csr.huk.de

- HUK-COBURG -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 5a:f3:4c:b3:53:1d:b8:10:26:c3:2f:5b:c0:0f:67:52 was issued on by D-Trust GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HUK-COBURG

Company registration number: CSM015393995
Organization: HUK-COBURG
State / Province: Bayern
Locality: Coburg
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:f3:4c:b3:53:1d:b8:10:26:c3:2f:5b:c0:0f:67:52
Serial Number (int): 120893803427960543132658541678002399058
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c3:82:4b:b6:c5:db:ce:12:0a:6a:91:b1:70:02:5c:66:1a:a0:9f:d8
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 8c:99:8e:8e:41:7b:18:f7:fb:74:55:95:88:34:0b:64:b8:80:b9:6f
Fingerprint (sha256): 4b:eb:a5:b1:d0:35:da:e7:f4:08:c3:d1:08:7e:9c:24:d3:a2:f3:ea:df:4a:bb:ce:10:87:cf:0d:75:e9:3c:54

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate csr.huk.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for csr.huk.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

csr.huk.de

Other certificates including the domain name huk.de

(limited to 100 certificates)
huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
dev.bot-tas.huk.de
ci-euw1.ireland.delivery.aimatch.net
vtpcert.huk.de
ci-euw1.ireland.delivery.aimatch.net
vtppin2.huk.de
auth1test.huk.de
ip.huk.de
vtpcert.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
vtp.huk.de
oa.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
api1.huk.de
vtppin2.huk.de
icf.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
www.cagt.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
officeonline.huk.de
oa.huk.de
ci-euw1.ireland.delivery.aimatch.net
somni.huk.de
dev.bot-telematik.huk.de
*.webcon1.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
vpngw.huk-coburg.de
auth1.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
dev.bot-tas.huk.de
ci-euw1.ireland.delivery.aimatch.net
ip.huk.de
api.huk.de
auth1.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
oa.huk.de
*.webcon1.huk.de
oa.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
vtpservice2.huk.de
ci-euw1.ireland.delivery.aimatch.net
appconnect.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
www.huk.de
ci-euw1.ireland.delivery.aimatch.net
somni.huk.de
ci-euw1.ireland.delivery.aimatch.net
mail.huk.de
ci-euw1.ireland.delivery.aimatch.net
prod.bot-tas.huk.de
icftest.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
csr.huk.de
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
www.huk.de
csr.huk.de
ci-euw1.ireland.delivery.aimatch.net
partner3t.huk.de
somni.huk.de
ci-euw1.ireland.delivery.aimatch.net
auth2.huk.de

Certificate

The complete raw certificate details for csr.huk.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbqRjPZWxwBeBD4B/WA1
HBfnFAc2MEva27F5za7EJi8CusZykZpA6FmcPnYreahUMsgRsF1j7C2G0TmkCb0J
TQhCxLHhnqb1FJD/RV44KbRDz0U9DUdsAtqbeSfyXpR1WIG1YiNSpNbslZU2cWbS
BomDFRfKBdDk5BjbRgHmgi+jX23H7ZbthuV46nCSpegw8+V7m9NIRfTgY/8OfToG
z6KXiOSbufrpnEHwdlA7VTZGUGJYWFElxrWE4TIQ0EgCAIlspsyQmOQqpp0u0NaF
YunUE/09Fmd+ATYoPNZTbyGQqjcPDm9noAf+zVJ0pePgKU18BjVqzPI5hOS53kUk
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 120893803427960543132658541678002399058
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-16 10:37:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-20 10:37:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM015393995'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Coburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HUK-COBURG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'csr.huk.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23951040023023645325823521206334052796810856598029689094081751974342493965492342978446876915707187303598538630796240085168137435640136888422860533046319554554268984247501104790204335458918196192824163123993710310085612124592304461814330627378255217041716780704700560405539229560818267872790216006429666016524659892654314523417533391676314749096763886055899772383040770918114119400610645943524678331391875570768689624355561006962658894008493292373200007714223455727931319056689439896038456969821128827344188516091513489674598287435232859100271173051020380145829949394326982032927176910457559475062435266821132170634279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3824bb6c5dbce120a6a91b170025c661aa09fd8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (599 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csr.huk.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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