schaerer.com
- WMF GmbH -
Issued by D-TRUST SSL Class 3 CA 1 2009
About this certificate
This digital certificate with serial number 67:b3:ee:fa:81:7b:c0:93:d8:ea:cd:51:6c:ed:70:8b was issued on by D-Trust GmbH.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
WMF GmbH
Company registration number:
CSM028984946
Organization: WMF GmbH
Organization: WMF GmbH
State / Province:
Baden-Wuerttemberg
Locality: Geislingen an der Steige
Country: DE
Locality: Geislingen an der Steige
Country: DE
D-Trust GmbH
Organization:
D-Trust GmbH
Country:
DE
This certificate has expire since
Certificate Details
Serial Number (hex): 67:b3:ee:fa:81:7b:c0:93:d8:ea:cd:51:6c:ed:70:8bSerial Number (int): 137844751764123540282677118151116550283
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 2f:33:96:4f:8d:33:1c:5c:ec:dd:26:40:b9:47:37:99:c1:d3:eb:78
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a
Fingerprint (sha1): b8:d5:ff:1d:ce:e1:36:40:30:08:a3:7a:37:b6:5f:cc:dd:00:0b:51
Fingerprint (sha256): 4c:48:ae:d8:be:b5:7c:8e:1d:16:37:07:3e:4b:46:f9:10:5d:85:b2:9c:1a:aa:47:41:78:a5:cb:1c:d0:04:04
Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?
Revocation information
OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.netCRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl
Check the revocation status for certificate schaerer.com
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for schaerer.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.schaerer.com
schaerer.com
virtual-showroom.schaerer.com
soul-select.schaerer.com
coffeeblog.schaerer.com
usa.schaerer.com
schaerer.com
virtual-showroom.schaerer.com
soul-select.schaerer.com
coffeeblog.schaerer.com
usa.schaerer.com
Other certificates including the domain name schaerer.com
(limited to 100 certificates)
schaerer.com
schaerer.com
usa.schaerer.com
coffeelinkng.schaerer.com
schaerer.com
mcstaging.schaerer.com
owa.wmf.com
schaerer.com
schaerer.com
schaerer.com
schaerer.com
*.coffeelinkng.schaerer.com
*.schaerer.com
*.schaerer.com
coffelink.schaerer.com
*.coffeelinkng.schaerer.com
coffeelink.schaerer.com
usa.schaerer.com
owa.wmf.com
coffeelink.schaerer.com
schaerer.com
schaerer.com
schaerer.com
*.schaerer.com
schaerer.com
logintest.coffeelinkng.schaerer.com
logintest.coffeelinkng.schaerer.com
usa.schaerer.com
schaerer.com
usa.schaerer.com
usa.schaerer.com
time.schaerer.com
*.coffeelinkng.schaerer.com
coffeelink.schaerer.com
coffeelink.schaerer.com
schaerer.com
schaerer.com
usa.schaerer.com
usa.schaerer.com
schaerer.com
time.schaerer.com
usa.schaerer.com
*.schaerer.com
www.schaerer.com
schaerer.com
time.schaerer.com
schaerer.com
*.coffeelinkng.schaerer.com
schaerer.com
*.schaerer.com
schaerer.com
usa.schaerer.com
*.schaerer.com
usa.schaerer.com
coffeelink-int.schaerer.com
schaerer.com
login.coffeelinkng.schaerer.com
schaerer.com
*.coffeelinkng.schaerer.com
schaerer.com
coffeelink-int.schaerer.com
schaerer.com
schaerer.com
schaerer.com
usa.schaerer.com
coffeelinkng.schaerer.com
schaerer.com
mcstaging.schaerer.com
owa.wmf.com
schaerer.com
schaerer.com
schaerer.com
schaerer.com
*.coffeelinkng.schaerer.com
*.schaerer.com
*.schaerer.com
coffelink.schaerer.com
*.coffeelinkng.schaerer.com
coffeelink.schaerer.com
usa.schaerer.com
owa.wmf.com
coffeelink.schaerer.com
schaerer.com
schaerer.com
schaerer.com
*.schaerer.com
schaerer.com
logintest.coffeelinkng.schaerer.com
logintest.coffeelinkng.schaerer.com
usa.schaerer.com
schaerer.com
usa.schaerer.com
usa.schaerer.com
time.schaerer.com
*.coffeelinkng.schaerer.com
coffeelink.schaerer.com
coffeelink.schaerer.com
schaerer.com
schaerer.com
usa.schaerer.com
usa.schaerer.com
schaerer.com
time.schaerer.com
usa.schaerer.com
*.schaerer.com
www.schaerer.com
schaerer.com
time.schaerer.com
schaerer.com
*.coffeelinkng.schaerer.com
schaerer.com
*.schaerer.com
schaerer.com
usa.schaerer.com
*.schaerer.com
usa.schaerer.com
coffeelink-int.schaerer.com
schaerer.com
login.coffeelinkng.schaerer.com
schaerer.com
*.coffeelinkng.schaerer.com
schaerer.com
coffeelink-int.schaerer.com
schaerer.com
schaerer.com
Certificate
The complete raw certificate details for schaerer.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIMqzCCC5OgAwIBAgIQZ7Pu+oF7wJPY6s1RbO1wizANBgkqhkiG9w0BAQsFADBM MQswCQYDVQQGEwJERTEVMBMGA1UECgwMRC1UcnVzdCBHbWJIMSYwJAYDVQQDDB1E LVRSVVNUIFNTTCBDbGFzcyAzIENBIDEgMjAwOTAeFw0yMjAyMDQwNjM5MTNaFw0y MzAyMDcwNjM5MTNaMIGOMRUwEwYDVQQFEwxDU00wMjg5ODQ5NDYxCzAJBgNVBAYT AkRFMRswGQYDVQQIExJCYWRlbi1XdWVydHRlbWJlcmcxITAfBgNVBAcTGEdlaXNs aW5nZW4gYW4gZGVyIFN0ZWlnZTERMA8GA1UEChMIV01GIEdtYkgxFTATBgNVBAMT DHNjaGFlcmVyLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKDP 8lWYUirRW7cPqv5WPj2EcNjaZQrhuy0UspHnuObTkQaE8ljVaQ2c/sFJMrkRrq6m hWNJwDVVxiB/jan/DD+GRaIlXjtfNHntq8kaBV1fe8+TJz3bwEUnpYzLOzFmdw/3 u3HFIeL3C5zDnlfciUTrJExEuRUoR7C4P/7AVBHoknX+1BhI0Vl+992joYWk3/zK iBccbT5G+LdZnpRCy/n9F7OTz65PLifXG7rCUGfXYnmlhM7R+UWkBck5D7Y3Ej8c BeP/yV3ARuTboAD1j7T1MfYJUnYMy5IK8gbOm1dx3D4RhS+vcrqjkOUzp5QFVYOx YgS4YO2RZHvE51QlKOnIwWTIlkYDWEUuvdrNbTRcmuZcyRAz3MWbLG1dBGjdJMav HZl95UdNVBDIWkfl7yTiHpfJzWsLBUbntEHjbSzylqTo5C8oywjwZJ60tkb3P2OF pZJrsWiuc1ZuJgs2kwJk26csZzYTsIOKOTPLumpQXbbnH2mcyKLodE3vbYM5pOIa Gq7FBixVlagNXpEz+95zD+exiIHg3f/4cjngX8PDbstTdhDnmkb0Qc7CiBNaGvyn 0PGHePx2HtJdRfO4UNcatDy50Fs/e6KBocIp1KR4eqINgaE+caLVYqdkJ11w3Pjl jNmdZoy1gDCWvFMKpbCUmhesp9h/uBb6izSugTLjAgMBAAGjgghEMIIIQDCCARYG CCsGAQUFBwEBBIIBCDCCAQQwMwYIKwYBBQUHMAGGJ2h0dHA6Ly9zc2wtYzMtY2Ex LTIwMDkub2NzcC5kLXRydXN0Lm5ldDBMBggrBgEFBQcwAoZAaHR0cDovL3d3dy5k LXRydXN0Lm5ldC9jZ2ktYmluL0QtVFJVU1RfU1NMX0NsYXNzXzNfQ0FfMV8yMDA5 LmNydDB/BggrBgEFBQcwAoZzbGRhcDovL2RpcmVjdG9yeS5kLXRydXN0Lm5ldC9D Tj1ELVRSVVNUJTIwU1NMJTIwQ2xhc3MlMjAzJTIwQ0ElMjAxJTIwMjAwOSxPPUQt VHJ1c3QlMjBHbWJILEM9REU/Y0FDZXJ0aWZpY2F0ZT9iYXNlPzB5BgNVHSAEcjBw MAgGBgQAj3oBBzAIBgZngQwBAgIwWgYLKwYBBAGlNAKBSAEwSzBJBggrBgEFBQcC ARY9aHR0cDovL3d3dy5kLXRydXN0Lm5ldC9pbnRlcm5ldC9maWxlcy9ELVRSVVNU X0NTTV9QS0lfQ1BTLnBkZjCCBFAGCisGAQQB1nkCBAIEggRABIIEPAQ6AHcAejKM VNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAF+w3VeywAABAMASDBGAiEA nbh1zzToaRarlrZpp5uRrhfR3XYDWpRhx0KNpRqZhWkCIQD0iI1q5i18Dl5sxvih 2+a6OS+++Z6EDuoy3HZfQwXQrAB2AOh+p2YLwmz2AC71cl0/4OMxuTk7uS+/WOs7 kEna9UNaAAABfsN1Ym0AAAQDAEcwRQIgXkWVbMsIracahttJTMSaGF4+4tpvrwYm sw9tnSmACUoCIQDhecuRO+Q64r/y6XIzrQPa3DLFbSNVHACtmomrPaGVZgB2AK33 vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABfsN1XssAAAQDAEcwRQIh ALSisfsAKqd3KFe+pNfhzymidCay/01EsP2wAYQceDa4AiBfzhtzcDvbpL5elVSH 1BiQSjJX9GyQdhZJHuc4pfwmSwB2ADXPGRu/sWxXvw+tTG1Cy7u2JyAmUeo/4Srv qAPDO9ZMAAABfsN1YIMAAAQDAEcwRQIgSfRMX1Xb297BwrTX9KsLHSS2e7W4Fcrr TyKqLZVqPKECIQDr1vYZvFazlbL8INB/LKw68vR5SuVULhJIVfO488Rd4QB1AFWB 1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABfsN1YIQAAAQDAEYwRAIg NpTR7FutDospRG2ZMgQB3KjW5L/plXAoUtpDgUmK+qgCIEjMK3x+InuyUu55q6ol om2976GSCD36qntE/aRgmPDKAHcA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3 fW0GvW4AAAF+w3VgNwAABAMASDBGAiEA8QEiiqDjDNVBjLPBIv4uS0cFlM+SzCQ5 zTMzu1gHnFUCIQC2/PNhDaGrSKJxvert9WyqiddIN3s8jADjP+HRB3n2LQB2ALNz dwfhhFD4Y4bWBancEQlKeS2xZwwLh9zwAw55NqWaAAABfsN1Yj4AAAQDAEcwRQIh ALtaNp5OEsXEc7s8iLJbQHmMEE/H3nNrV5133sya72b+AiAog2yGZbFTigX+3WyC aAD4Jw0+Vyo+hyKe02VQj+RtUgB3AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaN sgiaN9kTAAABfsN1YVIAAAQDAEgwRgIhAPQtD8w3olR3WsPYcpxzBxRQgRaLOAP1 8fgEaw2ICVuzAiEAiwwn3hVQh0OJtqjtj84DWYiSdHgODoVyU6YM8UhdcMYAdgC3 Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAX7DdWJcAAAEAwBHMEUC IErOhB4vr4tLC6IKQoAAUCO21wbxKLRwM14GBMm7OGbHAiEAzFolXkB2p1McRSSe bo6chs9OSiTjin3FrVptOICR6rcwMwYDVR0SBCwwKoEQaW5mb0BkLXRydXN0Lm5l dIYWaHR0cDovL3d3dy5kLXRydXN0Lm5ldDCCAR0GA1UdHwSCARQwggEQMIIBDKCC AQigggEEhnlsZGFwOi8vZGlyZWN0b3J5LmQtdHJ1c3QubmV0L0NOPUQtVFJVU1Ql MjBTU0wlMjBDbGFzcyUyMDMlMjBDQSUyMDElMjAyMDA5LE89RC1UcnVzdCUyMEdt YkgsQz1ERT9jZXJ0aWZpY2F0ZXJldm9jYXRpb25saXN0hkBodHRwOi8vY3JsLmQt dHJ1c3QubmV0L2NybC9kLXRydXN0X3NzbF9jbGFzc18zX2NhXzFfMjAwOS5kZXIu Y3JshkVodHRwOi8vY2RuLmQtdHJ1c3QtY2xvdWRjcmwubmV0L2NybC9kLXRydXN0 X3NzbF9jbGFzc18zX2NhXzFfMjAwOS5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMIGPBgNVHREEgYcwgYSCEHd3dy5zY2hhZXJlci5jb22CDHNjaGFl cmVyLmNvbYIddmlydHVhbC1zaG93cm9vbS5zY2hhZXJlci5jb22CGHNvdWwtc2Vs ZWN0LnNjaGFlcmVyLmNvbYIXY29mZmVlYmxvZy5zY2hhZXJlci5jb22CEHVzYS5z Y2hhZXJlci5jb20wHwYDVR0jBBgwFoAUUBkylJrEtQRNVtDAgyHVNVWwsXowDgYD VR0PAQH/BAQDAgWgMB0GA1UdDgQWBBQvM5ZPjTMcXOzdJkC5RzeZwdPreDANBgkq hkiG9w0BAQsFAAOCAQEACgQa4Ec6KyeVy08FOjgjGBSgjWfl1+MmGh4dtMU+hCT9 FabXP+kfFHbx3pmCQPKXXy7Wu+ZwXTUwqL5DXaezO9CfNmBaU+UTSLKqIbHhfzwe ZWyTvV7SLUGGWs6PO2t/Uo+DWirNeCAomZIXtjkPdeoPHPBhc2pcqZ6uKFWgvqsc yw7KjRqNXd/gL3VkEXmdd15MaC6RSsemWW7+UxYcH4KE5v2DX1+Yj5t0dKktg8fJ 46ozmdWrn9f8u4JhBJSr737zgwgbZtvRrRSoVkq8B99kYV/sHyd/saHICItApgcZ TvSoWUTw3zZqpIzC/8nwxyzWNOoLFnVACfPi/CBRoA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoM/yVZhSKtFbtw+q/lY+ PYRw2NplCuG7LRSykee45tORBoTyWNVpDZz+wUkyuRGurqaFY0nANVXGIH+Nqf8M P4ZFoiVeO180ee2ryRoFXV97z5MnPdvARSeljMs7MWZ3D/e7ccUh4vcLnMOeV9yJ ROskTES5FShHsLg//sBUEeiSdf7UGEjRWX733aOhhaTf/MqIFxxtPkb4t1melELL +f0Xs5PPrk8uJ9cbusJQZ9dieaWEztH5RaQFyTkPtjcSPxwF4//JXcBG5NugAPWP tPUx9glSdgzLkgryBs6bV3HcPhGFL69yuqOQ5TOnlAVVg7FiBLhg7ZFke8TnVCUo 6cjBZMiWRgNYRS692s1tNFya5lzJEDPcxZssbV0EaN0kxq8dmX3lR01UEMhaR+Xv JOIel8nNawsFRue0QeNtLPKWpOjkLyjLCPBknrS2Rvc/Y4WlkmuxaK5zVm4mCzaT AmTbpyxnNhOwg4o5M8u6alBdtucfaZzIouh0Te9tgzmk4hoarsUGLFWVqA1ekTP7 3nMP57GIgeDd//hyOeBfw8Nuy1N2EOeaRvRBzsKIE1oa/KfQ8Yd4/HYe0l1F87hQ 1xq0PLnQWz97ooGhwinUpHh6og2BoT5xotVip2QnXXDc+OWM2Z1mjLWAMJa8Uwql sJSaF6yn2H+4FvqLNK6BMuMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 137844751764123540282677118151116550283 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-04 06:39:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-07 06:39:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM028984946' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Geislingen an der Steige' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WMF GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'schaerer.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 656056910996262740084504529527962141156631767521967369875879482407989820304521299478910730834310412618236941716845142717144439770539680893860948745550527726732249169590406948097533299019236546107179969448979446356996190259988903125728997626823139684658382838592380496771151371475533673723956072105850304206938428634744195284808146850611335074893290585169429742979519174587433445481302132903636940342010041569840970927832791093998924297150141616968867929917584171876143150975188615655446823905847532861714980836218804937841232303491006303960305174649033460391749694868971040125913307126258927602237976338717597539687595089313868138318899280774096790691299675466201371861729446447090143471529465575886747796914073618650929047990939137961987208632963132038068099017703298586266058651466615298171307755969719741741188446098719148880938225695146632580468685730239239003049713703939810731915162951458851645466216931632660729686408848278806938725834777798780077695330655922057789439252554893356055216326525417013626281318669039674634172923211972193218940111107725111611906020930797706600945246003813245354351513860636382445078449620026665610937196409450645879292317887886269817086739659427946315448514909754931421049695648550137849014465251 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1088 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1084 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schaerer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schaerer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtual-showroom.schaerer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soul-select.schaerer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffeeblog.schaerer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa.schaerer.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2f33964f8d331c5cecdd2640b9473799c1d3eb78 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 000a041ae0473a2b2795cb4f053a38231814a08d67e5d7e3261a1e1db4c53e8424fd15a6d73fe91f1476f1de998240f2975f2ed6bbe6705d3530a8be435da7b33bd09f36605a53e51348b2aa21b1e17f3c1e656c93bd5ed22d41865ace8f3b6b7f528f835a2acd782028999217b6390f75ea0f1cf061736a5ca99eae2855a0beab1ccb0eca8d1a8d5ddfe02f756411799d775e4c682e914ac7a6596efe53161c1f8284e6fd835f5f988f9b7474a92d83c7c9e3aa3399d5ab9fd7fcbb82610494abef7ef383081b66dbd1ad14a8564abc07df64615fec1f277fb1a1c8088b40a607194ef4a85944f0df366aa48cc2ffc9f0c72cd634ea0b16754009f3e2fc2051a0