psd2-xs2a.sparkasse-uecker-randow.de

- Sparkasse Uecker-Randow -

Issued by QuoVadis Qualified Web ICA G1

About this certificate

This digital certificate with serial number 01:62:f7:a3:83:6f:d3:06:62:7b:ff:0d:d3:5b:1b:32:79:5e:58:f3 was issued on by QuoVadis Trustlink B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sparkasse Uecker-Randow

Company registration number: HRA 1432
Organization: Sparkasse Uecker-Randow
State / Province: Mecklenburg-Vorpommern
Locality: Pasewalk
Country: DE

QuoVadis Trustlink B.V.

Organization: QuoVadis Trustlink B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 01:62:f7:a3:83:6f:d3:06:62:7b:ff:0d:d3:5b:1b:32:79:5e:58:f3
Serial Number (int): 7916036175640285979391029003761762649189013747
Serial Number lenght: 153 bits, 20 octets

SubjectKeyId: 16:50:e3:21:18:94:ea:26:e4:0d:bf:90:54:9f:e7:7d:7c:1f:e6:49
AuthorityKeyId: 04:bb:04:d7:9d:d8:7d:1c:d9:e4:f0:54:bd:8c:3c:b6:32:de:76:34

Fingerprint (sha1): b6:72:5c:f2:7c:8a:bc:88:b7:24:66:78:a4:72:8f:9b:87:ae:11:e4
Fingerprint (sha256): 9d:d9:9e:24:f2:d8:a7:ab:14:f9:17:47:b0:23:7e:6c:fd:7c:a1:32:aa:2c:fc:88:84:e2:83:9d:75:75:48:c8

Issuing Certificate URL: http://trust.quovadisglobal.com/qvqwebg1.crt

Revocation information

OCSP Server: http://ev.ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvqwebg1.crl

Check the revocation status for certificate psd2-xs2a.sparkasse-uecker-randow.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for psd2-xs2a.sparkasse-uecker-randow.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

psd2-xs2a.sparkasse-uecker-randow.de

Other certificates including the domain name sparkasse-uecker-randow.de

(limited to 100 certificates)
www.sparkasse-uecker-randow.de
www.sparkasse-uecker-randow.de
giropay.sparkasse-uecker-randow.de
banking.sparkasse-uecker-randow.de
www.sparkasse-uecker-randow.de
giropay.sparkasse-uecker-randow.de
giropay.sparkasse-uecker-randow.de
sparkasse-uecker-randow.de
sicherheit.sparkasse-uecker-randow.de
module.sparkasse-uecker-randow.de
giropay.sparkasse-uecker-randow.de
www.sparkasse-uecker-randow.de
banking.sparkasse-uecker-randow.de
www.sparkasse-uecker-randow.de
banking.sparkasse-uecker-randow.de
module.sparkasse-uecker-randow.de
www.sparkasse-uecker-randow.de
module.sparkasse-uecker-randow.de
banking.sparkasse-uecker-randow.de
banking.sparkasse-uecker-randow.de
www.sparkasse-uecker-randow.de
sparkasse-uecker-randow.de
banking.sparkasse-uecker-randow.de
module.sparkasse-uecker-randow.de
banking.sparkasse-uecker-randow.de
module.sparkasse-uecker-randow.de
portal.sparkasse-uecker-randow.de
psd2-xs2a.sparkasse-uecker-randow.de
module.sparkasse-uecker-randow.de
portal.sparkasse-uecker-randow.de
giropay.sparkasse-uecker-randow.de
portal.sparkasse-uecker-randow.de
banking.sparkasse-uecker-randow.de
sicherheit.sparkasse-uecker-randow.de
www.sparkasse-uecker-randow.de
www.sparkasse-uecker-randow.de

Certificate

The complete raw certificate details for psd2-xs2a.sparkasse-uecker-randow.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIFDCCBfygAwIBAgIUAWL3o4Nv0wZie/8N01sbMnleWPMwDQYJKoZIhvcNAQEL
BQAwcDELMAkGA1UEBhMCTkwxFzAVBgNVBGEMDk5UUk5MLTMwMjM3NDU5MSAwHgYD
VQQKDBdRdW9WYWRpcyBUcnVzdGxpbmsgQi5WLjEmMCQGA1UEAwwdUXVvVmFkaXMg
UXVhbGlmaWVkIFdlYiBJQ0EgRzEwHhcNMTkwOTI0MTQ0NzU3WhcNMjEwOTI0MTQ1
NzAwWjCCAUAxEzARBgsrBgEEAYI3PAIBAxMCREUxJzAlBgsrBgEEAYI3PAIBAgwW
TWVja2xlbmJ1cmctVm9ycG9tbWVybjEfMB0GCysGAQQBgjc8AgEBDA5OZXVicmFu
ZGVuYnVyZzEdMBsGA1UEDwwUUHJpdmF0ZSBPcmdhbml6YXRpb24xETAPBgNVBAUT
CEhSQSAxNDMyMQswCQYDVQQGEwJERTEfMB0GA1UECAwWTWVja2xlbmJ1cmctVm9y
cG9tbWVybjERMA8GA1UEBwwIUGFzZXdhbGsxGzAZBgNVBGEMElBTRERFLUJBRklO
LTEwMTA3MjEgMB4GA1UECgwXU3Bhcmthc3NlIFVlY2tlci1SYW5kb3cxLTArBgNV
BAMMJHBzZDIteHMyYS5zcGFya2Fzc2UtdWVja2VyLXJhbmRvdy5kZTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAM0k0eaRlHWsJkhwIqMlFAqZYIj63f/P
Mj/WzfWuxevgMt/IKl02177/VHBGZMHZA1o7QT5nw1uelVIllQTaiKJ/hXQ3PHTj
etBOEoLjcIySkHiigmPwZaZZxCtKHQmEq0gW5FUOhEzwAGBTjnrfQg9q+doMtnZE
RjT8XC+p0mA1GoQUY1x6xCR2YTqfU6KTbiGTwdwWoUBdiO1kmMOxxVOYijr2HaPW
JuCPGxaXTLDhV02zSczrPYK3VnpNk+8WUyktJQgihnlwEBzZ1RqSE8I5oC6S+lyz
C08zhBneXDtnuKktjlZpe2cfR9HXucqnCZWG+F1XqGvrYyygpBEfzOECAwEAAaOC
AtIwggLOMB8GA1UdIwQYMBaAFAS7BNed2H0c2eTwVL2MPLYy3nY0MHcGCCsGAQUF
BwEBBGswaTA4BggrBgEFBQcwAoYsaHR0cDovL3RydXN0LnF1b3ZhZGlzZ2xvYmFs
LmNvbS9xdnF3ZWJnMS5jcnQwLQYIKwYBBQUHMAGGIWh0dHA6Ly9ldi5vY3NwLnF1
b3ZhZGlzZ2xvYmFsLmNvbTAvBgNVHREEKDAmgiRwc2QyLXhzMmEuc3Bhcmthc3Nl
LXVlY2tlci1yYW5kb3cuZGUwfwYDVR0gBHgwdjAJBgcEAIvsQAEEMAkGBwQAgZgn
AwEwDgYMKwYBBAG+WAACZAECMEUGCisGAQQBvlgBg0IwNzA1BggrBgEFBQcCARYp
aHR0cHM6Ly93d3cucXVvdmFkaXNnbG9iYWwuY29tL3JlcG9zaXRvcnkwBwYFZ4EM
AQEwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMIHfBggrBgEFBQcBAwSB
0jCBzzAKBggrBgEFBQcLAjAIBgYEAI5GAQEwEwYGBACORgEGMAkGBwQAjkYBBgMw
OwYGBACORgEFMDEwLxYpaHR0cHM6Ly93d3cucXVvdmFkaXNnbG9iYWwuY29tL3Jl
cG9zaXRvcnkTAmVuMGUGBgQAgZgnAjBbMCYwEQYHBACBmCcBAgwGUFNQX1BJMBEG
BwQAgZgnAQMMBlBTUF9BSQwnRmVkZXJhbCBGaW5hbmNpYWwgU3VwZXJ2aXNvcnkg
QXV0aG9yaXR5DAhERS1CQUZJTjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3Js
LnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdnF3ZWJnMS5jcmwwHQYDVR0OBBYEFBZQ4yEY
lOom5A2/kFSf5318H+ZJMA4GA1UdDwEB/wQEAwIFoDATBgorBgEEAdZ5AgQDAQH/
BAIFADANBgkqhkiG9w0BAQsFAAOCAgEABvJZ3aYtFgF+pnDy0zGUftBNpVVxfwtz
e4tQ+lhp5YVj9nrpG6TOSF3qrVBt0kNJIO04t7VQlvCehWpTw6TFo5x9yWqh5Ioq
1S58es5hGvFF+U5BGfB3vz/LC2sm5WBHidTFx/4HDKzI4BQT/3IRpLrkJsdXkqkb
fB9L7yisoZmUJ3UPKr6Z+mIX8g4lZaot1jUCfxFkH4INKW4thfYDGiyJ4Ck2Joij
hEN/cdMxH/FrpgNx0gAAsl7Ym9hQ+ge/T9JpDd9X7ENlKCtz/w7DQligTHKyh/Le
PC5DI3OpbBKq4WTyJ59otZNzS7n1vm0A7ExEJ8qv6QqAWt+rJQoUmuFk8RFpNM1I
wwB5f575dozXDZqoGJkZwOK1z20pEVB2qBOmcIzeLI6g9SEJYEgOxuT2ITMysFS4
jXuusOgj8k7gsMXRM0LpC8XZWlzcyluwBdDGGL/+dY6hHVDmul2hHLQymfERi1f+
oaKMMOAWx6kpRhaZBtGI8r5nL1UshtSWDzfi+9/7l8R3avybcO/lG8t0PslIhXKj
FVQS1EoXuWqEleAlTJUns03Eo6NuUaGrFMzbjpOSBtGrihd+1Z7+zh0lDDlPe5oe
gTvyqAy2qR40FMVKkEUm1nAN/tEOZGTbis2UDD2iHmzaA2cuYkpl3/wBg1v4U40a
x/IiZVvW50Q=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSTR5pGUdawmSHAioyUU
CplgiPrd/88yP9bN9a7F6+Ay38gqXTbXvv9UcEZkwdkDWjtBPmfDW56VUiWVBNqI
on+FdDc8dON60E4SguNwjJKQeKKCY/BlplnEK0odCYSrSBbkVQ6ETPAAYFOOet9C
D2r52gy2dkRGNPxcL6nSYDUahBRjXHrEJHZhOp9TopNuIZPB3BahQF2I7WSYw7HF
U5iKOvYdo9Ym4I8bFpdMsOFXTbNJzOs9grdWek2T7xZTKS0lCCKGeXAQHNnVGpIT
wjmgLpL6XLMLTzOEGd5cO2e4qS2OVml7Zx9H0de5yqcJlYb4XVeoa+tjLKCkER/M
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7916036175640285979391029003761762649189013747
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NTRNL-30237459'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Qualified Web ICA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-24 14:47:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-24 14:57:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mecklenburg-Vorpommern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Neubrandenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 1432'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mecklenburg-Vorpommern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Pasewalk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PSDDE-BAFIN-101072'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sparkasse Uecker-Randow'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'psd2-xs2a.sparkasse-uecker-randow.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25897009099492741143693103993606992452067451199431775017231007042052368887367433202115988430346440900618775503077649271382715476958948631681720196246097222166393822115058328370214333390909826182755911348298581658833218360702566913219297642161872134859521559412913963950272002625933542185649344932202145759441716696326473117561447609801861543001634589673350748219573415981806584887178728865522249596657723016920447327994342635689073048846117075602849750407917912694905175551249827148669617482775243543323487180836821211037682153153463270180759878091685649575258395468269687347224531860618876826539609033180225581599969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 04bb04d79dd87d1cd9e4f054bd8c3cb632de7634
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvqwebg1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ev.ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psd2-xs2a.sparkasse-uecker-randow.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.194112.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.19495.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.1.450
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.3 (qcStatements)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (210 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.11.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.1862.1.1 (etsiQcsCompliance)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.1862.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.1862.1.6.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.1862.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'en'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.19495.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.19495.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PSP_PI'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.19495.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PSP_AI'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Federal Financial Supervisory Authority'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DE-BAFIN'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvqwebg1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1650e3211894ea26e40dbf90549fe77d7c1fe649
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0006f259dda62d16017ea670f2d331947ed04da555717f0b737b8b50fa5869e58563f67ae91ba4ce485deaad506dd2434920ed38b7b55096f09e856a53c3a4c5a39c7dc96aa1e48a2ad52e7c7ace611af145f94e4119f077bf3fcb0b6b26e5604789d4c5c7fe070cacc8e01413ff7211a4bae426c75792a91b7c1f4bef28aca1999427750f2abe99fa6217f20e2565aa2dd635027f11641f820d296e2d85f6031a2c89e029362688a384437f71d3311ff16ba60371d20000b25ed89bd850fa07bf4fd2690ddf57ec4365282b73ff0ec34258a04c72b287f2de3c2e432373a96c12aae164f2279f68b593734bb9f5be6d00ec4c4427caafe90a805adfab250a149ae164f1116934cd48c300797f9ef9768cd70d9aa8189919c0e2b5cf6d29115076a813a6708cde2c8ea0f5210960480ec6e4f6213332b054b88d7baeb0e823f24ee0b0c5d13342e90bc5d95a5cdcca5bb005d0c618bffe758ea11d50e6ba5da11cb43299f1118b57fea1a28c30e016c7a92946169906d188f2be672f552c86d4960f37e2fbdffb97c4776afc9b70efe51bcb743ec9488572a3155412d44a17b96a8495e0254c9527b34dc4a3a36e51a1ab14ccdb8e939206d1ab8a177ed59efece1d250c394f7b9a1e813bf2a80cb6a91e3414c54a904526d6700dfed10e6464db8acd940c3da21e6cda03672e624a65dffc01835bf8538d1ac7f222655bd6e744