mbanking.olb.de

- Oldenburgische Landesbank AG -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 6a:5a:63:07:93:75:a2:0b:69:04:3e:8d:d8:a1:30:8b was issued on by D-Trust GmbH.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oldenburgische Landesbank AG

Company registration number: CSM013922182
Organization: Oldenburgische Landesbank AG
Organization unit: Informationstechnologie
State / Province: Niedersachsen
Locality: Oldenburg
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 6a:5a:63:07:93:75:a2:0b:69:04:3e:8d:d8:a1:30:8b
Serial Number (int): 141367482829253622128077915454179455115
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 31:a8:a8:c0:81:53:fe:4e:a2:a8:82:ce:db:76:50:94:bc:f8:a9:ac
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): d7:a2:37:15:de:f3:07:68:7e:e0:58:5e:a9:69:29:50:93:21:95:5b
Fingerprint (sha256): 70:41:00:b2:14:70:41:9a:ee:e1:a6:f4:20:41:41:8e:fa:46:12:d1:1d:01:da:00:9d:c5:dd:c3:5c:63:2a:79

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate mbanking.olb.de

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mbanking.olb.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mbanking.olb.de
mbanking-dev.olb.de
mbanking-int.olb.de
mbanking-admin.olb.de
mbanking-prod.olb.de

Other certificates including the domain name olb.de

(limited to 100 certificates)
expe01.video.olb.de
magazin.olb.de
mbanking.olb.de
magazin.olb.de
3d-secure.olb.de
rsu-kis.olb.de
hbciweb.xs2a.olb.de
www2.olb.de
srcwpb.olb.de
digitalefiliale.olb.de
mbanking.olb.de
rsu-kis.olb.de
securemail.olb.de
mbanking.olb.de
videoberatung.olb.de
daten.olb.de
internet-int.olb.de
srcms.olb.de
rsu-kis-int.olb.de
magazin.olb.de
urc.olb.de
rsu-kis.olb.de
xs2a.olb.de
3d-secure.olb.de

hbciweb-dev.olb.de
mdm-int.olb.de
hbciweb-dev.olb.de
www.olb.de
hbciweb-admin-int.olb.de
www-int.olb.de
xs2a.olb.de
rsa.olb.de
mbanking.olb.de
www.olb.de
vdbebics.olb.de
safelock.olb.de
*.olb.de
www.weihnachten.olb.de
vdbebics.olb.de
weihnachten.olb.de
safelock.olb.de
src.olb.de
conntest.olb.de
hbciweb-dev.olb.de

wertpapiere.olb.de
xs2a.olb.de
magazin.olb.de
www-int.olb.de
daten.olb.de
news.wuestenrot.olb.de
wuerttembergische.olb.de
securemail.olb.de
videoberatung.olb.de
rsa.olb.de
www-int.olb.de
www.olb.de
wertpapiere.olb.de
src.olb.de
www.olb.de
www.olb.de
securemail.olb.de
adfs.olb.de
ebanking.olb.de
exchange.olb.de
www.olb.de
exchange.olb.de
xs2a.olb.de
ebanking.olb.de
internet-int.olb.de
pfandbrief.olb.de
www.olb.de
srcms.olb.de
hbciweb.olb.de
ssrp.olb.de
rsu-kis.olb.de
rsu-kis.olb.de
ip.olb.de
mbanking.olb.de
videoberatung.olb.de
digitalefiliale.olb.de
3d-secure.olb.de
sso.olb.de
srcms.olb.de
magazin.olb.de
www.olb.de
src.olb.de
securemail.olb.de
securemail.olb.de
www.olb.de
magazin.olb.de
vdbebics.olb.de
www.olb.de
mdm.olb.de
telefonapp.olb.de
srcwbp.olb.de
ebanking.olb.de
hbciweb-dev.olb.de
www.olb.de

Certificate

The complete raw certificate details for mbanking.olb.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 141367482829253622128077915454179455115
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-08 09:53:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-12 09:53:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM013922182'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oldenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Informationstechnologie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oldenburgische Landesbank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mbanking.olb.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 624623383017609599861651272075132799096146133728308329947103345877971428310234096466766579697972648597179781904054485207334519627078910556810677909751210206057371541015923186466016298317690940379960560432280621119322897845125223602719830558177625117680433831161981561880135678720255756329160888607923141892730669986682201468747453245882348325853134366574380709439654256574782599232355046553770833575980229402697387100882215040941000843554215875779124676492070539722001097423890392078708592946933407724972931102394208799420354650281507143193335286507870848260071177270602212625642344091785497957849854754814227852130366772723516901223992107263067321021386111312726722921814643701418782570512673032826091740414945729106222083382201964889697577801119054910311392663193240754057679439872865763284675459075445679492894377130097019810813671662213545102558033303671816309277404415186961355369592012062596078835187337868409805361437789943795365231867159089718360497138432166964853285384597368011483392041999853965387081888269302339756709516850446688873747636394346637303190230809052780558333331390522619867240050207204916157122147808758235707306851154975598417470594183949873419157237220687578825104041475086461000648255359964972194089614543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31a8a8c08153fe4ea2a882cedb765094bcf8a9ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (724 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (720 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbanking.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbanking-dev.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbanking-int.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbanking-admin.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbanking-prod.olb.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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