hbciweb-dev.olb.de

- Oldenburgische Landesbank AG -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 0a:a0:3c:9f:0a:4a:5f:3f:01:c0:97:df:3e:1a:bf:57 was issued on by D-Trust GmbH.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oldenburgische Landesbank AG

Company registration number: CSM012458644
Organization: Oldenburgische Landesbank AG
Organization unit: Informationstechnologie
State / Province: Niedersachsen
Locality: Oldenburg
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:a0:3c:9f:0a:4a:5f:3f:01:c0:97:df:3e:1a:bf:57
Serial Number (int): 14124277000253550413810014504858861399
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 62:72:19:66:98:36:26:d7:98:3b:ef:35:e8:45:6c:a4:d2:34:01:69
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): c4:81:24:6d:d1:71:62:75:ad:b1:d2:17:93:64:66:c4:3d:35:ec:20
Fingerprint (sha256): a3:ae:2a:a9:51:19:e5:2a:1e:d9:3a:e5:8d:4f:35:91:62:ed:7c:89:95:41:f0:00:4e:26:d1:7e:f5:89:1c:71

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate hbciweb-dev.olb.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hbciweb-dev.olb.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hbciweb-dev.olb.de
hbciweb-admin-int.olb.de
hbciweb-int.olb.de

Other certificates including the domain name olb.de

(limited to 100 certificates)
expe01.video.olb.de
magazin.olb.de
mbanking.olb.de
magazin.olb.de
3d-secure.olb.de
hbciweb.xs2a.olb.de
www2.olb.de
srcwpb.olb.de
mbanking.olb.de
rsu-kis.olb.de
securemail.olb.de
mbanking.olb.de
videoberatung.olb.de
daten.olb.de
internet-int.olb.de
srcms.olb.de
rsu-kis-int.olb.de
magazin.olb.de
urc.olb.de
rsu-kis.olb.de
3d-secure.olb.de

mdm-int.olb.de
hbciweb-dev.olb.de
www.olb.de
hbciweb-admin-int.olb.de
www-int.olb.de
xs2a.olb.de
rsa.olb.de
mbanking.olb.de
www.olb.de
vdbebics.olb.de
safelock.olb.de
*.olb.de
www.weihnachten.olb.de
weihnachten.olb.de
src.olb.de
conntest.olb.de
hbciweb-dev.olb.de

wertpapiere.olb.de
magazin.olb.de
www-int.olb.de
news.wuestenrot.olb.de
wuerttembergische.olb.de
videoberatung.olb.de
rsa.olb.de
www-int.olb.de
www.olb.de
src.olb.de
www.olb.de
www.olb.de
securemail.olb.de
ebanking.olb.de
www.olb.de
internet-int.olb.de
www.olb.de
srcms.olb.de
hbciweb.olb.de
ssrp.olb.de
rsu-kis.olb.de
ip.olb.de
mbanking.olb.de
videoberatung.olb.de
srcms.olb.de
magazin.olb.de
www.olb.de
src.olb.de
securemail.olb.de
securemail.olb.de
www.olb.de
magazin.olb.de
vdbebics.olb.de
www.olb.de
mdm.olb.de
srcwbp.olb.de
ebanking.olb.de
hbciweb-dev.olb.de
www.olb.de
www.olb.de
ostervoting.olb.de
ebanking.olb.de
wuerttembergische.olb.de
vdbebics.olb.de
www.olb.de
avw.olb.de
sso.olb.de
safelock.olb.de
openbanking.olb.de
adfs.olb.de
www.olb.de
wuestenrot-int.olb.de
pfandbrief.olb.de
www-int.olb.de
wuerttembergische-int.olb.de
hbciweb-dev.olb.de
*.olb.de
mbanking.olb.de
src.olb.de
adfs.olb.de

Certificate

The complete raw certificate details for hbciweb-dev.olb.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILGTCCCgGgAwIBAgIQCqA8nwpKXz8BwJffPhq/VzANBgkqhkiG9w0BAQsFADBM
MQswCQYDVQQGEwJERTEVMBMGA1UECgwMRC1UcnVzdCBHbWJIMSYwJAYDVQQDDB1E
LVRSVVNUIFNTTCBDbGFzcyAzIENBIDEgMjAwOTAeFw0xODA0MzAxNDExMTlaFw0y
MDA1MDQxNDExMTlaMIG2MRUwEwYDVQQFEwxDU00wMTI0NTg2NDQxCzAJBgNVBAYT
AkRFMRYwFAYDVQQIEw1OaWVkZXJzYWNoc2VuMRIwEAYDVQQHEwlPbGRlbmJ1cmcx
IDAeBgNVBAsTF0luZm9ybWF0aW9uc3RlY2hub2xvZ2llMSUwIwYDVQQKExxPbGRl
bmJ1cmdpc2NoZSBMYW5kZXNiYW5rIEFHMRswGQYDVQQDExJoYmNpd2ViLWRldi5v
bGIuZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDAfZf4rLi7PG8U
wXYetkSd/puC0E9SVM5i5du79R7br+y02Z5911cWKvB8GP7g7zbXWnakIdh1UGrq
eBV7Rnf2jDUPZmHAygKIO0HvMx8vwd04avZRPwsRSqoP5u+4mIPOW/Q/DliRcSsX
jEZjCsp3roQIi2gf3DIFOSUw53iRtnVpqGu4g55cUSnCUDyJzZbzNoxtifMXuLIF
aLN6etMc4/8r+eWzh58A7Cq/mR6CY0jRvQ0Ua9ppqQHLIZfSSssDwycfVn4ndWXX
IR8kQI5njnY/5+vwPOvZlwsdFuhwZ11I6mgIjhGUsB88nBzp1MhDaxNphEKW2Z7a
peGI1OT9PkEyE+PnLK8+P1phriU+l+6IZlKVuIk9j2DA7puPfUeDJpL6Fuw3Wq+n
kMCYS4UulqUpfzdK2K0EcF9PheqaKerwWPCZ8ISxyCAMK7Nzj42ONhkXELrt5dSf
ntUpDedqKPlUb/GDJn3q+Yc9ocVlFpvkgSlK2k+m96HDi1FmA1ndGW/lHMUWitSx
NiLqcGQm/e0KxW8XCM0yWDcbvwIP9sFwyI7YIoemMjSzcXNegwXFJv+EQc5SRPsH
D0Y0a5iqd4liQMrAGGXRJ8cLY7xVPK+CwABYkc7a8CwWcJM1G4RhIEyEiMIFlKWu
ljRxZOJet+pnifMWQtdBwhrfB+a38QIDAQABo4IGijCCBoYwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFFAZMpSaxLUETVbQwIMh1TVV
sLF6MIIBFgYIKwYBBQUHAQEEggEIMIIBBDAzBggrBgEFBQcwAYYnaHR0cDovL3Nz
bC1jMy1jYTEtMjAwOS5vY3NwLmQtdHJ1c3QubmV0MEwGCCsGAQUFBzAChkBodHRw
Oi8vd3d3LmQtdHJ1c3QubmV0L2NnaS1iaW4vRC1UUlVTVF9TU0xfQ2xhc3NfM19D
QV8xXzIwMDkuY3J0MH8GCCsGAQUFBzAChnNsZGFwOi8vZGlyZWN0b3J5LmQtdHJ1
c3QubmV0L0NOPUQtVFJVU1QlMjBTU0wlMjBDbGFzcyUyMDMlMjBDQSUyMDElMjAy
MDA5LE89RC1UcnVzdCUyMEdtYkgsQz1ERT9jQUNlcnRpZmljYXRlP2Jhc2U/MG8G
A1UdIARoMGYwWgYLKwYBBAGlNAKBSAEwSzBJBggrBgEFBQcCARY9aHR0cDovL3d3
dy5kLXRydXN0Lm5ldC9pbnRlcm5ldC9maWxlcy9ELVRSVVNUX0NTTV9QS0lfQ1BT
LnBkZjAIBgYEAI96AQcwggEdBgNVHR8EggEUMIIBEDCCAQygggEIoIIBBIZ5bGRh
cDovL2RpcmVjdG9yeS5kLXRydXN0Lm5ldC9DTj1ELVRSVVNUJTIwU1NMJTIwQ2xh
c3MlMjAzJTIwQ0ElMjAxJTIwMjAwOSxPPUQtVHJ1c3QlMjBHbWJILEM9REU/Y2Vy
dGlmaWNhdGVyZXZvY2F0aW9ubGlzdIZAaHR0cDovL2NybC5kLXRydXN0Lm5ldC9j
cmwvZC10cnVzdF9zc2xfY2xhc3NfM19jYV8xXzIwMDkuZGVyLmNybIZFaHR0cDov
L2Nkbi5kLXRydXN0LWNsb3VkY3JsLm5ldC9jcmwvZC10cnVzdF9zc2xfY2xhc3Nf
M19jYV8xXzIwMDkuY3JsMDMGA1UdEgQsMCqBEGluZm9AZC10cnVzdC5uZXSGFmh0
dHA6Ly93d3cuZC10cnVzdC5uZXQwHQYDVR0OBBYEFGJyGWaYNibXmDvvNehFbKTS
NAFpMA4GA1UdDwEB/wQEAwIFoDCCAuUGCisGAQQB1nkCBAIEggLVBIIC0QLPAHUA
7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFjFuTAMwAABAMARjBE
AiAE+hfkVOwVMmn8NMssn3RKApia7yHOpIdyaNo3Kk9D1AIgeJJC9qJFUsnWHR50
IfhyTuh+TCGAS3Wf75Aq7Ob40jcAdwBWFAaaL9fC7NP14b1Esj7HRna5vJkRXMDv
lJhV1onQ3QAAAWMW5MFXAAAEAwBIMEYCIQCTuDTo+C7WzH8GYgbTzia/Cn3RbOCo
ywXmmALw2+YxtAIhAPYoa/E3T0iPjj/fPbt9+hLqreIJnURXQXerapfPkR5dAHUA
b1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFjFuTAawAABAMARjBE
AiB5yhGMnTfPlHuTdP/4GcNZsPmbkQaFm1R8cjDhxjklmQIgaK69Gh2DusI8n+zy
PmsNqPpfClG+Q94RGWmRmqTEIQIAdQBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcv
o6odBxPTDAAAAWMW5MG3AAAEAwBGMEQCIHwqjG5SIVguKigFELsduDy87oq0y79D
wBbQ9w8/xdlcAiAcJc1MgaLWzgPgwFgZIREZxbsQ4SzKbMW17mz6KFjDjQB3AKS5
CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABYxbkw4YAAAQDAEgwRgIh
AKw1Efrqg2xWABx883sXo9zSTWLrxTTZV1nKIt6bl4XKAiEA68UA0e5txi6TJkqJ
9zeHnvwH5f3Peh44mkcbKo6z5cYAdgC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQ
lmQ2jh7RhQAAAWMW5MMfAAAEAwBHMEUCIG4eTKAZs9+t02jezEqNZ0lcLwiqeT+M
akWyZwm8JHliAiEAi67WZex5JmsFPgUwyjB/lAlIPk3719NwmdWWgBu+BqwwSwYD
VR0RBEQwQoISaGJjaXdlYi1kZXYub2xiLmRlghhoYmNpd2ViLWFkbWluLWludC5v
bGIuZGWCEmhiY2l3ZWItaW50Lm9sYi5kZTANBgkqhkiG9w0BAQsFAAOCAQEAZrul
3EZ4KSfug0EyxcgUbkSFydG1LfcqBOogYvXpX+TvQPeaqyD2EwL/Cc6CQRuKEaLN
RYOLWJ1mCpccexbv4OoQHfUBnpT8G/c90f6xlpiGfVHDs15fC6o9ZVt20om+k0wu
VcsFflwcTiCc0ylt6Bbq3jcHXpgwC+TRqiOyauniihh8rB72fKxjV8tP/5MhGeEs
VR1s8MHbNlhRov7/DqDj4TGREHVM1EEWSzS88g83v2gtMO1yaso5dkqVhwHIFAKa
bDEi2G1w5bnXHgyoSL8k3srwxcQyMPoYMGbuscYnpqbs8XWs+z5PmJ0SLllZ3/CQ
wQEzS+YLCoRvyAoRMg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14124277000253550413810014504858861399
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-30 14:11:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-04 14:11:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM012458644'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oldenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Informationstechnologie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oldenburgische Landesbank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hbciweb-dev.olb.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 785293135048788025135863608943783109977347789821216939125069225926619395733901576252350623261715704294738832827221232969736745128959615325215501398470533608969090098597444338722470936351349277447963056214058445770793760941234352442827152487903462924194733851396354022860496151559762556517063851120332691586790927925533058696416671006624291854423191180643332832936294933606150799020801882023860457308332793255787598056040045800356917246894888611926491874297034827035005357345298764344955251297671342033767027253712155989755661404075541804994609072343552371591148832920448232248601798515823969226840726395736888703087134434411312395996256724155440176937635705141562199266628344707308403312850843693707405302637962467102166282562003496110254378495475139103717762146000665533135757947441178536334942457550032495515546446594706604613591634237322181664177127452612701545852947605213378781495470759697185977063429740110681571447103621711511930600420706593851388994907199943819701090014592667889774258444293600327354844943974154992270244099820024946414537596582997066308264864655678831694086189480624960599041925790164372524876340738055845467790998870002996408487053433294599683799469588626971265170173616010478484306586490279561931541362673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62721966983626d7983bef35e8456ca4d2340169
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (725 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (721 bytes)
							02cf007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016316e4c0330000040300463044022004fa17e454ec153269fc34cb2c9f744a02989aef21cea4877268da372a4f43d40220789242f6a24552c9d61d1e7421f8724ee87e4c21804b759fef902aece6f8d2370077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000016316e4c157000004030048304602210093b834e8f82ed6cc7f066206d3ce26bf0a7dd16ce0a8cb05e69802f0dbe631b4022100f6286bf1374f488f8e3fdf3dbb7dfa12eaade2099d44574177ab6a97cf911e5d0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016316e4c06b0000040300463044022079ca118c9d37cf947b9374fff819c359b0f99b9106859b547c7230e1c6392599022068aebd1a1d83bac23c9fecf23e6b0da8fa5f0a51be43de111969919aa4c421020075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016316e4c1b7000004030046304402207c2a8c6e5221582e2a280510bb1db83cbcee8ab4cbbf43c016d0f70f3fc5d95c02201c25cd4c81a2d6ce03e0c05819211119c5bb10e12cca6cc5b5ee6cfa2858c38d007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016316e4c3860000040300483046022100ac3511faea836c56001c7cf37b17a3dcd24d62ebc534d95759ca22de9b9785ca022100ebc500d1ee6dc62e93264a89f737879efc07e5fdcf7a1e389a471b2a8eb3e5c6007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016316e4c31f000004030047304502206e1e4ca019b3dfadd368decc4a8d67495c2f08aa793f8c6a45b26709bc2479620221008baed665ec79266b053e0530ca307f9409483e4dfbd7d37099d596801bbe06ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbciweb-dev.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbciweb-admin-int.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbciweb-int.olb.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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