoV6gSJtJ8eIf3JYUeK/7Ht2KaaCJ8mqdvLkICHHfD90
UMiNE3UCAwEAAaOCBBUwggQRMIIBFgYIKwYBBQUHAQEEggEIMIIBBDAzBggrBgEF
BQcwAYYnaHR0cDovL3NzbC1jMy1jYTEtMjAwOS5vY3NwLmQtdHJ1c3QubmV0MEwG
CCsGAQUFBzAChkBodHRwOi8vd3d3LmQtdHJ1c3QubmV0L2NnaS1iaW4vRC1UUlVT
VF9TU0xfQ2xhc3NfM19DQV8xXzIwMDkuY3J0MH8GCCsGAQUFBzAChnNsZGFwOi8v
ZGlyZWN0b3J5LmQtdHJ1c3QubmV0L0NOPUQtVFJVU1QlMjBTU0wlMjBDbGFzcyUy
MDMlMjBDQSUyMDElMjAyMDA5LE89RC1UcnVzdCUyMEdtYkgsQz1ERT9jQUNlcnRp
ZmljYXRlP2Jhc2U/MHkGA1UdIARyMHAwCAYGZ4EMAQICMAgGBgQAj3oBBzBaBgsr
BgEEAaU0AoFIATBLMEkGCCsGAQUFBwIBFj1odHRwOi8vd3d3LmQtdHJ1c3QubmV0
L2ludGVybmV0L2ZpbGVzL0QtVFJVU1RfQ1NNX1BLSV9DUFMucGRmMBMGCisGAQQB
1nkCBAMBAf8EAgUAMDMGA1UdEgQsMCqBEGluZm9AZC10cnVzdC5uZXSGFmh0dHA6
Ly93d3cuZC10cnVzdC5uZXQwgZ0GA1UdHwSBlTCBkjCBj6CBjKCBiYZAaHR0cDov
L2NybC5kLXRydXN0Lm5ldC9jcmwvZC10cnVzdF9zc2xfY2xhc3NfM19jYV8xXzIw
MDkuZGVyLmNybIZFaHR0cDovL2Nkbi5kLXRydXN0LWNsb3VkY3JsLm5ldC9jcmwv
ZC10cnVzdF9zc2xfY2xhc3NfM19jYV8xXzIwMDkuY3JsMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjCCAR8GA1UdEQSCARYwggESggttYWlsLmh1ay5kZYIJ
b2EuaHVrLmRlgg1tYWlsLmh1a3ZtLmRlgg5tYWlsLmh1a3Jhcy5kZYIObWFpbC52
cmstYWQuZGWCCm9hMi5odWsuZGWCDm1haWwyLmh1a3ZtLmRlgg9tYWlsMi5odWty
YXMuZGWCD21haWwyLnZyay1hZC5kZYIMbWFpbDIuaHVrLmRlghVhdXRvZGlzY292
ZXIuaHVrdm0uZGWCFmF1dG9kaXNjb3Zlci5odWtyYXMuZGWCF2F1dG9kaXNjb3Zl
ci5kbXouaHVrLmRlghZhdXRvZGlzY292ZXIudnJrLWFkLmRlgg12dHBld3MuaHVr
LmRlgg52dHBld3MyLmh1ay5kZTAfBgNVHSMEGDAWgBRQGTKUmsS1BE1W0MCDIdU1
VbCxejAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0OBBYEFE0rpJenL8Gv1a6CU8VCZnax
XEmsMA0GCSqGSIb3DQEBCwUAA4IBAQAxb1RKwFV+KIuSslsTbFJXDjRMGlPpsRaG
spYDrD0gS2h3R7sd++nkDGTXOtQwmsN07WYJzhmLtG9+SMfgR4YYfM3+Lbi1JObS
UMh/LJomPf7O7naILq/mxx6vVxz68KEAKnhvdBLSNBSTHksqZJD7vNQyhbNb8PBM
b+vQkmaRsL1MW9KBlXyzusbXGC3gfUT82SlPpTmXWY1nfrufQ9w3OIgbuc1hPgix
3VdlWY2aFw+SgZJEq2C3kgG31z+Wy0Z3p0C7mUNZIh1tABYjoM40m7CHvrk/ftY7
DIKmUSwKOZhUD82kGylTyRW8B9JPqDgqNMU2nMU5NzLy3cK912oK
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 136769463589146312456686548156068644565
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 14:25:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-24 14:25:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM040012995'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Coburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HUK-COBURG Haftpflicht-Unterstuetzungs-Kasse Deutschlands a.G.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.huk.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 919283464407109728012889954093668443278146392757448420762827008582466617328509166595345850045325920965579180059314096735909484582847377086740865830244699503618199185437034032499889216280929878069119099166123093902184532026551526598852260241975561488038158393598327277291720951187390313113228274513908784769064530710116584723052586986125824334401213773859313295881960735548955799595957097126957005179959424809681860436516235993122661645505544877142077065681291979977309636449642133060096152711399617367441340284343163209378951771657743779325451180581348498895625693134302659091658354706729229353652822460300840627935017998573756032382949469029354248624315077473610263879741779718293948096163053224776282453147370744707889876308403457141928793810991468575082049641359514916428176562643381889516121614945281170767409975310931081905917062028093826454641745371674003428683733678049488040363869037127616380770057968393291066683262454680442501112860831391672735821206397103783659686431812448666139661022576642564478373026413058888828710668083203288455501605822205512436975050853596569171961804865853799576779640617071825272086786429183828451908152718206254804187617511033104076640311904577860536892622394351274429356766048996556649282737013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (278 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.huk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oa.huk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hukvm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hukras.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vrk-ad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oa2.huk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail2.hukvm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail2.hukras.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail2.vrk-ad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail2.huk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hukvm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hukras.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.dmz.huk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.vrk-ad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtpews.huk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtpews2.huk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d2ba497a72fc1afd5ae8253c5426676b15c49ac
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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