www.samson.sachsen-anhalt.de

- Sachsen-Anhalt -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 50:e7:b1:07:5a:3e:af:59:92:4e:98:b4:89:a1:17:f9:e2:aa:81:41 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sachsen-Anhalt

Organization: Sachsen-Anhalt
State / Province: Sachsen-Anhalt
Locality: Magdeburg
Country: DE

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 50:e7:b1:07:5a:3e:af:59:92:4e:98:b4:89:a1:17:f9:e2:aa:81:41
Serial Number (int): 461886155183310224438710477282699063025665212737
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: ac:a4:5a:08:52:1c:af:52:3b:8c:10:39:d7:64:95:66:08:d1:20:00
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 8c:35:d1:29:bc:26:10:20:a9:98:9b:de:d4:17:77:30:dd:7d:e9:d9
Fingerprint (sha256): 3a:86:9a:50:76:a5:c4:83:8e:d1:3b:4f:e0:3e:b2:10:ef:f7:82:a8:3c:c3:68:15:8a:ac:18:66:8d:83:3e:d2

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate www.samson.sachsen-anhalt.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.samson.sachsen-anhalt.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.samson.sachsen-anhalt.de

Other certificates including the domain name sachsen-anhalt.de

(limited to 100 certificates)
www.handelsregister.sachsen-anhalt.de
*.serviceportal-stage.sachsen-anhalt.de
stage.onlineservice.sachsen-anhalt.de
eduklifd.sachsen-anhalt.de
www.erv.justiz.sachsen-anhalt.de
*.sachsen-anhalt.de
www.eshop.sachsen-anhalt.de
www.eshop.sachsen-anhalt.de
www.erv.justiz.sachsen-anhalt.de
publikationen.sachsen-anhalt.de
www.rechtsprechung-im-internet.de
efoerderung.sachsen-anhalt.de
www.polizei.sachsen-anhalt.de
stage.onlineservice.sachsen-anhalt.de
www.efoerderung.sachsen-anhalt.de
*.sachsen-anhalt.de
*.sachsen-anhalt.de
www.erv.justiz.sachsen-anhalt.de
www.rechtsprechung-im-internet.de
www.polizei.sachsen-anhalt.de
sibbw.lsbb.sachsen-anhalt.de
www.service.sachsen-anhalt.de
www.inet17.sachsen-anhalt.de
www.umwelt.sachsen-anhalt.de
*.sachsen-anhalt.de
www.geodatenportal.sachsen-anhalt.de
www.eshop.sachsen-anhalt.de
sibbw-qs.lsbb.sachsen-anhalt.de
www.statistik.sachsen-anhalt.de
www.eshop.sachsen-anhalt.de
www.evaluation.sachsen-anhalt.de
*.sachsen-anhalt.de
idp.serviceportal.sachsen-anhalt.de
efoerderung.sachsen-anhalt.de
lasaap.sachsen-anhalt.de
stage.onlineservice.sachsen-anhalt.de
www.invekos.sachsen-anhalt.de
www.stala.sachsen-anhalt.de
wahlergebnisse.sachsen-anhalt.de
mail.lt.sachsen-anhalt.de
www.eshop.sachsen-anhalt.de
www.kassenshop.sachsen-anhalt.de
portal.mlu.sachsen-anhalt.de
afm.sachsen-anhalt.de
erv.justiz.sachsen-anhalt.de
*.sachsen-anhalt.de
www.erv.justiz.sachsen-anhalt.de
www.lvermgeo.sachsen-anhalt.de
www.eshop.sachsen-anhalt.de
stage.afm.sachsen-anhalt.de
buerger.sachsen-anhalt.de
stage.afm.sachsen-anhalt.de
www.lvermgeo.sachsen-anhalt.de
www.luesa.sachsen-anhalt.de
mx06.sachsen-anhalt.de
www.polizei.sachsen-anhalt.de
serviceportal-Stage.sachsen-anhalt.de
mx07.sachsen-anhalt.de
www.evaluation.sachsen-anhalt.de
sps.sachsen-anhalt.de
intern.lvermgeo.sachsen-anhalt.de
klifd.sachsen-anhalt.de
*.sachsen-anhalt.de
www.fortbildung.sachsen-anhalt.de
www.landesrecht.sachsen-anhalt.de
sapos-gpps.sachsen-anhalt.de
lst3-sen2.sachsen-anhalt.de
www.statistik.sachsen-anhalt.de
*.serviceportal-stage.sachsen-anhalt.de
intern.lvermgeo.sachsen-anhalt.de
www.statistik.sachsen-anhalt.de
www.samson.sachsen-anhalt.de
www.landesrecht.sachsen-anhalt.de
fischerpruefung.sachsen-anhalt.de
idp.serviceportal.sachsen-anhalt.de
www.eshop.sachsen-anhalt.de
fischerpruefung.sachsen-anhalt.de
onlineservice.sachsen-anhalt.de
www.efoerderung.sachsen-anhalt.de
www.samson.sachsen-anhalt.de
www.invekos.sachsen-anhalt.de
stage.afm.sachsen-anhalt.de
lst3-sen1.sachsen-anhalt.de
portal.mlu.sachsen-anhalt.de
www.landesforstbetrieb.sachsen-anhalt.de
onlineservice.sachsen-anhalt.de
www.handelsregister.sachsen-anhalt.de
www.gfds.sachsen-anhalt.de
www.eshop.sachsen-anhalt.de
*.serviceportal.sachsen-anhalt.de
*.serviceportal.sachsen-anhalt.de
www.service.sachsen-anhalt.de
bafoeg-qs.sachsen-anhalt.de
www.polizei.sachsen-anhalt.de
www.erv.justiz.sachsen-anhalt.de
*.sachsen-anhalt.de
portal.mlu.sachsen-anhalt.de
bafoeg.sachsen-anhalt.de
www.evaluation.sachsen-anhalt.de
www.eshop.sachsen-anhalt.de

Certificate

The complete raw certificate details for www.samson.sachsen-anhalt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJAjCCBuqgAwIBAgIUUOexB1o+r1mSTpi0iaEX+eKqgUEwDQYJKoZIhvcNAQEL
BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh
BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEczMB4XDTIzMDIyMDA4MjMx
MFoXDTI0MDIyMDA4MTgwMFowejELMAkGA1UEBhMCREUxFzAVBgNVBAgMDlNhY2hz
ZW4tQW5oYWx0MRIwEAYDVQQHDAlNYWdkZWJ1cmcxFzAVBgNVBAoMDlNhY2hzZW4t
QW5oYWx0MSUwIwYDVQQDDBx3d3cuc2Ftc29uLnNhY2hzZW4tYW5oYWx0LmRlMIIC
IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1WOFF+8uloPj1GFXDzqqgSUp
SXrEk/4zUCyeoX+dmkuC4HT+axx12JPAgPEnAILXLFSxWTOYFp4fqQflHdBBr0Rc
tL4YlyXl/MEVMR8S4TRdjY9VwNUU/7xoR9iHG5uWuZyoz/W7pyZaYJ10mLig2HIP
VZLTPl/Z/oJYiSRCisAMoNpG7KqIAKau/WuXAQx7KrLg4AecKSzDH4pfUIhaMITC
smKhFlk4veGXMvgWO7ww0Yrbhqk8L6Xl2jfBPTcxdkvXr/YpJw6pJi8xe4uC13fw
UqvoOl+F+1vJ8N1t02Ad2TNX2VEG+himIw38d8cD7o80N+9LippeXhQMa50p/r16
QFxEMvWH4+F1vxN/Z+G8Sts0xtKT3fEf5M7rCdv7yilUELrEDJc/Yw1cJ3Rx+UDe
etc9VJ5S03tsf8zZKKMJgzuCnUuVTrEK3W1OzEzUi2Rv7jUGh0Ht1m39nqAK5Hkj
fHEFa99J7fzwbYPpQR1cIxpYm0CIY+5WBjIaBUML4VdR1GombiVu7sBxX6BLz/xb
9Yq/lC69/atMt/PCd6b1x48xyF+agmRbNwUQhl7dJEvukK3nAc1p3bT7aM6hN1db
QW3nmtZfJ8R1JRQTMRLbC/aTI/MdNP2ou18bqBLRWg42sdA0uXJOvBVBOCTEGZax
nSdYlrq6ykxINv3dDJ8CAwEAAaOCA6swggOnMAkGA1UdEwQCMAAwHwYDVR0jBBgw
FoAUsxKJtalLNbwVAPCA6dh4h/ETfHYwcwYIKwYBBQUHAQEEZzBlMDcGCCsGAQUF
BzAChitodHRwOi8vdHJ1c3QucXVvdmFkaXNnbG9iYWwuY29tL3F2c3NsZzMuY3J0
MCoGCCsGAQUFBzABhh5odHRwOi8vb2NzcC5xdW92YWRpc2dsb2JhbC5jb20wJwYD
VR0RBCAwHoIcd3d3LnNhbXNvbi5zYWNoc2VuLWFuaGFsdC5kZTBbBgNVHSAEVDBS
MEYGDCsGAQQBvlgAAmQBATA2MDQGCCsGAQUFBwIBFihodHRwOi8vd3d3LnF1b3Zh
ZGlzZ2xvYmFsLmNvbS9yZXBvc2l0b3J5MAgGBmeBDAECAjAdBgNVHSUEFjAUBggr
BgEFBQcDAgYIKwYBBQUHAwEwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NybC5x
dW92YWRpc2dsb2JhbC5jb20vcXZzc2xnMy5jcmwwHQYDVR0OBBYEFKykWghSHK9S
O4wQOddklWYI0SAAMA4GA1UdDwEB/wQEAwIFoDCCAfIGCisGAQQB1nkCBAIEggHi
BIIB3gHcAHUA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGGbfSU
ngAABAMARjBEAiBTC+BWptV1KV8C++iHPX8MVPDH+ze/qWiH23V4Bn5yjAIgA1Oj
UpXQE1jCJTjfiPgpsBorWSufOZmZDJ0nodabxf4AdQB2/4g/Crb7lVHCYcz1h7o0
tKTNuyncaEIKn+ZnTFo6dAAAAYZt9JQ3AAAEAwBGMEQCIBGDGpQM6mroZYtEhDPK
0axnhKqnkA0JIfKFWQ3DQ2laAiBZ51et3hwa9rDJYsPqVljmILvnTTkefVvd5Xlj
wWiPHAB1AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABhm30lLkA
AAQDAEYwRAIgECk4vZ4DSFAiMRLR0zVUhFZtH4UpDtIFQWAyhmAsAO0CIH28QY4H
IpMkSfuaR0grM7reusbTCIsAPeNoNnr3DetRAHUAVYHUwhaQNgFK6gubVzxT8MDk
OHhwJQgXL6OqHQcT0wwAAAGGbfSVVwAABAMARjBEAiA95h57An3JTa6u0HaQtD0i
sDvH13xCVU06CN1SNqj6qgIgYoHM/l6/SH+3S7q17DXZ3BfjEERyPB1Vk1drlw7U
IvwwDQYJKoZIhvcNAQELBQADggIBAE2/0QyE9HxV+lEHycRaeveemwUD6Gg0/jo0
QQsw8a8PP9hndvK0vZPmyc9Kz+ydD5FzIq+R+El6XHGHWG+bD667ySmjePqlejNC
qZ4VkdfA5vjzoSqsHIDEhH6Swf8BR0r570HAzg2NEYqyBws7U23kppOV8oebpCkm
ynKvqhLn5chHDagfZKhLrJ/jYSqslkTwpRxCSKAe/yWDVhCZaUrJuluUzJ8vdmKe
dRX2cX9nMqPn+lq/yqTrsO8DC3lwZoCtFkravsy5VT0TGKlCCD0Jemgf23O50LIs
N6xptPvILSu60X0dghF1ZSSCswEzIYPXygZvZzQRCVPXo2k3lp2sHlpnB29+Sfyd
sHWRZZu+ROwTHf+u0j89hTv365eV3j8PPZBp0daUazACJKZmusCnG6f3i2R9ZbEP
pySYLi4SxwGaT5iWZlTRmKGY6EP0WbqlZqD4n14u6AA5rCDhzqDWt+aAshK4Ko88
0I2dS1Lsqi5yCh+r55ZVpf7SLGHIlos8ejQj4laT9ACa7XLtUzc4zH0RWfiDGEMP
j/HG+yh9iscMjlWG2eObrVL3QOnxJ7O+stF01/JcTY66MC+U/vh8lUzeOuD73joi
gBzsKil7aYAwmHvXa9Nirsb3EBqf+v+OADIBV1euqUUo6/UiyULLcE/9PiSwtkHb
hCS2/OFy
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 461886155183310224438710477282699063025665212737
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-20 08:23:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 08:18:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sachsen-Anhalt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Magdeburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sachsen-Anhalt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.samson.sachsen-anhalt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 870550146469681264482412764526239753138046943563961871333287461003943940938679540826030745993437006128274438630892136276427092297446152457586734472275197913722025101068892217893439773506630039253253999840874827718425271819756588999059863126244497500812797266736256229300933376365659540237084977062335268908802535129287927330099292164175187428483442901272760873151238761040178651542388071107529966929163498126064215251308772021185306515100594704234075794533361075777722084232848872800533377477717711183696235355949570539333433343248378239474250366107691139657280542171026455482244866629571455149711619682383587143644984122799262784506341325688733492621586157764706843449442999861854628038797725207776326975807674189068333111981750010286476546671933532927289439560715505871741531932993967236317568036091245975958531348398022675056226466792938800224182777953934594357549945067237286129321151729043726307125492658118999916029575850109749299633402601127329640421909857822934224448989253572673909509588367969068210498668909914671660999147064371894960836645038720828238008548917724567956329646960607758951338533147386881206278813803147739830087798087290857307727564868837513463028723750488251821487409670647242217821283467245906819406433439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samson.sachsen-anhalt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aca45a08521caf523b8c1039d764956608d12000
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (478 bytes)
							01dc007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001866df4949e00000403004630440220530be056a6d575295f02fbe8873d7f0c54f0c7fb37bfa96887db7578067e728c02200353a35295d01358c22538df88f829b01a2b592b9f3999990c9d27a1d69bc5fe00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a74000001866df494370000040300463044022011831a940cea6ae8658b448433cad1ac6784aaa7900d0921f285590dc343695a022059e757adde1c1af6b0c962c3ea5658e620bbe74d391e7d5bdde57963c1688f1c007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001866df494b900000403004630440220102938bd9e034850223112d1d3355484566d1f85290ed20541603286602c00ed02207dbc418e0722932449fb9a47482b33badebac6d3088b003de368367af70deb510075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001866df49557000004030046304402203de61e7b027dc94daeaed07690b43d22b03bc7d77c42554d3a08dd5236a8faaa02206281ccfe5ebf487fb74bbab5ec35d9dc17e31044723c1d5593576b970ed422fc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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