*.coffeeconnect.wmf.com

- WMF Group GmbH -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 0b:be:03:e6:cf:15:95:90:89:90:ab:76:f0:6a:4d:c2 was issued on by D-Trust GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

WMF Group GmbH

Company registration number: CSM018239120
Organization: WMF Group GmbH
State / Province: Baden-Wuerttemberg
Locality: Geislingen an der Steige
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:be:03:e6:cf:15:95:90:89:90:ab:76:f0:6a:4d:c2
Serial Number (int): 15608123490551371861251632259679276482
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 08:d0:bd:54:16:8b:4b:dc:da:cb:db:fe:76:91:2d:a7:2d:88:22:d8
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 2d:c3:88:02:2d:e1:db:b3:5c:b7:bf:39:b1:9c:d9:22:de:55:1a:1f
Fingerprint (sha256): 9c:57:d8:ac:71:4b:5c:fc:5f:92:50:ed:54:ca:82:9d:4d:ad:e2:5a:a1:72:5e:e2:66:82:3b:83:49:45:14:eb

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate *.coffeeconnect.wmf.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.coffeeconnect.wmf.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.coffeeconnect.wmf.com

Other certificates including the domain name wmf.com

(limited to 100 certificates)
confirmation.wmf.com
www.wsp.wmf.com
marketingportal.wmf.com
san-1-s50.tlsprovisioning.exacttarget.com
image.20210419.201008.s50.et.yellsatcloud.com
cmservice.wmf.com
www.telemetry.wmf.com
news.wmf.com
social.wmf.com
sni.cloudflaressl.com
wmf.com
owa.wmf.com
www.wmf.com
www.wsp.wmf.com
*.wmf.com
*.telemetry.wmf.com
sni.cloudflaressl.com
digitalguide.wmf.com
wmf.com
mediacenter.wmf.com
*.wmf.com
news.wmf.com
image.20210419.201008.s50.et.yellsatcloud.com
mediacenter.wmf.com
parts.wmf.com
marketingportal.wmf.com
*.coffeeconnect.wmf.com
*.wmf.com
coffeeconnect2.wmf.com
image.20210419.201008.s50.et.yellsatcloud.com
*.wmf.com
san-1-s50.tlsprovisioning.exacttarget.com
coffeeconnect.wmf.com
*.coffeeconnect.wmf.com
owa.wmf.com
account.rcu.seb.com
news.wmf.com
sni.cloudflaressl.com
*.wmf.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.wmf.com
www.telemetry.wmf.com
www.telemetry.wmf.com
social.wmf.com
login.coffeeconnect.wmf.com
image.20210419.201008.s50.et.yellsatcloud.com
news.wmf.com
wmf.com
*.wmf.com
account.rcu.seb.com
www.wsp.wmf.com
image.20210419.201008.s50.et.yellsatcloud.com
www.merchandising.wmf.com
*.wmf.com
logintest.coffeeconnect.wmf.com
coffeeconnect.wmf.com
mediacenter.wmf.com
citrix.wmf.com
sni.cloudflaressl.com
*.wmf.com
wmf.com
account.rcu.2.seb.com
san-1-s50.tlsprovisioning.exacttarget.com
*.wmf.com
coffeeconnect.wmf.com
coffeeconnect.wmf.com
account.rcu.2.seb.com
sni.cloudflaressl.com
san-1-s50.tlsprovisioning.exacttarget.com
image.20210419.201008.s50.et.yellsatcloud.com
wmf.com
*.coffeeconnect.wmf.com
www.wmf.com
image.20210419.201008.s50.et.yellsatcloud.com
wmf.com
www.merchandising.wmf.com
logintest.coffeeconnect.wmf.com
account.rcu.2.seb.com
sni.cloudflaressl.com
wmf.com
www.wsp.wmf.com
wmf.com
san-1-s50.tlsprovisioning.exacttarget.com
*.coffeeconnect.wmf.com
*.coffeeconnect.wmf.com
account.rcu.seb.com
image.20210419.201008.s50.et.yellsatcloud.com
account.rcu.2.seb.com
san-1-s50.tlsprovisioning.exacttarget.com
*.wmf.com
sni.cloudflaressl.com
*.coffeeconnect.wmf.com
www.wmf.com
account.rcu.2.seb.com
account.rcu.2.seb.com
wmf.com
sni.cloudflaressl.com
news.wmf.com
wmf.com

Certificate

The complete raw certificate details for *.coffeeconnect.wmf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINMzCCDBugAwIBAgIQC74D5s8VlZCJkKt28GpNwjANBgkqhkiG9w0BAQsFADBM
MQswCQYDVQQGEwJERTEVMBMGA1UECgwMRC1UcnVzdCBHbWJIMSYwJAYDVQQDDB1E
LVRSVVNUIFNTTCBDbGFzcyAzIENBIDEgMjAwOTAeFw0yMDAyMDQxNTMxNThaFw0y
MjAyMDgxNTMxNThaMIGfMRUwEwYDVQQFEwxDU00wMTgyMzkxMjAxCzAJBgNVBAYT
AkRFMRswGQYDVQQIExJCYWRlbi1XdWVydHRlbWJlcmcxITAfBgNVBAcTGEdlaXNs
aW5nZW4gYW4gZGVyIFN0ZWlnZTEXMBUGA1UEChMOV01GIEdyb3VwIEdtYkgxIDAe
BgNVBAMMFyouY29mZmVlY29ubmVjdC53bWYuY29tMIICIjANBgkqhkiG9w0BAQEF
AAOCAg8AMIICCgKCAgEApUVHE400knjijMDfaQa36LdUalhXTIYUoD3jPeTsyjKS
vJh9gnH8yoJsHr5bN54gqq9xb2X8F1ektWfCt1OMeVq9/Vgt6cbN++qwrKodmW1P
r4nPDTcSoXp7p7pc8gDYkIlEB4TaFbWQqZD3E2CDKcOp1h74f4FnIpk65gyOeV7K
In4+wC6zndWEn5zcO9t1/jhc8K4EBg0so1Tg4cY5TXsYo8lHMQHumb5tdtbt5dEU
4yRKNA3WSXTo3oUydyB2917PSRlIAOLyncgh7Dw8rSasc57/BkUb8qPuu1QAfYkY
KX1VxArydwdV3DZaB1XhGtKDY4S1uN2fqWiN0NIm10ziWGIdgQCT06Z7OWpasLY/
O8w0cyrJ3abtv2feSVoij+wfkbSLyiKmySXxhdW5vhgaXQImu3Wtg0u4UfA/meKw
BUOM0lDMQbl+XE0TL/imDAq86j4PBUz/kUPfJUprWpcVFMp+84Cc9IWvS24ynWAs
B2eFD8tyZ6kHfGcjUkJkuyHGsSVEA9IwVmFTLG7vr9XHAEc/81EJYQe0HN4zui05
m9i3lFcnQ1GR7gGIJ3GCNJtjSDeGdFGOfijkQAR8BOIf9vXPACmqcpYuipCYYnIh
QaRG+LbwnTUtyWImxtgfJ7sSYKiRprhA4k6/3dxB8sYMTfoWrJ+JhwBoHPsqYK0C
AwEAAaOCCLswggi3MIIBFgYIKwYBBQUHAQEEggEIMIIBBDAzBggrBgEFBQcwAYYn
aHR0cDovL3NzbC1jMy1jYTEtMjAwOS5vY3NwLmQtdHJ1c3QubmV0MEwGCCsGAQUF
BzAChkBodHRwOi8vd3d3LmQtdHJ1c3QubmV0L2NnaS1iaW4vRC1UUlVTVF9TU0xf
Q2xhc3NfM19DQV8xXzIwMDkuY3J0MH8GCCsGAQUFBzAChnNsZGFwOi8vZGlyZWN0
b3J5LmQtdHJ1c3QubmV0L0NOPUQtVFJVU1QlMjBTU0wlMjBDbGFzcyUyMDMlMjBD
QSUyMDElMjAyMDA5LE89RC1UcnVzdCUyMEdtYkgsQz1ERT9jQUNlcnRpZmljYXRl
P2Jhc2U/MG8GA1UdIARoMGYwWgYLKwYBBAGlNAKBSAEwSzBJBggrBgEFBQcCARY9
aHR0cDovL3d3dy5kLXRydXN0Lm5ldC9pbnRlcm5ldC9maWxlcy9ELVRSVVNUX0NT
TV9QS0lfQ1BTLnBkZjAIBgYEAI96AQcwggU/BgorBgEEAdZ5AgQCBIIFLwSCBSsF
KQB2AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABcBDUYJoAAAQD
AEcwRQIgQml9tL7kObvXmZaKpk0a9mlF5eM3btt8n9ukxzgZBFQCIQC+aRPk/kfS
V8XrJ8O6EPO+8c0u5uSEPoecSl3U5EPFbAB2AEalVet1+pEgMLWiiWn0830RLEF0
vv1JuIWr8vxw/m1HAAABcBDUXx4AAAQDAEcwRQIgHWtQsLLLdG+bgU/KzSZvFFth
WC6LcPSZ7f19ddlWQSMCIQDquJfDs3i3bgAmF/FzZc/jJZzVjWcVYJm/t3GJuh4c
VgB2ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABcBDUX1MAAAQD
AEcwRQIhAKBs6pK7h+YAEDVBeerAn44Okzz/BWCHgLEbOgNux933AiBttWJ59CPC
oEcC6CTcd4PnUpOjdOggwxW5Wqe5ZKRjKgB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZ
AsEAKQaNsgiaN9kTAAABcBDUX1QAAAQDAEcwRQIgCMlP05tK88o/5JenvTYGK72V
VT0B4Q6T5HvHqvBUpiwCIQDr1EO5iUskNtEaUsWa/EYYVeJgtyR3EkF+8xbYcPI+
cgB3AEHIyrHfIkZKEMahOglCh15OMYsbA+vrS8do8JBilgb2AAABcBDUYBYAAAQD
AEgwRgIhAIeFmJP7bat5+QPl1RM7rmmZo2N93dhO//xcXXBtu3uEAiEAqGSL1sQY
X5YkYx5KiHauw7CEr2VrKX7rkUOgs64WNlgAdQBRo7D1/QF5nFZtuDd4jwykeswb
J8v3nohCmg3+1IsF5QAAAXAQ1GFrAAAEAwBGMEQCIDDUEGb8kz0G3qJv0VLYV7J1
2LBoZ6AqR4/7ktQsoCMMAiACs2qwx4t2rO8M3VvbAiux/7aqDX5YTBOC43+Cwair
TQB3AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABcBDUYOgAAAQD
AEgwRgIhAJ+ArW0AzT9DvYu5NGsSl+o9xeQA6tzkUOS46/uGQAyfAiEAyZAcTFOE
3vHLlB8GL32TPMkRkK649udvo0V2L1Ganc0AdwBWFAaaL9fC7NP14b1Esj7HRna5
vJkRXMDvlJhV1onQ3QAAAXAQ1GIxAAAEAwBIMEYCIQCLza/BYOnA+/1bid//O3zr
08LwFY1iPgfwRl6i1bZwmwIhAJIY26hqN4ocE6lYM74hMkZS/n+oT9P2vQbHUu7n
b0d7AHYAIkVFB1lVJFaWP6Ev8fdthuAjJmOtwEt/XcaDXG7iDwIAAAFwENRkBgAA
BAMARzBFAiEAqxOTGapLk+q4HwbWt0jVhm6suYVfYuzMVUajOiRNdmcCICmuv1Xm
OcwZgXHTMGTVlZsMgWKEOM9PC6I8Cwa8im12AHUA7ku9t3XOYLrhQmkfq+GeZqMP
fl+wctiDAMR7iXqo/csAAAFwENRh+wAABAMARjBEAiBUAqW9NBbf6gBHdCivsrPG
5rEs+S61yIAH9Ft903jVXAIgKP+5Nnz0QVi9/7Fj3wYWnziuGZA8uCKQe+tvytti
zWYAdgApeb7wnjk5IfBWc59jpXflvld9nGAK+PlNXSZcJV3HhAAAAXAQ1GLvAAAE
AwBHMEUCIQCQiW3cCwRZPmBwkoED94mb0Im84He1b6mlz8xVvd8cQQIgCAWIOz7D
iYYMiFpUWvH/fXHWvRgKsS+4muAcOAPhL74wMwYDVR0SBCwwKoEQaW5mb0BkLXRy
dXN0Lm5ldIYWaHR0cDovL3d3dy5kLXRydXN0Lm5ldDCCAR0GA1UdHwSCARQwggEQ
MIIBDKCCAQigggEEhnlsZGFwOi8vZGlyZWN0b3J5LmQtdHJ1c3QubmV0L0NOPUQt
VFJVU1QlMjBTU0wlMjBDbGFzcyUyMDMlMjBDQSUyMDElMjAyMDA5LE89RC1UcnVz
dCUyMEdtYkgsQz1ERT9jZXJ0aWZpY2F0ZXJldm9jYXRpb25saXN0hkBodHRwOi8v
Y3JsLmQtdHJ1c3QubmV0L2NybC9kLXRydXN0X3NzbF9jbGFzc18zX2NhXzFfMjAw
OS5kZXIuY3JshkVodHRwOi8vY2RuLmQtdHJ1c3QtY2xvdWRjcmwubmV0L2NybC9k
LXRydXN0X3NzbF9jbGFzc18zX2NhXzFfMjAwOS5jcmwwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMCIGA1UdEQQbMBmCFyouY29mZmVlY29ubmVjdC53bWYu
Y29tMB8GA1UdIwQYMBaAFFAZMpSaxLUETVbQwIMh1TVVsLF6MA4GA1UdDwEB/wQE
AwIFoDAdBgNVHQ4EFgQUCNC9VBaLS9zay9v+dpEtpy2IItgwDQYJKoZIhvcNAQEL
BQADggEBAGbRZ37FCvz+aHc8l2vtYjVLfQTOywHTJYSfRrOmw9NVhoPV9fJJx4AQ
lLcIQIGcARpLoPs4rFSZp4MB/UxU99p20racvyTGo7Fkj5Hwxs6jfrE/I6GEg/gG
LmH1d7V+Dp3vnZFfOz6mGD/gUYuqgiCXjfnATEqqmIzCothhCWZ5ULp3B1LtTwcC
BdN2Kg8QV9F6fAxMIb3cQa84lhErjXa1M2+Sn6mW1NFSFbi2qd1fMSLxIWgihGYE
cvhy6QS9iB48/B6GVjA+/3Qqsu2SLbw3u5jADWEDS5upCvnMqbWKLWRx5mfl3MqG
1Yt1oAthiS9i20gmmYVqQg0ZH1O7VKI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15608123490551371861251632259679276482
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 15:31:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-08 15:31:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM018239120'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Geislingen an der Steige'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WMF Group GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.coffeeconnect.wmf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 674245287323212831776222512222253777129069314964034115442643496488085846619999695222935611897529232473228168185947444589691634781500986867141947610302087991275734497991720725501008242680697789258657431226735110645255322528752770033082602158174338961689602262660393003432651519614188514384561612001890731172959885192121393771892662236467255505094963638580272777466072213536239630477516863264857493206637935667859410425166366461970831969717774823024716823745596180905842986132419763458305580352783606482534373310659836730091347154007041918585127349252582699877657859595905506629533092348632481545252363840410944927772626310973696086950777754132068160247192166842098678188177297546433514879503266223193408021893104975168935530084016951021844839051491331825838408045047426705716009494281301804105803964136706894466404843678946524632641997457910825427448319443099702191509790229807050419699874457292109548837603279932828562620983782288385603966225119155030804970014101854535336159551428852954801998084884643762969645368344589625649710220817264686377603349194692432480345921395248474161112549494754289233144323503692157508101215714379653090960950616260188878781708732256161781363820901851948410253215049288732376147646047606848274146418861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1327 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1323 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coffeeconnect.wmf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08d0bd54168b4bdcdacbdbfe76912da72d8822d8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0066d1677ec50afcfe68773c976bed62354b7d04cecb01d325849f46b3a6c3d3558683d5f5f249c7801094b70840819c011a4ba0fb38ac5499a78301fd4c54f7da76d2b69cbf24c6a3b1648f91f0c6cea37eb13f23a18483f8062e61f577b57e0e9def9d915f3b3ea6183fe0518baa8220978df9c04c4aaa988cc2a2d86109667950ba770752ed4f070205d3762a0f1057d17a7c0c4c21bddc41af3896112b8d76b5336f929fa996d4d15215b8b6a9dd5f3122f121682284660472f872e904bd881e3cfc1e8656303eff742ab2ed922dbc37bb98c00d61034b9ba90af9cca9b58a2d6471e667e5dcca86d58b75a00b61892f62db482699856a420d191f53bb54a2