vpnc.atruvia.de

- Atruvia AG -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 65:f1:b7:ff:46:02:d3:3c:0f:75:b9:cc:d3:9d:49:45 was issued on by D-Trust GmbH.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Atruvia AG

Company registration number: CSM030299601
Organization: Atruvia AG
State / Province: Baden-Wuerttemberg
Locality: Karlsruhe
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 65:f1:b7:ff:46:02:d3:3c:0f:75:b9:cc:d3:9d:49:45
Serial Number (int): 135507103022989672081233946163365628229
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 98:fa:c0:07:ca:67:5d:fc:3d:88:3f:a2:29:2d:b3:89:92:8e:33:7f
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 43:41:ec:f3:b5:7f:d4:f9:25:92:ce:1b:2c:0f:18:0b:ff:74:d7:39
Fingerprint (sha256): 27:9f:b8:9c:57:4c:5f:1e:6e:63:58:06:3a:53:2e:3f:ce:52:3c:af:a6:63:b4:07:71:b5:d8:eb:56:57:04:5b

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate vpnc.atruvia.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpnc.atruvia.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ms.vpnc.atruvia.de
vpnc.atruvia.de
ka.vpnc.atruvia.de

Other certificates including the domain name atruvia.de

(limited to 100 certificates)
fints-test.atruvia.de
atruvia.de
fiduciagad.de
paydirekt-ms.atruvia.de
agree21itsm.atruvia.de
webdav-uit-a.fiducia.de
test1333.atruvia.de
atruvia.de
fints1.atruvia.de
vpnb-inte.atruvia.de
karriere.atruvia.de
vpnc.atruvia.de
vpnb-ms.fiduciagad.de
KA-E.VPNB.ATRUVIA.DE
vpnb-ka.atruvia.de
test1333.atruvia.de
awbt.atruvia.de
matomo.atruvia.de
vpnc.atruvia.de
agree21mdm.atruvia.de
api-test.atruvia.de
KA-E.VPNB.ATRUVIA.DE
test1333.atruvia.de
ckm20230620dt.atruvia.de
paydirekt.atruvia.de
citrix-t.uit.fiducia.de
agree21itsm.atruvia.de
api-test.atruvia.de
besuchermanagement.atruvia.de
api-test.atruvia.de
citrix-t.uit.fiducia.de
vpns-inte.atruvia.de
vrnetworldsoftware-inte.atruvia.de
citrix-t.uit.fiducia.de
digitale-privatbank.atruvia.de
citrix-p.uit.fiducia.de
datenservice.atruvia.de
besuchermanagement-test.atruvia.de
citrix-t.uit.fiducia.de
lp.atruvia.de
geno-dfin-inte.fiduciagad.de
shop-qas.scc.atruvia.de
besuchermanagement-test.atruvia.de
api-test.atruvia.de
test1333.atruvia.de
atruvia.de
datenservice-test.atruvia.de
fiduciagad.de
*.hub-satu.atruvia.de
*.hub-witu.atruvia.de
uit-abnahme-sharepoint.fiducia.de
citrix-t.uit.fiducia.de
fints2.atruvia.de
atruvia.de
vpns.fiduciagad.de
p2.giroapi.atruvia.de
vrnetworldsoftware.atruvia.de
proficash-updates.atruvia.de
integrationsplattform-01.atruvia.de
vpnc-inte.atruvia.de
shop-dev.scc.atruvia.de
awbt-inte.atruvia.de
citrix-a.uit.fiducia.de
besuchermanagement.atruvia.de
api-test.atruvia.de
vrnetworldsoftware.atruvia.de
proficash-updates.atruvia.de
atruvia.de
paydirekt-ms.atruvia.de
fiduciagad.de
p1.giroapi.atruvia.de
lightsout.atruvia.de
uit-sharepoint.fiducia.de
shop.scc.atruvia.de
*.hub-satu.atruvia.de
integrationsplattform-02.atruvia.de
*.hub-demo.atruvia.de

Certificate

The complete raw certificate details for vpnc.atruvia.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHFDCCBfygAwIBAgIQZfG3/0YC0zwPdbnM051JRTANBgkqhkiG9w0BAQsFADBM
MQswCQYDVQQGEwJERTEVMBMGA1UECgwMRC1UcnVzdCBHbWJIMSYwJAYDVQQDDB1E
LVRSVVNUIFNTTCBDbGFzcyAzIENBIDEgMjAwOTAeFw0yMjA1MDkwNDU0MTlaFw0y
MzA1MTIwNDU0MTlaMIGEMRUwEwYDVQQFEwxDU00wMzAyOTk2MDExCzAJBgNVBAYT
AkRFMRswGQYDVQQIExJCYWRlbi1XdWVydHRlbWJlcmcxEjAQBgNVBAcTCUthcmxz
cnVoZTETMBEGA1UEChMKQXRydXZpYSBBRzEYMBYGA1UEAxMPdnBuYy5hdHJ1dmlh
LmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnn8nuzCMmsE+wSZ
pH0GrUnW7R1oC9N5M2Q3HHnAP8aHhpRRhG87b250BuDEc6Xm4vuPW/eZNIIbAXYr
5WeepNeVHncv8CUw5A6P+iQKqmPXI2NfaXn6i9p57PP6gVHcKG01gC3qCto+IeF0
OPVW2KGo/SDjWQZEC3YYmPVwgmab7k7ob6v7pum6o+nazM+lfWHiH1ADUv5pRApX
fVPNKo1x91ZWE7qD6xEExWi8fnAiFTbeVpXrKAwTCi0X/b1nPiMYtQL6xYU5DAlX
vOnQ3Z8cFIeGVHyvrDvMhBYOK2twTM25pjiujsgLd35CenmQre0QxziKNmJJN0MQ
9QcLUQIDAQABo4IDtzCCA7MwggEWBggrBgEFBQcBAQSCAQgwggEEMDMGCCsGAQUF
BzABhidodHRwOi8vc3NsLWMzLWNhMS0yMDA5Lm9jc3AuZC10cnVzdC5uZXQwTAYI
KwYBBQUHMAKGQGh0dHA6Ly93d3cuZC10cnVzdC5uZXQvY2dpLWJpbi9ELVRSVVNU
X1NTTF9DbGFzc18zX0NBXzFfMjAwOS5jcnQwfwYIKwYBBQUHMAKGc2xkYXA6Ly9k
aXJlY3RvcnkuZC10cnVzdC5uZXQvQ049RC1UUlVTVCUyMFNTTCUyMENsYXNzJTIw
MyUyMENBJTIwMSUyMDIwMDksTz1ELVRydXN0JTIwR21iSCxDPURFP2NBQ2VydGlm
aWNhdGU/YmFzZT8weQYDVR0gBHIwcDAIBgZngQwBAgIwCAYGBACPegEHMFoGCysG
AQQBpTQCgUgBMEswSQYIKwYBBQUHAgEWPWh0dHA6Ly93d3cuZC10cnVzdC5uZXQv
aW50ZXJuZXQvZmlsZXMvRC1UUlVTVF9DU01fUEtJX0NQUy5wZGYwEwYKKwYBBAHW
eQIEAwEB/wQCBQAwMwYDVR0SBCwwKoEQaW5mb0BkLXRydXN0Lm5ldIYWaHR0cDov
L3d3dy5kLXRydXN0Lm5ldDCCAR0GA1UdHwSCARQwggEQMIIBDKCCAQigggEEhnls
ZGFwOi8vZGlyZWN0b3J5LmQtdHJ1c3QubmV0L0NOPUQtVFJVU1QlMjBTU0wlMjBD
bGFzcyUyMDMlMjBDQSUyMDElMjAyMDA5LE89RC1UcnVzdCUyMEdtYkgsQz1ERT9j
ZXJ0aWZpY2F0ZXJldm9jYXRpb25saXN0hkBodHRwOi8vY3JsLmQtdHJ1c3QubmV0
L2NybC9kLXRydXN0X3NzbF9jbGFzc18zX2NhXzFfMjAwOS5kZXIuY3JshkVodHRw
Oi8vY2RuLmQtdHJ1c3QtY2xvdWRjcmwubmV0L2NybC9kLXRydXN0X3NzbF9jbGFz
c18zX2NhXzFfMjAwOS5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MEIGA1UdEQQ7MDmCEm1zLnZwbmMuYXRydXZpYS5kZYIPdnBuYy5hdHJ1dmlhLmRl
ghJrYS52cG5jLmF0cnV2aWEuZGUwHwYDVR0jBBgwFoAUUBkylJrEtQRNVtDAgyHV
NVWwsXowDgYDVR0PAQH/BAQDAgWgMB0GA1UdDgQWBBSY+sAHymdd/D2IP6IpLbOJ
ko4zfzANBgkqhkiG9w0BAQsFAAOCAQEAA829F/NZSYJStnHPNO9uaKW32ZcGRgxm
vv+iRCcDhcciUDhfiHwHQOemLLn5NGZuC0SaT+3QlxnvnZEnSZlneXrNDfGOdG0Q
xlVxwdJX1htaKkaGtAqv379ov64ZU/GIbLLuha5LUIsQohYGryklstNBvd5kh4da
Jn73rcLQur2w0ywnWaYnNk+r49VQUtCaYXlEv6ZhxhGFounjRYoV4TIk8EFWwvwh
emyXk+isAgkd8bFsRUrJDMRwWbdhAM6iF0E5iXa8DbTx0/LW4oH8qQVFlVLtV4WX
V8UIxiIuuyZztaeMrsAraQSGkTa9o/dmQIVatSCGoiYovzIpwtHTFg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnn8nuzCMmsE+wSZpH0G
rUnW7R1oC9N5M2Q3HHnAP8aHhpRRhG87b250BuDEc6Xm4vuPW/eZNIIbAXYr5Wee
pNeVHncv8CUw5A6P+iQKqmPXI2NfaXn6i9p57PP6gVHcKG01gC3qCto+IeF0OPVW
2KGo/SDjWQZEC3YYmPVwgmab7k7ob6v7pum6o+nazM+lfWHiH1ADUv5pRApXfVPN
Ko1x91ZWE7qD6xEExWi8fnAiFTbeVpXrKAwTCi0X/b1nPiMYtQL6xYU5DAlXvOnQ
3Z8cFIeGVHyvrDvMhBYOK2twTM25pjiujsgLd35CenmQre0QxziKNmJJN0MQ9QcL
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 135507103022989672081233946163365628229
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-09 04:54:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-12 04:54:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM030299601'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atruvia AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpnc.atruvia.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18995899677956868348669644406408297068224803909193441690660107139599864455976505724661627903410155975861036383449195426388622517207363182333733607148675878738060877462569125581300389322908337649444980587643677888516962889527032490496766511577577815134629095224867487615037940397554651319026053888805931373761384959453177155285011306733701870957746364635572813758035298087699679609275918404697193477969503951171989611989222899318951602199075779869519787195955767678901359758683550318896804640196197028124155217084486766502634711723336096577639553142599877395506108317107053778823494882225520658162540365601564860549969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.vpnc.atruvia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpnc.atruvia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ka.vpnc.atruvia.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							98fac007ca675dfc3d883fa2292db389928e337f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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