digitalefiliale.olb.de

- Oldenburgische Landesbank AG -

Issued by D-TRUST SSL Class 3 CA 1 EV 2009

About this certificate

This digital certificate with serial number 77:6c:49:94:f2:db:28:c0:c3:f3:cf:84:db:1d:84:2c was issued on by D-Trust GmbH.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Oldenburgische Landesbank AG

Company registration number: HRB 3003
Organization: Oldenburgische Landesbank AG
Address: Stau 15-17
Postal code: 26122
State / Province: Niedersachsen
Locality: Oldenburg
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): 77:6c:49:94:f2:db:28:c0:c3:f3:cf:84:db:1d:84:2c
Serial Number (int): 158740391975956188524312390555720844332
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: af:73:94:ae:06:6d:1a:45:0b:39:31:cd:a4:fa:fc:24:4a:7c:fb:32
AuthorityKeyId: ac:ed:a5:9d:7a:a2:b6:43:f1:18:8a:25:6a:6c:b1:cc:a8:f2:5a:d4

Fingerprint (sha1): c6:b9:e3:3e:a2:8d:43:df:8a:d4:b9:01:ba:6d:49:06:f8:f0:1b:ad
Fingerprint (sha256): 73:62:db:3c:3f:70:be:57:58:24:04:49:2a:8c:35:7e:e2:70:a7:17:66:06:80:6a:31:19:5f:c1:58:aa:23:45

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_EV_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%20EV%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-ev-2009.ocsp.d-trust.net
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_ev_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_ev_2009.crl

Check the revocation status for certificate digitalefiliale.olb.de

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digitalefiliale.olb.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digitalefiliale.olb.de
digitalefiliale-api-int.olb.de
digitalefiliale-int.olb.de
digitalefiliale-api.olb.de
branch.olb.de
digitalbranch.olb.de
filiale.olb.de
digitalfiliale.olb.de

Other certificates including the domain name olb.de

(limited to 100 certificates)
expe01.video.olb.de
magazin.olb.de
mbanking.olb.de
magazin.olb.de
3d-secure.olb.de
teamsphone-osv.olb.de
ip.olb.de
rsu-kis.olb.de
hbciweb.xs2a.olb.de
www2.olb.de
srcwpb.olb.de
digitalefiliale.olb.de
mbanking.olb.de
rsu-kis.olb.de
securemail.olb.de
mbanking.olb.de
videoberatung.olb.de
daten.olb.de
internet-int.olb.de
srcms.olb.de
rsu-kis-int.olb.de
magazin.olb.de
urc.olb.de
rsu-kis.olb.de
xs2a.olb.de
safelock.olb.de
3d-secure.olb.de

hbciweb-dev.olb.de
wuerttembergische-int.olb.de
mdm-int.olb.de
hbciweb-dev.olb.de
www.olb.de
wuerttembergische.olb.de
developer-portal.olb.de
hbciweb-admin-int.olb.de
sso.olb.de
www-int.olb.de
xs2a.olb.de
rsa.olb.de
mbanking.olb.de
www.olb.de
vdbebics.olb.de
safelock.olb.de
*.olb.de
www.weihnachten.olb.de
vdbebics.olb.de
weihnachten.olb.de
safelock.olb.de
src.olb.de
conntest.olb.de
hbciweb-dev.olb.de

wertpapiere.olb.de
xs2a.olb.de
magazin.olb.de
www-int.olb.de
daten.olb.de
news.wuestenrot.olb.de
wuerttembergische.olb.de
securemail.olb.de
videoberatung.olb.de
rsa.olb.de
www-int.olb.de
ods.olb.de
www.olb.de
videoberatung.olb.de
wertpapiere.olb.de
src.olb.de
www.olb.de
www.olb.de
securemail.olb.de
adfs.olb.de
ebanking.olb.de
exchange.olb.de
www.olb.de
exchange.olb.de
xs2a.olb.de
ebanking.olb.de
wertpapiere.olb.de
daten.olb.de
internet-int.olb.de
pfandbrief.olb.de
www.olb.de
srcms.olb.de
hbciweb.olb.de
ssrp.olb.de
rsu-kis.olb.de
rsu-kis.olb.de
ip.olb.de
mbanking.olb.de
videoberatung.olb.de
digitalefiliale.olb.de
3d-secure.olb.de
video.olb.de
www.olb.de
sso.olb.de
srcms.olb.de
magazin.olb.de
www.olb.de

Certificate

The complete raw certificate details for digitalefiliale.olb.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 158740391975956188524312390555720844332
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 EV 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 07:40:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-17 07:40:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Oldenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 3003'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oldenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '26122'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stau 15-17'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oldenburgische Landesbank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'digitalefiliale.olb.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 769841250086457022846724881502388510269760824021302120533236999074960003502153043444623568962211660832246617545235222381027474277587573155841603856111407368185565509771827916190199680401117457646350132016446737593335971460244264847000097626970471713354636027061194396162686683798365726543967218712518902132448496258116423716649530792567680609343313221956057830791989680237940960049704270508359087865305442168087871792057016111045905503448582795641205322743194788787718006035248431595994551563527886771255441425674861719900501534528676739862612788302836038157464548335901731091721737718875126161868388855733890404422485766964170463587062291848067248352787916375545592402336986574890059531373473362331843955989383741100870739056646141582507306492685933110140851134114271302104008372172750351020367664024610377564623087670572188325435734781186539143997164275971138610000987461666178964840681542894773533949363970388396668890392300536064450509507863313190620188048766081561500514650667561887381647396160189707440447686177168869486173888543002510507333580236923938139616232835593756863476634113837762392499824591474311539060931987833660330409585549094237803977864689872862155985277014152408648746275578119964272809261968428559781946463857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-ev-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_EV_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%20EV%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.202.1 (D-TRUST EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (155 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_ev_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_ev_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (191 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalefiliale.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalefiliale-api-int.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalefiliale-int.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalefiliale-api.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branch.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalbranch.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filiale.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalfiliale.olb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aceda59d7aa2b643f1188a256a6cb1cca8f25ad4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af7394ae066d1a450b3931cda4fafc244a7cfb32
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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