www.nid.bayern.de

Issued by Bayerische SSL-CA-2015-01

About this certificate


This digital certificate with serial number 02:68:1b was issued on by Freistaat Bayern .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • WARNING: Certificate contains a Authority Info Access Issuer with an non-preferred scheme ([ldap])
  • WARNING: Certificate contains a Authority Info Access Issuer with an non-preferred scheme ([ldap])
  • ERROR: Certificate contains a CRL with an non-preferred scheme ([ldap])
  • ERROR: localityName is required for [EV] certificates
  • ERROR: businessCategory is required for [EV] certificates
  • ERROR: jurisdictionCountryName is required for [EV] certificates

Freistaat Bayern

Company registration number: 1002566
Organization: Freistaat Bayern
Organization unit: ldbv
State / Province: Bayern
Country: DE

Freistaat Bayern

Organization: Freistaat Bayern
State / Province: Bayern
Country: DE

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 02:68:1b
Serial Number (int): 157723
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 48:37:de:c4:24:b9:28:b3
AuthorityKeyId: 7b:4a:54:f6:c5:05:2d:46:84:10:78:b4:91:c8:7d:2e:51:8c:45:09

Fingerprint (sha1): a9:90:a4:df:ca:ae:e8:5d:43:ca:8b:af:d3:d8:9a:0c:93:06:4e:ca
Fingerprint (sha256): 86:05:72:b5:6d:e4:0e:f2:25:66:31:20:9e:e5:32:55:1f:97:f1:86:73:fa:01:12:d8:8f:af:88:c1:a4:75:2d

Issuing Certificate URL: ldap://directory.bayern.de/cn=Bayerische%20SSL-CA-2015-01,ou=CA-certs,dc=pki,dc=bayern,dc=de?cACertificate?base?objectclass=certificationAuthority
Issuing Certificate URL: ldap://directory2.bayern.de/cn=Bayerische%20SSL-CA-2015-01,ou=CA-certs,dc=pki,dc=bayern,dc=de?cACertificate?base?objectclass=certificationAuthority

Revocation information

OCSP Server: http://ocsp.pki.bayern.de:8080
CRL Distribution Point: ldap://directory.bayern.de/cn=Bayerische%20SSL-CA-2015-01,ou=crl,dc=pki,dc=bayern,dc=de?certificateRevocationList?base?objectclass=cRLDistributionPoint

Check the revocation status for the current certificate on www.nid.bayern.de
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: www.nid.bayern.de

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHTzCCBjegAwIBAgIDAmgbMA0GCSqGSIb3DQEBCwUAMF0xCzAJBgNVBAYTAkRF MQ8wDQYDVQQIEwZCYXllcm4xGTAXBgNVBAoTEEZyZWlzdGFhdCBCYXllcm4xIjAg BgNVBAMTGUJheWVyaXNjaGUgU1NMLUNBLTIwMTUtMDEwHhcNMTUwNjE2MjIwMDAy WhcNMTYwNjE1MjIwMDAyWjB2MQswCQYDVQQGEwJERTEPMA0GA1UECBMGQmF5ZXJu MRkwFwYDVQQKExBGcmVpc3RhYXQgQmF5ZXJuMQ0wCwYDVQQLEwRsZGJ2MRowGAYD VQQDExF3d3cubmlkLmJheWVybi5kZTEQMA4GA1UEBRMHMTAwMjU2NjCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAJY3yOWQnKwmqSNCH+kJHRWo4CT3vBH3 6lwrV8QzfAOhjuZW2ftdeKI0cf1zN+Ulp3jznRUcI6IKiBk4/gOY6b36225hkwcS 3bXC9uPLOQO9zpshBIjVu0LfnNg720zwjDLN9/72XIUJvOoTqRuxtuPEF8kbFmX5 D8QnajefHYIC3drPGIBQ0gNPJJHKBqzoHSymV+XyWSaDX2LsmDbSayw48e/kG2R/ XDoxZ9l3HOmwWbIccEEZCz/bQ/khDDSES7a6uSa4189kq2ry6PVfz7XhNjuo0UPa 8xTh+Jd9GV9VJUP/cb0b+ZRDvefCd6MO0ZRCpBnddH+EcRWOCFxQjx8CAwEAAaOC A/0wggP5MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAW gBR7SlT2xQUtRoQQeLSRyH0uUYxFCTCCAYMGCCsGAQUFBwEBBIIBdTCCAXEwKgYI KwYBBQUHMAGGHmh0dHA6Ly9vY3NwLnBraS5iYXllcm4uZGU6ODA4MDCBnwYIKwYB BQUHMAKGgZJsZGFwOi8vZGlyZWN0b3J5LmJheWVybi5kZS9jbj1CYXllcmlzY2hl JTIwU1NMLUNBLTIwMTUtMDEsb3U9Q0EtY2VydHMsZGM9cGtpLGRjPWJheWVybixk Yz1kZT9jQUNlcnRpZmljYXRlP2Jhc2U/b2JqZWN0Y2xhc3M9Y2VydGlmaWNhdGlv bkF1dGhvcml0eTCBoAYIKwYBBQUHMAKGgZNsZGFwOi8vZGlyZWN0b3J5Mi5iYXll cm4uZGUvY249QmF5ZXJpc2NoZSUyMFNTTC1DQS0yMDE1LTAxLG91PUNBLWNlcnRz LGRjPXBraSxkYz1iYXllcm4sZGM9ZGU/Y0FDZXJ0aWZpY2F0ZT9iYXNlP29iamVj dGNsYXNzPWNlcnRpZmljYXRpb25BdXRob3JpdHkwXgYDVR0gBFcwVTBTBgsrBgEE AYGWQgECAzBEMEIGCCsGAQUFBwIBFjZodHRwczovL3d3dy5wa2kuYmF5ZXJuLmRl L3BvbGljeS9wb2xpY3lfc3NsLWNhXzEuMC5wZGYwggGNBgNVHR8EggGEMIIBgDCC AXygggF4oIIBdIaBl2xkYXA6Ly9kaXJlY3RvcnkuYmF5ZXJuLmRlL2NuPUJheWVy aXNjaGUlMjBTU0wtQ0EtMjAxNS0wMSxvdT1jcmwsZGM9cGtpLGRjPWJheWVybixk Yz1kZT9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0P2Jhc2U/b2JqZWN0Y2xhc3M9 Y1JMRGlzdHJpYnV0aW9uUG9pbnSGgZhsZGFwOi8vZGlyZWN0b3J5Mi5iYXllcm4u ZGUvY249QmF5ZXJpc2NoZSUyMFNTTC1DQS0yMDE1LTAxLG91PWNybCxkYz1wa2ks ZGM9YmF5ZXJuLGRjPWRlP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q/YmFzZT9v YmplY3RjbGFzcz1jUkxEaXN0cmlidXRpb25Qb2ludIY9aHR0cDovL29jc3AucGtp LmJheWVybi5kZS9jcmwvQmF5ZXJpc2NoZSUyMFNTTC1DQS0yMDE1LTAxLmNybDAR BgNVHQ4ECgQISDfexCS5KLMwDgYDVR0PAQH/BAQDAgTwMBwGA1UdEQQVMBOCEXd3 dy5uaWQuYmF5ZXJuLmRlMA0GCSqGSIb3DQEBCwUAA4IBAQAtqRKtLbvtFT49i71Z 8weH3GdOYsuC+s93nhDkJow9o9KGUrdJON/1NWvxYr+g2OlncAw5Vn6po7x0ZOIo MDWLJ4qmy7DJPcIy5LheIrG2XfTjd6KbMnXVeHaf3MdU0DC663PAux0Dr1Em4GEX TCL8cozRyKYwXtRCccmuLCmqpE0IBGPVahtziaKa3ZTmDS4DLaddiZTQsu5kfj0F zgOqK1qH1ie9IuIvWFbuU5GEgq/k66+FksstmgYiUXZLBVeEbqeYyUJ+rmDQjvsn lfre1SJR5loonyMrDI808Vry1C+ivDPeLcZYn58VF0ofggu/EbepwLpF+bwTa+1L viWI -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljfI5ZCcrCapI0If6Qkd FajgJPe8EffqXCtXxDN8A6GO5lbZ+114ojRx/XM35SWnePOdFRwjogqIGTj+A5jp vfrbbmGTBxLdtcL248s5A73OmyEEiNW7Qt+c2DvbTPCMMs33/vZchQm86hOpG7G2 48QXyRsWZfkPxCdqN58dggLd2s8YgFDSA08kkcoGrOgdLKZX5fJZJoNfYuyYNtJr LDjx7+QbZH9cOjFn2Xcc6bBZshxwQRkLP9tD+SEMNIRLtrq5JrjXz2SravLo9V/P teE2O6jRQ9rzFOH4l30ZX1UlQ/9xvRv5lEO958J3ow7RlEKkGd10f4RxFY4IXFCP HwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 157723 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Freistaat Bayern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayerische SSL-CA-2015-01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-16 22:00:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-15 22:00:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Freistaat Bayern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ldbv' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nid.bayern.de' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1002566' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18963254231810374287806987422579206336819207116197135847401077801488955316010470403105376057318016433581324620037661686276692945329469678151717002888474374134354440916002325745958801051380875032822073452337577252479686419447800046683703485477621164261878328703417019159219064378651205361941606735936143852014937518271691036955145327358134016401736799276318633908154211731884370215680428250533466882764522076552445962485753103536153852605297034040041971226540868920234105732756544338372903821510767689405723941538010679528762737417463805241511409511052556789478534591392840970191580551943202160109490912385944580558623 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7b4a54f6c5052d46841078b491c87d2e518c4509 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (373 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.bayern.de:8080' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.bayern.de/cn=Bayerische%20SSL-CA-2015-01,ou=CA-certs,dc=pki,dc=bayern,dc=de?cACertificate?base?objectclass=certificationAuthority' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory2.bayern.de/cn=Bayerische%20SSL-CA-2015-01,ou=CA-certs,dc=pki,dc=bayern,dc=de?cACertificate?base?objectclass=certificationAuthority' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.19266.1.2.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.pki.bayern.de/policy/policy_ssl-ca_1.0.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (388 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.bayern.de/cn=Bayerische%20SSL-CA-2015-01,ou=crl,dc=pki,dc=bayern,dc=de?certificateRevocationList?base?objectclass=cRLDistributionPoint' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory2.bayern.de/cn=Bayerische%20SSL-CA-2015-01,ou=crl,dc=pki,dc=bayern,dc=de?certificateRevocationList?base?objectclass=cRLDistributionPoint' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.bayern.de/crl/Bayerische%20SSL-CA-2015-01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (10 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (8 bytes) 4837dec424b928b3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04f0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nid.bayern.de' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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