ihk-schleswig-holstein.de

- Industrie- und Handelskammer zu Kiel -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 08:3a:c1:62:8a:d2:28:bd:2c:9a:66:53:f6:be:ca:f9 was issued on by D-Trust GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Industrie- und Handelskammer zu Kiel

Company registration number: CSM013291851
Organization: Industrie- und Handelskammer zu Kiel
State / Province: Schleswig-Holstein
Locality: Kiel
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 08:3a:c1:62:8a:d2:28:bd:2c:9a:66:53:f6:be:ca:f9
Serial Number (int): 10938899496450776317754761378655030009
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 50:03:de:2b:2f:5f:fb:cd:6c:5f:56:f8:7e:4c:a3:ae:f0:56:d1:da
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 3c:e7:da:2d:e3:4a:93:18:ea:ba:d4:a2:ae:7e:b4:06:b3:a9:0a:1c
Fingerprint (sha256): b9:e8:ec:72:97:6f:c9:f0:9e:4d:ca:49:de:b4:f6:b0:2c:36:99:d8:10:e2:69:37:c0:ac:cd:9e:2a:91:a5:b5

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate ihk-schleswig-holstein.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ihk-schleswig-holstein.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ihk-schleswig-holstein.de
*.ihk-schleswig-holstein.de

Other certificates including the domain name ihk-schleswig-holstein.de

(limited to 100 certificates)
pam.ihk-schleswig-holstein.de
ihk-sh.de
*.ihk-schleswig-holstein.de
ihk-sh.de
ihk-sh.de
ihk-schleswig-holstein.de
ihk-schleswig-holstein.de
ihk-schleswig-holstein.de
*.ihk-schleswig-holstein.de
ihk-schleswig-holstein.de
ihk-sh.de
ihk-schleswig-holstein.de
pam.ihk-schleswig-holstein.de
ihk-sh.de
ihk-schleswig-holstein.de
ihk-sh.de

Certificate

The complete raw certificate details for ihk-schleswig-holstein.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJ+zCCCOOgAwIBAgIQCDrBYorSKL0smmZT9r7K+TANBgkqhkiG9w0BAQsFADBM
MQswCQYDVQQGEwJERTEVMBMGA1UECgwMRC1UcnVzdCBHbWJIMSYwJAYDVQQDDB1E
LVRSVVNUIFNTTCBDbGFzcyAzIENBIDEgMjAwOTAeFw0xODA3MjAxNjQxMzlaFw0y
MDA3MjQxNjQxMzlaMIGjMRUwEwYDVQQFEwxDU00wMTMyOTE4NTExCzAJBgNVBAYT
AkRFMRswGQYDVQQIExJTY2hsZXN3aWctSG9sc3RlaW4xDTALBgNVBAcTBEtpZWwx
LTArBgNVBAoTJEluZHVzdHJpZS0gdW5kIEhhbmRlbHNrYW1tZXIgenUgS2llbDEi
MCAGA1UEAxMZaWhrLXNjaGxlc3dpZy1ob2xzdGVpbi5kZTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANA3WpoyBPz+KJZq3ynntsTRUU7D0NbkkoL8wSj3
2+g1qxM6S7BCdZMtgCj2LAVksJ6Yl2IrGUEo+pE9Ph7V0H4ycWrvlWghWXknCDRw
jVJYjIi+BZyxWim9mLlpELojnWbTfURekRXFKDsksJib45T7fcne51Ulm+PkZePL
hcr7XhzQJvxXZfOm1MmRcpZMwm4FUMwN4LPPKdgnhrKj6Qm9sBW7Sj2KbFtiwvJb
NszMmez2OTLLynSmBmiDOoF3UKhvNzlb/yo+1Mz2022p1MjvXZLe2w6RCuFGy2q7
eA0PNmuOMKsc7KW230KUqSY3B4tLQuJ39e7ZT4BfcT+ZnhcCAwEAAaOCBn8wggZ7
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBRQGTKU
msS1BE1W0MCDIdU1VbCxejCCARYGCCsGAQUFBwEBBIIBCDCCAQQwMwYIKwYBBQUH
MAGGJ2h0dHA6Ly9zc2wtYzMtY2ExLTIwMDkub2NzcC5kLXRydXN0Lm5ldDBMBggr
BgEFBQcwAoZAaHR0cDovL3d3dy5kLXRydXN0Lm5ldC9jZ2ktYmluL0QtVFJVU1Rf
U1NMX0NsYXNzXzNfQ0FfMV8yMDA5LmNydDB/BggrBgEFBQcwAoZzbGRhcDovL2Rp
cmVjdG9yeS5kLXRydXN0Lm5ldC9DTj1ELVRSVVNUJTIwU1NMJTIwQ2xhc3MlMjAz
JTIwQ0ElMjAxJTIwMjAwOSxPPUQtVHJ1c3QlMjBHbWJILEM9REU/Y0FDZXJ0aWZp
Y2F0ZT9iYXNlPzBvBgNVHSAEaDBmMFoGCysGAQQBpTQCgUgBMEswSQYIKwYBBQUH
AgEWPWh0dHA6Ly93d3cuZC10cnVzdC5uZXQvaW50ZXJuZXQvZmlsZXMvRC1UUlVT
VF9DU01fUEtJX0NQUy5wZGYwCAYGBACPegEHMIIBHQYDVR0fBIIBFDCCARAwggEM
oIIBCKCCAQSGeWxkYXA6Ly9kaXJlY3RvcnkuZC10cnVzdC5uZXQvQ049RC1UUlVT
VCUyMFNTTCUyMENsYXNzJTIwMyUyMENBJTIwMSUyMDIwMDksTz1ELVRydXN0JTIw
R21iSCxDPURFP2NlcnRpZmljYXRlcmV2b2NhdGlvbmxpc3SGQGh0dHA6Ly9jcmwu
ZC10cnVzdC5uZXQvY3JsL2QtdHJ1c3Rfc3NsX2NsYXNzXzNfY2FfMV8yMDA5LmRl
ci5jcmyGRWh0dHA6Ly9jZG4uZC10cnVzdC1jbG91ZGNybC5uZXQvY3JsL2QtdHJ1
c3Rfc3NsX2NsYXNzXzNfY2FfMV8yMDA5LmNybDAzBgNVHRIELDAqgRBpbmZvQGQt
dHJ1c3QubmV0hhZodHRwOi8vd3d3LmQtdHJ1c3QubmV0MB0GA1UdDgQWBBRQA94r
L1/7zWxfVvh+TKOu8FbR2jAOBgNVHQ8BAf8EBAMCBaAwggLkBgorBgEEAdZ5AgQC
BIIC1ASCAtACzgB1AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAAB
ZLiRd7EAAAQDAEYwRAIgA4NXm5fmow0AGKNoW8CP37tnbthpGvBMH+jfqynvsmwC
IC+cxg0ul0Qz/L3rtfDSRSMB7hLxuyA8i8F9D6grlVL6AHUApLkJkLQYWBSHuxOi
zGdwCjw1mAT5G9+443fNDsgN3BAAAAFkuJF55QAABAMARjBEAiBpAxdycTyXKdpq
wklexWB+svRPiV7cDmI/kM74GVtSbgIgCzleukXrg7oTnQm33P1KAULO0sxVO0kX
G7ZDZNssFPUAdwBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWS4
kXkVAAAEAwBIMEYCIQC3/09EFk/jbtH8JSSSg+gT3w+mDdcGSpt6a380v4yYCQIh
AO4JMfdXujGG5lxPb+uezdTj5Pn2NF6DRuiV9IS7zeq2AHYA7ku9t3XOYLrhQmkf
q+GeZqMPfl+wctiDAMR7iXqo/csAAAFkuJF3mgAABAMARzBFAiBKuS/m+78PlA8b
hkj+AGgUZd4xtuLKXK8Q89zb4pLIMAIhAOGxJgKWNce661h/CzkoG9zp/1NxgXXf
2z5vMqbm/Z2WAHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFk
uJF6eQAABAMARzBFAiEA6SFK2f9P4kQyl+YpzxM9louJAdaiOD07vONO3bv9OGcC
IASpmbiA9S58t+BYqWWN12rGa76iMPmz9cC5vh9smJQVAHUAVhQGmi/XwuzT9eG9
RLI+x0Z2ubyZEVzA75SYVdaJ0N0AAAFkuJF6nAAABAMARjBEAiAglbF6Gb7JNDqJ
ynuzFi9+y7PXiiThLi7pNkna8PGrJQIgKEFHIeXOoI43DASNtrSQZyy9FjXmYXZN
TSak3dFg8sYwQQYDVR0RBDowOIIZaWhrLXNjaGxlc3dpZy1ob2xzdGVpbi5kZYIb
Ki5paGstc2NobGVzd2lnLWhvbHN0ZWluLmRlMA0GCSqGSIb3DQEBCwUAA4IBAQAR
IF+j1nrv+SL6BHQOD+fAQf4iR/WJVsr+VE+hIVjK/tNFpvVPXJkclqCGIhc+gRWg
kk0Dy9aIW9GMIea8CPF1eLlqWtUIv0GfeRGYHLE58vyR0lHjSJgK9Xq/0m7pq0Bn
1reXLc3xNoCPEp6Vb4/dQpApbODyzZT7g4NXIJlgxvwv5kd3UlG3yGqn1oJ9Ytme
/QW2o9PsS6qe6SjAZP+tXCwrb699Ejk/8rjMX6bOmBRod1v2aYGhahA38kpyV4Hz
U1mkH3ny5iVRDVPQbwIjL1JdvfLNwF7/7wgrtwdrsJ38pFSBNPeRQQnbF+G7l0VS
dbROZTye6oCsLxzDjDwZ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DdamjIE/P4olmrfKee2
xNFRTsPQ1uSSgvzBKPfb6DWrEzpLsEJ1ky2AKPYsBWSwnpiXYisZQSj6kT0+HtXQ
fjJxau+VaCFZeScINHCNUliMiL4FnLFaKb2YuWkQuiOdZtN9RF6RFcUoOySwmJvj
lPt9yd7nVSWb4+Rl48uFyvteHNAm/Fdl86bUyZFylkzCbgVQzA3gs88p2CeGsqPp
Cb2wFbtKPYpsW2LC8ls2zMyZ7PY5MsvKdKYGaIM6gXdQqG83OVv/Kj7UzPbTbanU
yO9dkt7bDpEK4UbLart4DQ82a44wqxzspbbfQpSpJjcHi0tC4nf17tlPgF9xP5me
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10938899496450776317754761378655030009
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-20 16:41:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-24 16:41:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM013291851'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schleswig-Holstein'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kiel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Industrie- und Handelskammer zu Kiel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ihk-schleswig-holstein.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26284863465928918693292895437774545008242161554726272986754186057731989237384437343128905480001013265822206630034225630090163928654260940303269021298010487848101095377281211362828956904853777149919233917253709464544986721339374230634556002968162454318710279040482916958153344031134538858648546193063264956182779332269840859565167369418653757763850372940649854295106441127736007143488835201088116187108411014266952882853972569305219228292214475703192306850411706267278348021372253015034545928696778402144646152775686664123263826139186261728273604340347829328311520732743438193685696934227838781966693312279928238611991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5003de2b2f5ffbcd6c5f56f87e4ca3aef056d1da
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (724 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (720 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihk-schleswig-holstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihk-schleswig-holstein.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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