dws.com

- DWS Group GmbH & Co. KGaA -

Issued by DigiCert EV RSA CA G2

About this certificate

This digital certificate with serial number 05:22:a1:7e:a1:c9:1d:1a:c1:2f:80:89:72:61:75:fd was issued on by DigiCert Inc.

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DWS Group GmbH & Co. KGaA

Company registration number: HRB 111128
Organization: DWS Group GmbH & Co. KGaA
Address: Mainzer Landstr. 11 17
Postal code: 60329
State / Province: Hessen
Locality: Frankfurt am Main
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:22:a1:7e:a1:c9:1d:1a:c1:2f:80:89:72:61:75:fd
Serial Number (int): 6825953572879646333276796436598584829
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 3c:01:bc:85:68:73:98:0b:6a:e6:54:1d:a8:cd:71:cc:06:87:68:20
AuthorityKeyId: 6a:4e:50:bf:98:68:9d:5b:7b:20:75:d4:59:01:79:48:66:92:32:06

Fingerprint (sha1): 34:1b:8b:f1:dc:72:3f:9a:d1:89:3e:6d:1d:5e:b1:e7:25:67:75:34
Fingerprint (sha256): 18:82:77:91:f6:40:c6:fb:3b:b4:ff:2b:ed:eb:ac:98:dd:23:1f:97:10:7a:6a:a4:36:f6:14:04:63:27:d4:10

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertEVRSACAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertEVRSACAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertEVRSACAG2.crl

Check the revocation status for certificate dws.com

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dws.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dws.com
croci.deutscheam.com
croci.deutscheawm.com
croci.dws.com
db-vita.de
dbvita.de
dbvita.com
db-vita.com
dbxtrackers.com
dbxus.com
deutscheam.com
deutscheawm.com
deutscheliquidity.com
dws.de
etc.deutscheam.com
etc.deutscheawm.com
etf.deutscheam.com
etf.deutscheawm.com
etfus.deutscheawm.com
etfus.deutscheam.com
funds.deutscheam.com
funds.deutscheawm.com
fundsapi.deutscheam.com
login.deutscheam.com
push.etc.deutscheam.com
push.etc.dws.com
push.etf.deutscheam.com
push.etf.dws.com
rreefpropertytrust.com
www.croci.dws.com
www.dbxtrackers.com
www.dbvita.de
www.dbvita.com
www.db-vita.com
www.deawm.com
www.deutscheam.com
www.deutscheliquidity.com
www.dbxus.com
www.etc.deutscheam.com
www.etc.dws.com
www.etf.deutscheam.com
www.etf.deutscheawm.com
www.etf.dws.com
www.liquidity.dws.com
www.xtrackers.com
xtrackers.com

Other certificates including the domain name dws.com

(limited to 100 certificates)
iqcodex.dws.com
geuw3uwarcwap01.corp.dws.com
clientconnect.deutscheam.com
opt.information.dws.com
mediamanager.deutscheam.com
download.dws.com
go.dws.com
download.dws.com
view.insight.dws.com
secure.dws.com
uat.dms.dws.com
geuwe3pwexch02.corp.dws.com
institutional.deutscheawm.com
secondary-prod-mm.prod-getty.cloud
go.dws.com
dws.com
api.digital.dws.com
track.dws.com
betterstories.dws.com
mediamanager.dws.com
institutional.dws.com
lighthouse.dws.de
clientconnect.deutscheam.com
www.dws.com
dws.com
iqcodex.dws.com
lighthouse.us.dws.com
institutional.lighthouse.dws.de
download.dws.com
www.dws.com
download.dws.com
akamai-san26.exacttarget.com
fundsus.deutscheawm.com
ml.fundsus.deutscheawm.com
mediamanager.dws.com
lighthouse.dws.de
click.insights.dws.com
www.dws.com
pages.insights.dws.com
prod-mm.prod-getty.cloud
lighthouse.us.dws.com
dws.com
go.dws.com
secondary-prod-mm.prod-getty.cloud
go.dws.com
cioview.dws.com
mediamanager.dws.com
mailer.dws.com
uat.iqcodex.dws.com
go.dws.com
akamai-san137.exacttarget.com
download.dws.com
ml.fundsus.deutscheawm.com
institutional.deutscheawm.com
click.insight.dws.com
click.insight.dws.com
info.dws.com
onboarding.www.deutscheinvest.lu
uat2.api.digital.dws.com
info.dws.com
www.dws.com
admin.dws.com
prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
mailer.dws.com
secure.dws.com
iqcodex.dws.com
ml.fundsus.deutscheawm.com
secure.dws.com
lighthouse.us.dws.com
secure.dws.com
www.dws.com
view.insights.dws.com
institutional.lighthouse.dws.de
idp.dws.com
secure.dws.com
dws.com
info.dws.com
mediamanager.deutscheam.com
live.cioview.dws.com
akamai-san137.exacttarget.com
www.dws.com
view.insights.dws.com
api.digital.dws.com
api.digital.dws.com
institutional.deutscheawm.com
ml.fundsus.deutscheawm.com
dws.com
outlook.dws.com
dms.dws.com
view.insights.dws.com
view.insight.dws.com
vhdggqs4ci.sap.dws.com
lighthouse.dws.de
akamai-san26.exacttarget.com
mit.dws.de
dws.at
opt.information.dws.com
secure.dws.com
geuw1pltfesrv01.corp.dws.com

Certificate

The complete raw certificate details for dws.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILqTCCCpGgAwIBAgIQBSKhfqHJHRrBL4CJcmF1/TANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE
aWdpQ2VydCBFViBSU0EgQ0EgRzIwHhcNMjMxMDMxMDAwMDAwWhcNMjQxMDMwMjM1
OTU5WjCCAScxEzARBgsrBgEEAYI3PAIBAxMCREUxFzAVBgsrBgEEAYI3PAIBAhMG
SGVzc2VuMSIwIAYLKwYBBAGCNzwCAQETEUZyYW5rZnVydCBhbSBNYWluMR0wGwYD
VQQPDBRQcml2YXRlIE9yZ2FuaXphdGlvbjETMBEGA1UEBRMKSFJCIDExMTEyODEL
MAkGA1UEBhMCREUxDzANBgNVBAgTBkhlc3NlbjEaMBgGA1UEBxMRRnJhbmtmdXJ0
IGFtIE1haW4xDjAMBgNVBBETBTYwMzI5MR8wHQYDVQQJExZNYWluemVyIExhbmRz
dHIuIDExIDE3MSIwIAYDVQQKDBlEV1MgR3JvdXAgR21iSCAmIENvLiBLR2FBMRAw
DgYDVQQDEwdkd3MuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
kFFm4H5k6fYO/pIYC5FTIVErFRma00BLmHRCnNjru2y88u/cFgJLXHOgXmOIOxJ1
mmh46ziv9JP54axwdCUzHofJBsKWTbVj6sRfk4dpeC8aZdgzPq6KdDYQJU+JUJam
Si0lV5wcpPTguTeMkD7Qizq7Pmyo305yg1ldp8ZkfOPoB8lITBkQkZyhJA78lS8W
3gLZFzcx1szBr2r0YaVuv9TYl2FPQfh4Le3PgXKtAbnvmvmWW7K5S8zfCQRX01l2
3G4lGwL83FtUOjCsKQqpmZ4Mu51XIDuohM/HnQDRurZwRFLfiIKsFeV5WekcG4Sd
AbnWHx+IXpdtj9Se2jAVPpYBFnwmh8W2LybswQYxQBrA/4uC2j9COftbYnsxQKWz
8avQhXkJ3h6sFVmOpua85Ct8nDvBtsOKmITYxyOpMxRSuGibc7UswpXe4iJmUlcA
/dre+rA3pK6H3BeTKHUqsFkgsgkVBYqVllnKFGRGa6d3Bb5xk+Lk8woZCPckjdMV
/sdU94gWfgpUhnznP8xh1f92nqn9sjqE1RzdtZK5Blrw3hY2LVSt0vvvwCvrEoos
qXvB1IlJ5t8xWTdJMf8ldnUaXyNe8lMmxx+eB9qQsGcn4xtFMIK7bZXXXaa89eDy
Mr+o4V3OyPkrEYLed2rvCwKFyt8f4gJrW1NJPViLilMCAwEAAaOCBrAwggasMB8G
A1UdIwQYMBaAFGpOUL+YaJ1beyB11FkBeUhmkjIGMB0GA1UdDgQWBBQ8AbyFaHOY
C2rmVB2ozXHMBodoIDCCA3AGA1UdEQSCA2cwggNjggdkd3MuY29tghRjcm9jaS5k
ZXV0c2NoZWFtLmNvbYIVY3JvY2kuZGV1dHNjaGVhd20uY29tgg1jcm9jaS5kd3Mu
Y29tggpkYi12aXRhLmRlgglkYnZpdGEuZGWCCmRidml0YS5jb22CC2RiLXZpdGEu
Y29tgg9kYnh0cmFja2Vycy5jb22CCWRieHVzLmNvbYIOZGV1dHNjaGVhbS5jb22C
D2RldXRzY2hlYXdtLmNvbYIVZGV1dHNjaGVsaXF1aWRpdHkuY29tggZkd3MuZGWC
EmV0Yy5kZXV0c2NoZWFtLmNvbYITZXRjLmRldXRzY2hlYXdtLmNvbYISZXRmLmRl
dXRzY2hlYW0uY29tghNldGYuZGV1dHNjaGVhd20uY29tghVldGZ1cy5kZXV0c2No
ZWF3bS5jb22CFGV0ZnVzLmRldXRzY2hlYW0uY29tghRmdW5kcy5kZXV0c2NoZWFt
LmNvbYIVZnVuZHMuZGV1dHNjaGVhd20uY29tghdmdW5kc2FwaS5kZXV0c2NoZWFt
LmNvbYIUbG9naW4uZGV1dHNjaGVhbS5jb22CF3B1c2guZXRjLmRldXRzY2hlYW0u
Y29tghBwdXNoLmV0Yy5kd3MuY29tghdwdXNoLmV0Zi5kZXV0c2NoZWFtLmNvbYIQ
cHVzaC5ldGYuZHdzLmNvbYIWcnJlZWZwcm9wZXJ0eXRydXN0LmNvbYIRd3d3LmNy
b2NpLmR3cy5jb22CE3d3dy5kYnh0cmFja2Vycy5jb22CDXd3dy5kYnZpdGEuZGWC
Dnd3dy5kYnZpdGEuY29tgg93d3cuZGItdml0YS5jb22CDXd3dy5kZWF3bS5jb22C
End3dy5kZXV0c2NoZWFtLmNvbYIZd3d3LmRldXRzY2hlbGlxdWlkaXR5LmNvbYIN
d3d3LmRieHVzLmNvbYIWd3d3LmV0Yy5kZXV0c2NoZWFtLmNvbYIPd3d3LmV0Yy5k
d3MuY29tghZ3d3cuZXRmLmRldXRzY2hlYW0uY29tghd3d3cuZXRmLmRldXRzY2hl
YXdtLmNvbYIPd3d3LmV0Zi5kd3MuY29tghV3d3cubGlxdWlkaXR5LmR3cy5jb22C
EXd3dy54dHJhY2tlcnMuY29tgg14dHJhY2tlcnMuY29tMEoGA1UdIARDMEEwCwYJ
YIZIAYb9bAIBMDIGBWeBDAEBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGln
aWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMHUGA1UdHwRuMGwwNKAyoDCGLmh0dHA6Ly9jcmwzLmRpZ2lj
ZXJ0LmNvbS9EaWdpQ2VydEVWUlNBQ0FHMi5jcmwwNKAyoDCGLmh0dHA6Ly9jcmw0
LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEVWUlNBQ0FHMi5jcmwwcwYIKwYBBQUHAQEE
ZzBlMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wPQYIKwYB
BQUHMAKGMWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEVWUlNB
Q0FHMi5jcnQwDAYDVR0TAQH/BAIwADCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFp
AHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGLhk5H2wAABAMA
RzBFAiEAg2c+sHn5xOPXZrxMiIhkDDe5vrMZf0vG3O+Slxh7Yt4CIBj+O94Aaq0S
ZdV0gmmZTx1n1zEiuMGzAyqefacu3iP7AHYASLDja9qmRzQP5WoC+p0w6xxSActW
3SyB2bu/qznYhHMAAAGLhk5H3AAABAMARzBFAiEA0HRIHjwHAlijPHzCHFSoxG8Y
cBevR//9sXgPJnai2zUCIBBL8BY8ueNpzpacTxEemz2K81qnHfM3mcAxLr8y8wqW
AHcA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGLhk5IRwAABAMA
SDBGAiEAqo0gYWZXdj2zgy/wfm+rjo7i71uJVqsIC3vl2jAro3oCIQDwgb3uz9jU
R4WoB4czyIJtctePNL2A/ziFk8xLAQWZFDANBgkqhkiG9w0BAQsFAAOCAQEAO1LF
+C6O2laF4rNGPmWCqNKM1aUT79QWv7oTTHrwSSwvfmPEe1cV/gw58bOmlp3WgR8B
M6ObxyVvRVy20JQ3xAbfbXsuFsrAKRNKyKRj5DkbW+BjFrZE4gM7D0O8ATOE5mvD
3Aoum3kP9Z9wxTWrlxAStsfb+uUPcwwG/lS+CqhWRiOMjNXR7Fxhi+c8Rs9YC93v
yl7PGRu3L8jwhWKRE10zD1KC1n4oztXnqt/IGLWek5lswrlkkU6ekA/sb6KUREpT
Pdk7ScIVKsxF6i58Fm5j/TMjlPxphGms90LHn5axs+2yIInY1YKJiAVWgVFaeimy
CCvKVNW32EX38M5v+g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6825953572879646333276796436598584829
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert EV RSA CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Frankfurt am Main'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 111128'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Frankfurt am Main'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '60329'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mainzer Landstr. 11 17'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DWS Group GmbH & Co. KGaA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dws.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 588765974808662562552113599484091399597611317085498830109628892338758414024424647163860338012024563352123777932448575597952162215117424574497558504545059555441147038340173845210765967625412434226890104572227916060106762025113736909915903035009007000815055228379958234161149793055869784428962793964025961314652421747308227438766935108253690161649802652645151773440310782398476262816997625950495843911872512270354452077142350962689335827369484452625035692724621974069440378097587881341095627099241169657613899685737820673476696430869910271602809529494761633841504988385022789226451088158610400015372526012518327873993050453505160676466847052659207955170041248625017034274534618918526711389528056327109013067313889724182717967786332745070756032494318196487315009457547233690805265689614135824901317129111940161985924836353177547620992879085033322889131767486313341288816095833316032576449240542548001498158437405899603281568333824362562571846657657062627221043826227007088082975378567425212612841375008894217084111163625155815188536350435089809885781508984708918015040749004876510804641480176100775578570891134536352297913287175767397455257469079308714455080071715844576327901961660026077792271510785647528966513005053157426637237357139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6a4e50bf98689d5b7b2075d45901794866923206
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c01bc856873980b6ae6541da8cd71cc06876820
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (871 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'croci.deutscheam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'croci.deutscheawm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'croci.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'db-vita.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbvita.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbvita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'db-vita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbxtrackers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbxus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutscheam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutscheawm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutscheliquidity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etc.deutscheam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etc.deutscheawm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etf.deutscheam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etf.deutscheawm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etfus.deutscheawm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etfus.deutscheam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funds.deutscheam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funds.deutscheawm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundsapi.deutscheam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.deutscheam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push.etc.deutscheam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push.etc.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push.etf.deutscheam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push.etf.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rreefpropertytrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.croci.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dbxtrackers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dbvita.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dbvita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.db-vita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deawm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutscheam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutscheliquidity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dbxus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etc.deutscheam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etc.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etf.deutscheam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etf.deutscheawm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etf.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liquidity.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xtrackers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtrackers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertEVRSACAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b864e47db000004030047304502210083673eb079f9c4e3d766bc4c8888640c37b9beb3197f4bc6dcef9297187b62de022018fe3bde006aad1265d5748269994f1d67d73122b8c1b3032a9e7da72ede23fb00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b864e47dc0000040300473045022100d074481e3c070258a33c7cc21c54a8c46f187017af47fffdb1780f2676a2db350220104bf0163cb9e369ce969c4f111e9b3d8af35aa71df33799c0312ebf32f30a96007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b864e48470000040300483046022100aa8d20616657763db3832ff07e6fab8e8ee2ef5b8956ab080b7be5da302ba37a022100f081bdeecfd8d44785a8078733c8826d72d78f34bd80ff388593cc4b01059914
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003b52c5f82e8eda5685e2b3463e6582a8d28cd5a513efd416bfba134c7af0492c2f7e63c47b5715fe0c39f1b3a6969dd6811f0133a39bc7256f455cb6d09437c406df6d7b2e16cac029134ac8a463e4391b5be06316b644e2033b0f43bc013384e66bc3dc0a2e9b790ff59f70c535ab971012b6c7dbfae50f730c06fe54be0aa85646238c8cd5d1ec5c618be73c46cf580bddefca5ecf191bb72fc8f0856291135d330f5282d67e28ced5e7aadfc818b59e93996cc2b964914e9e900fec6fa294444a533dd93b49c2152acc45ea2e7c166e63fd332394fc698469acf742c79f96b1b3edb22089d8d5828988055681515a7a29b2082bca54d5b7d845f7f0ce6ffa