frankfurt-main.ihk.de

- Industrie- und Handelskammer Frankfurt am Main -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 61:60:f5:55:ae:0a:13:f6:e8:15:bc:11:ca:f0:95:f2 was issued on by D-Trust GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Industrie- und Handelskammer Frankfurt am Main

Company registration number: CSM032333945
Organization: Industrie- und Handelskammer Frankfurt am Main
State / Province: Hessen
Locality: Frankfurt am Main
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 61:60:f5:55:ae:0a:13:f6:e8:15:bc:11:ca:f0:95:f2
Serial Number (int): 129438552068165466742426659504182564338
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: fa:94:0d:14:18:58:2c:dc:18:95:85:ba:a0:d2:87:9f:de:45:dc:fb
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 75:b1:d1:5d:32:fd:d7:1e:8d:ed:57:93:97:87:74:9a:4d:e1:e9:74
Fingerprint (sha256): 10:81:70:31:b0:ee:88:5c:55:2a:45:e0:b0:eb:d4:d1:36:f5:e8:fe:2f:27:0e:86:ec:ab:c1:55:b8:a7:41:6f

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate frankfurt-main.ihk.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for frankfurt-main.ihk.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

frankfurt-main.ihk.de
*.frankfurt-main.ihk.de

Other certificates including the domain name ihk.de

(limited to 100 certificates)
cdn01.blog.ostwestfalen.ihk.de
ihkdigital.services.ihk.de
coburg.ihk.de
webmail.ihk.de
coburg.ihk.de
gemeinsam.niederrhein.ihk.de
bildung2.gfi.ihk.de
www.pruefungen.ostwestfalen.ihk.de
www.weingarten.ihk.de
events.wuerzburg.ihk.de
www.saarland.ihk.de
www.offenbach.ihk.de
ostwestfalen.ihk.de
tixxt.kiel.ihk.de
ostwestfalen.ihk.de
zq-digitalekompetenz.schwaben.ihk.de
vdi.hannover.ihk.de
adrprintsrv.gfi.ihk.de
box.wuerzburg.ihk.de
videokonferenz.ihk.de
unternehmen.gera.ihk.de
www.going-international.ihk.de
tagesspiegel.kiosk.plus
offenbach.ihk.de
profile.ihk.de
www.vergabe.ihk.de
vstdbv3.ihk.de
vpn.heilbronn.ihk.de
seleinfo.ihk.de
videokonferenz.kassel.ihk.de
regensburg.ihk.de
ostwestfalen.ihk.de
magazine.suncoastergroup.com
proxy1.juris.ihk.de
vergabe.ihk.de
evadatenarchiv.ihk.de
ostwestfalen.ihk.de
frankfurt-main.ihk.de
berlin.ihk.de
ostwestfalen.ihk.de
xihkpilotws.gfi.ihk.de
www.hanau.ihk.de
cert.ihk.de
www.services.abnahme.usbdb.ihk.de
gemeinsam.niederrhein.ihk.de
ecofinder.ihk.de
www.unternehmen.darmstadt.ihk.de
*.webmail.ihk.de
*.gfi.ihk.de
webservices.dresden.ihk.de
nas.kiel.ihk.de
cyber.frankfurt-main.ihk.de
webservices.dresden.ihk.de
pao.berlin.ihk.de
coburg.ihk.de
impulsnetzwerk.ihk.de
ihk.de
owi.ostwestfalen.ihk.de
frankfurt-main.ihk.de
sse.cottbus.ihk.de
ausbildung.darmstadt.ihk.de
zq-digitalekompetenz.schwaben.ihk.de
magdeburg.ihk.de
wireless1.ihk.de
www.frankfurt-main.ihk.de
ausgabe.vstdbv3.ihk.de
mainau.wuerzburg.ihk.de
www.pruefungen.ostwestfalen.ihk.de
stats.ostwestfalen.ihk.de
wlan.muenchen.ihk.de
pruefung.ihk.de
*.schwaben.ihk.de
webservices.dresden.ihk.de
unternehmen.gera.ihk.de
muenchen.ihk.de
quickplace.ihk.de
cyber.frankfurt-main.ihk.de
geoinfo.ihk.de
cloud.karlsruhe.ihk.de
ihk-sh.de
bonn.ihk.de
adrprintsrv.gfi.ihk.de
www.aachen.ihk.de
dataoutputservices.gfi.ihk.de
wis.ihk.de
karlsruhe.ihk.de
veranstaltung.mittlerer-niederrhein.ihk.de
connect.darmstadt.ihk.de
ostwestfalen.ihk.de
wm.ihk.de
www.pruefungen.ostwestfalen.ihk.de
proxy1.beck.ihk.de
cert.ihk.de
cottbus.ihk.de
mx01.ihk.de
kiosk.der-kleine-georg.de
www.dresden.ihk.de
ve-register.ihk.de
traveler.konstanz.ihk.de
login3.ihk.de

Certificate

The complete raw certificate details for frankfurt-main.ihk.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwIr6hhu8fbPzWqT2H58c
nMUR5UQLKmUhsksdHxg/rPAEs8H5C3N0w3qQI3ZfuSQzWXCjgYtItacAOmqynaVS
qTFyM7vy29bbCXcJilgM+pcnt5RgVXU2KedYe0hVd1mQZyYF6U/O4WO8lcy4lnKB
2+5iq7yckpNiSkRIgNcgrLncIZYoLBZETjMAP8x5vFFQOwqSyKZCrjomvE6fO46+
5ZcB7UnexG7rXNmXZfH1eK6CiNJoSjJoRr0BGqe93EmhJBqJ89KaYIR8rUU2MigC
YTosj4/Q/kJtq7o6/7CESh0X8dEntAEOJugByS8Qh/XZaEe6t6aTlVFCidP+aucW
t4DB6rKUCygUKpQul0vTOdSep/slhBWbRSZFnFBd9DpR5E/2WCpbstxdg/bHc9ko
T4IW8IEOnxwbsD+wYLiZ8ClAoemOB3HjSluT+UGyu7yuys5LKHy+2lrBgrGZ+pW7
+ZWsy3vSAO9x/FjVuRdCaEtZmF9+sVJ6h2VMSlDc+dZ9n+4MRI6fT3PCrrI2xoXn
saud5S6CuHcu8I655g67Ma2T0Tvap7vX1MjGwiaEioHJe42w9ie6TFTPHxQEepjR
lfIfm9K7tPtCEIE9IqVRT9nBfwNQ3bSX/hMynw7IBVcJHA85CkSsbAmedtQk6Uie
8au4gnbFB60q2rQ4F498vOUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 129438552068165466742426659504182564338
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-28 12:53:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-01 07:58:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM032333945'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Frankfurt am Main'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Industrie- und Handelskammer Frankfurt am Main'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'frankfurt-main.ihk.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 785506439407906800289400879936103076986824977088027893018380285219358884080694256998289500399369368188125872593130362451142156921391654333993161609114898756401657015839141571604002765710584078241947044297032183502451450251640754077167934818119755371495401053407158412126531576060276817937959019230803310862753410963577900373331059965334659457856613697507474563409809958657051150205380210870109991417366683561391152306077424656243502947978994941385132016490131126336676158189889835539861593671101667962765956271041990575978658108675736459368011244573023142704880718099891393512719269796417742341879835129343790043405617041178226379776772134737463374436992179517521812951472564684786134072880149120745439841626647978216162938405155310850004386482426283546916910275911201437854532880329986099958781917607860779896243572382713813332455901457924087356459937484969394255163541562738087692102066354529103007063324340646384666666450679980784435438988237033088055061722034936582809029691711644348627572614591114496659134463899775185911239730348025667834550116423399918784345187274238227446915003550889401368249083428111116770162187551990801348960625100755925596505495938015311514045805091392343129756104644615588988907575954465193340702604517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (967 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (963 bytes)
							03c1007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000184be4c75de0000040300463044022045d57b6640a64c0c6cdeb483f18cc93855e9e517d33d9afbe1a1c8dc036fcf7602204922f01dcc1153298d98b95082675e730fb740ad9e83aba3344af6f78f539968007700e87ea7660bc26cf6002ef5725d3fe0e331b9393bb92fbf58eb3b9049daf5435a00000184be4c77800000040300483046022100a23f094cda9b19f16dcdde3bb3fd07f27789d9ed5404392d019fd7b2c1c12ef1022100e5d69fd9edcb609b886a24bc2dcfbdd39aacccca6040b794f36ed0b086ef73f8007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000184be4c74c0000004030046304402205c1dbc6aaaa60ec8c42ad73bb4bcd0d4cf43d06694d76a3027db15a7a824bdd70220613615e0e3bb0e7dea7143719ec05f36301f16a280b74df01bc2924945f589ba0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000184be4c75d30000040300483046022100d616ee9d6a233509b398f68b6606d71bd23e0d0139c919de2e84334a2005e64d0221008be5a2a67f8601a8a32649c9ea7804b0ea2749aaba2ba102169e21fb0c15aa46007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000184be4c765100000403004830460221009603153a6f47d2b2f6092edc337886793e72d156e89c6da7466bb6467a07e0b5022100f93e0ce848b0cccea47a0071a24aae04c14370a1b8292b5f05003f2566eddcd40076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000184be4c76db000004030047304502203dda8241386bfe883f7b65b01430be35991fd3e8a620f9cb166b49eecdad3b5d022100ab95197ad7580bd7de345220c965b165f4cc2edbca9424cfe31850b85fef6464007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000184be4c78500000040300463044022025adb5a1a0383c6424b74963aa6a9552cf6d801df44e89dda54b003262d2afca02203555e65734de04ea4b3c1457263884dda78b1b22afbc0c93cbb40f666b5019840077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000184be4c78490000040300483046022100857696a780bf68e8a9293d0938ac05d4ce95178073910a346de94bc0a168c186022100f2fa383c874f739f18188a3cfda6c0dc19f95b68312117f519169c29bca9f51e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankfurt-main.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frankfurt-main.ihk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fa940d1418582cdc189585baa0d2879fde45dcfb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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