www.elan.arbeitsagentur.de

- Bundesagentur fuer Arbeit -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 48:81:35:40:ae:b8:97:e7:d1:f3:15:ed:b6:5e:90:da was issued on by D-Trust GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bundesagentur fuer Arbeit

Company registration number: CSM013545682
Organization: Bundesagentur fuer Arbeit
State / Province: Bayern
Locality: Nuernberg
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 48:81:35:40:ae:b8:97:e7:d1:f3:15:ed:b6:5e:90:da
Serial Number (int): 96375302083649881477993005311355424986
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: cf:40:c7:fb:e9:96:e6:5f:a6:30:e6:6f:57:51:50:e6:68:b1:31:3b
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 61:d9:db:25:7b:a3:72:7f:b9:09:6f:4e:58:8c:b7:36:9f:73:13:55
Fingerprint (sha256): 3c:73:60:65:3f:f7:f0:fa:05:d1:e7:38:3f:c5:1e:35:05:ed:f6:dc:f8:47:02:3b:6a:62:b0:dd:76:00:22:57

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate www.elan.arbeitsagentur.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.elan.arbeitsagentur.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.elan.arbeitsagentur.de
www.elan-test.arbeitsagentur.de

Other certificates including the domain name arbeitsagentur.de

(limited to 100 certificates)
suche.arbeitsagentur.de
eepv.arbeitsagentur.de
geois.arbeitsagentur.de
kiss.arbeitsagentur.de
zkm1.arbeitsagentur.de
itsmfw.arbeitsagentur.de
ideenwerkstatt.arbeitsagentur.de
ideenwerkstatt.arbeitsagentur.de
erp.arbeitsagentur.de
statistik.arbeitsagentur.de
api.arbeitsagentur.de
webdav.arbeitsagentur.de
www.arbeitsagentur.de
www.pkiint.arbeitsagentur.de
bugzilla.arbeitsagentur.de
con.arbeitsagentur.de
mail1.arbeitsagentur.de
ideenwerkstatt.arbeitsagentur.de
downloadedstae.arbeitsagentur.de
bno.arbeitsagentur.de
bno.arbeitsagentur.de
jobboerse.arbeitsagentur.de
ideenwerkstatt.arbeitsagentur.de
kursnet-online.arbeitsagentur.de
arbeitsmarktmonitor.arbeitsagentur.de
statistik-daten.arbeitsagentur.de
sts-e.arbeitsagentur.de
accountverwaltung.arbeitsagentur.de
finasload.arbeitsagentur.de
ejustiz-test.arbeitsagentur.de
mail.arbeitsagentur.de
formular.arbeitsagentur.de
vburly001-vfz2.vk.arbeitsagentur.de
eid.arbeitsagentur.de
mam.arbeitsagentur.de
sip.arbeitsagentur.de
join.arbeitsagentur.de
jobboerse.arbeitsagentur.de
ideenwerkstatt.arbeitsagentur.de
sip4.arbeitsagentur.de
sso.arbeitsagentur.de
jobboerse.mobil.arbeitsagentur.de
lernnet.arbeitsagentur.de
formular.arbeitsagentur.de
jobboerse.preprod.arbeitsagentur.de
arbeitsmarktmonitor.arbeitsagentur.de
ideenwerkstatt.arbeitsagentur.de
zav.arbeitsagentur.de
terminal.arbeitsagentur.de
pilea.arbeitsagentur.de
myskills.arbeitsagentur.de
jobboerse.arbeitsagentur.de
ben.arbeitsagentur.de
jobboerse.mobil.arbeitsagentur.de
jobboerse.arbeitsagentur.de
mobil.arbeitsagentur.de
pxenpool-pxz1-vfz2.vk.arbeitsagentur.de
entgeltatlas.arbeitsagentur.de
itsmfw.arbeitsagentur.de
jobboerse2.arbeitsagentur.de
upload-zdh.arbeitsagentur.de
ideenwerkstatt.arbeitsagentur.de
cert-upload.arbeitsagentur.de
studiensuche.arbeitsagentur.de
zav.arbeitsagentur.de
anmeldung.arbeitsagentur.de
sip2.arbeitsagentur.de
jobboerse.arbeitsagentur.de
emaw.arbeitsagentur.de
rest.arbeitsagentur.de
bugzilla.arbeitsagentur.de
zkm.arbeitsagentur.de
ica.arbeitsagentur.de
vbwebapp001-vfz1.vk.arbeitsagentur.de
api-con.arbeitsagentur.de
pxenpool-pxz1-vfz1.vk.arbeitsagentur.de
downloadedstae.arbeitsagentur.de
sso2.arbeitsagentur.de
mam.arbeitsagentur.de
statistik-bi-mstr-vi.arbeitsagentur.de
upload-zdh.arbeitsagentur.de
dropsolid.arbeitsagentur.de
mta-sts.arbeitsagentur.de
terminal.arbeitsagentur.de
emaw.arbeitsagentur.de
ideenwerkstatt.arbeitsagentur.de
img.arbeitsagentur.de
sso.arbeitsagentur.de
www.pki.arbeitsagentur.de
controlling-analyse.arbeitsagentur.de
sip3.arbeitsagentur.de
adhoc.arbeitsagentur.de
www.kursnet-online.arbeitsagentur.de
faq.arbeitsagentur.de
mobil.arbeitsagentur.de
berufecheck.arbeitsagentur.de
www.elan.arbeitsagentur.de
lernen.arbeitsagentur.de
terminal.arbeitsagentur.de
kiss.arbeitsagentur.de

Certificate

The complete raw certificate details for www.elan.arbeitsagentur.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJ6zCCCNOgAwIBAgIQSIE1QK64l+fR8xXttl6Q2jANBgkqhkiG9w0BAQsFADBM
MQswCQYDVQQGEwJERTEVMBMGA1UECgwMRC1UcnVzdCBHbWJIMSYwJAYDVQQDDB1E
LVRSVVNUIFNTTCBDbGFzcyAzIENBIDEgMjAwOTAeFw0xODA4MjAxMTQzMDZaFw0y
MDA4MjQxMTQzMDZaMIGSMRUwEwYDVQQFEwxDU00wMTM1NDU2ODIxCzAJBgNVBAYT
AkRFMQ8wDQYDVQQIEwZCYXllcm4xEjAQBgNVBAcTCU51ZXJuYmVyZzEiMCAGA1UE
ChMZQnVuZGVzYWdlbnR1ciBmdWVyIEFyYmVpdDEjMCEGA1UEAxMad3d3LmVsYW4u
YXJiZWl0c2FnZW50dXIuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDP9IsxGAyV1QR0ZTn/GwA6XbrNAAeSZSUMjTYglrQkOBlqIItgCVLc7MD6kwdQ
hZRuMlNK0n6M9aRrZK/wrbLEOQETvTeKHfwjjsXAr+sJOyV/y0H02VYZZRd+a/+u
FqyOetyn9VnE7dH1thHSWYlVmhWvcJlAir2spZgeSlDftA1wYcY3luU36+wH+v1o
sqnpXwiB0k1UP/12U9feU/OjsuFFecPM9J041oJk2ZoVpqGgOed59cVUENWrpVOH
SARKQ2V/TuPhIjXqgcNreU7rw1VVeko/7v8hp2eUnmWlNBl82SM61iH/EO/Rmk25
F+u+J1DaSwRp1q5EwmIwL1mHAgMBAAGjggaAMIIGfDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAUUBkylJrEtQRNVtDAgyHVNVWwsXow
ggEWBggrBgEFBQcBAQSCAQgwggEEMDMGCCsGAQUFBzABhidodHRwOi8vc3NsLWMz
LWNhMS0yMDA5Lm9jc3AuZC10cnVzdC5uZXQwTAYIKwYBBQUHMAKGQGh0dHA6Ly93
d3cuZC10cnVzdC5uZXQvY2dpLWJpbi9ELVRSVVNUX1NTTF9DbGFzc18zX0NBXzFf
MjAwOS5jcnQwfwYIKwYBBQUHMAKGc2xkYXA6Ly9kaXJlY3RvcnkuZC10cnVzdC5u
ZXQvQ049RC1UUlVTVCUyMFNTTCUyMENsYXNzJTIwMyUyMENBJTIwMSUyMDIwMDks
Tz1ELVRydXN0JTIwR21iSCxDPURFP2NBQ2VydGlmaWNhdGU/YmFzZT8wZQYDVR0g
BF4wXDBaBgsrBgEEAaU0AoFIATBLMEkGCCsGAQUFBwIBFj1odHRwOi8vd3d3LmQt
dHJ1c3QubmV0L2ludGVybmV0L2ZpbGVzL0QtVFJVU1RfQ1NNX1BLSV9DUFMucGRm
MIIBHQYDVR0fBIIBFDCCARAwggEMoIIBCKCCAQSGeWxkYXA6Ly9kaXJlY3Rvcnku
ZC10cnVzdC5uZXQvQ049RC1UUlVTVCUyMFNTTCUyMENsYXNzJTIwMyUyMENBJTIw
MSUyMDIwMDksTz1ELVRydXN0JTIwR21iSCxDPURFP2NlcnRpZmljYXRlcmV2b2Nh
dGlvbmxpc3SGQGh0dHA6Ly9jcmwuZC10cnVzdC5uZXQvY3JsL2QtdHJ1c3Rfc3Ns
X2NsYXNzXzNfY2FfMV8yMDA5LmRlci5jcmyGRWh0dHA6Ly9jZG4uZC10cnVzdC1j
bG91ZGNybC5uZXQvY3JsL2QtdHJ1c3Rfc3NsX2NsYXNzXzNfY2FfMV8yMDA5LmNy
bDAzBgNVHRIELDAqgRBpbmZvQGQtdHJ1c3QubmV0hhZodHRwOi8vd3d3LmQtdHJ1
c3QubmV0MB0GA1UdDgQWBBTPQMf76ZbmX6Yw5m9XUVDmaLExOzAOBgNVHQ8BAf8E
BAMCBaAwggLqBgorBgEEAdZ5AgQCBIIC2gSCAtYC1AB3AO5Lvbd1zmC64UJpH6vh
nmajD35fsHLYgwDEe4l6qP3LAAABZVclR/gAAAQDAEgwRgIhANE8xE+aw/D2Qo3k
2uIzfJghPw9P7L5yn2lNXFrCKbnyAiEAk32HlmL4W7YAPG/ny2jy2ojlqntWcP2M
zYpGjR+9vlsAdwBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWVX
JUfNAAAEAwBIMEYCIQC7Z6LBFHrYDfHUaerygs4U3H3cdWDsxumBRNNvcmFdBwIh
AIwd5nS6aOHeQVzT9Aer6os8F1wnzuy+H32qg23oTix4AHcApLkJkLQYWBSHuxOi
zGdwCjw1mAT5G9+443fNDsgN3BAAAAFlVyVKPQAABAMASDBGAiEA+yoyd59eM1IK
DgrDDld34oV01L1y4Nc3Z8rgv8JOq00CIQCFP9vZUUtDxXmj4O3DQ811OpXmHNlg
gZS5F+mESL4xxwB3AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAAB
ZVclSTMAAAQDAEgwRgIhAPqxuvYOsjTI5RNQfKyg7Po8KquuYvU2YJCs/nWjToew
AiEAr+ejeZZZCk0L/CEe5feXxYEj1PfFI7RExNhOj/8nNxYAdQC72d+8H4pxtZOU
I5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWVXJUq5AAAEAwBGMEQCIF/e3NSuy7oY
lDsU75oIwlhGdW7veX/S6XzSv6GXKkzwAiAUAuS3Lq2+UhzmV8jRfY1bxeIbuCEJ
GRJYYLE4LXHCjQB3AFYUBpov18Ls0/XhvUSyPsdGdrm8mRFcwO+UmFXWidDdAAAB
ZVclSkIAAAQDAEgwRgIhAIk8NitgemSXK0l4wYmBG2X3yiWQSB8UszIzTVZhPBMW
AiEApoTjR4dgdwFsY5RmJJweRwBjq/Ryk6eRlgZSi1EJweswRgYDVR0RBD8wPYIa
d3d3LmVsYW4uYXJiZWl0c2FnZW50dXIuZGWCH3d3dy5lbGFuLXRlc3QuYXJiZWl0
c2FnZW50dXIuZGUwDQYJKoZIhvcNAQELBQADggEBABpmy2hNbNKYYWtwG+DQ+gk0
+dMznjoJz4CxzV5r7GDFi6lD41bID2P0i+nJg43tNoS3uj227WlagbDvDVgNX+87
csUEy2p19nIogZwseHJm/aSHJucrm/ELRCE9wLK9w5/akj4OG8FeSlFG1UGL/k8P
3XgD34ZBlmOKmCAtQuXUb6RKTdIqliZ2T+9vKaKV0t1p5ncIx0AdHsA/dGF6rl63
Cr7V7NSfiyZ6LewS3yV6CAnYZ+NFxyyQnjYSKZAZjMQhn1LDD5vIDhnk/Lb33vmm
gDMQjX5lBXNKugGgdeGVsn0dZRhoy/dBYNi/BapcmCCzdcd4hSpj2vT/uRjMysw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/SLMRgMldUEdGU5/xsA
Ol26zQAHkmUlDI02IJa0JDgZaiCLYAlS3OzA+pMHUIWUbjJTStJ+jPWka2Sv8K2y
xDkBE703ih38I47FwK/rCTslf8tB9NlWGWUXfmv/rhasjnrcp/VZxO3R9bYR0lmJ
VZoVr3CZQIq9rKWYHkpQ37QNcGHGN5blN+vsB/r9aLKp6V8IgdJNVD/9dlPX3lPz
o7LhRXnDzPSdONaCZNmaFaahoDnnefXFVBDVq6VTh0gESkNlf07j4SI16oHDa3lO
68NVVXpKP+7/IadnlJ5lpTQZfNkjOtYh/xDv0ZpNuRfrvidQ2ksEadauRMJiMC9Z
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 96375302083649881477993005311355424986
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-20 11:43:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-24 11:43:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM013545682'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nuernberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bundesagentur fuer Arbeit'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.elan.arbeitsagentur.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26251918129666567555051303280109012026858121524627200464135162662967697173181804780849622238739755779898539188798659476129173474842179129420801777930862078693095092664892419345198068619030092452676957043084564076673047765160390492378466908352054849507559638830279777234644168603506596604683984327875131688370416128066666334472872716800802118142466871215684203848491597271541009040430229521158385163938466981840873951871271755982248246854073391605197983515939209586493075524901855671189247374164764548649563290070976961320279313898687005887581342692662179314903801659913072060680714268017255229265514019717500292258183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf40c7fbe996e65fa630e66f575150e668b1313b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (730 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (726 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elan.arbeitsagentur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elan-test.arbeitsagentur.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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