owasemea.bertelsmann.de
- Arvato Systems GmbH -
Issued by GeoTrust TLS RSA CA G1
About this certificate
This digital certificate with serial number 0e:3a:5b:4d:70:86:df:94:8c:f8:8d:ca:e2:c6:4f:fa was issued on by DigiCert Inc.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Arvato Systems GmbH
Organization:
Arvato Systems GmbH
State / Province:
Nordrhein-Westfalen
Locality: Gütersloh
Country: DE
Locality: Gütersloh
Country: DE
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:3a:5b:4d:70:86:df:94:8c:f8:8d:ca:e2:c6:4f:faSerial Number (int): 18912196993451661111291477242314903546
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 06:84:45:ea:9e:7c:bf:80:c4:42:ac:a1:78:eb:16:ea:80:51:d2:6c
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57
Fingerprint (sha1): 47:f7:03:88:63:6b:c2:0c:fe:21:d6:11:7b:46:af:d6:6c:bc:5b:2d
Fingerprint (sha256): 51:8a:80:eb:34:de:e8:a4:5a:2d:d3:9e:23:3c:04:fe:c0:49:40:5a:0f:42:c2:1b:3c:f9:3f:93:49:e8:52:ad
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl
Check the revocation status for certificate owasemea.bertelsmann.de
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for owasemea.bertelsmann.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
owasemea.bertelsmann.de
gtlbmlowa0002.bagmail.net
gtlbmlwas0001.bagmail.net
gtlbmlwas0002.bagmail.net
gtlbmlowa0001.bagmail.net
gtlbmlowa0002.bagmail.net
gtlbmlwas0001.bagmail.net
gtlbmlwas0002.bagmail.net
gtlbmlowa0001.bagmail.net
Other certificates including the domain name bertelsmann.de
(limited to 100 certificates)
tts-eu.inrix.com
betravel.bertelsmann.de
www.haussortimente.bertelsmann.de
pp1.bertelsmann.de
cc.secureconnect.bertelsmann.de
api.qa.live.bertelsmann.de
owasemea.bertelsmann.de
greetings.bertelsmann.de
itsasqas.bertelsmann.de
www.haussortimente.bertelsmann.de
devccgtlp02.vc.bertelsmann.de
jp5.bertelsmann.de
csacie.bertelsmann.de
www.elettershop.de
benet.bertelsmann.de
betradecompliance.bertelsmann.de
ias.bertelsmann.de
pp5.bertelsmann.de
degtluv8626-repos.bertelsmann.de
*.bertelsmann.de
pp5-test.bertelsmann.de
www.bertelsmann.de
benet.bertelsmann.de
seratio3.bertelsmann.de
ess.bertelsmann.de
hotelrates.bertelsmann.de
esszeit.bertelsmann.de
*.bertelsmann.de
cp5-int.bertelsmann.de
fragobert.bertelsmann.de
www2.gitta.bertelsmann.de
directnet.bertelsmann.de
autodiscover.bertelsmann.de
seratio4.bertelsmann.de
grc-training.bertelsmann.de
www.haussortimente.bertelsmann.de
gp1.bertelsmann.de
*.benet.bertelsmann.com
betradecompliance.bertelsmann.de
itsasprd.bertelsmann.de
alumni.bertelsmann.com
*.bertelsmann.de
bop.bertelsmann.de
sp5.bertelsmann.de
*.bertelsmann.de
jobsearch.createyourowncareer.de
pp5-int.bertelsmann.de
gitta.test.bertelsmann.de
bstportal.bertelsmann.de
securelogin.bertelsmann.de
sl2.bertelsmann.de
wp1-test.bertelsmann.de
storefront2.bertelsmann.de
guest.bertelsmann.de
besuchen.bertelsmann.de
mietwagenservice.bertelsmann.de
www.haussortimente.bertelsmann.de
vas.bertelsmann.de
lc-service.bertelsmann.de
clm-int.bertelsmann.de
jppess.bertelsmann.de
ess.bertelsmann.de
sni2878bgl.wpc.edgecastcdn.net
greetings.bertelsmann.de
grc-int.bertelsmann.de
service.bertelsmann.de
*.bertelsmann.de
securelogin.bertelsmann.de
imp-test.bertelsmann.de
gitta.test.bertelsmann.de
www2.gitta.bertelsmann.de
fragobert.bertelsmann.de
vas.bertelsmann.de
imp-test.bertelsmann.de
peoplenet.bertelsmann.de
seratio4.bertelsmann.de
ess.bertelsmann.de
www.haussortimente.bertelsmann.de
deac.bertelsmann.de
b-share-qa.bertelsmann.de
b-share-dev.bertelsmann.de
keys.bertelsmann.de
bessermachen.bertelsmann.de
autodiscover.bertelsmann.de
jp5.bertelsmann.de
skypetmg.bertelsmann.de
grc-restore.bertelsmann.de
dubbmlske0001.bertelsmann.de
autodiscover.bertelsmann.de
itsgi7000.bertelsmann.de
deac.bertelsmann.de
mpsportal.bertelsmann.de
*.sti.bertelsmann.de
jppess.bertelsmann.de
www2.gitta.bertelsmann.de
cwa.bertelsmann.de
divisionalreportingserver.bertelsmann.de
skypetmg.bertelsmann.de
insurance.bertelsmann.de
www.haussortimente.bertelsmann.de
betravel.bertelsmann.de
www.haussortimente.bertelsmann.de
pp1.bertelsmann.de
cc.secureconnect.bertelsmann.de
api.qa.live.bertelsmann.de
owasemea.bertelsmann.de
greetings.bertelsmann.de
itsasqas.bertelsmann.de
www.haussortimente.bertelsmann.de
devccgtlp02.vc.bertelsmann.de
jp5.bertelsmann.de
csacie.bertelsmann.de
www.elettershop.de
benet.bertelsmann.de
betradecompliance.bertelsmann.de
ias.bertelsmann.de
pp5.bertelsmann.de
degtluv8626-repos.bertelsmann.de
*.bertelsmann.de
pp5-test.bertelsmann.de
www.bertelsmann.de
benet.bertelsmann.de
seratio3.bertelsmann.de
ess.bertelsmann.de
hotelrates.bertelsmann.de
esszeit.bertelsmann.de
*.bertelsmann.de
cp5-int.bertelsmann.de
fragobert.bertelsmann.de
www2.gitta.bertelsmann.de
directnet.bertelsmann.de
autodiscover.bertelsmann.de
seratio4.bertelsmann.de
grc-training.bertelsmann.de
www.haussortimente.bertelsmann.de
gp1.bertelsmann.de
*.benet.bertelsmann.com
betradecompliance.bertelsmann.de
itsasprd.bertelsmann.de
alumni.bertelsmann.com
*.bertelsmann.de
bop.bertelsmann.de
sp5.bertelsmann.de
*.bertelsmann.de
jobsearch.createyourowncareer.de
pp5-int.bertelsmann.de
gitta.test.bertelsmann.de
bstportal.bertelsmann.de
securelogin.bertelsmann.de
sl2.bertelsmann.de
wp1-test.bertelsmann.de
storefront2.bertelsmann.de
guest.bertelsmann.de
besuchen.bertelsmann.de
mietwagenservice.bertelsmann.de
www.haussortimente.bertelsmann.de
vas.bertelsmann.de
lc-service.bertelsmann.de
clm-int.bertelsmann.de
jppess.bertelsmann.de
ess.bertelsmann.de
sni2878bgl.wpc.edgecastcdn.net
greetings.bertelsmann.de
grc-int.bertelsmann.de
service.bertelsmann.de
*.bertelsmann.de
securelogin.bertelsmann.de
imp-test.bertelsmann.de
gitta.test.bertelsmann.de
www2.gitta.bertelsmann.de
fragobert.bertelsmann.de
vas.bertelsmann.de
imp-test.bertelsmann.de
peoplenet.bertelsmann.de
seratio4.bertelsmann.de
ess.bertelsmann.de
www.haussortimente.bertelsmann.de
deac.bertelsmann.de
b-share-qa.bertelsmann.de
b-share-dev.bertelsmann.de
keys.bertelsmann.de
bessermachen.bertelsmann.de
autodiscover.bertelsmann.de
jp5.bertelsmann.de
skypetmg.bertelsmann.de
grc-restore.bertelsmann.de
dubbmlske0001.bertelsmann.de
autodiscover.bertelsmann.de
itsgi7000.bertelsmann.de
deac.bertelsmann.de
mpsportal.bertelsmann.de
*.sti.bertelsmann.de
jppess.bertelsmann.de
www2.gitta.bertelsmann.de
cwa.bertelsmann.de
divisionalreportingserver.bertelsmann.de
skypetmg.bertelsmann.de
insurance.bertelsmann.de
www.haussortimente.bertelsmann.de
Certificate
The complete raw certificate details for owasemea.bertelsmann.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIQDjpbTXCG35SM+I3K4sZP+jANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx MB4XDTE4MTEyMTAwMDAwMFoXDTIxMDExOTEyMDAwMFowgYAxCzAJBgNVBAYTAkRF MRwwGgYDVQQIExNOb3JkcmhlaW4tV2VzdGZhbGVuMRMwEQYDVQQHDApHw7x0ZXJz bG9oMRwwGgYDVQQKExNBcnZhdG8gU3lzdGVtcyBHbWJIMSAwHgYDVQQDExdvd2Fz ZW1lYS5iZXJ0ZWxzbWFubi5kZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMrjF4CDjj5u7g/pBBV52/D8VV2qi2f8VeZxePv4lVrC3FGCoc/z2Bz3Z3dY FWAaw301oRltcUqIb7ZvStYuPiXrb1Dixv8d9aYsyphKRiG+zfqF5KEI5FAxCJAz AGpppHAnZIgBt4BSJYQMvxqT+VHwpmZcEMVUzYTwBXPeK5hN6m6SUeBy/yjhvIuj c4nlYZRb2BRmj4l447lM8hVtJoSW73QNn1HINvt4dFrtax56zUfs0OmHwF0rIIaP Nbc4bxOmBANezTspFQhaG06Z6c9lDBTbS25xPpj0kkC0kXZJRQp1piBpULNQVPps 04D2HIWWoit7k+kMtCkNE9fpuWsCAwEAAaOCA5wwggOYMB8GA1UdIwQYMBaAFJRP 1F2L5KTipoD+/dj5AO+jvgJXMB0GA1UdDgQWBBQGhEXqnny/gMRCrKF46xbqgFHS bDCBkAYDVR0RBIGIMIGFghdvd2FzZW1lYS5iZXJ0ZWxzbWFubi5kZYIZZ3RsYm1s b3dhMDAwMi5iYWdtYWlsLm5ldIIZZ3RsYm1sd2FzMDAwMS5iYWdtYWlsLm5ldIIZ Z3RsYm1sd2FzMDAwMi5iYWdtYWlsLm5ldIIZZ3RsYm1sb3dhMDAwMS5iYWdtYWls Lm5ldDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dl b1RydXN0VExTUlNBQ0FHMS5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAo BggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwB AgIwdgYIKwYBBQUHAQEEajBoMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLmdl b3RydXN0LmNvbTA+BggrBgEFBQcwAoYyaHR0cDovL2NhY2VydHMuZ2VvdHJ1c3Qu Y29tL0dlb1RydXN0VExTUlNBQ0FHMS5jcnQwCQYDVR0TBAIwADCCAYAGCisGAQQB 1nkCBAIEggFwBIIBbAFqAHcAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e 0YUAAAFnNWWnfwAABAMASDBGAiEA6hzxvE3TYXz4f2nTX9BG8IXi9epjq+17Yxer zcdk0OwCIQDsHf+ru6odKVIK50W4BE+ScXSF4iubvnc1HOucKhpcoQB2AId1v+dZ fPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABZzVlpykAAAQDAEcwRQIhALyo V9A9U7f5k4yayL6q0XZP2W/Wy6gdyuSK/6lzOYqWAiAK8EpnSMtiUf4+0tA/fSjk 4zmWrp76vsYb8G+o5UZzwQB3AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgia N9kTAAABZzVlp+YAAAQDAEgwRgIhAJquKUiqlyU4AiIvwL/uSLpckZJEuGfgMFz9 Yv3mod9zAiEA3+smm+KXmEuLNGdxjqWvIMF+5Q83P/MC1HkfwFIvEF8wDQYJKoZI hvcNAQELBQADggEBAHJez6w6mw+EdKbuUxfeuaXBkgrPZ/3XNIbXg9Q1BHDW7HLS M21XgytSlQWuB7YmKKmYsABXhpEOikWj77Jy4oiduMi3Uob/dPJopK/wCjielZ8p FYVOCyvD3IorQbo9AKrvZXSYvuSkVowCr2cR+f+ycJZVXT+Wnkij+m1LMBKMPaox gY7teCRFtKIqacAETGnDKaJ9Ua7K+Gyh6ia++wY9FxsRwzdJPCQQNTGTdGOTG0Cu AxE63/SHIXiHiYWJZx81IYqx2h16ZaBl3tziHIMy+ZxREZE4XEejdqITykkkytpg C8fH9hD5tu9ve8Th4l3WzJv3WJWYxGg8jHAxnW8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuMXgIOOPm7uD+kEFXnb 8PxVXaqLZ/xV5nF4+/iVWsLcUYKhz/PYHPdnd1gVYBrDfTWhGW1xSohvtm9K1i4+ JetvUOLG/x31pizKmEpGIb7N+oXkoQjkUDEIkDMAammkcCdkiAG3gFIlhAy/GpP5 UfCmZlwQxVTNhPAFc94rmE3qbpJR4HL/KOG8i6NzieVhlFvYFGaPiXjjuUzyFW0m hJbvdA2fUcg2+3h0Wu1rHnrNR+zQ6YfAXSsgho81tzhvE6YEA17NOykVCFobTpnp z2UMFNtLbnE+mPSSQLSRdklFCnWmIGlQs1BU+mzTgPYchZaiK3uT6Qy0KQ0T1+m5 awIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18912196993451661111291477242314903546 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-19 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gütersloh' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arvato Systems GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'owasemea.bertelsmann.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25612120745718343037275265250348659235032937354591887713295727743856648755852993934718797436677624948695200990809565548041018198126214421243517069946299621357565023332902556368673353292146927813358895837490702499288440356461505757789679025106554270140686992242489313703613803293053322418465489507980900900618467800835178923104924950186367087556212984275910943346137777011342190969547226591387505306496860373805189205122310385696244257233186118740037827521889829175927497515752499197370065761003368066080207142027786858215914675047398187503405420622967745979702302933769216227080619859417164471084886196101581216790891 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 068445ea9e7cbf80c442aca178eb16ea8051d26c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (136 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owasemea.bertelsmann.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlbmlowa0002.bagmail.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlbmlwas0001.bagmail.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlbmlwas0002.bagmail.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlbmlowa0001.bagmail.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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