api1.huk.de

- HUK-COBURG -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 5c:ef:c6:de:14:8d:7f:76:68:99:9f:fb:c9:36:c5:93 was issued on by D-Trust GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HUK-COBURG

Company registration number: CSM030398249
Organization: HUK-COBURG
State / Province: Bayern
Locality: Coburg
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:ef:c6:de:14:8d:7f:76:68:99:9f:fb:c9:36:c5:93
Serial Number (int): 123533968073516445969584846076927985043
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 2d:8d:61:1b:7a:05:cd:2b:5a:c0:31:d4:19:9c:c8:43:4b:d5:cc:f2
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 06:42:3d:58:ed:14:6f:85:b3:5d:98:94:6b:ca:0e:a8:c5:18:14:ad
Fingerprint (sha256): 18:07:9f:d2:7a:76:3f:d4:3d:ae:5e:cd:ba:31:4b:ba:af:b7:7d:13:d9:81:c4:86:0d:77:b0:9c:80:be:a2:82

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate api1.huk.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api1.huk.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api1.huk.de

Other certificates including the domain name huk.de

(limited to 100 certificates)
huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
dev.bot-tas.huk.de
ci-euw1.ireland.delivery.aimatch.net
vtpcert.huk.de
ci-euw1.ireland.delivery.aimatch.net
vtppin2.huk.de
auth1test.huk.de
mail.huk.de
ip.huk.de
vtpcert.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
vtp.huk.de
oa.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
api1.huk.de
vtppin2.huk.de
auth2.huk.de
icf.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
www.cagt.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
officeonline.huk.de
oa.huk.de
ci-euw1.ireland.delivery.aimatch.net
somni.huk.de
dev.bot-telematik.huk.de
*.webcon1.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
vpngw.huk-coburg.de
auth1.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
dev.bot-tas.huk.de
ci-euw1.ireland.delivery.aimatch.net
ip.huk.de
api.huk.de
auth1.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
oa.huk.de
*.webcon1.huk.de
oa.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
vtpservice2.huk.de
ci-euw1.ireland.delivery.aimatch.net
appconnect.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
www.huk.de
ci-euw1.ireland.delivery.aimatch.net
somni.huk.de
ci-euw1.ireland.delivery.aimatch.net
auth1.huk.de
mail.huk.de
ci-euw1.ireland.delivery.aimatch.net
prod.bot-tas.huk.de
icftest.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
csr.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
www.huk.de
csr.huk.de
ci-euw1.ireland.delivery.aimatch.net
partner3t.huk.de

Certificate

The complete raw certificate details for api1.huk.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG1DCCBbygAwIBAgIQXO/G3hSNf3ZomZ/7yTbFkzANBgkqhkiG9w0BAQsFADBM
MQswCQYDVQQGEwJERTEVMBMGA1UECgwMRC1UcnVzdCBHbWJIMSYwJAYDVQQDDB1E
LVRSVVNUIFNTTCBDbGFzcyAzIENBIDEgMjAwOTAeFw0yMjA1MTIxNjA2MzZaFw0y
MzA1MTUxNjA2MzZaMHExFTATBgNVBAUTDENTTTAzMDM5ODI0OTELMAkGA1UEBhMC
REUxDzANBgNVBAgTBkJheWVybjEPMA0GA1UEBxMGQ29idXJnMRMwEQYDVQQKEwpI
VUstQ09CVVJHMRQwEgYDVQQDEwthcGkxLmh1ay5kZTCCASIwDQYJKoZIhvcNAQEB
BQADggEPADCCAQoCggEBALqM21cDKYpBCJM8vJrZsoz9168sx6qjakQveA/2y72z
TgfHaV4f1f/OPVGtXuc1gEQRaTtxOB3penjZbpQqoidah25JKNzFYo73qht1AKCG
wtuBjQPoc/jlgYKoPriD/6M5u+R1zYYXn47Sb1RreXV7ZI74f8qZg+bGvOBYBlZr
HTLmisi7BKzLj8HTUdHPkPA+PnQJBV7+53DbybfCMeeOcoSE3FqVDdQz2bnA87Yy
ab8HtoyTc3V5P8h4tgHrosrSYpdiFwUNWbA1ChV+kToxA58T0neGhutUS6yUrzS8
nuBsRWh51yOqXVr+M320WoUtTjrNn7tUox83Y2QsVo0CAwEAAaOCA4swggOHMIIB
FgYIKwYBBQUHAQEEggEIMIIBBDAzBggrBgEFBQcwAYYnaHR0cDovL3NzbC1jMy1j
YTEtMjAwOS5vY3NwLmQtdHJ1c3QubmV0MEwGCCsGAQUFBzAChkBodHRwOi8vd3d3
LmQtdHJ1c3QubmV0L2NnaS1iaW4vRC1UUlVTVF9TU0xfQ2xhc3NfM19DQV8xXzIw
MDkuY3J0MH8GCCsGAQUFBzAChnNsZGFwOi8vZGlyZWN0b3J5LmQtdHJ1c3QubmV0
L0NOPUQtVFJVU1QlMjBTU0wlMjBDbGFzcyUyMDMlMjBDQSUyMDElMjAyMDA5LE89
RC1UcnVzdCUyMEdtYkgsQz1ERT9jQUNlcnRpZmljYXRlP2Jhc2U/MHkGA1UdIARy
MHAwCAYGZ4EMAQICMAgGBgQAj3oBBzBaBgsrBgEEAaU0AoFIATBLMEkGCCsGAQUF
BwIBFj1odHRwOi8vd3d3LmQtdHJ1c3QubmV0L2ludGVybmV0L2ZpbGVzL0QtVFJV
U1RfQ1NNX1BLSV9DUFMucGRmMBMGCisGAQQB1nkCBAMBAf8EAgUAMDMGA1UdEgQs
MCqBEGluZm9AZC10cnVzdC5uZXSGFmh0dHA6Ly93d3cuZC10cnVzdC5uZXQwggEd
BgNVHR8EggEUMIIBEDCCAQygggEIoIIBBIZ5bGRhcDovL2RpcmVjdG9yeS5kLXRy
dXN0Lm5ldC9DTj1ELVRSVVNUJTIwU1NMJTIwQ2xhc3MlMjAzJTIwQ0ElMjAxJTIw
MjAwOSxPPUQtVHJ1c3QlMjBHbWJILEM9REU/Y2VydGlmaWNhdGVyZXZvY2F0aW9u
bGlzdIZAaHR0cDovL2NybC5kLXRydXN0Lm5ldC9jcmwvZC10cnVzdF9zc2xfY2xh
c3NfM19jYV8xXzIwMDkuZGVyLmNybIZFaHR0cDovL2Nkbi5kLXRydXN0LWNsb3Vk
Y3JsLm5ldC9jcmwvZC10cnVzdF9zc2xfY2xhc3NfM19jYV8xXzIwMDkuY3JsMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAWBgNVHREEDzANggthcGkxLmh1
ay5kZTAfBgNVHSMEGDAWgBRQGTKUmsS1BE1W0MCDIdU1VbCxejAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0OBBYEFC2NYRt6Bc0rWsAx1BmcyENL1czyMA0GCSqGSIb3DQEB
CwUAA4IBAQBVXT8Up2Z7mhEnUe5zjXHr1bmmqkA1sFfe63lZetH+OaVJ0SwNUEwX
xjzy4qSElkBV7RoP/Iew6Fm8k/dfwJ2cp3qnq+2dYI2pngXLF5XQigt6/FsPXTXa
SRdk08l8TeF7hZluF4JFOUy+tcULPMvnYXgmuWJTei9mzu+dWxUXPGSTFGReH3um
IS4O676VuDYdmDx2s7xqkBo8ULPzt+ISOodM5a/+BXdCux1LiM/1w6kZxm2ZQ5gS
qpx0pd+if63QvZyikKyBsp7RXR4HM+Jd14rNNecbyZazJuyZLuvOmZQqwmu/kr7V
3UsBoNQquFGkK6l9a4bv58vCGjsKIO/a
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuozbVwMpikEIkzy8mtmy
jP3XryzHqqNqRC94D/bLvbNOB8dpXh/V/849Ua1e5zWARBFpO3E4Hel6eNlulCqi
J1qHbkko3MVijveqG3UAoIbC24GNA+hz+OWBgqg+uIP/ozm75HXNhhefjtJvVGt5
dXtkjvh/ypmD5sa84FgGVmsdMuaKyLsErMuPwdNR0c+Q8D4+dAkFXv7ncNvJt8Ix
545yhITcWpUN1DPZucDztjJpvwe2jJNzdXk/yHi2AeuiytJil2IXBQ1ZsDUKFX6R
OjEDnxPSd4aG61RLrJSvNLye4GxFaHnXI6pdWv4zfbRahS1OOs2fu1SjHzdjZCxW
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 123533968073516445969584846076927985043
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-12 16:06:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-15 16:06:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM030398249'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Coburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HUK-COBURG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api1.huk.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23549783798793125600381125070642789342753298447718593832168499394299562214841507018562281708021418066265899588200324668270604332635864531361385731951089390108986070426314731263686052279218192913096987068715386302558157294807199864132309763895093543540740167047817903087575352338284931499377756331737293112891254509427024777537516144397509563978613689709773872827605493991083142257714949290492399976190011829748471836750884935286952427771977934218902704777431164525307297507722477081169888349530290952565639146712894177663423663579426430394915615954104385928862411125726171454327744205982814262804947673458500021540493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api1.huk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d8d611b7a05cd2b5ac031d4199cc8434bd5ccf2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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