giropay.sparkasse-rhein-nahe.de

- Sparkasse Rhein-Nahe -

Issued by QuoVadis EV SSL ICA G3

About this certificate

This digital certificate with serial number 1c:b2:63:b2:b6:7b:6e:38:95:5a:c8:5f:28:21:b3:08:31:14:10:30 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sparkasse Rhein-Nahe

Company registration number: HRA 3085
Organization: Sparkasse Rhein-Nahe
Organization unit: Sparkasse Rhein-Nahe
State / Province: Rheinland-Pfalz
Locality: Bad Kreuznach
Country: DE

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:b2:63:b2:b6:7b:6e:38:95:5a:c8:5f:28:21:b3:08:31:14:10:30
Serial Number (int): 163829959157534897083696889842732194747523534896
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 0e:48:d8:8a:9f:f7:2e:db:2c:0f:c9:59:24:cb:2c:59:66:cb:5d:f1
AuthorityKeyId: e5:84:54:d0:90:49:9f:38:ba:f2:c9:e1:2a:08:c5:4e:9f:a0:48:3f

Fingerprint (sha1): 04:81:43:f2:c0:d4:c1:66:42:29:c9:79:de:5b:68:3e:f4:b9:61:c9
Fingerprint (sha256): 18:97:3c:bb:60:25:d8:12:65:1d:5d:ae:1a:cb:72:16:ab:e8:f5:4c:8a:b7:85:c2:e0:19:a0:3e:62:83:63:fc

Issuing Certificate URL: http://trust.quovadisglobal.com/qvevsslg3.crt

Revocation information

OCSP Server: http://ev.ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvevsslg3.crl

Check the revocation status for certificate giropay.sparkasse-rhein-nahe.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for giropay.sparkasse-rhein-nahe.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

giropay.sparkasse-rhein-nahe.de

Other certificates including the domain name sparkasse-rhein-nahe.de

(limited to 100 certificates)
giropay.sparkasse-rhein-nahe.de
praktikum.sparkasse-rhein-nahe.de
module.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
news.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
praktikum.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
news.sparkasse-rhein-nahe.de
*.blog.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
news.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
news.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
module.sparkasse-rhein-nahe.de
sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
praktikum.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
*.blog.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
digi-check.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
digi-check.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
module.sparkasse-rhein-nahe.de
psd2-xs2a.sparkasse-rhein-nahe.de
digi-check.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
digi-check.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
module.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
*.blog.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de

Certificate

The complete raw certificate details for giropay.sparkasse-rhein-nahe.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG4TCCBMmgAwIBAgIUHLJjsrZ7bjiVWshfKCGzCDEUEDAwDQYJKoZIhvcNAQEL
BQAwSTELMAkGA1UEBhMCQk0xGTAXBgNVBAoMEFF1b1ZhZGlzIExpbWl0ZWQxHzAd
BgNVBAMMFlF1b1ZhZGlzIEVWIFNTTCBJQ0EgRzMwHhcNMTkwMzExMTMyMzExWhcN
MjAxMjAxMDAwMDAwWjCCATAxEzARBgsrBgEEAYI3PAIBAxMCREUxIDAeBgsrBgEE
AYI3PAIBAgwPUmhlaW5sYW5kLVBmYWx6MR4wHAYLKwYBBAGCNzwCAQEMDUJhZCBL
cmV1em5hY2gxHTAbBgNVBA8MFFByaXZhdGUgT3JnYW5pemF0aW9uMREwDwYDVQQF
EwhIUkEgMzA4NTELMAkGA1UEBhMCREUxGDAWBgNVBAgMD1JoZWlubGFuZC1QZmFs
ejEWMBQGA1UEBwwNQmFkIEtyZXV6bmFjaDEdMBsGA1UECgwUU3Bhcmthc3NlIFJo
ZWluLU5haGUxHTAbBgNVBAsMFFNwYXJrYXNzZSBSaGVpbi1OYWhlMSgwJgYDVQQD
DB9naXJvcGF5LnNwYXJrYXNzZS1yaGVpbi1uYWhlLmRlMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEA5xChrUdtTZGBDWUwYQC5XWS7fLGiHhVKpGqxyUcN
JSZErsvIip/JYeGmEU948kdkN6ED3wTEjawuhC1HpQJMbgsYcWR0Bi4eiATJRDHx
ci+Hc8R0MKwPl//NYWQTqoDnofi7ubb8pw1opo7JUxMmmWKtrwEsAuXjHzdy2fcR
bW/KnkgxU8T0QYuooYd50IERQf9Fbrvs4gC98Ei6qSpQvoN7NQ4508d2lkVWeRTU
8Es3y9AikMwVij6Djlf/CXeyrBz0Xglzdi1FM+mtvp1IecINBsOaWsOSQ9KNKBU9
jsCK0yqpjdDCNzSSG/2UdzW31XgBcGRWPCbRwjO5BxK5RwIDAQABo4IB1jCCAdIw
DAYDVR0TAQH/BAIwADAfBgNVHSMEGDAWgBTlhFTQkEmfOLryyeEqCMVOn6BIPzB4
BggrBgEFBQcBAQRsMGowOQYIKwYBBQUHMAKGLWh0dHA6Ly90cnVzdC5xdW92YWRp
c2dsb2JhbC5jb20vcXZldnNzbGczLmNydDAtBggrBgEFBQcwAYYhaHR0cDovL2V2
Lm9jc3AucXVvdmFkaXNnbG9iYWwuY29tMCoGA1UdEQQjMCGCH2dpcm9wYXkuc3Bh
cmthc3NlLXJoZWluLW5haGUuZGUwWgYDVR0gBFMwUTBGBgwrBgEEAb5YAAJkAQIw
NjA0BggrBgEFBQcCARYoaHR0cDovL3d3dy5xdW92YWRpc2dsb2JhbC5jb20vcmVw
b3NpdG9yeTAHBgVngQwBATAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEw
PAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2NybC5xdW92YWRpc2dsb2JhbC5jb20v
cXZldnNzbGczLmNybDAdBgNVHQ4EFgQUDkjYip/3LtssD8lZJMssWWbLXfEwDgYD
VR0PAQH/BAQDAgWgMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUA
A4ICAQA2i2dyApaFOs+qXFNPXIZUYoyIlIbO5Q5Dx2Lugc0QMHIsrltjQXFpiSbX
D+kRzvs9Vw6rbhLbFPpLu3r+FhGWsKdatGjYRH204CZdRH5IBGiHoMkqYBaru/sE
y5bAjuiuD7497TtJ6SesXYtrfB3P+RenNrbGzBgQ+aGCtV2ecG3FyGuojy8YauYP
iKUDlPcDREfqpo/VjEbYViNxr5QQHGDLLQxAFdvR6AOwQ+qcHNEUj1GSH6eyeS8f
MxJcJx3colbUr00k2eL44rsNi0qC0QpH3nlyy24KcE9i6ahatZ2wbOF73gs0EfWn
kl1ngPQWFB8w99yPfWvq0DjpQ0FDqoAXyEm+sBzpnQLmwAp2Zn8Q/lU1YWeN8O4M
2j1LnweBKGN0Aq+egcoKMDW2IJdUW19GyT0PfSUxrPTvwOtHbblxJqjp7tzLQAir
JcLSKiQblFgl5qEavTkLtWG7cIDbrhVBmmZ/1t6hckagGg9iHPB5KtUjeA5CdG2Y
uF1K6zSkHSWvXVKpoh2pylvSI8O1tKUr+MjLZQM4zGcpnIIHeTODxcfMkYT0J0Gq
wt7iQsNwR1AmY7Pxx7jx6WG56JdItovP6RRTZt6zOydLqTKW3ZucMtGX/nwKWWtY
ho4AcxKIt3rgTBucIe23yrFHyh6mYf83IHZs/tgpUFyhJPj6eA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xChrUdtTZGBDWUwYQC5
XWS7fLGiHhVKpGqxyUcNJSZErsvIip/JYeGmEU948kdkN6ED3wTEjawuhC1HpQJM
bgsYcWR0Bi4eiATJRDHxci+Hc8R0MKwPl//NYWQTqoDnofi7ubb8pw1opo7JUxMm
mWKtrwEsAuXjHzdy2fcRbW/KnkgxU8T0QYuooYd50IERQf9Fbrvs4gC98Ei6qSpQ
voN7NQ4508d2lkVWeRTU8Es3y9AikMwVij6Djlf/CXeyrBz0Xglzdi1FM+mtvp1I
ecINBsOaWsOSQ9KNKBU9jsCK0yqpjdDCNzSSG/2UdzW31XgBcGRWPCbRwjO5BxK5
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 163829959157534897083696889842732194747523534896
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis EV SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-11 13:23:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-01 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rheinland-Pfalz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bad Kreuznach'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 3085'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rheinland-Pfalz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bad Kreuznach'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sparkasse Rhein-Nahe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sparkasse Rhein-Nahe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'giropay.sparkasse-rhein-nahe.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29169249770269065945964965419617754864945794823176680166685443126048567002274966791658515368778951341050387821922152897112846752981541756985477957774383424383359517342542652390374487240172290771456833259287809288399716479714760011474680451438900368519374691395070676174490812916462092322524588778312948345818612637979742156237705527176707106760727990537387669061427558761542291059074939321736365899230947443996374888718422496364088611514201473578615104301907984890369339527337228312913292944544782125848028325535621582255942557049545145422809173383018059776382367547953131818788610569405929010507385679057741109442887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e58454d090499f38baf2c9e12a08c54e9fa0483f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvevsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ev.ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giropay.sparkasse-rhein-nahe.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvevsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e48d88a9ff72edb2c0fc95924cb2c5966cb5df1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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