Erste Digital GmbH

- Erste Digital GmbH -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 09:cc:7c:78:5e:46:af:ef:9e:0c:26:9d:d1:a0:3a:ef was issued on by DigiCert, Inc..

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Erste Digital GmbH

Company registration number: 396294k
Organization: Erste Digital GmbH
Address: Am Belvedere 1
State / Province: Vienna
Locality: Vienna
Country: AT

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:cc:7c:78:5e:46:af:ef:9e:0c:26:9d:d1:a0:3a:ef
Serial Number (int): 13024805076552748776081881801953393391
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 85:fc:f9:6a:43:99:69:51:67:d7:49:d4:6e:da:4d:7f:bf:d0:69:a6
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): 04:3a:90:d7:e1:1a:99:85:25:bf:64:d6:93:6d:37:30:55:fe:ad:c0
Fingerprint (sha256): 38:73:cb:79:47:5f:f5:59:d0:47:6a:64:3f:9f:1c:cd:b6:2b:b5:92:ef:a2:67:a1:ed:a8:ee:a6:13:b0:32:48

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate Erste Digital GmbH

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Erste Digital GmbH

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

erstebank.at
sparkasse-ooe.at
spkooe.at
kag.at
diezweitesparkasse.at
kremserbank.at
kspk.at
smw.at
sparkasse.hbn.at
sparkassebaden.at
sparkasse-kitzbuehel.at
sparkasse-kufstein.at
sparkassenakademie.at
sparkasse-reutte.at
sparkasse-ried.at
sparkasse-schwaz.at
spkherzogenburg.at
spknoe.at
steiermaerkische.at
swohnfinanz.at
tirolersparkasse.at
wspk.at
erstegroup.com
ersteprivatebanking.com
erste-time-bank.org
erstedigital.com
s-servicecenter.at
erste-confirming.com
intermarket.at
sbausparkasse.at
csas.cz
csast.cz
erstepremier.cz
ersteprivatebanking.cz
csps.cz
burinka.cz
leasingcs.cz
erstebank.hr
ersteleasing.hr
sparkasse.at

Certificate

The complete raw certificate details for Erste Digital GmbH in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMqTCCCpGgAwIBAgIQCcx8eF5Gr++eDCad0aA67zANBgkqhkiG9w0BAQsFADBf
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNzA1BgNVBAMT
LkRpZ2lDZXJ0IFZlcmlmaWVkIE1hcmsgUlNBNDA5NiBTSEEyNTYgMjAyMSBDQTEw
HhcNMjQwNzA1MDAwMDAwWhcNMjUwNzA1MjM1OTU5WjCCAUUxEzARBgsrBgEEAYI3
PAIBAxMCQVQxFTATBgsrBgEEAYI3PAIBAhMEV2llbjEVMBMGCysGAQQBgjc8AgEB
EwRXaWVuMR0wGwYDVQQPExRQcml2YXRlIE9yZ2FuaXphdGlvbjEQMA4GA1UEBRMH
Mzk2Mjk0azELMAkGA1UEBhMCQVQxDzANBgNVBAgTBlZpZW5uYTEPMA0GA1UEBxMG
Vmllbm5hMRcwFQYDVQQJEw5BbSBCZWx2ZWRlcmUgMTEbMBkGA1UEChMSRXJzdGUg
RGlnaXRhbCBHbWJIMRswGQYDVQQDExJFcnN0ZSBEaWdpdGFsIEdtYkgxHzAdBgor
BgEEAYOeXwENEw9SZWdpc3RlcmVkIE1hcmsxEjAQBgorBgEEAYOeXwEDEwJERTEY
MBYGCisGAQQBg55fAQQTCDMwMzU3NzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4GZBjOz7Xh4Wy0TstFnK4AxliCtFNp+JALHv4cDSmYNXzDIP9Nab
nq82MLUvGLeUtAnbPM2YqWwp+paXm6QfBVJeGMiEUd315Qsf0S45Z9Rs5hK9hNR+
LRKvjrwpBTObRmX66Kh5kqB5dvi1gpPzulFlZzGyNBarcZoon1LB9nt3sN6m17gA
Lv4jBSgMKqlrJUzLEqsXbgvsFfACLYiU9BwhQDg/TJ91/Myt5hrgpacDBsLxJ4OQ
IRzju+J4qP+TQJKpAglvyHcsR7S48OHACI5zNRXE58Mr7GDSMLpvYLtFikhKcjwF
3y2gtDSVw1wkYYHLB2GN79CnRzyzgsCbkwIDAQABo4IHdzCCB3MwHwYDVR0jBBgw
FoAUvp+9jVdtlbWtY8OXTquohF06B/UwHQYDVR0OBBYEFIX8+WpDmWlRZ9dJ1G7a
TX+/0GmmMIICqwYDVR0RBIICojCCAp6CDGVyc3RlYmFuay5hdIIQc3Bhcmthc3Nl
LW9vZS5hdIIJc3Brb29lLmF0ggZrYWcuYXSCFWRpZXp3ZWl0ZXNwYXJrYXNzZS5h
dIIOa3JlbXNlcmJhbmsuYXSCB2tzcGsuYXSCBnNtdy5hdIIQc3Bhcmthc3NlLmhi
bi5hdIIRc3Bhcmthc3NlYmFkZW4uYXSCF3NwYXJrYXNzZS1raXR6YnVlaGVsLmF0
ghVzcGFya2Fzc2Uta3Vmc3RlaW4uYXSCFXNwYXJrYXNzZW5ha2FkZW1pZS5hdIIT
c3Bhcmthc3NlLXJldXR0ZS5hdIIRc3Bhcmthc3NlLXJpZWQuYXSCE3NwYXJrYXNz
ZS1zY2h3YXouYXSCEnNwa2hlcnpvZ2VuYnVyZy5hdIIJc3Brbm9lLmF0ghNzdGVp
ZXJtYWVya2lzY2hlLmF0gg5zd29obmZpbmFuei5hdIITdGlyb2xlcnNwYXJrYXNz
ZS5hdIIHd3Nway5hdIIOZXJzdGVncm91cC5jb22CF2Vyc3RlcHJpdmF0ZWJhbmtp
bmcuY29tghNlcnN0ZS10aW1lLWJhbmsub3JnghBlcnN0ZWRpZ2l0YWwuY29tghJz
LXNlcnZpY2VjZW50ZXIuYXSCFGVyc3RlLWNvbmZpcm1pbmcuY29tgg5pbnRlcm1h
cmtldC5hdIIQc2JhdXNwYXJrYXNzZS5hdIIHY3Nhcy5jeoIIY3Nhc3QuY3qCD2Vy
c3RlcHJlbWllci5jeoIWZXJzdGVwcml2YXRlYmFua2luZy5jeoIHY3Nwcy5jeoIK
YnVyaW5rYS5jeoIMbGVhc2luZ2NzLmN6ggxlcnN0ZWJhbmsuaHKCD2Vyc3RlbGVh
c2luZy5ocoIMc3Bhcmthc3NlLmF0MFAGA1UdIARJMEcwNwYKYIZIAYb9bAACBTAp
MCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDAYKKwYB
BAGDnl8BATATBgNVHSUEDDAKBggrBgEFBQcDHzCBpQYDVR0fBIGdMIGaMEugSaBH
hkVodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRWZXJpZmllZE1hcmtS
U0E0MDk2U0hBMjU2MjAyMUNBMS5jcmwwS6BJoEeGRWh0dHA6Ly9jcmw0LmRpZ2lj
ZXJ0LmNvbS9EaWdpQ2VydFZlcmlmaWVkTWFya1JTQTQwOTZTSEEyNTYyMDIxQ0Ex
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSGh0dHA6Ly9jYWNlcnRz
LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFZlcmlmaWVkTWFya1JTQTQwOTZTSEEyNTYy
MDIxQ0ExLmNydDAMBgNVHRMBAf8EAjAAMIIC6AYIKwYBBQUHAQwEggLaMIIC1qKC
AtKgggLOMIICyjCCAsYwggLCFg1pbWFnZS9zdmcreG1sMCMwITAJBgUrDgMCGgUA
BBQbNpwh2n1GECF1NKHRqg0JjivxOzCCAooWggKGZGF0YTppbWFnZS9zdmcreG1s
O2Jhc2U2NCxINHNJQUFBQUFBQUFDbjFTMjQ2Yk1CQjlicjdDY2wreHNjZGM3QWl5
VXRXMCsxS3BmMUJsaVJmUVpnR0JGOUsvNzR6WlZuMm9pcUxKWWViTW1UTWpxb2Y3
NjQydGZsNzZjYWk1bG9velB6VGp0Ui9hbXIrRloySDV3NGxWeTlyK3pRTE9uaTZM
L3o2UHovM04xenowdzA4eExaejExNXFmbi96Z2Yyak9VSHBZYXQ2Rk1CM1RkTnMy
dVJrNXptMEtTcWtVSmQ4cHgvdXRIMTcrUmRUT3VUUlcrV0h0L2ZacHZOZGNNY1VN
NEMrMkg1ZnAwcUNGYWZhTG4xZlBUNGNxOU9IbVQrZDVDWjU5bmNlM3FVcjMxS0Zx
VDRjUDFleWJ3TkQ1cmVZZndaYnEvSm16cmIrR3J1YWsydm0rN1VMRUtkR25TK2gr
MDcvRWh6UGM4MXNoVlphQWtibnBkQzZoV0FWSWxUOWl1bXlFVkZwSXlCSWxNbWtM
Zk0xRUlaMURZSVNXRmhLOElnaHNkZ21Ha2xDZVpCSnNndTJKeFZRRUdxVE5FNFZz
bTFNdmthblh3STVvT3BhbDBSUUxHNm5LUG1vbEM3ZENOR1liTEVHSnBVdzZqQ1c2
eEQrUXVrUXJKaG93ZjZ3WU5BeFlGMVpteUJib29LUTFRQUxPaURUcXNvaUt2VW1K
T0Y3SWdpS08xLysvbThZTEFhNVl1b1pPc2FzQ2Vja2NJWkkxdTFUcGNKMk1acUds
U0lvb0ZsVHlqck9TVUxHSGVDb2dMVXFZcUV5QUxGVnBTd0cvdk5QaEYwU01qbUQ2
QWdBQTATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAgEAoNHK
j/1u7xVIbyMH5vmWUp35ImEjWjEUPCQo4g9aJAFnEpB9heGl8VPiOuFIuDuvSENF
RroKG3JRbB6R2xwg4umgP3aFB63Iwvh97eiwsvk+8WNgi1+6+MV2PK9LyrjrS//A
4hbFJ9ULVzj/Uey1vhTnzx0imuWtPz9d972RgOjjjQsjnX9nGpNUAajti/iZL1az
ujr2ZeXzaa9P/SCoNSHH1O037dOiJJka66utNm0DP9r5oyj+vceSYWycF8wmLqkP
t+nZFn/hGbC0sSZuhptP6O0TiEIQtSHafCA52G9SeYRGIJwVOBa5pGiIh+HGkzKy
1UrUqhHN8nItTKRlUkVUk28npcBwdkYaaJwJQewp0lGG6VUIigJ4XhE+5oTMn8i0
AsfbdBKCOOqm+QNwcldyCLkOYAgYrvW6leIaadFtPspYVIBBJPtjhHTWP8y33deg
fhQQMiLvMs2VeOIy0aS2Shkf2x4E5+Og/bcFguRnbtgv1M7CT1uLkXXZbhrkYqeA
24sZDlBJ5uZlBBV58mwXaU0oceMAsbJC4xGc6dmFA3Wn+CxnqrHBJjEWs30g06W6
qpD7pm4iyMZjtlNpa5fZSc8hr5GvO7b/b+R/3txjc9iaMBYDzQqJfDQgtxlXyJHQ
imBuoL1oDeVSBapuxHogq+oO9FFuRDVV3djY7gE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GZBjOz7Xh4Wy0TstFnK
4AxliCtFNp+JALHv4cDSmYNXzDIP9Nabnq82MLUvGLeUtAnbPM2YqWwp+paXm6Qf
BVJeGMiEUd315Qsf0S45Z9Rs5hK9hNR+LRKvjrwpBTObRmX66Kh5kqB5dvi1gpPz
ulFlZzGyNBarcZoon1LB9nt3sN6m17gALv4jBSgMKqlrJUzLEqsXbgvsFfACLYiU
9BwhQDg/TJ91/Myt5hrgpacDBsLxJ4OQIRzju+J4qP+TQJKpAglvyHcsR7S48OHA
CI5zNRXE58Mr7GDSMLpvYLtFikhKcjwF3y2gtDSVw1wkYYHLB2GN79CnRzyzgsCb
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13024805076552748776081881801953393391
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wien'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wien'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '396294k'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vienna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vienna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Am Belvedere 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Erste Digital GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Erste Digital GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '30357793'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28327804653250318008260788633582433727971553448238622754104837585846688095016835849296746079417459718335146693079652937275874076720591763227405179529973155612411335270626849009306631096333961991357831397590395622929101409664445883918096082676714878838114731543122376775745070123630145709784243123966550503214341251299637738284317709432753628581895718611401982967659297972498351313479252788579504895951565342385588980996321839234400539909983603089333939250192077874306997593735487986643698896193554723082801365361035895887193979326061911937914593144086487158524086350002811715125186888356626869028628212430270873246611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85fcf96a4399695167d749d46eda4d7fbfd069a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (674 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erstebank.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkasse-ooe.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spkooe.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kag.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diezweitesparkasse.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kremserbank.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kspk.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smw.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkasse.hbn.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkassebaden.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkasse-kitzbuehel.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkasse-kufstein.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkassenakademie.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkasse-reutte.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkasse-ried.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkasse-schwaz.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spkherzogenburg.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spknoe.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steiermaerkische.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swohnfinanz.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tirolersparkasse.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wspk.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erstegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ersteprivatebanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erste-time-bank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erstedigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's-servicecenter.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erste-confirming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intermarket.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbausparkasse.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csast.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erstepremier.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ersteprivatebanking.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csps.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burinka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leasingcs.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erstebank.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ersteleasing.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkasse.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (730 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															1b369c21da7d4610217534a1d1aa0d098e2bf13b
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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