www.olb.de

- Oldenburgische Landesbank AG -

Issued by TeleSec ServerPass CA 2

About this certificate

This digital certificate with serial number 34:bc:21:4b:6a:f7:18:d2 was issued on by T-Systems International GmbH.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oldenburgische Landesbank AG

Organization: Oldenburgische Landesbank AG
Organization unit: IT
State / Province: Niedersachsen
Locality: Oldenburg
Country: DE

T-Systems International GmbH

Organization: T-Systems International GmbH
Organization unit: Trust Center Services
Address: Untere Industriestr. 20
Postal code: 57250
State / Province: Nordrhein Westfalen
Locality: Netphen
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 34:bc:21:4b:6a:f7:18:d2
Serial Number (int): 3799948793394698450
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 1d:3a:4d:fa:80:7d:ca:80:cb:b5:8b:c7:89:e5:61:04:5d:4d:ed:1a
AuthorityKeyId: 15:bb:de:d6:25:6f:bd:f2:31:9f:62:13:dc:5c:a6:f4:65:b4:6d:f2

Fingerprint (sha1): fe:fd:ae:ce:dc:93:2f:db:08:3a:53:2a:3b:24:08:ad:47:92:bf:75
Fingerprint (sha256): 78:2c:c0:6c:06:a9:45:5a:52:a2:87:9c:ef:ca:08:35:6d:37:e1:3b:1a:f0:45:97:0d:34:26:b6:a4:12:b2:ba

Issuing Certificate URL: http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_CA_2.cer
Issuing Certificate URL: ldap://ldap.serverpass.telesec.de/cn=TeleSec%20ServerPass%20CA%202,ou=Trust%20Center%20Services,o=T-Systems%20International%20GmbH,c=de?cACertificate

Revocation information

OCSP Server: http://ocsp.serverpass.telesec.de/ocspr
CRL Distribution Point: http://crl.serverpass.telesec.de/rl/TeleSec_ServerPass_CA_2.crl
CRL Distribution Point: ldap://ldap.serverpass.telesec.de/cn=TeleSec%20ServerPass%20CA%202,ou=Trust%20Center%20Services,o=T-Systems%20International%20GmbH,c=de?certificateRevocationlist?base?certificateRevocationlist=*

Check the revocation status for certificate www.olb.de

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.olb.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.olb.de
ebanking.olb.de
hbciweb.olb.de
internet.olb.de
hbci.olb.de
hbci.allianz.de

Other certificates including the domain name olb.de

(limited to 100 certificates)
expe01.video.olb.de
magazin.olb.de
mbanking.olb.de
magazin.olb.de
3d-secure.olb.de
hbciweb.xs2a.olb.de
www2.olb.de
srcwpb.olb.de
mbanking.olb.de
rsu-kis.olb.de
securemail.olb.de
mbanking.olb.de
videoberatung.olb.de
daten.olb.de
internet-int.olb.de
srcms.olb.de
rsu-kis-int.olb.de
magazin.olb.de
urc.olb.de
rsu-kis.olb.de
3d-secure.olb.de

mdm-int.olb.de
hbciweb-dev.olb.de
www.olb.de
hbciweb-admin-int.olb.de
www-int.olb.de
xs2a.olb.de
rsa.olb.de
mbanking.olb.de
www.olb.de
vdbebics.olb.de
safelock.olb.de
*.olb.de
www.weihnachten.olb.de
weihnachten.olb.de
src.olb.de
conntest.olb.de
hbciweb-dev.olb.de

wertpapiere.olb.de
magazin.olb.de
www-int.olb.de
news.wuestenrot.olb.de
wuerttembergische.olb.de
videoberatung.olb.de
rsa.olb.de
www-int.olb.de
www.olb.de
src.olb.de
www.olb.de
www.olb.de
securemail.olb.de
ebanking.olb.de
www.olb.de
internet-int.olb.de
www.olb.de
srcms.olb.de
hbciweb.olb.de
ssrp.olb.de
rsu-kis.olb.de
ip.olb.de
mbanking.olb.de
videoberatung.olb.de
srcms.olb.de
magazin.olb.de
www.olb.de
src.olb.de
securemail.olb.de
securemail.olb.de
www.olb.de
magazin.olb.de
vdbebics.olb.de
www.olb.de
mdm.olb.de
srcwbp.olb.de
ebanking.olb.de
hbciweb-dev.olb.de
www.olb.de
www.olb.de
ostervoting.olb.de
ebanking.olb.de
wuerttembergische.olb.de
vdbebics.olb.de
www.olb.de
avw.olb.de
sso.olb.de
safelock.olb.de
openbanking.olb.de
adfs.olb.de
www.olb.de
wuestenrot-int.olb.de
pfandbrief.olb.de
www-int.olb.de
wuerttembergische-int.olb.de
hbciweb-dev.olb.de
*.olb.de
mbanking.olb.de
src.olb.de
adfs.olb.de

Certificate

The complete raw certificate details for www.olb.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5G0R2kHhIhcomRpPYfAc
rvl6M61pEB4lQGciSnnP3DhDalXytxPnKFiMtT3IX5cFo8HkFLsJm1PnoETajFxc
YrUMWToCbs57/DRNfU/LRlZ0uTRIP5UoqnnI+nP33x0MiNvSYM3ptg+yv0EWUSJd
hfx7yClVhnBz24aC/mtHMLKnfC5tJv8eXbeU2Uyz/LoGLH1idcqxN90mKT/a3hQr
DXAVYJl131caLw+yBRU/vZ5Xf2ZuDAGRf7/4JfaijalXrC5jZCHsxWiyZYvamNqS
H4fwargsJfeMsGRw2IkjpeCaYR7sq5tkmf6RzFA2Dh9zonJcSFR9/IpE9QB5NcKn
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3799948793394698450
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'T-Systems International GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Center Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TeleSec ServerPass CA 2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '57250'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Netphen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Untere Industriestr. 20'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-29 09:09:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oldenburgische Landesbank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oldenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.olb.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28836117823943246422274296958341248558818420964124090349914841065600537044400609080189046489393441893968292099378989385466684269062391842615040152212900584641422828573727410450499420798444404060870598555237258122749992849710003904538360594824911902426085220783711476877967894130463225761954927153986420814384583576991935175964210845487317523050446892752526644063214257340322651706888818519322773708004711217458239860022858010184124426960417112884439509105792830799643735705324610160513621999962821491605811603091302083504890276535965349578151928255913080229072362183852553899076392198669280038242978608937913634957251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 15bbded6256fbdf2319f6213dc5ca6f465b46df2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d3a4dfa807dca80cbb58bc789e561045d4ded1a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.7879.13.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.telesec.de/serverpass/cps.html'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (281 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/rl/TeleSec_ServerPass_CA_2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.serverpass.telesec.de/cn=TeleSec%20ServerPass%20CA%202,ou=Trust%20Center%20Services,o=T-Systems%20International%20GmbH,c=de?certificateRevocationlist?base?certificateRevocationlist=*'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (300 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.serverpass.telesec.de/ocspr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_CA_2.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.serverpass.telesec.de/cn=TeleSec%20ServerPass%20CA%202,ou=Trust%20Center%20Services,o=T-Systems%20International%20GmbH,c=de?cACertificate'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebanking.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbciweb.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internet.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbci.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbci.allianz.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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