rsu-kis.olb.de

- Oldenburgische Landesbank AG -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 4d:c4:fc:c3:88:f8:b1:47:7a:24:97:4a:38:7e:b6:40 was issued on by D-Trust GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Oldenburgische Landesbank AG

Company registration number: CSM040931937
Organization: Oldenburgische Landesbank AG
State / Province: Niedersachsen
Locality: Oldenburg
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): 4d:c4:fc:c3:88:f8:b1:47:7a:24:97:4a:38:7e:b6:40
Serial Number (int): 103373372518813771047632766829806401088
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: be:c2:3c:c7:19:eb:91:fe:01:0b:32:11:0b:70:80:92:c2:30:f9:b7
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 00:96:e8:99:15:54:bf:8d:d6:49:5c:6d:9f:b0:01:f4:9d:71:f5:bd
Fingerprint (sha256): 6c:e9:00:c5:56:72:b6:a7:4f:9e:ba:82:61:17:e5:65:5d:22:db:2d:43:fb:ef:6d:b1:71:c2:9d:49:22:1d:8f

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate rsu-kis.olb.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rsu-kis.olb.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rsu-kis.olb.de
rsu-kis-int.olb.de

Other certificates including the domain name olb.de

(limited to 100 certificates)
expe01.video.olb.de
magazin.olb.de
mbanking.olb.de
magazin.olb.de
3d-secure.olb.de
teamsphone-osv.olb.de
ip.olb.de
rsu-kis.olb.de
hbciweb.xs2a.olb.de
www2.olb.de
srcwpb.olb.de
digitalefiliale.olb.de
mbanking.olb.de
rsu-kis.olb.de
securemail.olb.de
mbanking.olb.de
videoberatung.olb.de
daten.olb.de
internet-int.olb.de
srcms.olb.de
rsu-kis-int.olb.de
magazin.olb.de
urc.olb.de
rsu-kis.olb.de
xs2a.olb.de
safelock.olb.de
3d-secure.olb.de

hbciweb-dev.olb.de
wuerttembergische-int.olb.de
mdm-int.olb.de
hbciweb-dev.olb.de
www.olb.de
wuerttembergische.olb.de
developer-portal.olb.de
hbciweb-admin-int.olb.de
sso.olb.de
www-int.olb.de
xs2a.olb.de
rsa.olb.de
mbanking.olb.de
www.olb.de
vdbebics.olb.de
safelock.olb.de
*.olb.de
www.weihnachten.olb.de
vdbebics.olb.de
weihnachten.olb.de
safelock.olb.de
src.olb.de
conntest.olb.de
hbciweb-dev.olb.de

wertpapiere.olb.de
xs2a.olb.de
magazin.olb.de
www-int.olb.de
daten.olb.de
news.wuestenrot.olb.de
wuerttembergische.olb.de
securemail.olb.de
videoberatung.olb.de
rsa.olb.de
www-int.olb.de
ods.olb.de
www.olb.de
videoberatung.olb.de
wertpapiere.olb.de
src.olb.de
www.olb.de
www.olb.de
securemail.olb.de
adfs.olb.de
ebanking.olb.de
exchange.olb.de
www.olb.de
exchange.olb.de
xs2a.olb.de
ebanking.olb.de
wertpapiere.olb.de
daten.olb.de
internet-int.olb.de
pfandbrief.olb.de
www.olb.de
srcms.olb.de
hbciweb.olb.de
ssrp.olb.de
rsu-kis.olb.de
rsu-kis.olb.de
ip.olb.de
mbanking.olb.de
videoberatung.olb.de
digitalefiliale.olb.de
3d-secure.olb.de
video.olb.de
www.olb.de
sso.olb.de
srcms.olb.de
magazin.olb.de
www.olb.de

Certificate

The complete raw certificate details for rsu-kis.olb.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHBjCCBe6gAwIBAgIQTcT8w4j4sUd6JJdKOH62QDANBgkqhkiG9w0BAQsFADBM
MQswCQYDVQQGEwJERTEVMBMGA1UECgwMRC1UcnVzdCBHbWJIMSYwJAYDVQQDDB1E
LVRSVVNUIFNTTCBDbGFzcyAzIENBIDEgMjAwOTAeFw0yNDAzMTExNDQ1NDBaFw0y
NTAzMTQxNDQ1NDBaMIGQMRUwEwYDVQQFEwxDU00wNDA5MzE5MzcxCzAJBgNVBAYT
AkRFMRYwFAYDVQQIEw1OaWVkZXJzYWNoc2VuMRIwEAYDVQQHEwlPbGRlbmJ1cmcx
JTAjBgNVBAoTHE9sZGVuYnVyZ2lzY2hlIExhbmRlc2JhbmsgQUcxFzAVBgNVBAMT
DnJzdS1raXMub2xiLmRlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
y2B+vLotcfdshNO3+ZDIynxj+w5s77IpccZDuL5cQL0/UNU31mu+z33jKTcEtp6r
NHRpmZtNRNMqdyueZ/mVNZpWtxun3vNelo0zOVjxjRENNvFbaAu+5hcZIspu0yBq
pTrCy1aFUWszLAOA6ZKhKXP0xO78KeN/y3KINUd2nquiF9x4A5HzJLn7Th73orUL
UnAJFwGxePQusBbLC+T4+2dhytzkWJeqORMveGOI6MPWB6Ck0ivtMyneTdyLq9HV
9h2Wi8VhanJejSzaUTgIYRADN0k28ZrgmyaoC95/3kFiL++AiibpuBzT7obJsYmD
rnePOQRagvKSXm49Mg/RV7ZqKuwI0RKHkKyO+TlH9gtxvj3v518npiZriGaEBZcO
/fjx1r4OOSnQKs6kR+Tx4XqbVoimdH0iOuuWFcP4UZ2K2GTpEzn6ZrNEzt4Jc2Rd
kigDuaA8x4/KwO6/kRlRz2qZo7NXy/8iQd5J591B+iZrUd4P8dX5JSemkkgcAHIH
lIbE2B1gv9sVtLg+s+GPCOexT/FzekGtkPS5peulFD/MHzEjVQH2/ULR002x+6P+
KIttul2JnXhYoEULDpIqEHIxZu3oBJD/fYi/sU1R9A56TgFuTN8LEssdvrPVsGGW
EDHDRNw+UrJk1sFcFzWGfJPIbQUtx6cVY09OIoPG+H8CAwEAAaOCAp0wggKZMIGT
BggrBgEFBQcBAQSBhjCBgzAzBggrBgEFBQcwAYYnaHR0cDovL3NzbC1jMy1jYTEt
MjAwOS5vY3NwLmQtdHJ1c3QubmV0MEwGCCsGAQUFBzAChkBodHRwOi8vd3d3LmQt
dHJ1c3QubmV0L2NnaS1iaW4vRC1UUlVTVF9TU0xfQ2xhc3NfM19DQV8xXzIwMDku
Y3J0MHkGA1UdIARyMHAwCAYGZ4EMAQICMAgGBgQAj3oBBzBaBgsrBgEEAaU0AoFI
ATBLMEkGCCsGAQUFBwIBFj1odHRwOi8vd3d3LmQtdHJ1c3QubmV0L2ludGVybmV0
L2ZpbGVzL0QtVFJVU1RfQ1NNX1BLSV9DUFMucGRmMBMGCisGAQQB1nkCBAMBAf8E
AgUAMDMGA1UdEgQsMCqBEGluZm9AZC10cnVzdC5uZXSGFmh0dHA6Ly93d3cuZC10
cnVzdC5uZXQwgZ0GA1UdHwSBlTCBkjCBj6CBjKCBiYZAaHR0cDovL2NybC5kLXRy
dXN0Lm5ldC9jcmwvZC10cnVzdF9zc2xfY2xhc3NfM19jYV8xXzIwMDkuZGVyLmNy
bIZFaHR0cDovL2Nkbi5kLXRydXN0LWNsb3VkY3JsLm5ldC9jcmwvZC10cnVzdF9z
c2xfY2xhc3NfM19jYV8xXzIwMDkuY3JsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjAtBgNVHREEJjAkgg5yc3Uta2lzLm9sYi5kZYIScnN1LWtpcy1pbnQu
b2xiLmRlMB8GA1UdIwQYMBaAFFAZMpSaxLUETVbQwIMh1TVVsLF6MA4GA1UdDwEB
/wQEAwIFoDAdBgNVHQ4EFgQUvsI8xxnrkf4BCzIRC3CAksIw+bcwDQYJKoZIhvcN
AQELBQADggEBADJv16tTjvt+4wr+nCt4OYd8GPacSayaTY4WGXWr3oQN+JaMEF3f
LPESzgOvBNi1VWkY5T8Ik0Km63KV8ciTdJ7q1plu9U/iuJNREskkQHtUb4dlMzTq
bU+i3jZhDIVEyyI/iDAB9QD/0SlVMTpomRR3ExVC49gshVyHwyPKbXlBILDOL0tz
WCSC3F9bJvdShJ2SnmeBEFf8+3of3v0U9q+uLQqcw0L8QEOulmwWKfIcLaRu9csy
Kiw0/nFjF2PcWTU0Fx1GTeiHMmsNnt/X7PuBvpJvXDEXqgR6TQoHXVDF9xPPTpiO
UN20lUy5lwv1K2bUEdrZzMqR1TQcnoBShgM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 103373372518813771047632766829806401088
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 14:45:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-14 14:45:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM040931937'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oldenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oldenburgische Landesbank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rsu-kis.olb.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 829705501779559104439098730619320224824697675246330662327883404754039688988000073018254150484502501817696736689973278244161065099029162711325952046728927212662784387021493871551228155075104371352743566188083566578306293928755064050514304402707110043127766669819436443377808495162955907469225001674121454833981594986888886248705935613755547976905912943235784611842429997923727472857035585597451294647396623973242502961933458023483727961121832841728625455148106208269936951825445820076693978148410029398271466835858165402613735201558662900348290782341882137248792621729913795617813147935913153054698512535161228836654837475293571560172827810631500565567013449627913863923047561951259966492197290947529754008811708501465780548098881923875913471965473987149394045113646436610074417620669013527336278435070761434141111515723037200466652273798887298712998168018814255963738480782373373715410791935917038803793683930147819410757725171053998861595348884972618169441543149657564506203449343341588450621202981034145367098820840924396539180741311230999081280713843817671394862316754027861843950346159563162429512680048199237587496185671087462765555526099506710322323640860449528750487771493228636183492548806294927575735664047831490023054047359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsu-kis.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsu-kis-int.olb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bec23cc719eb91fe010b32110b708092c230f9b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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