csr.huk.de

- HUK-COBURG Haftpflicht-Unterstuetzungs-Kasse Deutschlands a.G. -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 67:37:10:9d:f3:2f:ec:61:fe:1a:bb:ba:74:4b:33:a4 was issued on by D-Trust GmbH.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

HUK-COBURG Haftpflicht-Unterstuetzungs-Kasse Deutschlands a.G.

Company registration number: CSM041025598
Organization: HUK-COBURG Haftpflicht-Unterstuetzungs-Kasse Deutschlands a.G.
State / Province: Bayern
Locality: Coburg
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): 67:37:10:9d:f3:2f:ec:61:fe:1a:bb:ba:74:4b:33:a4
Serial Number (int): 137196396925703716781132115151350870948
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d0:fb:29:0c:71:63:80:9e:b2:6a:02:36:2f:fb:a3:42:f0:e4:fe:8e
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 6c:3a:b8:7e:21:b7:db:ea:93:0c:82:c7:2d:2c:95:e4:ef:33:8a:32
Fingerprint (sha256): 30:5f:9a:22:32:8c:78:d0:6d:5b:2c:f5:c4:0d:4e:c9:4e:c5:e9:f0:57:5b:03:4d:f0:41:9e:d4:7f:89:bb:25

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate csr.huk.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for csr.huk.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

csr.huk.de

Other certificates including the domain name huk.de

(limited to 100 certificates)
huk.de
appconnect.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
dev.bot-tas.huk.de
ci-euw1.ireland.delivery.aimatch.net
vtpcert.huk.de
ci-euw1.ireland.delivery.aimatch.net
vtppin2.huk.de
auth1test.huk.de
mail.huk.de
ip.huk.de
partner3t.huk.de
vtpcert.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
vtp.huk.de
oa.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
appconnect1.huk.de
partner3.huk.de
ci-euw1.ireland.delivery.aimatch.net
api1.huk.de
cagt.huk.de
vtppin2.huk.de
auth2.huk.de
icf.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
www.cagt.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
officeonline.huk.de
oa.huk.de
api.huk.de
ci-euw1.ireland.delivery.aimatch.net
somni.huk.de
dev.bot-telematik.huk.de
*.webcon1.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
api1.huk.de
vpngw.huk-coburg.de
auth1.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
uvw.huk.de
dev.bot-tas.huk.de
ci-euw1.ireland.delivery.aimatch.net
ip.huk.de
vtpcert.huk.de
api.huk.de
auth1.huk.de
ci-euw1.ireland.delivery.aimatch.net
csr.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
sas-sess.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
oa.huk.de
*.webcon1.huk.de
oa.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
vtpservice2.huk.de
ci-euw1.ireland.delivery.aimatch.net
appconnect.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
www.huk.de
ci-euw1.ireland.delivery.aimatch.net
somni.huk.de
ci-euw1.ireland.delivery.aimatch.net
auth1.huk.de
mail.huk.de
ci-euw1.ireland.delivery.aimatch.net

Certificate

The complete raw certificate details for csr.huk.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHAjCCBeqgAwIBAgIQZzcQnfMv7GH+Gru6dEszpDANBgkqhkiG9w0BAQsFADBM
MQswCQYDVQQGEwJERTEVMBMGA1UECgwMRC1UcnVzdCBHbWJIMSYwJAYDVQQDDB1E
LVRSVVNUIFNTTCBDbGFzcyAzIENBIDEgMjAwOTAeFw0yNDAzMTgwNzI5MzNaFw0y
NTAzMjEwNzI5MzNaMIGkMRUwEwYDVQQFEwxDU00wNDEwMjU1OTgxCzAJBgNVBAYT
AkRFMQ8wDQYDVQQIEwZCYXllcm4xDzANBgNVBAcTBkNvYnVyZzFHMEUGA1UEChM+
SFVLLUNPQlVSRyBIYWZ0cGZsaWNodC1VbnRlcnN0dWV0enVuZ3MtS2Fzc2UgRGV1
dHNjaGxhbmRzIGEuRy4xEzARBgNVBAMTCmNzci5odWsuZGUwggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQDJ7dppUV4oVl2p+q5+p6MfpCaYiSp8jT2WVNIO
CTKZ12krHi8S24lKW+uyqe2HtVsh9rJ6tP/GBkNljAl9ywzizZyK3fY9IlkghP3g
ftRvpZJri6YcT8jcKE8D1pzoMW0fO9SG8JT+ef3K6e+AXBTab2Ty2xzmSBrMFcSC
yq/BtBGOxsIFOOAckysqRbL77OmF7J2XPov6XyXYUlFRrIG4EOyMhpKuQRKQDqQF
TGOHDTut1K17mDtkPd0nSsPPmbzGILoJdpdcz1mJz7SmjH13CnLnlrG/V7rLttLq
IRsAnLzc1cbuAoHEXVppJAZ3GJVX1PDnzoL0Dl5+BtBv87JwEppteqI20x92b5mS
RndBuvh0Lllzs5qFV550Ln80BBoedo92PkkOWjd7f8Z38L58ti6cU7WtC3XWZ5bk
wkLwJNmRoZGr24wupUjYUhjhhzDzknODwTlS2HuqYupQW4pI6PIfNHVtRTdpfPH2
akjaDa62XlwpaO73lE43Gxms/GX4d/Pid+DXwNqAsvfhR9jJSl26+GUCaEG+nhKV
D3N8g8bCqSFANJeYANI2OY1j+sR4+4msJd1oUSOWgvZnYgofS5SGmc1PAaWcY9b0
Xtyv9TrVVL0tPLUeV+3UIvJEQCI1sjidJxV/WFmZCjq2TxmiEOCEw0lqCae36TVo
1JNvnwIDAQABo4IChTCCAoEwgZMGCCsGAQUFBwEBBIGGMIGDMDMGCCsGAQUFBzAB
hidodHRwOi8vc3NsLWMzLWNhMS0yMDA5Lm9jc3AuZC10cnVzdC5uZXQwTAYIKwYB
BQUHMAKGQGh0dHA6Ly93d3cuZC10cnVzdC5uZXQvY2dpLWJpbi9ELVRSVVNUX1NT
TF9DbGFzc18zX0NBXzFfMjAwOS5jcnQweQYDVR0gBHIwcDAIBgZngQwBAgIwCAYG
BACPegEHMFoGCysGAQQBpTQCgUgBMEswSQYIKwYBBQUHAgEWPWh0dHA6Ly93d3cu
ZC10cnVzdC5uZXQvaW50ZXJuZXQvZmlsZXMvRC1UUlVTVF9DU01fUEtJX0NQUy5w
ZGYwEwYKKwYBBAHWeQIEAwEB/wQCBQAwMwYDVR0SBCwwKoEQaW5mb0BkLXRydXN0
Lm5ldIYWaHR0cDovL3d3dy5kLXRydXN0Lm5ldDCBnQYDVR0fBIGVMIGSMIGPoIGM
oIGJhkBodHRwOi8vY3JsLmQtdHJ1c3QubmV0L2NybC9kLXRydXN0X3NzbF9jbGFz
c18zX2NhXzFfMjAwOS5kZXIuY3JshkVodHRwOi8vY2RuLmQtdHJ1c3QtY2xvdWRj
cmwubmV0L2NybC9kLXRydXN0X3NzbF9jbGFzc18zX2NhXzFfMjAwOS5jcmwwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBUGA1UdEQQOMAyCCmNzci5odWsu
ZGUwHwYDVR0jBBgwFoAUUBkylJrEtQRNVtDAgyHVNVWwsXowDgYDVR0PAQH/BAQD
AgWgMB0GA1UdDgQWBBTQ+ykMcWOAnrJqAjYv+6NC8OT+jjANBgkqhkiG9w0BAQsF
AAOCAQEAJu6UFtwno1EonST0iMbLYLU7Q0/LTF+og4/0xOF0Yx8nqT4fDqdNk5mm
fHQ7GmUG/BnDGl48hwqpH9NRojZ9L9j1gSpZcOzKzh83znJrMEnP6Xk0CByC9Rls
TTpXGNTsV7gyhQcjRezTKzFhfwVi75LziZPi0u0cHvY2ND0K0wAts4Ap9zC8YE2k
RbZllDaSNv21VzjGzJL5oRSSKOjjc0m6oDQoEQjO/GaTOCqVBtxOi7SX0hlV3d7M
yG4oKlc0BX4VBCBNyunQjAwLsExckwg7fZTwW09WspyEUPyYnSb5oR/bCduwI5WR
XrdJCsP9HAbCvKC1xFsqliV2yqV0Sw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAye3aaVFeKFZdqfqufqej
H6QmmIkqfI09llTSDgkymddpKx4vEtuJSlvrsqnth7VbIfayerT/xgZDZYwJfcsM
4s2cit32PSJZIIT94H7Ub6WSa4umHE/I3ChPA9ac6DFtHzvUhvCU/nn9yunvgFwU
2m9k8tsc5kgazBXEgsqvwbQRjsbCBTjgHJMrKkWy++zpheydlz6L+l8l2FJRUayB
uBDsjIaSrkESkA6kBUxjhw07rdSte5g7ZD3dJ0rDz5m8xiC6CXaXXM9Zic+0pox9
dwpy55axv1e6y7bS6iEbAJy83NXG7gKBxF1aaSQGdxiVV9Tw586C9A5efgbQb/Oy
cBKabXqiNtMfdm+ZkkZ3Qbr4dC5Zc7OahVeedC5/NAQaHnaPdj5JDlo3e3/Gd/C+
fLYunFO1rQt11meW5MJC8CTZkaGRq9uMLqVI2FIY4Ycw85Jzg8E5Uth7qmLqUFuK
SOjyHzR1bUU3aXzx9mpI2g2utl5cKWju95RONxsZrPxl+Hfz4nfg18DagLL34UfY
yUpduvhlAmhBvp4SlQ9zfIPGwqkhQDSXmADSNjmNY/rEePuJrCXdaFEjloL2Z2IK
H0uUhpnNTwGlnGPW9F7cr/U61VS9LTy1Hlft1CLyREAiNbI4nScVf1hZmQo6tk8Z
ohDghMNJagmnt+k1aNSTb58CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 137196396925703716781132115151350870948
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 07:29:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-21 07:29:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM041025598'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Coburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HUK-COBURG Haftpflicht-Unterstuetzungs-Kasse Deutschlands a.G.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'csr.huk.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 823798911859948940661884277629612782268702625740530577318135831417613286176654329700314721612584914435415438529140061123042260882441878248188444268221470249178834803303056855207482227736330721233608333713155306168284175420450671631543199086301799879683378934494417687620434215873418410342188766606253315043878698994412810061566555082598900147308496602510723019790948426087253125612978879367133358832695443130167275027289332599373639387214571771706456168412472195630587284506038643773700434324532886424718996805881697999227010076921291379299123207707449585917590220594840287082180525991302886936779142035138810253363308486184363894103491102818206089783141846473580159162819232006204795938572130086641676833069996716182474883518270816064096297442496462234545570746209704657101236745665581494221123846528976023463113423684223858101512873283672087366355448104533105600611150086495419628214443353845642098909245523818222758174373694807322724805972390240261383508749510237201722756323982060092289612221023573368975222746444463299829206448619021241563311536617496292791416314686813482943080771104060004698106368548856981850649506764376886852345757285923123038125503758634643143918744945295494236625275540540166824642530354861094756699828127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csr.huk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0fb290c7163809eb26a02362ffba342f0e4fe8e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0026ee9416dc27a351289d24f488c6cb60b53b434fcb4c5fa8838ff4c4e174631f27a93e1f0ea74d9399a67c743b1a6506fc19c31a5e3c870aa91fd351a2367d2fd8f5812a5970eccace1f37ce726b3049cfe97934081c82f5196c4d3a5718d4ec57b83285072345ecd32b31617f0562ef92f38993e2d2ed1c1ef636343d0ad3002db38029f730bc604da445b66594369236fdb55738c6cc92f9a1149228e8e37349baa034281108cefc6693382a9506dc4e8bb497d21955dddeccc86e282a5734057e1504204dcae9d08c0c0bb04c5c93083b7d94f05b4f56b29c8450fc989d26f9a11fdb09dbb02395915eb7490ac3fd1c06c2bca0b5c45b2a962576caa5744b