coffeeconnect.wmf.com

- WMF GmbH -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 6d:b8:da:9c:cd:06:69:cd:ee:54:82:67:35:9d:bb:23 was issued on by D-Trust GmbH.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

WMF GmbH

Company registration number: CSM032516247
Organization: WMF GmbH
State / Province: Baden-Wuerttemberg
Locality: Geislingen an der Steige
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 6d:b8:da:9c:cd:06:69:cd:ee:54:82:67:35:9d:bb:23
Serial Number (int): 145845668150865366935083823934467848995
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4a:88:86:96:6f:8f:1f:1d:e7:2b:27:c6:8c:75:5c:8a:bd:62:b4:92
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 19:8c:e7:9a:71:3f:da:d5:93:9b:43:60:ca:2e:dd:9e:1d:e0:b4:a8
Fingerprint (sha256): 8c:e8:b1:6c:75:aa:ac:61:f1:d6:1c:11:de:d7:84:7e:fd:8e:cb:d4:e1:15:3e:be:a8:83:a4:fa:85:28:2e:5e

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate coffeeconnect.wmf.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for coffeeconnect.wmf.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

maintenance.coffeeconnect.wmf.com
coffeeconnect.wmf.com
shop.coffeeconnect.wmf.com
mediapool.coffeeconnect.wmf.com

Other certificates including the domain name wmf.com

(limited to 100 certificates)
confirmation.wmf.com
www.wsp.wmf.com
marketingportal.wmf.com
san-1-s50.tlsprovisioning.exacttarget.com
image.20210419.201008.s50.et.yellsatcloud.com
cmservice.wmf.com
www.telemetry.wmf.com
news.wmf.com
social.wmf.com
sni.cloudflaressl.com
wmf.com
owa.wmf.com
www.wmf.com
www.wsp.wmf.com
*.wmf.com
*.telemetry.wmf.com
sni.cloudflaressl.com
digitalguide.wmf.com
wmf.com
mediacenter.wmf.com
*.wmf.com
news.wmf.com
image.20210419.201008.s50.et.yellsatcloud.com
mediacenter.wmf.com
parts.wmf.com
marketingportal.wmf.com
*.coffeeconnect.wmf.com
*.wmf.com
coffeeconnect2.wmf.com
image.20210419.201008.s50.et.yellsatcloud.com
*.wmf.com
san-1-s50.tlsprovisioning.exacttarget.com
coffeeconnect.wmf.com
*.coffeeconnect.wmf.com
owa.wmf.com
account.rcu.seb.com
news.wmf.com
sni.cloudflaressl.com
*.wmf.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.wmf.com
www.telemetry.wmf.com
www.telemetry.wmf.com
social.wmf.com
login.coffeeconnect.wmf.com
image.20210419.201008.s50.et.yellsatcloud.com
news.wmf.com
wmf.com
*.wmf.com
account.rcu.seb.com
www.wsp.wmf.com
image.20210419.201008.s50.et.yellsatcloud.com
www.merchandising.wmf.com
*.wmf.com
logintest.coffeeconnect.wmf.com
coffeeconnect.wmf.com
mediacenter.wmf.com
citrix.wmf.com
sni.cloudflaressl.com
*.wmf.com
wmf.com
account.rcu.2.seb.com
san-1-s50.tlsprovisioning.exacttarget.com
*.wmf.com
coffeeconnect.wmf.com
coffeeconnect.wmf.com
account.rcu.2.seb.com
sni.cloudflaressl.com
san-1-s50.tlsprovisioning.exacttarget.com
image.20210419.201008.s50.et.yellsatcloud.com
wmf.com
*.coffeeconnect.wmf.com
www.wmf.com
image.20210419.201008.s50.et.yellsatcloud.com
wmf.com
www.merchandising.wmf.com
logintest.coffeeconnect.wmf.com
account.rcu.2.seb.com
sni.cloudflaressl.com
wmf.com
www.wsp.wmf.com
wmf.com
san-1-s50.tlsprovisioning.exacttarget.com
*.coffeeconnect.wmf.com
*.coffeeconnect.wmf.com
account.rcu.seb.com
image.20210419.201008.s50.et.yellsatcloud.com
account.rcu.2.seb.com
san-1-s50.tlsprovisioning.exacttarget.com
*.wmf.com
sni.cloudflaressl.com
*.coffeeconnect.wmf.com
www.wmf.com
account.rcu.2.seb.com
account.rcu.2.seb.com
wmf.com
sni.cloudflaressl.com
news.wmf.com
wmf.com

Certificate

The complete raw certificate details for coffeeconnect.wmf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIZjCCB06gAwIBAgIQbbjanM0Gac3uVIJnNZ27IzANBgkqhkiG9w0BAQsFADBM
MQswCQYDVQQGEwJERTEVMBMGA1UECgwMRC1UcnVzdCBHbWJIMSYwJAYDVQQDDB1E
LVRSVVNUIFNTTCBDbGFzcyAzIENBIDEgMjAwOTAeFw0yMjEyMTYwNzQ3MzFaFw0y
MzEyMTkwNzQ3MzFaMIGXMRUwEwYDVQQFEwxDU00wMzI1MTYyNDcxCzAJBgNVBAYT
AkRFMRswGQYDVQQIExJCYWRlbi1XdWVydHRlbWJlcmcxITAfBgNVBAcTGEdlaXNs
aW5nZW4gYW4gZGVyIFN0ZWlnZTERMA8GA1UEChMIV01GIEdtYkgxHjAcBgNVBAMT
FWNvZmZlZWNvbm5lY3Qud21mLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
AgoCggIBAPRq8lHol0SWLo390KKGMO9b0wXnBbtLhVU+EBqQ8TTGqdN7+gZnvlzk
Oso3AKMzMOcQcRmdkw7jBDGYSk33uvmP5hx7qpzqbmgxBN/RYgd1RDupaM5t6ufD
yTJh3jThdn+M1Jp39c85EBl3uLDEjj3NvZ4g6nOGmgEMctpxEvmzajF1+EFqxft8
ue0WDObtFTHwwNxAtVsNhMUqQurk9IgCZnVz+1McIcYlwCDqIjgAXzvGcQS/UBsL
jgd3o2UqS9R/YYQpxJDaAFpdj7RLT5P+b82H553SjfWupAjHjOG0rdtRrjK1tW6b
MIjtmPbSe3RWTmwqX8MxQKnClUAeeI7015e6XLGXuON4SLvlodPmbjcG5VFIZh3h
Ngq5ahEymsI7hCJV2gllpQSTyZM4a1k1YvMcaTpG0DhBz3UnM70NYf4EIRIGaKOG
N0KVrQUUEpTzCpAka1O10XrO911wYro0vNiKoZhiGbJ4iw4YBZXiDb4eSU1XivXx
hx9ZR0B1ihlw+5cwENfwmSTQPAYiF/jHsUg5OR1JbgSN0vGhs+KQtrVZNXWm93Av
gMDVPxD5KV5YqLxstU6DKUpHKSEAyWfr9T2rGIz5kJtXsFL38MhnpboA69L6pgSQ
lqUfBOTDoGTkyI9Yv7JakAI8YrNJthmMMSoRaQHPUHdarbVu1p6BAgMBAAGjggP2
MIID8jCCARYGCCsGAQUFBwEBBIIBCDCCAQQwMwYIKwYBBQUHMAGGJ2h0dHA6Ly9z
c2wtYzMtY2ExLTIwMDkub2NzcC5kLXRydXN0Lm5ldDBMBggrBgEFBQcwAoZAaHR0
cDovL3d3dy5kLXRydXN0Lm5ldC9jZ2ktYmluL0QtVFJVU1RfU1NMX0NsYXNzXzNf
Q0FfMV8yMDA5LmNydDB/BggrBgEFBQcwAoZzbGRhcDovL2RpcmVjdG9yeS5kLXRy
dXN0Lm5ldC9DTj1ELVRSVVNUJTIwU1NMJTIwQ2xhc3MlMjAzJTIwQ0ElMjAxJTIw
MjAwOSxPPUQtVHJ1c3QlMjBHbWJILEM9REU/Y0FDZXJ0aWZpY2F0ZT9iYXNlPzB5
BgNVHSAEcjBwMAgGBmeBDAECAjAIBgYEAI96AQcwWgYLKwYBBAGlNAKBSAEwSzBJ
BggrBgEFBQcCARY9aHR0cDovL3d3dy5kLXRydXN0Lm5ldC9pbnRlcm5ldC9maWxl
cy9ELVRSVVNUX0NTTV9QS0lfQ1BTLnBkZjATBgorBgEEAdZ5AgQDAQH/BAIFADAz
BgNVHRIELDAqgRBpbmZvQGQtdHJ1c3QubmV0hhZodHRwOi8vd3d3LmQtdHJ1c3Qu
bmV0MIIBHQYDVR0fBIIBFDCCARAwggEMoIIBCKCCAQSGeWxkYXA6Ly9kaXJlY3Rv
cnkuZC10cnVzdC5uZXQvQ049RC1UUlVTVCUyMFNTTCUyMENsYXNzJTIwMyUyMENB
JTIwMSUyMDIwMDksTz1ELVRydXN0JTIwR21iSCxDPURFP2NlcnRpZmljYXRlcmV2
b2NhdGlvbmxpc3SGQGh0dHA6Ly9jcmwuZC10cnVzdC5uZXQvY3JsL2QtdHJ1c3Rf
c3NsX2NsYXNzXzNfY2FfMV8yMDA5LmRlci5jcmyGRWh0dHA6Ly9jZG4uZC10cnVz
dC1jbG91ZGNybC5uZXQvY3JsL2QtdHJ1c3Rfc3NsX2NsYXNzXzNfY2FfMV8yMDA5
LmNybDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgYAGA1UdEQR5MHeC
IW1haW50ZW5hbmNlLmNvZmZlZWNvbm5lY3Qud21mLmNvbYIVY29mZmVlY29ubmVj
dC53bWYuY29tghpzaG9wLmNvZmZlZWNvbm5lY3Qud21mLmNvbYIfbWVkaWFwb29s
LmNvZmZlZWNvbm5lY3Qud21mLmNvbTAfBgNVHSMEGDAWgBRQGTKUmsS1BE1W0MCD
IdU1VbCxejAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0OBBYEFEqIhpZvjx8d5ysnxox1
XIq9YrSSMA0GCSqGSIb3DQEBCwUAA4IBAQAzmFCGWKkByvcOlfQ9+raY+EBJfXzN
2FP4FXWXCKkf2UrNTUTyE9rzEi3X5B3Idxvi1szKSehCDQMkdIItFIwzcL4DV6qM
9XeP4guEEWkSxyC2d0YJQRwA5xQUsQp4RwIGIb90r5+b3aYjLlR0sNcqFSFvZMmi
iUf+pz2wwAw21N+YprTostN7c3je6c72hFtxJNrb8pwGYMVr8Lsz1toClPMOWar4
wE5UbTUHBKDNPpaSlMPy/JOKUjl5dpme/OOeYa3QIzAWV56lqzh0HNbL2aJh/1y4
2fIdOxm9yK0ZlfdHmfJ0y+slaVo996bB2F0jhUGzuxNSRy9YyerbH7VB
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 145845668150865366935083823934467848995
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-16 07:47:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 07:47:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM032516247'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Geislingen an der Steige'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WMF GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'coffeeconnect.wmf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 997137464739825083122352439167844142967161378912191774496306362578767468558336479265236940067248949722737365486052330202649254414919784952995921085579007078108482831740125032159401482044439446708686897475280806341098744033101805181076284666131531745670234300082376315843280120948392471748773524105013535304325539211447244286079433802648481317088599816604434758972726034109371312637837947733642914731348890422124607418278137523006375832380684557569006520460448289317576843872769461311030871909565705101809060411767819873362673344266348889566613496974099284580638257759700094422510870007538825866820439768432605857740631628011141741722041520324615587328639802514776585383834692082834553552382451817723878777464428562284160398220057722379904443395349291476238817705814178035255814186001291636944812389920948023271871164025262746894429544871926398157063802874135141250945286571304837874808749760746540849064847634926404532807366223446234712395355029436058319535187368224961559571534128542721530347935097442379186956047913242807171810996706610871806581925175395504221612282817812003541498077518940310855468925034761476113624437366146653210858891264964545163073100225416543447304498910116539042180533987239662222180059639068721119181053569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maintenance.coffeeconnect.wmf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffeeconnect.wmf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.coffeeconnect.wmf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediapool.coffeeconnect.wmf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a8886966f8f1f1de72b27c68c755c8abd62b492
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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