*.l1.web.fiducia.de

- Atruvia AG -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 78:14:6b:b6:8a:97:60:cb:16:5d:cb:39:a6:6a:74:4b was issued on by D-Trust GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Atruvia AG

Company registration number: CSM029825613
Organization: Atruvia AG
State / Province: Baden-Wuerttemberg
Locality: Karlsruhe
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 78:14:6b:b6:8a:97:60:cb:16:5d:cb:39:a6:6a:74:4b
Serial Number (int): 159613390111605705873462760169626301515
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 52:e5:c0:1b:79:7b:4c:18:7f:14:e7:8e:5b:97:13:b7:2c:d5:a4:a1
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): dc:2f:51:1f:d6:8f:27:81:af:2a:98:52:9a:57:68:17:06:56:e0:01
Fingerprint (sha256): 0f:3a:55:c7:d3:5f:5d:87:18:5a:2d:e9:f9:30:16:a8:a4:6b:25:e3:e3:3b:15:b0:69:36:54:1d:9f:4c:b3:24

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate *.l1.web.fiducia.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.l1.web.fiducia.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.l1.web.fiducia.de

Other certificates including the domain name fiducia.de

(limited to 100 certificates)
jprint31-z.brz.fiducia.de
webcenter-publish-01g.fiducia.de
finanzportal.fiducia.de
oapimgbrs024.brz.fiducia.de
fiducia-direkt.de
ZIS4.NOC.FIDUCIA.DE
webcenter-publish-01h.fiducia.de

vr-bankingapp-riat.web.fiducia.de
jprint48-riat-e.brz.fiducia.de
agreetouch.fiducia.de
SEUDB-DEV.RZ.BANKENIT.DE
pegasus.peras.fiducia.de
agreesb.fiducia.de
fints-test.atruvia.de
webdav-uit-a.fiducia.de
fidwdpa40.fid.sap.fiducia.de
giropay-admin.fiducia.de
genogoogle-riat.brz.fiducia.de
sonar-dev.rz.bankenit.de
ftgwp10.fiducia.de
pilot.vr-infoforum.fiducia.de
ebics.fiducia.de
webcenter-publish-01g.fiducia.de
OAPIMGBRS034.BRZ.FIDUCIA.DE
oatimgbrs016.brz.fiducia.de
webdav-uit.fiducia.de
*.E1.WEB.FIDUCIA.DE
geno-formular2.finanzportal.fiducia.de
vr-bankingapp-edu.web.fiducia.de
fus.rz.bankenit.de
vr-bankingapp-edu.web.fiducia.de
RAPIMGBRS034.BRZ.FIDUCIA.DE
webcenter-publish-01a.fiducia.de
cik7011.uit.sap.fiducia.de
giropay.fiducia.de
xmc-nac03.netz.fiducia.de
citrix-a.uit.fiducia.de
vr-bankingapp-messe.web.fiducia.de
www.vr-infoforum.fiducia.de
*.p20.brz.fiducia.de
geno-formular2.finanzportal.fiducia.de
sonargraphlic-dev.rz.bankenIT.de
SONARGRAPHLIC-QA.RZ.BANKENIT.DE
datenservice.fiducia.de
seu27.pka.bankenit.de
svn.fiducia.de
*.web.fiducia.de
identity.fiducia.de
jenkins.rz.bankenit.de
agreesb20-g.fiducia.de
webcenter-publish-01f.fiducia.de
bo-p-uit.fiducia.de
sonargraphlic-qa.rz.bankenIT.de
identity.fiducia.de
seulicences.rz.bankenit.de
oapimgbrs035.brz.fiducia.de
zis2.noc.fiducia.de
seudb.rz.bankenIt.de
xmc-gim.netz.fiducia.de
finanzportal-ms.fiducia.de
webcenter-publish-01h.fiducia.de
giropay-transx.fiducia.de
zvs-production.p20.brz.fiducia.de
rentenmanager-prod.vkb.fiducia.de
webcenter-publish-01e.fiducia.de
uitmgwug3.uit.sap.fiducia.de
giropay-admin.fiducia.de
citrix-a.uit.fiducia.de
webcenter-publish-01d.fiducia.de
vr-bankingapp-riat.web.fiducia.de
*.l1.web.fiducia.de
uit-sharepoint.fiducia.de
*.WEBCENTER-PV-PILOT-MS.BRZ.FIDUCIA.DE
servicedesk.sap.fiducia.de
cie7012.uit.sap.fiducia.de
webservices.fiducia.de
voting.fiducia.de
svn-qa.fiducia.de
webcenter-publish-01d.fiducia.de
webdav-uit.fiducia.de
webdav-uit-a.fiducia.de
jprint42-z.brz.fiducia.de
hbci11.fiducia.de
sts.enterprise.fiducia.de
ide.rz.bankenIT.de
hbci11.fiducia.de
mobile-access.fiducia.de
pegasus.peras.fiducia.de
*.l2.web.fiducia.de
dzbhcmhrt.dzb.sap.fiducia.de
ebics.fiducia.de
vr-bankingapp-last.web.fiducia.de
sanpki-gui.fiducia.de
dbawdpa01.dba.sap.fiducia.de
UIT-DIAMO-N-11.UIT.FIDUCIAGAD.DE
test-intmob.fiducia.de
jprint31-riat-e.brz.fiducia.de
webcenter-publish-02a.fiducia.de
fiderps38.fid.sap.fiducia.de

Certificate

The complete raw certificate details for *.l1.web.fiducia.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrqc2NfcIIwkuEwkBU7C
wD6S8kdRiCtYjcwrKcnVoDi3IkWr3cSZPhrDMQc8qEUENL4/EeMHN69loZ4WI8L0
vpcTFfTefCiroY/08/i8QR6nmr+7ivNB8CoW+EwmEV/qjkvdQXMKtR1cmAofJS1c
GX5xALOK1WJxTkgbpgyROlwr1B8m0xrRKOFUOhhv4IfvrnuoiSD5xF7wkzcedy5L
azC+tBS7p4vCsl/WBuAlSJyhFYVb0wTG+dJGufyq65xseshtkHMaB1oEukgGXpve
MuBy/JDvs7UZ2e8vJ3ANH1+fPmQem8OyYftvox5aHTvkfXsRSdEKzhtiPGRe3COW
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 159613390111605705873462760169626301515
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-11 05:41:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-14 05:41:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM029825613'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atruvia AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.l1.web.fiducia.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19532721108849673921995754505468248002588851268860284953165159200872868700940141644204425856114096553154853276313208760758596364269230183841281148664035324085856655185089922753892912745001445747987973019241421969260898719523675275759419555348705679988123145204920199831118611245967808346832797344165785691757375596196937858041375059777430911449385921789245852614352434742184864008834828099394605980145672065561423079185680328080807430760816431092482235456937017464877614780246254742086532530753453760672338005502809175157500697150359165505763888844470443510567180947327179863908486277629743216254435732706577734669951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.l1.web.fiducia.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52e5c01b797b4c187f14e78e5b9713b72cd5a4a1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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