sparkasse-rhein-nahe.de
- Sparkasse Rhein-Nahe -
Issued by QuoVadis Global SSL ICA G3
About this certificate
This digital certificate with serial number 66:9a:cf:2e:b1:65:a7:4a:be:a3:3e:8e:8e:20:1f:87:be:7d:fe:50 was issued on by QuoVadis Limited.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Sparkasse Rhein-Nahe
Organization:
Sparkasse Rhein-Nahe
State / Province:
Rheinland-Pfalz
Locality: Bad Kreuznach
Country: DE
Locality: Bad Kreuznach
Country: DE
QuoVadis Limited
Organization:
QuoVadis Limited
Country:
BM
This certificate will expire on
Certificate Details
Serial Number (hex): 66:9a:cf:2e:b1:65:a7:4a:be:a3:3e:8e:8e:20:1f:87:be:7d:fe:50Serial Number (int): 585769421516583270490731811781841604569032687184
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: 09:64:f4:2f:ce:4b:ae:f4:42:79:da:ac:41:c2:cd:0f:7f:b8:27:5d
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76
Fingerprint (sha1): fc:3b:49:94:e3:b3:4f:3b:e4:74:c3:94:22:9e:e6:b2:1b:d5:8a:b5
Fingerprint (sha256): 73:02:9e:de:bf:4c:a8:d4:9f:85:68:fc:9f:74:e6:4c:25:da:2b:97:5e:40:75:9d:32:16:60:68:b3:d4:45:a1
Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt
Revocation information
OCSP Server: http://ocsp.quovadisglobal.comCRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl
Check the revocation status for certificate sparkasse-rhein-nahe.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sparkasse-rhein-nahe.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sparkasse-rhein-nahe.de
Other certificates including the domain name sparkasse-rhein-nahe.de
(limited to 100 certificates)
giropay.sparkasse-rhein-nahe.de
praktikum.sparkasse-rhein-nahe.de
module.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
news.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
praktikum.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
news.sparkasse-rhein-nahe.de
*.blog.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
news.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
news.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
module.sparkasse-rhein-nahe.de
sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
praktikum.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
*.blog.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
digi-check.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
digi-check.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
module.sparkasse-rhein-nahe.de
psd2-xs2a.sparkasse-rhein-nahe.de
digi-check.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
digi-check.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
module.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
*.blog.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
praktikum.sparkasse-rhein-nahe.de
module.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
news.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
praktikum.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
news.sparkasse-rhein-nahe.de
*.blog.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
news.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
news.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
module.sparkasse-rhein-nahe.de
sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
praktikum.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
*.blog.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
digi-check.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
digi-check.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
module.sparkasse-rhein-nahe.de
psd2-xs2a.sparkasse-rhein-nahe.de
digi-check.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
digi-check.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
module.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
*.blog.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
Certificate
The complete raw certificate details for sparkasse-rhein-nahe.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJCjCCBvKgAwIBAgIUZprPLrFlp0q+oz6OjiAfh759/lAwDQYJKoZIhvcNAQEL BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEczMB4XDTIzMDcwMzE0NDc1 MFoXDTI0MDYzMDIzNDUwMFowgYAxCzAJBgNVBAYTAkRFMRgwFgYDVQQIDA9SaGVp bmxhbmQtUGZhbHoxFjAUBgNVBAcMDUJhZCBLcmV1em5hY2gxHTAbBgNVBAoMFFNw YXJrYXNzZSBSaGVpbi1OYWhlMSAwHgYDVQQDDBdzcGFya2Fzc2UtcmhlaW4tbmFo ZS5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKqbmJ/nOYvZCFKW 0vUgMaikrg/EYL7vtL9zG920mA1Yo4u0SdlyLaKxL66Ug5piPpjF0YxnL8onAI1r wvHodYOVVcBqFnjRVgAdE8aC/iS/4TCPstb638sOoRL8fZ14VLzZ1hbdfvnaKeAl y+vPP9dkRnBtGE8tEfscN7JU3iEILC5eybWdaWtW5KxvWG3WYJ/kG383X7fqPGeM EXWgIe0XS0vXcBn+I7rfmXgH2kktDCKV0/IyjlFKlNz1ytD+3TT47tPRRmhpUrVb 8oZh6TGdMTPqCJjgbR2P4kghvOzyZzygZU2MVFwR0JcK7SXQg6GSBRx17dc3sxoc /wFD2QY1qcHiILm9Ro5nWB3HShOak0w0Dha7NqDnYRidwoLht1k9fkrXnpE1bw5E oEm6hNqJt10Lrzkl1VG+Hc+fQ98W+megZkSXQb2KOJFY+5M8/twnhcqoHsZQeiEd GpYuWYzU0uxPLq017703XuIZvVj/GSxJBvrzSgY1DLQT68u439WIlYbvQHOXbwd3 sL4trKWvHrfZA9BZajt31gvmLJnQXpXMz3LYCx0LpgPbkK6Ks53NJdypCmqBCpBx 41qTy3pW/ch/TiGOUoTKn7c/MWi2SM6i/cgF0bMkRMpgon3Ysg0aGwnUdiBLaKMM nQ9AkIa03ILFuMoJD6XowITjMDQFAgMBAAGjggOsMIIDqDAJBgNVHRMEAjAAMB8G A1UdIwQYMBaAFLMSibWpSzW8FQDwgOnYeIfxE3x2MHMGCCsGAQUFBwEBBGcwZTA3 BggrBgEFBQcwAoYraHR0cDovL3RydXN0LnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdnNz bGczLmNydDAqBggrBgEFBQcwAYYeaHR0cDovL29jc3AucXVvdmFkaXNnbG9iYWwu Y29tMCIGA1UdEQQbMBmCF3NwYXJrYXNzZS1yaGVpbi1uYWhlLmRlMFsGA1UdIARU MFIwRgYMKwYBBAG+WAACZAEBMDYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cucXVv dmFkaXNnbG9iYWwuY29tL3JlcG9zaXRvcnkwCAYGZ4EMAQICMB0GA1UdJQQWMBQG CCsGAQUFBwMCBggrBgEFBQcDATA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY3Js LnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdnNzbGczLmNybDAdBgNVHQ4EFgQUCWT0L85L rvRCedqsQcLND3+4J10wDgYDVR0PAQH/BAQDAgWgMIIB+AYKKwYBBAHWeQIEAgSC AegEggHkAeIAdwDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYkc Qo2wAAAEAwBIMEYCIQCbOlhuI2oCpMgryJzSGtIOtdIX9053kp9GCDotqJh/MwIh AIw6pc5ZWwzZyGnNagqTbVv0gGEsPYyaVmEIYIVhzB2EAHYAdv+IPwq2+5VRwmHM 9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGJHEKNPgAABAMARzBFAiBRqDEKW/7rI4nN Wdy/X7SNtC7mQAcIb0A+1PwrSwgZRQIhAIsotAyN198xbgVKbQp8WOTpYvQqG4V4 +tBfZnS2ghP7AHYAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGJ HEKOKQAABAMARzBFAiEA56Xmb/qtkex3Ua6WcymF7z4sIXzhISV2db+lYwLZwOsC IG0lthOu8Ra5Ii2P69ghcqU9bmR5G75OSOGYlvXKEbxLAHcAVYHUwhaQNgFK6gub VzxT8MDkOHhwJQgXL6OqHQcT0wwAAAGJHEKOBAAABAMASDBGAiEAxyBJX3b5jhz+ 7EvPnBnRANdsy4MpbacvM1SJzAauJyMCIQDnoWEgV4UTqzhemgyP2Ldkd/KBzM6G FBrkVkX6DQSwKTANBgkqhkiG9w0BAQsFAAOCAgEA13KWkxJ1xSonERdXnb8fhZX/ cgIuxsGDnoWLDRP1g0Q1CuJO3YlAm99T9FeOfCAToorbBsR87+4O8mw8QNff6OzP L+jZS4USx/qTCT6bZYSuZmprC9WgbPmmunrb9P2Nj6pI/23RmyaHJLFxEEl4vy3+ isAy0OZcOuhQFYKdgQEgxWlZCmAJvCaud0IhXxE4cqopFXi2IPqgH7MHpAQxS2vl lY1gzXpHNPD42vc+2D3MgP0X/qO0NCNXtGuhkxe+huNgiTngezeHd5XsTB4oGpaR P2VwOa+xjDfmD4GalMT4T/e8B1yulDtgiiipgg0YCbz+O5w5fjzAu0Sh8/M3kBJu YVorEQ1AMKuHmfE32XgPDYh2Nav4FTzwuiPDSBz+Iovk/YilNex9Mn0P7/iI9O6a Gov/OW1riL0MpPdB9qOUELUd8GcRg4h6BhCYLBXfEhi7nmFCqvbt2aP7IsQEH1OE WALgFJ7rzcrWqX+YV0fOOXb1Mclq+mEQUTjgD2irgmW5ZeH2Gte5cM9L2fOK9viN RtYi2Eq5gYycyRLqahghA1BbTx50sI1uqtaVWt3fvFDzSX1eClEJconjNHUt7TnF xELNSCNiOoDPTsh1/M2LUIhN5OhG55TozI0Vw16YXjieveMrhEeEKU8z+76hy9fc eJS0wDD+ech1dOMNOuM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqpuYn+c5i9kIUpbS9SAx qKSuD8Rgvu+0v3Mb3bSYDViji7RJ2XItorEvrpSDmmI+mMXRjGcvyicAjWvC8eh1 g5VVwGoWeNFWAB0TxoL+JL/hMI+y1vrfyw6hEvx9nXhUvNnWFt1++dop4CXL688/ 12RGcG0YTy0R+xw3slTeIQgsLl7JtZ1pa1bkrG9YbdZgn+Qbfzdft+o8Z4wRdaAh 7RdLS9dwGf4jut+ZeAfaSS0MIpXT8jKOUUqU3PXK0P7dNPju09FGaGlStVvyhmHp MZ0xM+oImOBtHY/iSCG87PJnPKBlTYxUXBHQlwrtJdCDoZIFHHXt1zezGhz/AUPZ BjWpweIgub1GjmdYHcdKE5qTTDQOFrs2oOdhGJ3CguG3WT1+SteekTVvDkSgSbqE 2om3XQuvOSXVUb4dz59D3xb6Z6BmRJdBvYo4kVj7kzz+3CeFyqgexlB6IR0ali5Z jNTS7E8urTXvvTde4hm9WP8ZLEkG+vNKBjUMtBPry7jf1YiVhu9Ac5dvB3ewvi2s pa8et9kD0FlqO3fWC+YsmdBelczPctgLHQumA9uQroqznc0l3KkKaoEKkHHjWpPL elb9yH9OIY5ShMqftz8xaLZIzqL9yAXRsyREymCifdiyDRobCdR2IEtoowydD0CQ hrTcgsW4ygkPpejAhOMwNAUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 585769421516583270490731811781841604569032687184 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-03 14:47:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-30 23:45:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rheinland-Pfalz' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bad Kreuznach' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sparkasse Rhein-Nahe' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sparkasse-rhein-nahe.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 696019089505814359712847952375776893575350555758380108465571315160151183745853727754923559459639491491346248870885255043388609145976516388472489948367748356467816348605159732464060700627481608345479347342634475822632967720460501623053650543138836935805896401570375863576015521464982203025980615707154526445846169601002213426068567553330960621473781515117974676754118786462609635618625284601572593503750253852583666467816755896207748970845694851525671264616005785485606260830254846216210531580045219184697381708912090130640980704904108366826259108431906599011373117291024000012480538665966268416893378669783671151565103529184077499718037867950155658595996354205798347430363176306104577383514290655219471612983241248918018148399375489844619732137526955466730868946619355899152871939084482269979589619755928490808234671861556325439759340432743810830917904866617741636237417591182140024138745659246223524542295268253634916111087024902308409767085712997412638341428763859893975153254201530098970821058997930658870937173471796567882967946602683103966429854128024699876876799986066474236502522126272182079223286067400234602531677083942901699674241129392305421359599005450892643497799595082112318288014420793455253367788324156302891901006853 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkasse-rhein-nahe.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0964f42fce4baef44279daac41c2cd0f7fb8275d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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