dws.at

- DWS Group GmbH & Co. KGaA -

Issued by DigiCert EV RSA CA G2

About this certificate

This digital certificate with serial number 0b:dd:df:47:1f:03:c4:b5:35:8c:3b:0c:dd:f7:4c:20 was issued on by DigiCert Inc.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DWS Group GmbH & Co. KGaA

Company registration number: HRB 111128
Organization: DWS Group GmbH & Co. KGaA
Address: Mainzer Landstr. 11 17
State / Province: Hessen
Locality: Frankfurt am Main
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:dd:df:47:1f:03:c4:b5:35:8c:3b:0c:dd:f7:4c:20
Serial Number (int): 15773534171510015351590011447581035552
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 60:c9:42:86:59:f1:f7:35:8d:ca:34:cd:36:28:33:ab:ed:74:aa:63
AuthorityKeyId: 6a:4e:50:bf:98:68:9d:5b:7b:20:75:d4:59:01:79:48:66:92:32:06

Fingerprint (sha1): 8b:0e:d3:72:22:52:b4:4f:8f:f6:f7:e3:68:5e:27:c3:f4:72:ed:60
Fingerprint (sha256): 98:bd:57:29:de:fa:fb:5d:23:70:02:a9:4d:0c:e8:4e:45:93:66:d8:39:71:d2:38:6f:7b:43:08:e8:ae:5a:77

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertEVRSACAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertEVRSACAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertEVRSACAG2.crl

Check the revocation status for certificate dws.at

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dws.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dws.at
boesenull.de
boese-null.de
boesenull.com
boese-null.com
damj.co.jp
db-vita.de
dbxus.com
dbxtrackers.com
deawm.com
deutscheam.de
deutschefunds.com
deutscherinvestorenpreis.de
dwsgo.com
dws-korea.com
dws.ch
dws.co.uk
dws.com.pt
dws.com.sg
dws.com.tw
dws.es
dws.fi
dws.it
dws.lu
dws.nl
dws.hk
dws.pt
dws.sg
dws.tw
dws.uk
dwsinvestments.be
dwsinvestments.com
dws-investments.com
dwsinvestments.fr
dwsinvestments.se
evil-zero.com
institutional.dws.com
plus.dws.com
rreefchinatrust.com
www.boesenull.de
www.boese-null.de
www.boesenull.com
www.boese-null.com
www.damj.co.jp
www.dbxus.com
www.dbxtrackers.com
www.deutscheam.de
www.deutscheawm.com
www.deutschefunds.com
www.deutscherinvestorenpreis.de
www.dwsgo.com
www.dws-korea.com
www.dws.at
www.dws.ch
www.dws.co.uk
www.dws.com.pt
www.dws.com.sg
www.dws.com.tw
www.dws.es
www.dws.fi
www.dws.it
www.dws.lu
www.dws.nl
www.dws.hk
www.dws.pt
www.dws.sg
www.dws.tw
www.dws.uk
www.dwsinvestments.be
www.dwsinvestments.com
www.dws-investments.com
www.dwsinvestments.fr
www.dwsinvestments.se
www.evil-zero.com
www.fundsus.dws.com
www.institutional.dws.com
www.plus.dws.com
www.rreefchinatrust.com
www.xtrackers.at
www.xtrackers.ch
www.xtrackers.com
www.xtrackers.de
www.xtrackers.es
www.xtrackers.fr
www.xtrackers.it
www.xtrackers.lu
www.xtrackers.nl
www.xtrackers.se
xtrackers.at
xtrackers.ch
xtrackers.com
xtrackers.de
xtrackers.es
xtrackers.fr
xtrackers.it
xtrackers.lu
xtrackers.nl
xtrackers.se

Other certificates including the domain name dws.at

(limited to 100 certificates)
www.dws.com
www.dws.com
dws.at
dws.at
www.dws.com
www.dws.com
www.dws.com
dws.at
dws.at
dws.at
dws.at
www.dws.com
dws.at
dws.at
www.dws.com

Certificate

The complete raw certificate details for dws.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15773534171510015351590011447581035552
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert EV RSA CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Frankfurt am Main'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 111128'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Frankfurt am Main'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mainzer Landstr. 11 17'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DWS Group GmbH & Co. KGaA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dws.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 947510782755529903127220323687535546320731720776117637692093914718285155757383289127285157402773260409213686529179830206035522348988778412921867233239238772564204383414908054628056399257656432018501703741573293686170624139078999116168122252857629125068701131483643750734602737454873945809161259278225733897599196260112848289788020328375120386406206340944652792522349042577152582520594314782056269960080933360805433673834684486459940311767797968244831280794299616167691898406125548897390385238629531036357323682483776919421240943881957559739113811696524550939220354825483865514388564158411171182408931669248697711582092936653476730816162123861725542771571224387367413803300727713217707941318431528390015868319348622116657433001146227040576550048116450021524619266620002613025986978507975724417341987823031210626106014112818599541733132371238225287772009749081608725023293880573358373007819424910565515606926931718766746578294089340819186274785575473004034983385387867204359993972980366943890325325014283866201213187754555592519193499402093066343218232905255466842556968335758838679030145559004414761227248889600095541143597072594084494398753695048076147512596485457416558067026985046563637737780515526669648941697765158087534379109221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6a4e50bf98689d5b7b2075d45901794866923206
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							60c9428659f1f7358dca34cd362833abed74aa63
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1545 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boesenull.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boese-null.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boesenull.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boese-null.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'damj.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'db-vita.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbxus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbxtrackers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deawm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutscheam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutschefunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutscherinvestorenpreis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwsgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws-korea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwsinvestments.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwsinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws-investments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwsinvestments.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwsinvestments.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evil-zero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'institutional.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plus.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rreefchinatrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boesenull.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boese-null.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boesenull.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boese-null.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.damj.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dbxus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dbxtrackers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutscheam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutscheawm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutschefunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutscherinvestorenpreis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dwsgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dws-korea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dws.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dws.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dws.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dws.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dws.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dws.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dws.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dws.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dws.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dws.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dws.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dws.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dws.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dws.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dws.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dws.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dwsinvestments.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dwsinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dws-investments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dwsinvestments.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dwsinvestments.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evil-zero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fundsus.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.institutional.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plus.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rreefchinatrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xtrackers.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xtrackers.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xtrackers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xtrackers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xtrackers.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xtrackers.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xtrackers.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xtrackers.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xtrackers.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xtrackers.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtrackers.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtrackers.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtrackers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtrackers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtrackers.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtrackers.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtrackers.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtrackers.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtrackers.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtrackers.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertEVRSACAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007a23c7ddb6481978d6be6e29ef1c5f6f9d5b32e3bd1219ca024fcb8455eeb556ab5808ca53439ec79084bf42e7ad55bcc9b03e37c4b5a074bd3c3ebb52d30baa19fb35a1c96b3ac276dcfa68a3e3e81891a0deed2c7fe77fb17cb54474c2bbfb12c38a1c7af694510210acb6fbbe0aa55213c51feacdf716c388a0c1a73ef114abe08e3c52038dbead6c3b4ea51bddd77e58ead260544e4fb77fa79042a8fdafde39a3ff24272cd9710ad0bb8ef0b021edb76558cfc95ea2fbc2df28fc8a10830b9fba0e6adee7854e0cd8b03ae0d31ad29c74d1601ec8499ecad2d3845528498f3c1903f0a53f2b9da1a166249c182aea299961e444b49897db6313e81635e5