openbanking.olb.de
- Oldenburgische Landesbank AG -
Issued by D-TRUST SSL Class 3 CA 1 2009
About this certificate
This digital certificate with serial number 45:b9:8c:1b:ff:d9:13:d7:3c:42:76:00:73:66:02:24 was issued on by D-Trust GmbH.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Oldenburgische Landesbank AG
Company registration number:
CSM040923956
Organization: Oldenburgische Landesbank AG
Organization: Oldenburgische Landesbank AG
State / Province:
Niedersachsen
Locality: Oldenburg
Country: DE
Locality: Oldenburg
Country: DE
D-Trust GmbH
Organization:
D-Trust GmbH
Country:
DE
This certificate will expire on
Certificate Details
Serial Number (hex): 45:b9:8c:1b:ff:d9:13:d7:3c:42:76:00:73:66:02:24Serial Number (int): 92680148383674145563291976782705984036
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: b3:f4:13:6e:30:0e:77:64:b6:fa:93:b7:31:0a:08:5e:05:78:e6:aa
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a
Fingerprint (sha1): 55:36:2b:16:67:b1:cd:dc:ca:9a:bb:bd:f4:41:3f:ef:ce:a3:d6:8e
Fingerprint (sha256): 8a:b2:20:09:54:69:3d:d8:7f:48:ff:b7:aa:2b:b6:ff:01:bb:09:7a:10:8d:6f:79:36:63:50:06:5d:7d:4d:b4
Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Revocation information
OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.netCRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl
Check the revocation status for certificate openbanking.olb.de
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for openbanking.olb.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
openbanking.olb.de
openbanking-dev.olb.de
openbanking-int.olb.de
openbanking-dev.olb.de
openbanking-int.olb.de
Other certificates including the domain name olb.de
(limited to 100 certificates)
expe01.video.olb.de
magazin.olb.de
mbanking.olb.de
magazin.olb.de
3d-secure.olb.de
teamsphone-osv.olb.de
ip.olb.de
rsu-kis.olb.de
hbciweb.xs2a.olb.de
www2.olb.de
srcwpb.olb.de
digitalefiliale.olb.de
mbanking.olb.de
rsu-kis.olb.de
securemail.olb.de
mbanking.olb.de
videoberatung.olb.de
daten.olb.de
internet-int.olb.de
srcms.olb.de
rsu-kis-int.olb.de
magazin.olb.de
urc.olb.de
rsu-kis.olb.de
xs2a.olb.de
safelock.olb.de
3d-secure.olb.de
hbciweb-dev.olb.de
wuerttembergische-int.olb.de
mdm-int.olb.de
hbciweb-dev.olb.de
www.olb.de
wuerttembergische.olb.de
developer-portal.olb.de
hbciweb-admin-int.olb.de
sso.olb.de
www-int.olb.de
xs2a.olb.de
rsa.olb.de
mbanking.olb.de
www.olb.de
vdbebics.olb.de
safelock.olb.de
*.olb.de
www.weihnachten.olb.de
vdbebics.olb.de
weihnachten.olb.de
safelock.olb.de
src.olb.de
conntest.olb.de
hbciweb-dev.olb.de
wertpapiere.olb.de
xs2a.olb.de
magazin.olb.de
www-int.olb.de
daten.olb.de
news.wuestenrot.olb.de
wuerttembergische.olb.de
securemail.olb.de
videoberatung.olb.de
rsa.olb.de
www-int.olb.de
ods.olb.de
www.olb.de
videoberatung.olb.de
wertpapiere.olb.de
src.olb.de
www.olb.de
www.olb.de
securemail.olb.de
adfs.olb.de
ebanking.olb.de
exchange.olb.de
www.olb.de
exchange.olb.de
xs2a.olb.de
ebanking.olb.de
wertpapiere.olb.de
daten.olb.de
internet-int.olb.de
pfandbrief.olb.de
www.olb.de
srcms.olb.de
hbciweb.olb.de
ssrp.olb.de
rsu-kis.olb.de
rsu-kis.olb.de
ip.olb.de
mbanking.olb.de
videoberatung.olb.de
digitalefiliale.olb.de
3d-secure.olb.de
video.olb.de
www.olb.de
sso.olb.de
srcms.olb.de
magazin.olb.de
www.olb.de
magazin.olb.de
mbanking.olb.de
magazin.olb.de
3d-secure.olb.de
teamsphone-osv.olb.de
ip.olb.de
rsu-kis.olb.de
hbciweb.xs2a.olb.de
www2.olb.de
srcwpb.olb.de
digitalefiliale.olb.de
mbanking.olb.de
rsu-kis.olb.de
securemail.olb.de
mbanking.olb.de
videoberatung.olb.de
daten.olb.de
internet-int.olb.de
srcms.olb.de
rsu-kis-int.olb.de
magazin.olb.de
urc.olb.de
rsu-kis.olb.de
xs2a.olb.de
safelock.olb.de
3d-secure.olb.de
hbciweb-dev.olb.de
wuerttembergische-int.olb.de
mdm-int.olb.de
hbciweb-dev.olb.de
www.olb.de
wuerttembergische.olb.de
developer-portal.olb.de
hbciweb-admin-int.olb.de
sso.olb.de
www-int.olb.de
xs2a.olb.de
rsa.olb.de
mbanking.olb.de
www.olb.de
vdbebics.olb.de
safelock.olb.de
*.olb.de
www.weihnachten.olb.de
vdbebics.olb.de
weihnachten.olb.de
safelock.olb.de
src.olb.de
conntest.olb.de
hbciweb-dev.olb.de
wertpapiere.olb.de
xs2a.olb.de
magazin.olb.de
www-int.olb.de
daten.olb.de
news.wuestenrot.olb.de
wuerttembergische.olb.de
securemail.olb.de
videoberatung.olb.de
rsa.olb.de
www-int.olb.de
ods.olb.de
www.olb.de
videoberatung.olb.de
wertpapiere.olb.de
src.olb.de
www.olb.de
www.olb.de
securemail.olb.de
adfs.olb.de
ebanking.olb.de
exchange.olb.de
www.olb.de
exchange.olb.de
xs2a.olb.de
ebanking.olb.de
wertpapiere.olb.de
daten.olb.de
internet-int.olb.de
pfandbrief.olb.de
www.olb.de
srcms.olb.de
hbciweb.olb.de
ssrp.olb.de
rsu-kis.olb.de
rsu-kis.olb.de
ip.olb.de
mbanking.olb.de
videoberatung.olb.de
digitalefiliale.olb.de
3d-secure.olb.de
video.olb.de
www.olb.de
sso.olb.de
srcms.olb.de
magazin.olb.de
www.olb.de
Certificate
The complete raw certificate details for openbanking.olb.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIQRbmMG//ZE9c8QnYAc2YCJDANBgkqhkiG9w0BAQsFADBM MQswCQYDVQQGEwJERTEVMBMGA1UECgwMRC1UcnVzdCBHbWJIMSYwJAYDVQQDDB1E LVRSVVNUIFNTTCBDbGFzcyAzIENBIDEgMjAwOTAeFw0yNDAzMTExMDQ3MThaFw0y NDExMjYyMjU5NTlaMIGUMRUwEwYDVQQFEwxDU00wNDA5MjM5NTYxCzAJBgNVBAYT AkRFMRYwFAYDVQQIEw1OaWVkZXJzYWNoc2VuMRIwEAYDVQQHEwlPbGRlbmJ1cmcx JTAjBgNVBAoTHE9sZGVuYnVyZ2lzY2hlIExhbmRlc2JhbmsgQUcxGzAZBgNVBAMT Em9wZW5iYW5raW5nLm9sYi5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC ggIBANX6JZ8J1W3UcV7PevE5m/A9adpzBUki4D+3jyCB1ENFp3Yp5ji2IuOOTcv3 F+b+JNL/46Wc/RoXQDQMd3HUkw7RJaJjXA2fck9JQgyL9g2ww6P1kWBvX/zu9scs YqB3y1qGcEabqh1An1ga4ooJYFyzJhChqp3mChCkJHNK5nJ/vnv+cTg99F79WmFe +dBZ1Vc8QCWEYzw6tyOLWe3eltjBztwnYcfNkqsakUJcvLoznHww+3ZoRZhJWpo/ M5yDWHUsIcOs3jDBiUyZlMjEmux9kjwRtxkfZf5IODBciqt/jbZ3B3qBfWeASPbo k7QAiZINRT/Kdj4eZmlKIs72KevqrqL3uhA7KH8+cLUEv/wovqWfj4n0mfElsmKu wpR01qRPZku4ifbzlDQW28DVd1iqv0w5buNhyh4Yk8wLuIThzAVLulL+bzY+zFRT +NfeJJqin6hE85sfUKnAEFPOFGbE7e2OZnBGwneODutucfwQvhPpQsraDwS0SBr/ uNgzL9h8KlNRX9fLZ2TAHKEh5JFbpAvwL/qNaqahqO46/rtjpllewoLVxJHmuhuc vL8k+IBKHNT32jL7R46C67QMH68E1ZC1GGiRQrCXEWe0P8/uUj2e5t6L49F8XZe1 3RWuOhg6tpEpR9lSVcopLutFtlZ7NGcAiqSpQ0LZU6QOcxYzAgMBAAGjggK9MIIC uTCBkwYIKwYBBQUHAQEEgYYwgYMwMwYIKwYBBQUHMAGGJ2h0dHA6Ly9zc2wtYzMt Y2ExLTIwMDkub2NzcC5kLXRydXN0Lm5ldDBMBggrBgEFBQcwAoZAaHR0cDovL3d3 dy5kLXRydXN0Lm5ldC9jZ2ktYmluL0QtVFJVU1RfU1NMX0NsYXNzXzNfQ0FfMV8y MDA5LmNydDB5BgNVHSAEcjBwMAgGBmeBDAECAjAIBgYEAI96AQcwWgYLKwYBBAGl NAKBSAEwSzBJBggrBgEFBQcCARY9aHR0cDovL3d3dy5kLXRydXN0Lm5ldC9pbnRl cm5ldC9maWxlcy9ELVRSVVNUX0NTTV9QS0lfQ1BTLnBkZjATBgorBgEEAdZ5AgQD AQH/BAIFADAzBgNVHRIELDAqgRBpbmZvQGQtdHJ1c3QubmV0hhZodHRwOi8vd3d3 LmQtdHJ1c3QubmV0MIGdBgNVHR8EgZUwgZIwgY+ggYyggYmGQGh0dHA6Ly9jcmwu ZC10cnVzdC5uZXQvY3JsL2QtdHJ1c3Rfc3NsX2NsYXNzXzNfY2FfMV8yMDA5LmRl ci5jcmyGRWh0dHA6Ly9jZG4uZC10cnVzdC1jbG91ZGNybC5uZXQvY3JsL2QtdHJ1 c3Rfc3NsX2NsYXNzXzNfY2FfMV8yMDA5LmNybDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwTQYDVR0RBEYwRIISb3BlbmJhbmtpbmcub2xiLmRlghZvcGVu YmFua2luZy1kZXYub2xiLmRlghZvcGVuYmFua2luZy1pbnQub2xiLmRlMB8GA1Ud IwQYMBaAFFAZMpSaxLUETVbQwIMh1TVVsLF6MA4GA1UdDwEB/wQEAwIFoDAdBgNV HQ4EFgQUs/QTbjAOd2S2+pO3MQoIXgV45qowDQYJKoZIhvcNAQELBQADggEBACuO FkUjFk2OCyaPrBAJGKgnr/7Wi72cVnGSFaTYq90Su2Qfb9Ij0uI3FIJpnMAJLBA0 QBTRKKRnM+Cf8hOX43NrFhF+4RTKrVJNy1rmh7dUEU1qkkA7YmfApPL6uusr8X/k CTGDwlr8Ac4MoDqBlxSWjAJTS4zs0wBcVjmmC1LjkDTX3bkWFvebMAodXW4HOjSK 24bBMw3zsrCS+uo/rNr2GfZvR1Rdd1hqnb41BeXWi+WZwT9ZF3zTT3ecos6gUpGE UBJ9PZmZ5XiSx4KVs6boiYJeKefYH/OPSOhQOigSf2HJ4+PGycX9/N3Z5vhltP5p Wa55hJi2G8u7eIU3NvM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1folnwnVbdRxXs968Tmb 8D1p2nMFSSLgP7ePIIHUQ0WndinmOLYi445Ny/cX5v4k0v/jpZz9GhdANAx3cdST DtElomNcDZ9yT0lCDIv2DbDDo/WRYG9f/O72xyxioHfLWoZwRpuqHUCfWBriiglg XLMmEKGqneYKEKQkc0rmcn++e/5xOD30Xv1aYV750FnVVzxAJYRjPDq3I4tZ7d6W 2MHO3Cdhx82SqxqRQly8ujOcfDD7dmhFmElamj8znINYdSwhw6zeMMGJTJmUyMSa 7H2SPBG3GR9l/kg4MFyKq3+NtncHeoF9Z4BI9uiTtACJkg1FP8p2Ph5maUoizvYp 6+quove6EDsofz5wtQS//Ci+pZ+PifSZ8SWyYq7ClHTWpE9mS7iJ9vOUNBbbwNV3 WKq/TDlu42HKHhiTzAu4hOHMBUu6Uv5vNj7MVFP4194kmqKfqETzmx9QqcAQU84U ZsTt7Y5mcEbCd44O625x/BC+E+lCytoPBLRIGv+42DMv2HwqU1Ff18tnZMAcoSHk kVukC/Av+o1qpqGo7jr+u2OmWV7CgtXEkea6G5y8vyT4gEoc1PfaMvtHjoLrtAwf rwTVkLUYaJFCsJcRZ7Q/z+5SPZ7m3ovj0Xxdl7XdFa46GDq2kSlH2VJVyiku60W2 Vns0ZwCKpKlDQtlTpA5zFjMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 92680148383674145563291976782705984036 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 10:47:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-26 22:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM040923956' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Niedersachsen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oldenburg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oldenburgische Landesbank AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'openbanking.olb.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 872950555837002107361005399501846398658705080283841578277401364989599172062427740016385888411812134181282180115657977831257544631045579790720614583218021798537672260504770187826988304236679272196110511013290795070185465025261965516009424147835733651891682450680297607712642928373468417243879268023896547952817771915018098147265455319135208083232659267982913365029866670246044746469303514681242647661542683388930645335208511011507559372784208323296601195086078623867107863825934000273271167187911030758129336448780473500425880125561132757712110957506589585213934745462911995878863589849536712521186413393900963134699029827017796597084536218987566653773392451291058551887053329888519741292264605159348450505808278560532553368418064364127251274637372126144851104637171276875000335453700312521031957633609267406935670885139992875564404598755831157840242753590696745401105727768895173775693718484408249588298883423332026697262615214586368231561790186404885576342423711217309756074688298341625635474910268023554630900654924436044917488502442308217712507358905626254956846790944074092935233510914281140233938751472764501804508419719893010555434611327508501663728142425689172708123382633118799044670961003706772043631984224709468957667694131 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openbanking.olb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openbanking-dev.olb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openbanking-int.olb.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b3f4136e300e7764b6fa93b7310a085e0578e6aa . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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