securemail.olb.de

- Oldenburgische Landesbank AG -

Issued by D-TRUST SSL Class 3 CA 1 EV 2009

About this certificate

This digital certificate with serial number 7e:52:b5:4e:c9:c7:53:3e:7d:07:5d:13:dd:4d:8d:eb was issued on by D-Trust GmbH.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Oldenburgische Landesbank AG

Company registration number: HRB 3003
Organization: Oldenburgische Landesbank AG
Address: Stau 15-17
Postal code: 26122
State / Province: Niedersachsen
Locality: Oldenburg
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): 7e:52:b5:4e:c9:c7:53:3e:7d:07:5d:13:dd:4d:8d:eb
Serial Number (int): 167912173169681649237703409732699393515
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f3:3e:21:6e:d2:a5:eb:c6:e8:df:ac:4c:df:9b:d4:73:7d:fe:3b:f6
AuthorityKeyId: ac:ed:a5:9d:7a:a2:b6:43:f1:18:8a:25:6a:6c:b1:cc:a8:f2:5a:d4

Fingerprint (sha1): 2b:1d:ef:aa:dd:66:22:34:52:ee:61:dd:16:a4:cc:b8:d3:b8:77:a7
Fingerprint (sha256): 4d:bb:db:d7:16:c6:3c:a8:ed:9b:de:92:c4:04:14:dd:d7:42:11:3e:d4:40:7a:06:45:72:d7:b6:b2:d9:2f:20

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_EV_2009.crt

Revocation information

OCSP Server: http://ssl-c3-ca1-ev-2009.ocsp.d-trust.net
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_ev_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_ev_2009.crl

Check the revocation status for certificate securemail.olb.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securemail.olb.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

securemail.olb.de
mail2.olb.de
mail1.olb.de

Other certificates including the domain name olb.de

(limited to 100 certificates)
expe01.video.olb.de
magazin.olb.de
mbanking.olb.de
magazin.olb.de
3d-secure.olb.de
teamsphone-osv.olb.de
ip.olb.de
rsu-kis.olb.de
hbciweb.xs2a.olb.de
www2.olb.de
srcwpb.olb.de
digitalefiliale.olb.de
mbanking.olb.de
rsu-kis.olb.de
securemail.olb.de
mbanking.olb.de
videoberatung.olb.de
daten.olb.de
internet-int.olb.de
srcms.olb.de
rsu-kis-int.olb.de
magazin.olb.de
urc.olb.de
rsu-kis.olb.de
xs2a.olb.de
safelock.olb.de
3d-secure.olb.de

hbciweb-dev.olb.de
wuerttembergische-int.olb.de
mdm-int.olb.de
hbciweb-dev.olb.de
www.olb.de
wuerttembergische.olb.de
developer-portal.olb.de
hbciweb-admin-int.olb.de
sso.olb.de
www-int.olb.de
xs2a.olb.de
rsa.olb.de
mbanking.olb.de
www.olb.de
vdbebics.olb.de
safelock.olb.de
*.olb.de
www.weihnachten.olb.de
vdbebics.olb.de
weihnachten.olb.de
safelock.olb.de
src.olb.de
conntest.olb.de
hbciweb-dev.olb.de

wertpapiere.olb.de
xs2a.olb.de
magazin.olb.de
www-int.olb.de
daten.olb.de
news.wuestenrot.olb.de
wuerttembergische.olb.de
securemail.olb.de
videoberatung.olb.de
rsa.olb.de
www-int.olb.de
ods.olb.de
www.olb.de
videoberatung.olb.de
wertpapiere.olb.de
src.olb.de
www.olb.de
www.olb.de
securemail.olb.de
adfs.olb.de
ebanking.olb.de
exchange.olb.de
www.olb.de
exchange.olb.de
xs2a.olb.de
ebanking.olb.de
wertpapiere.olb.de
daten.olb.de
internet-int.olb.de
pfandbrief.olb.de
www.olb.de
srcms.olb.de
hbciweb.olb.de
ssrp.olb.de
rsu-kis.olb.de
rsu-kis.olb.de
ip.olb.de
mbanking.olb.de
videoberatung.olb.de
digitalefiliale.olb.de
3d-secure.olb.de
video.olb.de
www.olb.de
sso.olb.de
srcms.olb.de
magazin.olb.de
www.olb.de

Certificate

The complete raw certificate details for securemail.olb.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHtDCCBpygAwIBAgIQflK1TsnHUz59B10T3U2N6zANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJERTEVMBMGA1UECgwMRC1UcnVzdCBHbWJIMSkwJwYDVQQDDCBE
LVRSVVNUIFNTTCBDbGFzcyAzIENBIDEgRVYgMjAwOTAeFw0yNDAzMTExMjE3MTVa
Fw0yNTAxMTYyMjU5NTlaMIIBJDETMBEGCysGAQQBgjc8AgEDEwJERTEeMBwGCysG
AQQBgjc8AgECDA1OaWVkZXJzYWNoc2VuMRowGAYLKwYBBAGCNzwCAQEMCU9sZGVu
YnVyZzEdMBsGA1UEDwwUUHJpdmF0ZSBPcmdhbml6YXRpb24xETAPBgNVBAUTCEhS
QiAzMDAzMQswCQYDVQQGEwJERTEWMBQGA1UECBMNTmllZGVyc2FjaHNlbjESMBAG
A1UEBxMJT2xkZW5idXJnMQ4wDAYDVQQRDAUyNjEyMjETMBEGA1UECRMKU3RhdSAx
NS0xNzElMCMGA1UEChMcT2xkZW5idXJnaXNjaGUgTGFuZGVzYmFuayBBRzEaMBgG
A1UEAxMRc2VjdXJlbWFpbC5vbGIuZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
ggIKAoICAQDCDSs1QZFyFglB98m0RZN8V+G7PptBuAgjBq59yM9vCHVpUBOabvVO
tSpazD6pi2ZeEKjUcjnyljbxWk3UEKpm1VB1Xvir9Tn5TS7HKFHKz1940arTh4ce
bY5tFtjfCdbQktLhFokJBw77vgrql50+rN+9TOtQpAGlFQHmqdHp4Zp9d8Ss3pfe
Kk6KHt+Ucqyp1+utq9osSIPnewCR71OLVGuvPPf7QgH1eJHw2EhVY5DH/R3rE7zG
O+ajEuRdXkjxgfOsdk8HKagqVjSLzvnC2UyQpQteRcPFCW0id0eIjlm9HQwDZjUb
dY+poB7353Ii1ZUjqSPlSc2dGxnfeF2WbTNYqudGjlKHrzb7XHAb+GVezYs0lX9+
79XASkFDywgwLZuzO9mvw5RbJjkRALcIm4qbpdTz1dQofWY7I++rUbVkAtz7ICv4
w0Wb4/UmxegHwZbBhwKpoX32o3ovr7RouiygpUtEXs3ozQq59WZeOwb4Ul1Ndrg0
f/u6ZH6OaQXkVvBI5vmHFVSuj3z7wVaSKbNF6E3Gs+lGS/LxVSZZRDCLlfK0kvzF
4OD08Wvzit9viRpaYOPNM93z+5x5bd9mGRRpxQuPwP73Kr3nYg0lYTNo61IGs3zn
L/bOKKr+LZERice3OWQCRnP51xqb3iYCqqADSear5SKjNXmRF0+zxQIDAQABo4IC
szCCAq8wgZkGCCsGAQUFBwEBBIGMMIGJMDYGCCsGAQUFBzABhipodHRwOi8vc3Ns
LWMzLWNhMS1ldi0yMDA5Lm9jc3AuZC10cnVzdC5uZXQwTwYIKwYBBQUHMAKGQ2h0
dHA6Ly93d3cuZC10cnVzdC5uZXQvY2dpLWJpbi9ELVRSVVNUX1NTTF9DbGFzc18z
X0NBXzFfRVZfMjAwOS5jcnQweAYDVR0gBHEwbzAHBgVngQwBATAIBgYEAI96AQQw
WgYLKwYBBAGlNAKBSgEwSzBJBggrBgEFBQcCARY9aHR0cDovL3d3dy5kLXRydXN0
Lm5ldC9pbnRlcm5ldC9maWxlcy9ELVRSVVNUX0NTTV9QS0lfQ1BTLnBkZjATBgor
BgEEAdZ5AgQDAQH/BAIFADAzBgNVHRIELDAqgRBpbmZvQGQtdHJ1c3QubmV0hhZo
dHRwOi8vd3d3LmQtdHJ1c3QubmV0MIGjBgNVHR8EgZswgZgwgZWggZKggY+GQ2h0
dHA6Ly9jcmwuZC10cnVzdC5uZXQvY3JsL2QtdHJ1c3Rfc3NsX2NsYXNzXzNfY2Ff
MV9ldl8yMDA5LmRlci5jcmyGSGh0dHA6Ly9jZG4uZC10cnVzdC1jbG91ZGNybC5u
ZXQvY3JsL2QtdHJ1c3Rfc3NsX2NsYXNzXzNfY2FfMV9ldl8yMDA5LmNybDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOAYDVR0RBDEwL4IRc2VjdXJlbWFp
bC5vbGIuZGWCDG1haWwyLm9sYi5kZYIMbWFpbDEub2xiLmRlMB8GA1UdIwQYMBaA
FKztpZ16orZD8RiKJWpsscyo8lrUMA4GA1UdDwEB/wQEAwIFoDAdBgNVHQ4EFgQU
8z4hbtKl68bo36xM35vUc33+O/YwDQYJKoZIhvcNAQELBQADggEBAGsUJUSElFn5
vslFb8A8pfDtrdklqSvxHlEOywTeNIXE5Zjq7NXpusVYFf3XwVjAQ0oD/jQE+URM
5qToX/LZG4gmiFgtWT7QPXAu+H/S46afRUzGFmeRHapa0gmAFFhQe8HLOlYcxj3M
NufbKMFyP87/jt9pVcA5Rk0Y9X2KEdnDZrWoQuxs7l5R32CrFoyuwi1XrGp/MTOG
WOdxRf3Zl+5jTLqXT+HXPFlvWglXTJdoeHHV3x6AqfuzkxLOftOsXlcUD5/09s5n
qfgX1PNZI043hL5JmHZbDfNwG/9PhhRPXp5xike+lJMutGmADxFQZ2BCmLeMNHfJ
4aWyzPt2UYg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 167912173169681649237703409732699393515
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 EV 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 12:17:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-16 22:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Oldenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 3003'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oldenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '26122'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stau 15-17'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oldenburgische Landesbank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securemail.olb.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 791660808339714937351810354959707739585769166195135949645366260036921727926054451834398433605671597026140656941368371894425132837211825139481145797134379502962306399201560792607956264634764094952647519130137835710089081412443777623404894432780184737268889995059273514866451075317006656227741231322906433154947484518363147688737034057320429284606176092583003285450105466325079384339057328205557651340468317276981462410497667869286217726722460022863279383421746636515040532363848274255070940975845199761363041468738049444920654660098281563903553637198179486547438857615947614168686236466213042948333688033218500206087058207135147694530562588382684830449038599365870128951377981286953288676792980948215080246719230257245927633934435279232048574195688177061819514292096228716814706556444433489274234161482449065988237861821310277072036695794983082690423929685621751216133412190983768325869814653741699123444322461965879113220442310353729244128308377694734289323556705646470709396654144697046113261104428819932840319700091740490550264702939266177941502031696420963898862374509876553243527066399209226821311089146230688121108227323217289759909825451172770632814451269800831369891090904639274577336117763782377157742965248633282240025965509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-ev-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_EV_2009.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.202.1 (D-TRUST EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (155 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_ev_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_ev_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail2.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail1.olb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aceda59d7aa2b643f1188a256a6cb1cca8f25ad4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f33e216ed2a5ebc6e8dfac4cdf9bd4737dfe3bf6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006b142544849459f9bec9456fc03ca5f0edadd925a92bf11e510ecb04de3485c4e598eaecd5e9bac55815fdd7c158c0434a03fe3404f9444ce6a4e85ff2d91b882688582d593ed03d702ef87fd2e3a69f454cc61667911daa5ad209801458507bc1cb3a561cc63dcc36e7db28c1723fceff8edf6955c039464d18f57d8a11d9c366b5a842ec6cee5e51df60ab168caec22d57ac6a7f31338658e77145fdd997ee634cba974fe1d73c596f5a09574c97687871d5df1e80a9fbb39312ce7ed3ac5e57140f9ff4f6ce67a9f817d4f359234e3784be4998765b0df3701bff4f86144f5e9e718a47be94932eb469800f115067604298b78c3477c9e1a5b2ccfb765188