lync.bilfinger.net

- Bilfinger Berger SE -

Issued by Trusted Secure Certificate Authority 5

About this certificate

This digital certificate with serial number 27:c6:64:d8:68:f5:76:d3:8c:4a:7a:ec:86:a2:4e:f7 was issued on by Corporation Service Company.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bilfinger Berger SE

Organization: Bilfinger Berger SE
Organization unit: Unified Communications
Address: Carl-Reiß-Platz 1-5
Postal code: 68165
State / Province: Baden-Wuerttemberg
Locality: Mannheim
Country: DE

Corporation Service Company

Organization: Corporation Service Company
State / Province: DE
Locality: Wilmington
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 27:c6:64:d8:68:f5:76:d3:8c:4a:7a:ec:86:a2:4e:f7
Serial Number (int): 52870012000328272150679305490647895799
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: db:c3:c2:7a:0e:80:68:e8:b0:55:58:3f:a6:c7:b0:43:e8:19:98:4a
AuthorityKeyId: f2:bb:55:ee:fc:8f:cf:d0:3f:14:68:1a:95:7e:79:0e:ab:17:30:f4

Fingerprint (sha1): a2:8b:ff:ac:b5:7a:d7:7a:ba:85:b5:43:65:65:b0:91:99:d3:6f:fa
Fingerprint (sha256): 7c:d8:88:d7:b4:ee:db:50:76:9a:36:57:d0:6c:36:2f:22:30:8e:32:88:06:12:88:c7:03:ad:1c:98:19:e4:96

Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl

Check the revocation status for certificate lync.bilfinger.net

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lync.bilfinger.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lync.bilfinger.net
av.bilfinger.com
bilfinger.com
dialin.bilfinger.com
edge.bilfinger.net
envi-con.de
envi.bilfinger.com
lyncdiscover.bilfinger.com
lyncdiscover.envi-con.de
lyncdiscoverinternal.bilfinger.com
lyncdiscoverinternal.envi-con.de
lyncowas1.res1.rlaone.net
lyncwebexternal.bilfinger.com
lyncwebinternal.bilfinger.net
meet.bilfinger.com
s001-01-00555.res1.rlaone.net
s001-01-00556.res1.rlaone.net
s001-01-00557.res1.rlaone.net
sip.bilfinger.com
sip.envi-con.de
sv01888.res1.rlaone.net
sv01889.res1.rlaone.net
webcon.bilfinger.com

Other certificates including the domain name bilfinger.net

(limited to 100 certificates)
mdm.bilfinger.net
proarc.bilfinger.net
auth.bilfinger.net
standards.bilfinger.net
wms.bilfinger.net
sd-is-usa.bilfinger.net
mdmemailqa.bilfinger.net
*.spa.bilfinger.net
iscloud.bilfinger.net
filebox2.bilfinger.net
auth.bilfinger.net
vpn.evry.com
q14-cc.sap.bilfinger.net
csi-sts.bbps.bilfinger.net
whl.bilfinger.net
medialibrary.bilfinger.net
envicloud.bilfinger.net
filebox.bilfinger.net
knowledgetest.bilfinger.net
asp.bilfinger.net
sharepoint.bilfinger.net
wdsc14.sap.bilfinger.net
mdmqa.bilfinger.net
fscloud.bilfinger.net
ssrs-proxy.auth.bilfinger.net
mycitrix.bilfinger.net
login.bilfinger.net
fscloud.bilfinger.net
oos.bilfinger.net
i-doit.bilfinger.net
lync.bilfinger.net
bea.bilfinger.net
vpn.evry.com
bld.bilfinger.net
templogin.bilfinger.net
betriebsvereinbarung-informationssysteme.bilfinger.net
login.bilfinger.net
wdsp14.sap.bilfinger.net
mdmemail.bilfinger.net
storefrontqa.bilfinger.net
academy-elearning-test.bilfinger.net
di1-cc.sap.bilfinger.net
*.bilfinger.com
teams.bilfinger.net
bi.bilfinger.net
ssc-service-reporting.bilfinger.net
wdsq14.sap.bilfinger.net
jabis.bilfinger.net
fscloud.bilfinger.net
mycitrixqa.bilfinger.net
autodiscover.bilfinger.net
mclug.bilfinger.net
*.shield.bilfinger.net
mdm.bilfinger.net
di3-cc.sap.bilfinger.net
academy.bilfinger.net
edge.bilfinger.net
pmo.bilfinger.net
bsfm-ftp.bilfinger.net
csi-sts.bbps.bilfinger.net
*.bilfinger.com
medialibrary.bilfinger.net
*.cloudapps.bilfinger.net
applications.bilfinger.net
webapps.bilfinger.net
my.bilfinger.net
mdm.bilfinger.net
mdmqa.bilfinger.net
webapps.bilfinger.net
p14-cc.sap.bilfinger.net
academy-elearning.bilfinger.net
csi-sts.bb.bilfinger.net
academy.bilfinger.net
filebox2.bilfinger.net
*.nav.bilfinger.net
mycitrix.bilfinger.net
teams.bilfinger.net
find.bilfinger.net
csi-sts.bb.bilfinger.net
siem.bilfinger.net
mclut.bilfinger.net
*.cloudappsqa.bilfinger.net
academy-test.bilfinger.net
www.identify-fs.bilfinger.com
login.bilfinger.net
iscloud.bilfinger.net
csi-sts.bhr.bilfinger.net
envicloud.bilfinger.net
gtc.bilfinger.net
filebox2.bilfinger.net
gcp-apps.bilfinger.net
q17-cc.sap.bilfinger.net
puma.bilfinger.net
academy.bilfinger.net
nsg.bilfinger.net
i-doit-test.bilfinger.net
vpn.evry.com
filebox.bilfinger.net
*.gcp-apps.bilfinger.net
bmcloud.bilfinger.net

Certificate

The complete raw certificate details for lync.bilfinger.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH2TCCBsGgAwIBAgIQJ8Zk2Gj1dtOMSnrshqJO9zANBgkqhkiG9w0BAQsFADCB
hjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkRFMRMwEQYDVQQHEwpXaWxtaW5ndG9u
MSQwIgYDVQQKExtDb3Jwb3JhdGlvbiBTZXJ2aWNlIENvbXBhbnkxLzAtBgNVBAMT
JlRydXN0ZWQgU2VjdXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSA1MB4XDTE4MDYw
NjAwMDAwMFoXDTIwMDYwNTIzNTk1OVowgcgxCzAJBgNVBAYTAkRFMQ4wDAYDVQQR
EwU2ODE2NTEbMBkGA1UECBMSQmFkZW4tV3VlcnR0ZW1iZXJnMREwDwYDVQQHEwhN
YW5uaGVpbTEdMBsGA1UECQwUQ2FybC1SZWnDny1QbGF0eiAxLTUxHDAaBgNVBAoT
E0JpbGZpbmdlciBCZXJnZXIgU0UxHzAdBgNVBAsTFlVuaWZpZWQgQ29tbXVuaWNh
dGlvbnMxGzAZBgNVBAMTEmx5bmMuYmlsZmluZ2VyLm5ldDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMQL1pX/ioqkA/L1ZRDkMtJp3IDYSCwV4DrY9nuI
RV6ELwojEjPzLvdaWKFZ9oSA2dtP2sUg1hjxYmvlqbYoRbVevJEey1ZHfvoiHPev
szfXcDGKuFehr4YeXIhGENwVuCb9aNSqtJ0HMehHHKaNqA0cPCVR+zKzHzl2am/7
+ZYbdddlHGiiwbw4hH2LuGD1mGp2sJ78Xn5DwPU94+i6tu9lKXc0N76Eab5UzSsm
nyzgh/A6/bFFnxDhX9J9Pf1gDuubgtq43SgD1A8O6yRnwieOX00oNQaGYPfmOwlz
tBi9Tt8ZirNFclb5Mk21TBQo14NdQQPvX6eUlbGBqh/gMbUCAwEAAaOCA/0wggP5
MB8GA1UdIwQYMBaAFPK7Ve78j8/QPxRoGpV+eQ6rFzD0MB0GA1UdDgQWBBTbw8J6
DoBo6LBVWD+mx7BD6BmYSjAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSwYDVR0gBEQwQjA2BgsrBgEE
AbIxAQICCDAnMCUGCCsGAQUFBwIBFhlodHRwczovL2Nwcy51c2VydHJ1c3QuY29t
MAgGBmeBDAECAjBQBgNVHR8ESTBHMEWgQ6BBhj9odHRwOi8vY3JsLnVzZXJ0cnVz
dC5jb20vVHJ1c3RlZFNlY3VyZUNlcnRpZmljYXRlQXV0aG9yaXR5NS5jcmwwgYIG
CCsGAQUFBwEBBHYwdDBLBggrBgEFBQcwAoY/aHR0cDovL2NydC51c2VydHJ1c3Qu
Y29tL1RydXN0ZWRTZWN1cmVDZXJ0aWZpY2F0ZUF1dGhvcml0eTUuY3J0MCUGCCsG
AQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMBMGCisGAQQB1nkCBAMB
Af8EAgUAMIICPwYDVR0RBIICNjCCAjKCEmx5bmMuYmlsZmluZ2VyLm5ldIIQYXYu
YmlsZmluZ2VyLmNvbYINYmlsZmluZ2VyLmNvbYIUZGlhbGluLmJpbGZpbmdlci5j
b22CEmVkZ2UuYmlsZmluZ2VyLm5ldIILZW52aS1jb24uZGWCEmVudmkuYmlsZmlu
Z2VyLmNvbYIabHluY2Rpc2NvdmVyLmJpbGZpbmdlci5jb22CGGx5bmNkaXNjb3Zl
ci5lbnZpLWNvbi5kZYIibHluY2Rpc2NvdmVyaW50ZXJuYWwuYmlsZmluZ2VyLmNv
bYIgbHluY2Rpc2NvdmVyaW50ZXJuYWwuZW52aS1jb24uZGWCGWx5bmNvd2FzMS5y
ZXMxLnJsYW9uZS5uZXSCHWx5bmN3ZWJleHRlcm5hbC5iaWxmaW5nZXIuY29tgh1s
eW5jd2ViaW50ZXJuYWwuYmlsZmluZ2VyLm5ldIISbWVldC5iaWxmaW5nZXIuY29t
gh1zMDAxLTAxLTAwNTU1LnJlczEucmxhb25lLm5ldIIdczAwMS0wMS0wMDU1Ni5y
ZXMxLnJsYW9uZS5uZXSCHXMwMDEtMDEtMDA1NTcucmVzMS5ybGFvbmUubmV0ghFz
aXAuYmlsZmluZ2VyLmNvbYIPc2lwLmVudmktY29uLmRlghdzdjAxODg4LnJlczEu
cmxhb25lLm5ldIIXc3YwMTg4OS5yZXMxLnJsYW9uZS5uZXSCFHdlYmNvbi5iaWxm
aW5nZXIuY29tMA0GCSqGSIb3DQEBCwUAA4IBAQBjAZkHMaAiXjU6uuy3hZLs3MfA
rGCA3f5UtOcvCg+2VrbFaXvwdl6w4xQkbh6ydps80p0kHoGlCbrnAcFOTA+GvBDf
bSRDMj8mQauXq2T8IxTarOVq64xlIY/hsg13OhJJQQyMM8c78wdcuVo6eZ3Rvdkw
YI4tBg5YzNJUsLBb+h5l/d7FyveR3wgm271jWv1sn1adhnPM2tFNAravHoAvw74i
8nGVlJnMkNIlzzT5hMKoyJNj9K5rEoiB/4xLvI49fAABi7JF2NLrsU8K+6LXdkQz
oMaO/QmJtDoMau5zO6dSp20swBe1MCPvJA1+ror6aVqG41X/s8/vRLsy/rdl
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAvWlf+KiqQD8vVlEOQy
0mncgNhILBXgOtj2e4hFXoQvCiMSM/Mu91pYoVn2hIDZ20/axSDWGPFia+WptihF
tV68kR7LVkd++iIc96+zN9dwMYq4V6Gvhh5ciEYQ3BW4Jv1o1Kq0nQcx6Eccpo2o
DRw8JVH7MrMfOXZqb/v5lht112UcaKLBvDiEfYu4YPWYanawnvxefkPA9T3j6Lq2
72UpdzQ3voRpvlTNKyafLOCH8Dr9sUWfEOFf0n09/WAO65uC2rjdKAPUDw7rJGfC
J45fTSg1BoZg9+Y7CXO0GL1O3xmKs0VyVvkyTbVMFCjXg11BA+9fp5SVsYGqH+Ax
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 52870012000328272150679305490647895799
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '68165'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mannheim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Carl-Reiß-Platz 1-5'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bilfinger Berger SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lync.bilfinger.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24748545420303669326828840538068566676365979635612614212772205479820071747636958451791626894632784181059221521271652096360621641112830826831998650219478776890715773689284970175833655586325256599167684076408109671403528864057821971134035040896520790618166039857379345253178422311974887725682621146315097838381633612101754988597065481755665443773670539180666087703068142052833558613565455476193254265805886455496305485552107264996821969979960577601015707910980010075050744373604131912413974379333680188541092995776955679641543174108939475983180887831279808090839016913001688216703136286364226224663589796342108728078773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f2bb55eefc8fcfd03f14681a957e790eab1730f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dbc3c27a0e8068e8b055583fa6c7b043e819984a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (566 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync.bilfinger.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'av.bilfinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bilfinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.bilfinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge.bilfinger.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envi-con.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envi.bilfinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bilfinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.envi-con.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.bilfinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.envi-con.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncowas1.res1.rlaone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncwebexternal.bilfinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncwebinternal.bilfinger.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.bilfinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's001-01-00555.res1.rlaone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's001-01-00556.res1.rlaone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's001-01-00557.res1.rlaone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.bilfinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.envi-con.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv01888.res1.rlaone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv01889.res1.rlaone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcon.bilfinger.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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