*.coffeelinkng.schaerer.com

- WMF GmbH -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 73:a0:7d:62:1c:c4:d2:91:75:29:6d:b7:ea:f5:ba:32 was issued on by D-Trust GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

WMF GmbH

Company registration number: CSM028685391
Organization: WMF GmbH
State / Province: Baden-Wuerttemberg
Locality: Geislingen an der Steige
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 73:a0:7d:62:1c:c4:d2:91:75:29:6d:b7:ea:f5:ba:32
Serial Number (int): 153694530087094804777034591087719987762
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 85:d0:fb:9d:ae:81:34:68:2c:7e:2a:04:b9:cb:de:90:da:43:ac:b5
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): ee:22:ce:6a:c8:cf:6e:ca:0d:4f:bc:1b:bc:d5:1c:59:0c:ef:8f:84
Fingerprint (sha256): 35:37:a2:3f:b9:e9:fc:c0:2b:15:4b:7f:cd:1d:9d:b4:d9:16:90:5e:61:46:ef:ce:9f:04:05:97:92:f5:e4:71

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate *.coffeelinkng.schaerer.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.coffeelinkng.schaerer.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

coffeelinkng.schaerer.com
*.coffeelinkng.schaerer.com

Other certificates including the domain name schaerer.com

(limited to 100 certificates)
schaerer.com
schaerer.com
usa.schaerer.com
coffeelinkng.schaerer.com
schaerer.com
mcstaging.schaerer.com
owa.wmf.com
schaerer.com
schaerer.com
schaerer.com
schaerer.com
*.coffeelinkng.schaerer.com
*.schaerer.com
*.schaerer.com
coffelink.schaerer.com
*.coffeelinkng.schaerer.com
coffeelink.schaerer.com
usa.schaerer.com
owa.wmf.com
coffeelink.schaerer.com
schaerer.com
schaerer.com
schaerer.com
*.schaerer.com
schaerer.com
logintest.coffeelinkng.schaerer.com
logintest.coffeelinkng.schaerer.com
usa.schaerer.com
schaerer.com
usa.schaerer.com
usa.schaerer.com
time.schaerer.com
*.coffeelinkng.schaerer.com
coffeelink.schaerer.com
coffeelink.schaerer.com
schaerer.com
schaerer.com
usa.schaerer.com
usa.schaerer.com
schaerer.com
time.schaerer.com
usa.schaerer.com
*.schaerer.com
www.schaerer.com
schaerer.com
time.schaerer.com
schaerer.com
*.coffeelinkng.schaerer.com
schaerer.com
*.schaerer.com
schaerer.com
usa.schaerer.com
*.schaerer.com
usa.schaerer.com
coffeelink-int.schaerer.com
schaerer.com
login.coffeelinkng.schaerer.com
schaerer.com
*.coffeelinkng.schaerer.com
schaerer.com
coffeelink-int.schaerer.com
schaerer.com
schaerer.com

Certificate

The complete raw certificate details for *.coffeelinkng.schaerer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIILDCCBxSgAwIBAgIQc6B9YhzE0pF1KW236vW6MjANBgkqhkiG9w0BAQsFADBM
MQswCQYDVQQGEwJERTEVMBMGA1UECgwMRC1UcnVzdCBHbWJIMSYwJAYDVQQDDB1E
LVRSVVNUIFNTTCBDbGFzcyAzIENBIDEgMjAwOTAeFw0yMjAxMTAwODU1MjFaFw0y
MzAxMTMwODU1MjFaMIGdMRUwEwYDVQQFEwxDU00wMjg2ODUzOTExCzAJBgNVBAYT
AkRFMRswGQYDVQQIExJCYWRlbi1XdWVydHRlbWJlcmcxITAfBgNVBAcTGEdlaXNs
aW5nZW4gYW4gZGVyIFN0ZWlnZTERMA8GA1UEChMIV01GIEdtYkgxJDAiBgNVBAMM
GyouY29mZmVlbGlua25nLnNjaGFlcmVyLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQAD
ggIPADCCAgoCggIBAM1Z0101syrhKL6ehdTeyRB8tQztIXNoTkjF5NQUvRaKLyvM
vS3my8IwqSItTdCGdCyf2as1J8ezgGlCxPOihwSk3+jXYgKhZCbGe+ckx80+wB2L
pWAk3pU8pruDP4PyQLu+0MsjsiKmAPcXyP2wbseMe1sShefM5NulCci4g0Uwna9M
4IqJO7RpRyV5WDBiJriCpp1mq/A4pQxamgQscaFMUw4HdsxGG+6iSrSxk5EVLnZp
nYOGf3yX/MsOGX0W3ZswhYJCYW2M6o0HBi27UH0hvl2jWMJ4BuVcS0xjL9dS7T/k
uDghpv2ACci+ZQ+IAvPQyij4MQ8CytuCkWE3cIzv3jyz/xihuTqZWTPgs/ub9NG6
DJ/AEqU7E6TmXwOo9yBcOAvxr2dKjXZZAlOfixlRhQkzYEw6RiH1FIj7ZgG+mJeS
t2ijqSxYV8gOG2fbTsC/FvmTyeLxUH10PLq7XhLrML5P28u4Vfd+Gem1iCCah+dh
fC3Si+saoDgwHzRbgKE40yimyUTaSCIu/4KT/TU5KiA809VkuJ/THyaCwoBXcapU
iJx5U/lo4HtEzWswdECax/v80xLXvVmhpNnzWDcrEMu/vqaSvfRgCEJxIxg1qKjo
ksvOUf6GG99+N5hPn1QcT3f9nRAc5ZUtNZgJKFEHr1F020YG+RLbss+Kk4IzAgMB
AAGjggO2MIIDsjCCARYGCCsGAQUFBwEBBIIBCDCCAQQwMwYIKwYBBQUHMAGGJ2h0
dHA6Ly9zc2wtYzMtY2ExLTIwMDkub2NzcC5kLXRydXN0Lm5ldDBMBggrBgEFBQcw
AoZAaHR0cDovL3d3dy5kLXRydXN0Lm5ldC9jZ2ktYmluL0QtVFJVU1RfU1NMX0Ns
YXNzXzNfQ0FfMV8yMDA5LmNydDB/BggrBgEFBQcwAoZzbGRhcDovL2RpcmVjdG9y
eS5kLXRydXN0Lm5ldC9DTj1ELVRSVVNUJTIwU1NMJTIwQ2xhc3MlMjAzJTIwQ0El
MjAxJTIwMjAwOSxPPUQtVHJ1c3QlMjBHbWJILEM9REU/Y0FDZXJ0aWZpY2F0ZT9i
YXNlPzB5BgNVHSAEcjBwMAgGBgQAj3oBBzAIBgZngQwBAgIwWgYLKwYBBAGlNAKB
SAEwSzBJBggrBgEFBQcCARY9aHR0cDovL3d3dy5kLXRydXN0Lm5ldC9pbnRlcm5l
dC9maWxlcy9ELVRSVVNUX0NTTV9QS0lfQ1BTLnBkZjATBgorBgEEAdZ5AgQDAQH/
BAIFADAzBgNVHRIELDAqgRBpbmZvQGQtdHJ1c3QubmV0hhZodHRwOi8vd3d3LmQt
dHJ1c3QubmV0MIIBHQYDVR0fBIIBFDCCARAwggEMoIIBCKCCAQSGeWxkYXA6Ly9k
aXJlY3RvcnkuZC10cnVzdC5uZXQvQ049RC1UUlVTVCUyMFNTTCUyMENsYXNzJTIw
MyUyMENBJTIwMSUyMDIwMDksTz1ELVRydXN0JTIwR21iSCxDPURFP2NlcnRpZmlj
YXRlcmV2b2NhdGlvbmxpc3SGQGh0dHA6Ly9jcmwuZC10cnVzdC5uZXQvY3JsL2Qt
dHJ1c3Rfc3NsX2NsYXNzXzNfY2FfMV8yMDA5LmRlci5jcmyGRWh0dHA6Ly9jZG4u
ZC10cnVzdC1jbG91ZGNybC5uZXQvY3JsL2QtdHJ1c3Rfc3NsX2NsYXNzXzNfY2Ff
MV8yMDA5LmNybDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwQQYDVR0R
BDowOIIZY29mZmVlbGlua25nLnNjaGFlcmVyLmNvbYIbKi5jb2ZmZWVsaW5rbmcu
c2NoYWVyZXIuY29tMB8GA1UdIwQYMBaAFFAZMpSaxLUETVbQwIMh1TVVsLF6MA4G
A1UdDwEB/wQEAwIFoDAdBgNVHQ4EFgQUhdD7na6BNGgsfioEucvekNpDrLUwDQYJ
KoZIhvcNAQELBQADggEBAAcOAWOLBf67AIILM+UorzkvGb8f1l+U/7ufrY6QnbLz
P939vF2AnTVYoyVZkj4mAPQjyMhJtQVqBlPWgUrZyLsvDlYRayJjJ168t7FHV9EP
yPQ8QTJuy9OjjPYBVj/er5Zyu7/FkK4D5BrYElg+DEespu+bsPRUb/MfpjII4ZAz
i0PDhawwBOQbGP/aI427j6MVDY9A3PQSV9py9G/MIY2WSrubqjV47np4tNa+ccas
TLtR73o/nE/qefOegk1SdppoDHEPI0nRiiW1feJamPGIrzIpoJOAdvrmH5gxSHPT
5O4WiaBhJR64qjs6cjuO3+G69mYY3Kl92IujnjiIOcE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 153694530087094804777034591087719987762
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-10 08:55:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-13 08:55:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM028685391'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Geislingen an der Steige'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WMF GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.coffeelinkng.schaerer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 837758505207937668640504042123185511527286181103988673590569621423885707396362756930115759180737365723261577096360717584329632944501055325012261763113380671287547551369223084094988841768151129929574916710735478021556058911054328733033420429168697906401085662088689434649423466093700951732290311189643699183243427417910436112399504399351163196823821806567760424962247064490837344802912852789783158329631670466552862142814001529352054568779549043663429521021484038648411028269978970059433385467757998680316509820649754274419937241872240907852545101130984780281309901428829110558021044666188994148518782728746540405932041760858863892464374317458693594599930085076308505662775131675246763426459446624040950279092663716665692707165731712641965939449978026404973437800305764190442940680577811635653023022999891647361559626974887563112417078560491992086623264206611792059668519456954903871452955711989234108199087966142421991953819614804878550531535903500328495202386512592925246661373184186155489189557413128091599991750065795873438277327131031835867418570970263189887672531968555149353421834958128642124275615946628520689420310257600731690936047433888833654645256227751234963601262816219364464743036201047963092219584057495883775177097779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffeelinkng.schaerer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coffeelinkng.schaerer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85d0fb9dae8134682c7e2a04b9cbde90da43acb5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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