mbtest.steinberg.net

- Steinberg Media Technologies GmbH -

Issued by StartCom Class 3 OV Server CA

About this certificate

This digital certificate with serial number 4c:e5:c6:bf:fe:e4:e9:9e:a2:ef:c2:e1:71:28:40:c8 was issued on by StartCom Ltd..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Steinberg Media Technologies GmbH

Organization: Steinberg Media Technologies GmbH
State / Province: Hamburg
Locality: Hamburg
Country: DE

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:e5:c6:bf:fe:e4:e9:9e:a2:ef:c2:e1:71:28:40:c8
Serial Number (int): 102214394788824575942065914371818143944
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 75:6c:f6:60:a1:63:d4:1d:79:a8:f0:be:ed:38:b6:6a:b0:d0:e2:78
AuthorityKeyId: b1:3f:1c:92:7b:92:b0:5a:25:b3:38:fb:9c:07:a4:26:50:32:e3:51

Fingerprint (sha1): 91:45:ab:9e:43:a6:89:91:ac:b4:cd:ce:72:7a:84:8c:ce:0e:a4:59
Fingerprint (sha256): 7c:85:34:d0:01:d3:ba:fe:96:2f:5e:74:57:4a:68:45:ac:83:15:e1:ab:35:79:80:2a:61:3f:80:ba:4e:1c:aa

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server3.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server3.crl

Check the revocation status for certificate mbtest.steinberg.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mbtest.steinberg.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mbtest.steinberg.net

Other certificates including the domain name steinberg.net

(limited to 100 certificates)
www.steinberg.net
id.steinberg.net
product-line-management.mbstage.steinberg.net
*.steinberg.net
shop.steinberg.net
shop.steinberg.net
www.steinberg.net
*.mbtest.steinberg.net
shop.steinberg.net
*.steinberg.net
download.steinberg.net
download.steinberg.net
steinberg.net
*.steinberg.net
download.steinberg.net
*.steinberg.net
pathfinder.playground.steinberg.net.io.steinberg.net
*.mb.steinberg.net
www.steinberg.net
product-line-management.mbstage.steinberg.net
beta.steinberg.net
download.steinberg.net
shop.steinberg.net
download.steinberg.net
news.steinberg.net
*.mb.steinberg.net
product-line-management.mbtest.steinberg.net
product-line-management.mbtest.steinberg.net
*.mbstage.steinberg.net
b2b.steinberg.net
b2b.steinberg.net
mbstage.steinberg.net
*.mbstage.steinberg.net
testweb.steinberg.net
product-line-management.mb.steinberg.net
webmail.steinberg.de
news.steinberg.net
*.steinberg.net
www.steinberg.net
mb.steinberg.net
shop.steinberg.net
*.mbstage.steinberg.net
shop.steinberg.net
ru.steinberg.net
forums.steinberg.net
*.steinberg.net
shop.steinberg.net
news.steinberg.net
steinberg.net
product-line-management.mb.steinberg.net
ocl-steinberg-live.steinberg.net
shop.steinberg.net
shop.steinberg.net
id.steinberg.net
*.mbtest.steinberg.net
product-line-management.mbtest.steinberg.net
product-line-management.mb.steinberg.net
code-pool.test.io.steinberg.net
download.steinberg.net
steinberg.net
*.mbtest.steinberg.net
sdk.steinberg.net
*.mbtest.steinberg.net
steinberg.net
news.steinberg.net
www.steinberg.net
download.steinberg.net
*.mbtest.steinberg.net
id.steinberg.net
www.steinberg.net
shop.steinberg.net
mbstage.steinberg.net
mbtest.steinberg.net
newshub-publisher.mb.steinberg.net
*.mb.steinberg.net
news.steinberg.net
download.steinberg.net
pathfinder.io.steinberg.net
www.steinberg.net
www.steinberg.net
devweb.steinberg.net
forums.steinberg.net
*.mbstage.steinberg.net
sdk.steinberg.net
*.mb.steinberg.net
auth.steinberg.net
partner.steinberg.net
*.mbtest.steinberg.net
news.steinberg.net
openam-steinberg-euw-dev.id.forgerock.io
forums.steinberg.net
download.steinberg.net
*.mbtest.steinberg.net
news.steinberg.net
beta.steinberg.net
*.steinberg.net
news.steinberg.net
steinberg.net
steinberg.net
mb.steinberg.net

Certificate

The complete raw certificate details for mbtest.steinberg.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHSjCCBjKgAwIBAgIQTOXGv/7k6Z6i78LhcShAyDANBgkqhkiG9w0BAQsFADB4
MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMg
U3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxJjAkBgNVBAMTHVN0YXJ0
Q29tIENsYXNzIDMgT1YgU2VydmVyIENBMB4XDTE2MDQwNzA3MTcxNVoXDTE5MDQw
NzA3MTcxNVowfDELMAkGA1UEBhMCREUxEDAOBgNVBAgMB0hhbWJ1cmcxEDAOBgNV
BAcMB0hhbWJ1cmcxKjAoBgNVBAoMIVN0ZWluYmVyZyBNZWRpYSBUZWNobm9sb2dp
ZXMgR21iSDEdMBsGA1UEAwwUbWJ0ZXN0LnN0ZWluYmVyZy5uZXQwggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQClf4Z34q7xtlCk12m9RyH4/zV+p+y9bfik
J/03YnGxpDR4x1aioGKx6n4hPK1SS4919sYXQDzVD8PWKbfdlgtok7J+B8294x+d
lAXuil3W7ZdLvMJA+AM+OXi7lA+Wdoug6IILSFmj95v0UqNwdfFXcBLcKUX3l9NI
Q1UkfWRmcw3t0SuhK40tUsrnlbdSV4y0ka8QD9t4At20hxMrhhWb8gaq10vguMm8
ZK+hqf3jnhjW1EgkPMhFzc/AodRC+KVChhYgSYfH8gd1tCCGfmGia9NArXXKrgqA
FL98MXjc4Nuw/6kkGUUvbUH6aJf7XvKeGX+dAT4W9JZ1XuXR6DyEmFdicMlRBaWU
fbYMZP9iDij3XZwjy4o6NjDNWlh+U7v8NV/pPM4bQ5hmrpiAZ8WYY58drldf/U8E
AYYXgip5nh+DgE2+pd3KWu/9awtWR/4zn8GvGsMTZzKmUTqIe8S/ra+NCOMjc5fa
702Njnn9A0OFCqZMFbARcDFc/GUCzAF3ReM++UlwY8TmBC+lyVyjAGzUPt1hZJR5
tLMmhaigZ/4haZQfPZEFLm/8jAkDHvDRGTfwhzA2OWNB6pfPKbbCC5f4vRbeE/qh
9ZOdP2dSqT8K5H/2zvO3uYgx44agu4r4SDJSmaBWqC7sfiwGTZzATUQ+KfwEWyKM
fBZQdtnzWwIDAQABo4ICyjCCAsYwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMCBggrBgEFBQcDATAJBgNVHRMEAjAAMB0GA1UdDgQWBBR1bPZgoWPU
HXmo8L7tOLZqsNDieDAfBgNVHSMEGDAWgBSxPxySe5KwWiWzOPucB6QmUDLjUTBv
BggrBgEFBQcBAQRjMGEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLnN0YXJ0c3Ns
LmNvbTA5BggrBgEFBQcwAoYtaHR0cDovL2FpYS5zdGFydHNzbC5jb20vY2VydHMv
c2NhLnNlcnZlcjMuY3J0MDgGA1UdHwQxMC8wLaAroCmGJ2h0dHA6Ly9jcmwuc3Rh
cnRzc2wuY29tL3NjYS1zZXJ2ZXIzLmNybDAfBgNVHREEGDAWghRtYnRlc3Quc3Rl
aW5iZXJnLm5ldDAjBgNVHRIEHDAahhhodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS8w
UAYDVR0gBEkwRzAIBgZngQwBAgIwOwYLKwYBBAGBtTcBAgUwLDAqBggrBgEFBQcC
ARYeaHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5MIIBBQYKKwYBBAHWeQIE
AgSB9gSB8wDxAHYAaPaY+B9kgr46jO65KB1M/HFRXWeT1ETRCmesu09P+8QAAAFT
77g2/gAABAMARzBFAiA2e0k/PjjBmjrNYrwt3shH0oqItCoYGL1vim1pEcniDAIh
APpwxkqkOdxNltpZIvMX53D22dxfjMZQWDaxBWarKb+1AHcApLkJkLQYWBSHuxOi
zGdwCjw1mAT5G9+443fNDsgN3BAAAAFT77g3qgAABAMASDBGAiEA4BrwXjGqtZb2
0JTiBSNge3EAGwpdLHQT1NpnfVtzwFQCIQCvB1+pv6GiSwzQoDJMrZZJCUnh1r3B
GapnGsUhlw24ZTANBgkqhkiG9w0BAQsFAAOCAQEAeZrP2HCquoJLLK82ru68gpe3
4cQHuMfmj60DfCp+onkifuTJhErNUUiA4o8ApVydEw9R4FAQQKpufsvZAOo6Jsgv
1HLAAAQTJIASV6GSlEKzNEr66otJmALqMM1xnIxpJk7r6R2UalwohelSAuvzcCtW
R5FLYwPAMltDtCSCWUEONQDifb6xzfSjcehaCAy/jaG56TRIox4b9BKJyfkrKruF
u6z8VZmHdPoFWz/h10f/IjVnxNLHlRCIp9sNQer4zzWTLLoakMwKFCJ4MF4NCiaq
MOUuM1Mf7cEZNZYR426BtQGwi1x7HKmJkfjpMGCe1pSbkFWopRy7SFCF1JQt0Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 102214394788824575942065914371818143944
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 3 OV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-07 07:17:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-07 07:17:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Steinberg Media Technologies GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mbtest.steinberg.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 675173527857121756227432738087255777051767926772220660597140001451940720200367833594307603741544474922589818875712226106268335834447719901064135705247037417663920406191444891036793516985440871297448583001076367018477490348437849223592531010573238567138426582575141161240790331034491989653928794309449219385753888200576993055747535474282996238381755216796930411076530746744856426858726247595449265277188159714162156810592546775172531015847113408114353790973296645177804487402862406951272077288170477064291916358579399187568071287424672597336207099099559144801647033505999398578650617013022047325925286740908680481014526757395355755934845833593197440084358914500496120998730885732131720973023277514473789766944423371998959477391495124103836098217343271604911549322526061566097328687317918746433940282947918521584489779311076620485848066317843860070640242951228911884911444788971224871317346713935920942236435222374477197011278662369801058592903001774688151645155145839096818191033951043034095459001151193907096971045831382600452420340314208655759657331364628109473474365147374531192517422781196495079095116380171550373697731145944913942983149260930096022580391617613606850446550521948670977124463288581799681969555610005789438289507163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							756cf660a163d41d79a8f0beed38b66ab0d0e278
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b13f1c927b92b05a25b338fb9c07a4265032e351
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbtest.steinberg.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc400000153efb836fe00000403004730450220367b493f3e38c19a3acd62bc2ddec847d28a88b42a1818bd6f8a6d6911c9e20c022100fa70c64aa439dc4d96da5922f317e770f6d9dc5f8cc6505836b10566ab29bfb5007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000153efb837aa0000040300483046022100e01af05e31aab596f6d094e20523607b71001b0a5d2c7413d4da677d5b73c054022100af075fa9bfa1a24b0cd0a0324cad96490949e1d6bdc119aa671ac521970db865
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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