excom.lanxess.com
- LANXESS Deutschland GmbH -
Issued by Trusted Secure Certificate Authority 5
About this certificate
This digital certificate with serial number e5:aa:06:d6:6b:c5:21:59:b2:ba:46:7f:2b:49:5c:65 was issued on by Corporation Service Company.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
LANXESS Deutschland GmbH
Organization:
LANXESS Deutschland GmbH
Organization unit: IT-Infrastructure
Organization unit: Enterprise SSL
Organization unit: IT-Infrastructure
Organization unit: Enterprise SSL
Address:
Kennedyplatz 1
Postal code: 50569
State / Province: North Rhine-Westphalia
Locality: Koeln
Country: DE
Postal code: 50569
State / Province: North Rhine-Westphalia
Locality: Koeln
Country: DE
Corporation Service Company
Organization:
Corporation Service Company
State / Province:
DE
Locality: Wilmington
Country: US
Locality: Wilmington
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): e5:aa:06:d6:6b:c5:21:59:b2:ba:46:7f:2b:49:5c:65Serial Number (int): 305276040183334267484493635037910621285
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: af:9b:ac:5a:73:fb:7a:01:ed:d3:e9:75:14:52:2d:2a:29:78:67:05
AuthorityKeyId: f2:bb:55:ee:fc:8f:cf:d0:3f:14:68:1a:95:7e:79:0e:ab:17:30:f4
Fingerprint (sha1): 93:fc:6b:ad:cc:d9:b6:d3:80:ed:cf:8c:8a:1f:e8:a5:9a:8e:1e:78
Fingerprint (sha256): 3c:47:50:24:eb:55:1a:95:94:cb:ac:24:2d:ea:45:dc:63:ce:c2:1a:79:e0:6e:da:17:b3:87:7e:a5:5a:46:c7
Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt
Revocation information
OCSP Server: http://ocsp.usertrust.comCRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl
Check the revocation status for certificate excom.lanxess.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for excom.lanxess.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
excom.lanxess.com
www.excom.lanxess.com
www.excom.lanxess.com
Other certificates including the domain name lanxess.com
(limited to 100 certificates)
procurement.lanxess.com
lxcsg01.lanxess.com
digital.lanxess.com
webcam.lanxess.com
lxcsg03.lanxess.com
lanxess.com
dam-test.lanxess.com
flameretardants.lanxess.cn
cnt.lanxess.com
new-mobility.lanxess.com
flameretardants.lanxess.cn
microbialcontrol.lanxess.com
flameretardants.lanxess.cn
techcenter.lanxess.com
myapps.lanxess.com
numb3rs.lanxess.com
procurement.lanxess.com
webmagazine.lanxess.com
ext.lanxess.com
lanxessone.lanxess.com
sgpa1a.gp.lanxess.com
prod-intra.lanxess.com
securexhub.lanxess.com
extapps-dev.lanxess.com
infobase.lanxess.com
k2019.lanxess.de
MyGateTo.lanxess.com
contactsearch.lanxess.com
crtool.lanxess.com
*.lanxess.com
new-mobility.lanxess.com
inpa1a.gp.lanxess.com
lxcsg01.lanxess.com
defw3x.gp.lanxess.com
us.lanxess.com
forwarderportal.lanxess.com
csg.lanxess.com
extapps.lanxess.com
securexhub.lanxess.com
cnt.lanxess.com
surveys.lanxess.com
flameretardants.lanxess.cn
crtool.lanxess.com
media.lanxess.com
tecci.lanxess.com
smtp11.lanxess.com
xticket-test.lanxess.com
xticket-dev.lanxess.com
cnt.lanxess.com
cnt.lanxess.com
lanxessone.lanxess.com
int-www.lanxess.com
karriereportal.lanxess.com
xticket-dev.lanxess.com
prod-www.lanxess.com
lxcsg01.lanxess.com
securehub.lanxess.com
capa1a.gp.lanxess.com
quality.lanxess.com
mdm.lanxess.com
mymail.lanxess.com
pa66-shortage.lanxess.com
techcenter.lanxess.com
procurement.lanxess.com
cnt.lanxess.com
xticket-test.lanxess.com
myapps.lanxess.com
ext.lanxess.com
excom.lanxess.com
*.lanxess.com
gitlab.lanxess.com
new-mobility.lanxess.com
mygateto.lanxess.com
digital.lanxess.com
ssl.lanxess.com
infobase.lanxess.com
cnt.lanxess.com
*.lanxess.com
surveys.lanxess.com
webcam.lanxess.com
flameretardants.lanxess.cn
forwarderportal.lanxess.com
coronavirus.lanxess.com
lxcsg01.lanxess.com
typo3.t3.lanxess.com
securexhub.lanxess.com
surveys.lanxess.com
ekc-integration.lanxess.com
lanxessone.lanxess.com
techcenter.lanxess.com
cnpa1a.gp.lanxess.com
digitalisierung.lanxess.de
qm-www.lanxess.com
karriereportal.lanxess.com
tecci.lanxess.com
digital.lanxess.com
us.lanxess.com
dexa03.lan.lanxess.com
inpa1a.gp.lanxess.com
xticket.lanxess.com
lxcsg01.lanxess.com
digital.lanxess.com
webcam.lanxess.com
lxcsg03.lanxess.com
lanxess.com
dam-test.lanxess.com
flameretardants.lanxess.cn
cnt.lanxess.com
new-mobility.lanxess.com
flameretardants.lanxess.cn
microbialcontrol.lanxess.com
flameretardants.lanxess.cn
techcenter.lanxess.com
myapps.lanxess.com
numb3rs.lanxess.com
procurement.lanxess.com
webmagazine.lanxess.com
ext.lanxess.com
lanxessone.lanxess.com
sgpa1a.gp.lanxess.com
prod-intra.lanxess.com
securexhub.lanxess.com
extapps-dev.lanxess.com
infobase.lanxess.com
k2019.lanxess.de
MyGateTo.lanxess.com
contactsearch.lanxess.com
crtool.lanxess.com
*.lanxess.com
new-mobility.lanxess.com
inpa1a.gp.lanxess.com
lxcsg01.lanxess.com
defw3x.gp.lanxess.com
us.lanxess.com
forwarderportal.lanxess.com
csg.lanxess.com
extapps.lanxess.com
securexhub.lanxess.com
cnt.lanxess.com
surveys.lanxess.com
flameretardants.lanxess.cn
crtool.lanxess.com
media.lanxess.com
tecci.lanxess.com
smtp11.lanxess.com
xticket-test.lanxess.com
xticket-dev.lanxess.com
cnt.lanxess.com
cnt.lanxess.com
lanxessone.lanxess.com
int-www.lanxess.com
karriereportal.lanxess.com
xticket-dev.lanxess.com
prod-www.lanxess.com
lxcsg01.lanxess.com
securehub.lanxess.com
capa1a.gp.lanxess.com
quality.lanxess.com
mdm.lanxess.com
mymail.lanxess.com
pa66-shortage.lanxess.com
techcenter.lanxess.com
procurement.lanxess.com
cnt.lanxess.com
xticket-test.lanxess.com
myapps.lanxess.com
ext.lanxess.com
excom.lanxess.com
*.lanxess.com
gitlab.lanxess.com
new-mobility.lanxess.com
mygateto.lanxess.com
digital.lanxess.com
ssl.lanxess.com
infobase.lanxess.com
cnt.lanxess.com
*.lanxess.com
surveys.lanxess.com
webcam.lanxess.com
flameretardants.lanxess.cn
forwarderportal.lanxess.com
coronavirus.lanxess.com
lxcsg01.lanxess.com
typo3.t3.lanxess.com
securexhub.lanxess.com
surveys.lanxess.com
ekc-integration.lanxess.com
lanxessone.lanxess.com
techcenter.lanxess.com
cnpa1a.gp.lanxess.com
digitalisierung.lanxess.de
qm-www.lanxess.com
karriereportal.lanxess.com
tecci.lanxess.com
digital.lanxess.com
us.lanxess.com
dexa03.lan.lanxess.com
inpa1a.gp.lanxess.com
xticket.lanxess.com
Certificate
The complete raw certificate details for excom.lanxess.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF3zCCBMegAwIBAgIRAOWqBtZrxSFZsrpGfytJXGUwDQYJKoZIhvcNAQELBQAw gYYxCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJERTETMBEGA1UEBxMKV2lsbWluZ3Rv bjEkMCIGA1UEChMbQ29ycG9yYXRpb24gU2VydmljZSBDb21wYW55MS8wLQYDVQQD EyZUcnVzdGVkIFNlY3VyZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgNTAeFw0xODEx MTUwMDAwMDBaFw0yMDExMTQyMzU5NTlaMIHbMQswCQYDVQQGEwJERTEOMAwGA1UE ERMFNTA1NjkxHzAdBgNVBAgTFk5vcnRoIFJoaW5lLVdlc3RwaGFsaWExDjAMBgNV BAcTBUtvZWxuMRcwFQYDVQQJEw5LZW5uZWR5cGxhdHogMTEhMB8GA1UEChMYTEFO WEVTUyBEZXV0c2NobGFuZCBHbWJIMRowGAYDVQQLExFJVC1JbmZyYXN0cnVjdHVy ZTEXMBUGA1UECxMORW50ZXJwcmlzZSBTU0wxGjAYBgNVBAMTEWV4Y29tLmxhbnhl c3MuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKPZsrl98lBx vjikrBAd3i6Kzaa+1kUtol565/njAluwWrNpMhHEZ4ycTUDAKNr22xGe7ptgPNAh V38/IS2Hr3yL9iYXUTXsGprbkTGIVHdtEEMkd9hTlaBTJk4MJKvSmhH3/cSScUYT 1nakgYHyGoMEcIhHnwnn2A/+YIkjVQdoxpAWqU04swyeol3+mzjYMEt2HmZFoIyi Do2zT1KaWzynFNCwO6mfbZk6+S9yUvDnvBxqd0fg7sKg2KYEyZK6ds2SYfVbj91i FrDiFt2YqwZPO8IMEd7HdeipTAv7B2/GsBCVgFA2dP6RJqHww0y3vh+mZj8Xa4Tc 9AX9+QDg2wIDAQABo4IB7zCCAeswHwYDVR0jBBgwFoAU8rtV7vyPz9A/FGgalX55 DqsXMPQwHQYDVR0OBBYEFK+brFpz+3oB7dPpdRRSLSopeGcFMA4GA1UdDwEB/wQE AwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjBLBgNVHSAERDBCMDYGCysGAQQBsjEBAgIIMCcwJQYIKwYBBQUHAgEWGWh0dHBz Oi8vY3BzLnVzZXJ0cnVzdC5jb20wCAYGZ4EMAQICMFAGA1UdHwRJMEcwRaBDoEGG P2h0dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9UcnVzdGVkU2VjdXJlQ2VydGlmaWNh dGVBdXRob3JpdHk1LmNybDCBggYIKwYBBQUHAQEEdjB0MEsGCCsGAQUFBzAChj9o dHRwOi8vY3J0LnVzZXJ0cnVzdC5jb20vVHJ1c3RlZFNlY3VyZUNlcnRpZmljYXRl QXV0aG9yaXR5NS5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnVzZXJ0cnVz dC5jb20wMwYDVR0RBCwwKoIRZXhjb20ubGFueGVzcy5jb22CFXd3dy5leGNvbS5s YW54ZXNzLmNvbTATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHSjNoS5Fbs28MAoY/JGXh/1b2ZemwsnHGcu2gogr+XTPF4iAZRas76XYaF63 tPfCkp8kDX3vygA3Wx6yp4VcsVP+TNXZRBOqPk4A65HKfg6d2AfOnC9eJ0jmyLVJ TCjOze/u/b7QICyOGqbZ2Hyp++/Ca1EknNgBGY4bCW8cUM+OOf9vSF4Qpb3n4WaO fT1VTjSMGlvX/mkn1P36xjyfCXfMUNYoIwoEzQMxZDFYl7IKld3I/Jxzi3lMrr7V m9+u4FeU8zxXYyXLQqK+lgcQGNd4P//clw0L803QX/3BTQjiqjcivHRiv4h0lr+1 bRXJ3EzLRQEya1CeJXZHIfkb6w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKPZsrl98lBxvjikrBAd 3i6Kzaa+1kUtol565/njAluwWrNpMhHEZ4ycTUDAKNr22xGe7ptgPNAhV38/IS2H r3yL9iYXUTXsGprbkTGIVHdtEEMkd9hTlaBTJk4MJKvSmhH3/cSScUYT1nakgYHy GoMEcIhHnwnn2A/+YIkjVQdoxpAWqU04swyeol3+mzjYMEt2HmZFoIyiDo2zT1Ka WzynFNCwO6mfbZk6+S9yUvDnvBxqd0fg7sKg2KYEyZK6ds2SYfVbj91iFrDiFt2Y qwZPO8IMEd7HdeipTAv7B2/GsBCVgFA2dP6RJqHww0y3vh+mZj8Xa4Tc9AX9+QDg 2wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 305276040183334267484493635037910621285 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority 5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-14 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '50569' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Rhine-Westphalia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Koeln' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kennedyplatz 1' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LANXESS Deutschland GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT-Infrastructure' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Enterprise SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'excom.lanxess.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21288832869707020596685752291041232996919492993148869771254562101044264497145619568004848118531610391948790554289543300070359282173270215257371768649759249366600880681278588696555163225239485209041699733571782234969818815198583830231323908740252740002443920229730219760877846564591769891657393818937773629532046630373740969624499989511758356066026087918166473239637428170403296495766755394814068135330931007730590603831385794995196393006852227435102540647789307226664721834396135512721077989541709371282555695332296666346370764664686970041753141580503598111471419710630256910340073037966842409350874665371889645445339 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f2bb55eefc8fcfd03f14681a957e790eab1730f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) af9bac5a73fb7a01edd3e97514522d2a29786705 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excom.lanxess.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.excom.lanxess.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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