www.olb.de

- Oldenburgische Landesbank AG -

Issued by D-TRUST SSL Class 3 CA 1 EV 2009

About this certificate

This digital certificate with serial number 18:18:b8:7a:e7:5c:e3:49:1d:f9:de:11:f3:56:08:9d was issued on by D-Trust GmbH.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oldenburgische Landesbank AG

Company registration number: HRB 3003
Organization: Oldenburgische Landesbank AG
Organization unit: Informationstechnologie
Address: Stau 15-17
Postal code: 26122
State / Province: Niedersachsen
Locality: Oldenburg
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 18:18:b8:7a:e7:5c:e3:49:1d:f9:de:11:f3:56:08:9d
Serial Number (int): 32029828724249047230482481279965464733
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: f0:4b:32:7a:48:38:6b:6b:44:eb:32:63:82:84:47:32:a6:2b:64:f8
AuthorityKeyId: ac:ed:a5:9d:7a:a2:b6:43:f1:18:8a:25:6a:6c:b1:cc:a8:f2:5a:d4

Fingerprint (sha1): da:1d:65:f0:73:f5:cc:9e:f5:81:4d:9c:f6:a5:c2:4e:7d:29:e1:a9
Fingerprint (sha256): 5f:cc:ae:4b:97:33:6e:c1:04:f8:a5:4c:86:6d:d3:c4:46:bc:9c:35:79:aa:0f:92:5c:e7:32:28:70:05:67:58

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_EV_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%20EV%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-ev-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%20EV%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_ev_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_ev_2009.crl

Check the revocation status for certificate www.olb.de

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.olb.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wuestenrot.olb.de
www.olb.de
www.bkb-bank.com
hbciweb.wuerttembergische.olb.de
wuerttembergische.olb.de
www.wuerttembergische.olb.de
www.wuestenrot.olb.de
bkb-bank.com
extranet.olb.de
www2.olb.de
internet.olb.de
hbciweb.olb.de
hbciweb.wuestenrot.olb.de

Other certificates including the domain name olb.de

(limited to 100 certificates)
expe01.video.olb.de
magazin.olb.de
mbanking.olb.de
magazin.olb.de
3d-secure.olb.de
hbciweb.xs2a.olb.de
www2.olb.de
srcwpb.olb.de
mbanking.olb.de
rsu-kis.olb.de
securemail.olb.de
mbanking.olb.de
videoberatung.olb.de
daten.olb.de
internet-int.olb.de
srcms.olb.de
rsu-kis-int.olb.de
magazin.olb.de
urc.olb.de
rsu-kis.olb.de
3d-secure.olb.de

mdm-int.olb.de
hbciweb-dev.olb.de
www.olb.de
hbciweb-admin-int.olb.de
www-int.olb.de
xs2a.olb.de
rsa.olb.de
mbanking.olb.de
www.olb.de
vdbebics.olb.de
safelock.olb.de
*.olb.de
www.weihnachten.olb.de
weihnachten.olb.de
src.olb.de
conntest.olb.de
hbciweb-dev.olb.de

wertpapiere.olb.de
magazin.olb.de
www-int.olb.de
news.wuestenrot.olb.de
wuerttembergische.olb.de
videoberatung.olb.de
rsa.olb.de
www-int.olb.de
www.olb.de
src.olb.de
www.olb.de
www.olb.de
securemail.olb.de
ebanking.olb.de
www.olb.de
internet-int.olb.de
www.olb.de
srcms.olb.de
hbciweb.olb.de
ssrp.olb.de
rsu-kis.olb.de
ip.olb.de
mbanking.olb.de
videoberatung.olb.de
srcms.olb.de
magazin.olb.de
www.olb.de
src.olb.de
securemail.olb.de
securemail.olb.de
www.olb.de
magazin.olb.de
vdbebics.olb.de
www.olb.de
mdm.olb.de
srcwbp.olb.de
ebanking.olb.de
hbciweb-dev.olb.de
www.olb.de
www.olb.de
ostervoting.olb.de
ebanking.olb.de
wuerttembergische.olb.de
vdbebics.olb.de
www.olb.de
avw.olb.de
sso.olb.de
safelock.olb.de
openbanking.olb.de
adfs.olb.de
www.olb.de
wuestenrot-int.olb.de
pfandbrief.olb.de
www-int.olb.de
wuerttembergische-int.olb.de
hbciweb-dev.olb.de
*.olb.de
mbanking.olb.de
src.olb.de
adfs.olb.de

Certificate

The complete raw certificate details for www.olb.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIO5DCCDcygAwIBAgIQGBi4eudc40kd+d4R81YInTANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJERTEVMBMGA1UECgwMRC1UcnVzdCBHbWJIMSkwJwYDVQQDDCBE
LVRSVVNUIFNTTCBDbGFzcyAzIENBIDEgRVYgMjAwOTAeFw0xOTEyMTAwODQzMjla
Fw0yMTEyMTQwODQzMjlaMIIBPzETMBEGCysGAQQBgjc8AgEDEwJERTEeMBwGCysG
AQQBgjc8AgECDA1OaWVkZXJzYWNoc2VuMRowGAYLKwYBBAGCNzwCAQEMCU9sZGVu
YnVyZzEdMBsGA1UEDwwUUHJpdmF0ZSBPcmdhbml6YXRpb24xETAPBgNVBAUTCEhS
QiAzMDAzMQswCQYDVQQGEwJERTEWMBQGA1UECBMNTmllZGVyc2FjaHNlbjESMBAG
A1UEBxMJT2xkZW5idXJnMQ4wDAYDVQQRDAUyNjEyMjETMBEGA1UECRMKU3RhdSAx
NS0xNzEgMB4GA1UECxMXSW5mb3JtYXRpb25zdGVjaG5vbG9naWUxJTAjBgNVBAoT
HE9sZGVuYnVyZ2lzY2hlIExhbmRlc2JhbmsgQUcxEzARBgNVBAMTCnd3dy5vbGIu
ZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCpC8yGlt8y9zOAGDZ9
TvBeEToBHhg7NHI3UzisRKX7VO3Ja1PmkKrrwhx/efjPIezdJop2hxXhNtjAXViF
YY0hYsy78cuWVh5MIqNyMxZ1uMgasIAfJQtlz5FvLbQlOH7wS4gHK/M+IKvN1gxk
UV+6WHxbitolyRjaQerUQyrsvyZzv6kVEblfHSs/0IJsUiN7aJlz3MQYuwFWDCan
vT3HVl1HuHCxTthX0jtPLxIiJKuOAUK8joj32vp4K38UB2CMUryDIby4JPnpCbeq
GgPvG9RAcDUnkjgoFHRTBwt0Om68xeXR5YCHJLfc/GV193LegD+1k4BNIda7+VoD
zh2iN6dQKypkTQUJitYN7UQDXRcAHfSXJWrmSAcU/plh+AbQJFG8nBe88KNlX0Op
NXx1/FowNf6pYICUq0/gK+1/+pPseC8GQtZOA46rP0B5/SKim/w3iD9bCFzS3PwG
csd4+HdW2Mrvh3ZHVa+NosaBETzU367L93n8UGpJUHf35lXnOrJQEreqzQMPGI8c
vUiRXVgt67vZ048aVjPJEfAdnxyeIHpn89jU0ke39wi4I+vtq0LXGPRZnEEiRU/U
w9/OhMBaNPmihFdGAO6SEIjof36OC4FL2cxtKLqEEl7VPQVITIwqTcHh+giQ7jul
Vzs8utf3Vld1UCItkIXgOvsbGwIDAQABo4IJyDCCCcQwggEiBggrBgEFBQcBAQSC
ARQwggEQMDYGCCsGAQUFBzABhipodHRwOi8vc3NsLWMzLWNhMS1ldi0yMDA5Lm9j
c3AuZC10cnVzdC5uZXQwTwYIKwYBBQUHMAKGQ2h0dHA6Ly93d3cuZC10cnVzdC5u
ZXQvY2dpLWJpbi9ELVRSVVNUX1NTTF9DbGFzc18zX0NBXzFfRVZfMjAwOS5jcnQw
gYQGCCsGAQUFBzAChnhsZGFwOi8vZGlyZWN0b3J5LmQtdHJ1c3QubmV0L0NOPUQt
VFJVU1QlMjBTU0wlMjBDbGFzcyUyMDMlMjBDQSUyMDElMjBFViUyMDIwMDksTz1E
LVRydXN0JTIwR21iSCxDPURFP2NBQ2VydGlmaWNhdGU/YmFzZT8wbwYDVR0gBGgw
ZjBaBgsrBgEEAaU0AoFKATBLMEkGCCsGAQUFBwIBFj1odHRwOi8vd3d3LmQtdHJ1
c3QubmV0L2ludGVybmV0L2ZpbGVzL0QtVFJVU1RfQ1NNX1BLSV9DUFMucGRmMAgG
BgQAj3oBBDCCBT4GCisGAQQB1nkCBAIEggUuBIIFKgUoAHcAfT7y+I//iFVoJMLA
yp5SiXkrxQ54CX8uapdomX4i8NcAAAFu7vpEpQAABAMASDBGAiEArIjsIRHWlWyj
DtBTYPZyj3IT/mIlts5ErYwPcEV0ZWMCIQDmP0vhPa9qP7MRlxl69oI0FbZd4rw7
kbra9tPMzeSQ1QB2AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAAB
bu76RrYAAAQDAEcwRQIhAPyJroxEEkSNcEGPbR2q2eLvRKh9Vu6EsTX454QEDYmx
AiB5kvukA9kGQM8IPHcQgIAfxKhnxAf/mhLP5i0PVET1xgB3AKS5CZC0GFgUh7sT
osxncAo8NZgE+RvfuON3zQ7IDdwQAAABbu76RN0AAAQDAEgwRgIhAJIjMxqoHs4R
2/JpRuzQ4x9dbhSKperr6sfsTwF/55KCAiEAxi3zKxDDbzPzqHDdyH35fuihZaSt
B55dVlEDWgYwDzcAdgBc3EOS/uarRUSxXprUVuYQN/vV+kfcoXOUsl7m9scOygAA
AW7u+keiAAAEAwBHMEUCIFUEzay3Dr2sgCRN851RtqOiZGVBh9sGk23DhwSlCHvZ
AiEAwzwuUgtZhP+vdcx4K6gDt8AEtmMa4k05FYn2Xvy97B0AdQD2XJQv0XcwIhRU
GAgwlFaO400TGTO/3wwvIAvMTvFk4wAAAW7u+kWuAAAEAwBGMEQCIFUBaNmDo5mO
LthpB4doinNCq5OQN8D+shDIVb4b8ibvAiAF9i8VTfTzTWqEaA73kEDjUF0ytpjK
1XCZyBVrk+UWwQB3AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAAB
bu76RnkAAAQDAEgwRgIhAM+8V/R+GiXtsZtIcP8vzaFKyqZ0mZyffeLtfNbEhQ8j
AiEA68dK7B4T/VEO3ikdq2nENAOsrkS9kO3dsOD/O28h5/YAdQBWFAaaL9fC7NP1
4b1Esj7HRna5vJkRXMDvlJhV1onQ3QAAAW7u+kjaAAAEAwBGMEQCIERKYkyXPo4E
vE5PhDcoMyjwQmLNV5xt9wHVaBdPvM8SAiAAxOrdhPKWEFtlPYpwo0S7YX69H1yk
JcpJEYr6rIh5dgB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAAB
bu76R6kAAAQDAEcwRQIgbSHQNJ2t1ZW2o1xncYwBj6tZRBWtD6pslvDqFU/U8B8C
IQDgU0OpvAGJVCtVPcs60ioVVosFLoiGEaJURx6JCYtgSQB2ALvZ37wfinG1k5Qj
l6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABbu76R7IAAAQDAEcwRQIgC9UcfdSMcy83
YnpAHGkg/eLpXPMcalzJWS3kZwFTxkUCIQCWYWkFy5ea+aiI3X8YmeXuqYRh56fI
YZk/RlYEVyOibAB1AESUZS6w7s6vxEAH2Kj+KMDa5oK+2MsxtT/TM5a1toGoAAAB
bu76SFUAAAQDAEYwRAIgWsUludTjsJX7xzkCDV+zKqkuj1lURILH5dQFlEt9hOkC
IFXYGs9hq3iyEYR4dJQJm//TQMlxUGzzup/SUhlfhkITAHYA7sCV7o1yZA+S48O5
G8cSo2lqCXtLahoUOOZHssvtxfkAAAFu7vpKKAAABAMARzBFAiEAjozA/qaE/fFB
FbnYLI69TXOOQTJaGevFSUaT9Y1RPfsCIEz73Zdb5clcGzay234iMwyLFK/VpeFD
BVOAl6qxlNUXMDMGA1UdEgQsMCqBEGluZm9AZC10cnVzdC5uZXSGFmh0dHA6Ly93
d3cuZC10cnVzdC5uZXQwggEoBgNVHR8EggEfMIIBGzCCARegggEToIIBD4Z+bGRh
cDovL2RpcmVjdG9yeS5kLXRydXN0Lm5ldC9DTj1ELVRSVVNUJTIwU1NMJTIwQ2xh
c3MlMjAzJTIwQ0ElMjAxJTIwRVYlMjAyMDA5LE89RC1UcnVzdCUyMEdtYkgsQz1E
RT9jZXJ0aWZpY2F0ZXJldm9jYXRpb25saXN0hkNodHRwOi8vY3JsLmQtdHJ1c3Qu
bmV0L2NybC9kLXRydXN0X3NzbF9jbGFzc18zX2NhXzFfZXZfMjAwOS5kZXIuY3Js
hkhodHRwOi8vY2RuLmQtdHJ1c3QtY2xvdWRjcmwubmV0L2NybC9kLXRydXN0X3Nz
bF9jbGFzc18zX2NhXzFfZXZfMjAwOS5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMIIBFwYDVR0RBIIBDjCCAQqCEXd1ZXN0ZW5yb3Qub2xiLmRlggp3
d3cub2xiLmRlghB3d3cuYmtiLWJhbmsuY29tgiBoYmNpd2ViLnd1ZXJ0dGVtYmVy
Z2lzY2hlLm9sYi5kZYIYd3VlcnR0ZW1iZXJnaXNjaGUub2xiLmRlghx3d3cud3Vl
cnR0ZW1iZXJnaXNjaGUub2xiLmRlghV3d3cud3Vlc3RlbnJvdC5vbGIuZGWCDGJr
Yi1iYW5rLmNvbYIPZXh0cmFuZXQub2xiLmRlggt3d3cyLm9sYi5kZYIPaW50ZXJu
ZXQub2xiLmRlgg5oYmNpd2ViLm9sYi5kZYIZaGJjaXdlYi53dWVzdGVucm90Lm9s
Yi5kZTAfBgNVHSMEGDAWgBSs7aWdeqK2Q/EYiiVqbLHMqPJa1DAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0OBBYEFPBLMnpIOGtrROsyY4KERzKmK2T4MA0GCSqGSIb3DQEB
CwUAA4IBAQC4z1oV1rzoRQqtcZNIaPFY6W86RlywduM4VyQ0oFnc36FZX1Qfx3gJ
XnbKpS1OUfR02ievQV0BHGeJgqcVVlFMPO4SAH0Vuhzfkiass15SVdIBMdNdQdd3
iNKJlPa5XHt0tMwBibKT8m1ZEMx50FMCaKlcVTgNzBJmfJf9KTJShamXV84uufXX
qGIFBu18JQrmDgvlmMvAXDhksoPMDq0snoSUvph6fdIPdzk8/0bTiN14d88FiCLw
fivfxWUcapOusbWrnotWJlT5l/lEfsWqO77XqBQWW8EyEYK4GTpACcxS9My7OtTO
c1CmyZRZb38wuykiSP2Qm0nY0kzemZW2
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 32029828724249047230482481279965464733
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 EV 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-10 08:43:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-14 08:43:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Oldenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 3003'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oldenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '26122'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stau 15-17'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Informationstechnologie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oldenburgische Landesbank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.olb.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 689647876516335774222014572143519088252167439391551825128476612955471303360763202948983827124591335434358915753558086130650579577456589133870283591297720838198581600664566832346581336744602952098746564783944059483531487966178902344146671976091573549280294261027542261286155260427513714740536716242854536865953710601107847802389409903244454565844709489055651635705947414981067278707632125682232774711350772111077246500989137071347606840560531026137028605303537728637175301923160794534056886810700822832592342885457091975302259706760062074054128908208707691760615594529330457937595724194111321740473192174862129541219331627111690667641500636687529604495801677172900219492203220452719191235960678849281349871615960876082690419962272702216248283019604396889878028612756430334473538396581231263555657027928352422302199798133634858260984778022729037129855587703807773760475899500633050941508173926882101361043663207454454685115568031120501201955143099317306808178857294636343185983130658912352358050670483577231670744683889351279902084075099978407583841998167003186945865463066690064616792546188829558061766905313174212069921055101763996786145070361444115730975883355777660168206346589255554475701080259648571737606973163925536545986779931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-ev-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_EV_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%20EV%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.202.1 (D-TRUST EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1326 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1322 bytes)
							05280077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000016eeefa44a50000040300483046022100ac88ec2111d6956ca30ed05360f6728f7213fe6225b6ce44ad8c0f7045746563022100e63f4be13daf6a3fb31197197af6823415b65de2bc3b91badaf6d3cccde490d50076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016eeefa46b60000040300473045022100fc89ae8c4412448d70418f6d1daad9e2ef44a87d56ee84b135f8e784040d89b102207992fba403d90640cf083c771080801fc4a867c407ff9a12cfe62d0f5444f5c6007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016eeefa44dd00000403004830460221009223331aa81ece11dbf26946ecd0e31f5d6e148aa5eaebeac7ec4f017fe79282022100c62df32b10c36f33f3a870ddc87df97ee8a165a4ad079e5d5651035a06300f370076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000016eeefa47a2000004030047304502205504cdacb70ebdac80244df39d51b6a3a264654187db06936dc38704a5087bd9022100c33c2e520b5984ffaf75cc782ba803b7c004b6631ae24d391589f65efcbdec1d007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000016eeefa45ae00000403004630440220550168d983a3998e2ed8690787688a7342ab939037c0feb210c855be1bf226ef022005f62f154df4f34d6a84680ef79040e3505d32b698cad57099c8156b93e516c1007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016eeefa46790000040300483046022100cfbc57f47e1a25edb19b4870ff2fcda14acaa674999c9f7de2ed7cd6c4850f23022100ebc74aec1e13fd510ede291dab69c43403acae44bd90edddb0e0ff3b6f21e7f60075005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000016eeefa48da00000403004630440220444a624c973e8e04bc4e4f8437283328f04262cd579c6df701d568174fbccf12022000c4eadd84f296105b653d8a70a344bb617ebd1f5ca425ca49118afaac8879760076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016eeefa47a9000004030047304502206d21d0349dadd595b6a35c67718c018fab594415ad0faa6c96f0ea154fd4f01f022100e05343a9bc0189542b553dcb3ad22a15568b052e888611a254471e89098b6049007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016eeefa47b2000004030047304502200bd51c7dd48c732f37627a401c6920fde2e95cf31c6a5cc9592de4670153c64502210096616905cb979af9a888dd7f1899e5eea98461e7a7c861993f4656045723a26c0075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016eeefa4855000004030046304402205ac525b9d4e3b095fbc739020d5fb32aa92e8f59544482c7e5d405944b7d84e9022055d81acf61ab78b21184787494099bffd340c971506cf3ba9fd252195f864213007600eec095ee8d72640f92e3c3b91bc712a3696a097b4b6a1a1438e647b2cbedc5f90000016eeefa4a2800000403004730450221008e8cc0fea684fdf14115b9d82c8ebd4d738e41325a19ebc5494693f58d513dfb02204cfbdd975be5c95c1b36b2db7e22330c8b14afd5a5e14305538097aab194d517
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (287 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%20EV%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_ev_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_ev_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (270 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wuestenrot.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bkb-bank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbciweb.wuerttembergische.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wuerttembergische.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wuerttembergische.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wuestenrot.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bkb-bank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internet.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbciweb.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbciweb.wuestenrot.olb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aceda59d7aa2b643f1188a256a6cb1cca8f25ad4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f04b327a48386b6b44eb326382844732a62b64f8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b8cf5a15d6bce8450aad71934868f158e96f3a465cb076e338572434a059dcdfa1595f541fc778095e76caa52d4e51f474da27af415d011c678982a71556514c3cee12007d15ba1cdf9226acb35e5255d20131d35d41d77788d28994f6b95c7b74b4cc0189b293f26d5910cc79d0530268a95c55380dcc12667c97fd29325285a99757ce2eb9f5d7a8620506ed7c250ae60e0be598cbc05c3864b283cc0ead2c9e8494be987a7dd20f77393cff46d388dd7877cf058822f07e2bdfc5651c6a93aeb1b5ab9e8b562654f997f9447ec5aa3bbed7a814165bc1321182b8193a4009cc52f4ccbb3ad4ce7350a6c994596f7f30bb292248fd909b49d8d24cde9995b6