ihk-schleswig-holstein.de

- Industrie- und Handelskammer zu Luebeck -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 66:84:b9:4b:81:a2:05:9c:7a:9e:f1:75:34:c2:83:19 was issued on by D-Trust GmbH.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Industrie- und Handelskammer zu Luebeck

Company registration number: CSM035985864
Organization: Industrie- und Handelskammer zu Luebeck
State / Province: Schleswig-Holstein
Locality: Luebeck
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): 66:84:b9:4b:81:a2:05:9c:7a:9e:f1:75:34:c2:83:19
Serial Number (int): 136270396983396319160099434064697787161
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ef:e3:0d:ed:8f:33:b3:70:cb:21:ad:b7:f4:90:ee:70:dc:26:44:f4
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 67:bc:a9:8d:0a:5d:23:6f:f0:65:e6:5f:14:30:03:70:78:14:c7:33
Fingerprint (sha256): d6:d3:51:fa:8b:f3:bf:f0:2c:63:ea:21:46:c7:6b:e5:ad:d3:52:1e:db:cf:bb:98:36:de:99:cc:2b:59:8d:de

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate ihk-schleswig-holstein.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ihk-schleswig-holstein.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ihk-schleswig-holstein.de
www.ihk-schleswig-holstein.de
ihk-sh.de
www.ihk-sh.de

Other certificates including the domain name ihk-schleswig-holstein.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for ihk-schleswig-holstein.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILHzCCCgegAwIBAgIQZoS5S4GiBZx6nvF1NMKDGTANBgkqhkiG9w0BAQsFADBM
MQswCQYDVQQGEwJERTEVMBMGA1UECgwMRC1UcnVzdCBHbWJIMSYwJAYDVQQDDB1E
LVRSVVNUIFNTTCBDbGFzcyAzIENBIDEgMjAwOTAeFw0yMzA3MDUwNzU0MjlaFw0y
NDA3MTUwNzAyMDRaMIGpMRUwEwYDVQQFEwxDU00wMzU5ODU4NjQxCzAJBgNVBAYT
AkRFMRswGQYDVQQIExJTY2hsZXN3aWctSG9sc3RlaW4xEDAOBgNVBAcTB0x1ZWJl
Y2sxMDAuBgNVBAoTJ0luZHVzdHJpZS0gdW5kIEhhbmRlbHNrYW1tZXIgenUgTHVl
YmVjazEiMCAGA1UEAxMZaWhrLXNjaGxlc3dpZy1ob2xzdGVpbi5kZTCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBAMxMbEF2FsZKjKhdl5csVYF+eOMgtFz2
Npep5lbzw9FYfrUE0xXfVk6APJU4amLPem2PNahq90k72XqWgigfucbGZC3KYbwX
6pU4alSsMzL01kc8b4cRBTBOqbCkJ0JqHQnfVH5AK/YHWxOB9SNsnbiwyGg4E1df
muhR2OWD5sgrorOXpjX/3FgEMknek/1EX45pyl1UCAIDiFsraPXNSRWmagSsjoG8
ZA+wAnywBKK51p4gLNnYXq9qQA9YxjULYdMRcodKD0wTuIBbRfpRzZiem2WSYpum
0+YcNQotELgknhDahA9Nv2giYor4SZ22C8Cm9ZkPivoiZfBYktJVvVC33leDsV5c
NINvP/xV6v47ZfacbbyMrmvDOom6kesvbuRf0wXt6yU3NmjmK0bSYwXWmUfosEue
E/ZLUD5JI5EQxMzeacwocU0kb7n8epnW54ynkwClOqxFfqzsDL51heMLmTTQC6GX
1ZW2KBxkjAb1JNuPXAi8HuJCVJBaSgHGcHpa/WfUuu81cwBxVeGuUX9Dx+0n2omg
X5YKfCQ4ve+0usDZ/thhCqpa6wFkstvUah8rPVI/etRXNQ5RYzlUXMYPrStwbynv
4zvGIL1FZEZ6T0OOrddYQQFjIt5dc0UsYhgBenGmkVu3YAHyNhFnuXDCSFIVVcLJ
Z0n3qxTyR94XAgMBAAGjggadMIIGmTCCARYGCCsGAQUFBwEBBIIBCDCCAQQwMwYI
KwYBBQUHMAGGJ2h0dHA6Ly9zc2wtYzMtY2ExLTIwMDkub2NzcC5kLXRydXN0Lm5l
dDBMBggrBgEFBQcwAoZAaHR0cDovL3d3dy5kLXRydXN0Lm5ldC9jZ2ktYmluL0Qt
VFJVU1RfU1NMX0NsYXNzXzNfQ0FfMV8yMDA5LmNydDB/BggrBgEFBQcwAoZzbGRh
cDovL2RpcmVjdG9yeS5kLXRydXN0Lm5ldC9DTj1ELVRSVVNUJTIwU1NMJTIwQ2xh
c3MlMjAzJTIwQ0ElMjAxJTIwMjAwOSxPPUQtVHJ1c3QlMjBHbWJILEM9REU/Y0FD
ZXJ0aWZpY2F0ZT9iYXNlPzB5BgNVHSAEcjBwMAgGBmeBDAECAjAIBgYEAI96AQcw
WgYLKwYBBAGlNAKBSAEwSzBJBggrBgEFBQcCARY9aHR0cDovL3d3dy5kLXRydXN0
Lm5ldC9pbnRlcm5ldC9maWxlcy9ELVRSVVNUX0NTTV9QS0lfQ1BTLnBkZjCCA10G
CisGAQQB1nkCBAIEggNNBIIDSQNHAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB
2bu/qznYhHMAAAGJJQvDrQAABAMARzBFAiAH721cO0hoTwvZlXrd5oTQl/tReeea
/K1xvTMhdUs4CQIhAPTikA1cdLtD4iStbkLwA9MJ2Wl31AUwAweLnpWqGEylAHUA
h0+1DcAp2ZMd5XPp8omejkUzs5LTiwpGJXS/D+6y/B4AAAGJJQvENwAABAMARjBE
AiBMVUdPPgKcEKJ6WCipWZd1hrPwG961KILEacHtfxno3wIgcn0Mz7KoduW6V/sx
odz7bkyPtgYD+Yr7Yrvrb0abIrsAdwA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvB
vyiF7PhkbgAAAYklC8KUAAAEAwBIMEYCIQD/2vAYnBfKkuaiVodYpPXpjnFoY2Hb
k9qFSSCPYtKm+gIhAIRg7JnLDg3Ht0SeRo4zLxyco88om4zrd1RQ5PhFhu2wAHYA
7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGJJQvBpQAABAMARzBF
AiASBt+vjk2DjCilGUm/fhvhRHWw7nz6Lexbwzafz8Lg4gIhANU7EvoDtf94Yqxl
yxnEcEh7vqBCh36YbXjwpDUE8cdfAHYA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0
vaQ9MEjX+6sAAAGJJQvCowAABAMARzBFAiEA1khRjn7NxennclN8IU/VZh7cMoAu
EjAqe8BeorJbsH0CIDccGGrK7NugRztE8GnLlK5fJJuLhLs5HlaOHSOiXa6oAHYA
O1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGJJQvEjQAABAMARzBF
AiBe/X1fvB23EfEu61DkaDM49zQgh0gCN0dxMp5IfRUVIQIhALbgWNhkWfKD//h4
XeJ/8PfSX6GRnYPPjXOMYyZke8qeAHUAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhC
Cp/mZ0xaOnQAAAGJJQvDhQAABAMARjBEAiB0HP8HO56D0j0MSSYgcTtJeot/QixD
EVgMPd7YB5mYlgIgHU7Cl1VTkmKuZlEF6XQof6nczzegal0y48+ygjCntIUwMwYD
VR0SBCwwKoEQaW5mb0BkLXRydXN0Lm5ldIYWaHR0cDovL3d3dy5kLXRydXN0Lm5l
dDCBnQYDVR0fBIGVMIGSMIGPoIGMoIGJhkBodHRwOi8vY3JsLmQtdHJ1c3QubmV0
L2NybC9kLXRydXN0X3NzbF9jbGFzc18zX2NhXzFfMjAwOS5kZXIuY3JshkVodHRw
Oi8vY2RuLmQtdHJ1c3QtY2xvdWRjcmwubmV0L2NybC9kLXRydXN0X3NzbF9jbGFz
c18zX2NhXzFfMjAwOS5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MF0GA1UdEQRWMFSCGWloay1zY2hsZXN3aWctaG9sc3RlaW4uZGWCHXd3dy5paGst
c2NobGVzd2lnLWhvbHN0ZWluLmRlgglpaGstc2guZGWCDXd3dy5paGstc2guZGUw
HwYDVR0jBBgwFoAUUBkylJrEtQRNVtDAgyHVNVWwsXowDgYDVR0PAQH/BAQDAgWg
MB0GA1UdDgQWBBTv4w3tjzOzcMshrbf0kO5w3CZE9DANBgkqhkiG9w0BAQsFAAOC
AQEAa0GjAimumUsAkW7fgNhjvrjajq0TPFp7ROa77WVBZUYaBUdXUT+NE2/LBCIq
ScmdK5WV0ZfTzFCLPfevZ4i/HTfG5hRCFiAY4InZHfhsZzFYL9ZYdEF8Gxdy16Rr
/Raztyxrg5vBz7xwzF+LMsskiEmXzAUsEJQ347XfKGCE9k4lEJep+D0wnOOsQ7Uf
fNdT1g8re5JKUiZRuk4VZiVODJbpBEzHY9hvUDZaWHtKdjprUPQ5yJ2Z63z8jEvb
r1H0Ji/7jNB36SJ8y8AVWoqMsq5XUGN2PbJJPMhvuwvKCaB/SXqBjzx/zZjqr+AS
UmVVBE2uUGVV0DOle6KsNrWB1A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 136270396983396319160099434064697787161
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-05 07:54:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-15 07:02:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM035985864'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schleswig-Holstein'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luebeck'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Industrie- und Handelskammer zu Luebeck'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ihk-schleswig-holstein.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 833465273172995566608095761049084151317323567426026301910217681098262537329329657782656417256993322035730735288855326421411615934498729112980947720565656702337300332560786415890845729758913534872690260088023901982247139407388943119448497482310271488869251233348305859803744502141962597212040314780793152525018563721796873736962763528523191324534807082309094043934530301018315697903693475178817816110258108563357843945651430951264868442918644781849667505860387738852012877755246048130124044502227131773557688540146142754004797775489635549105533043092174050323737340138970908809943253800742917479739836683927150210109965067766991187006108027325172223288510183113731266247252989494707443269847450339336957670507904739090191609631423643172343038951985150010062189759454434933349276749753806510352620086336886714869175779264256541109858368512047429102497321495880677930125686303905736289520448719995250005499751164409437770034961705832320866960689104018470048238914726531679882956190113072374956643644034096088849800059244419813083793021001787585002463330240016947385859289483756731607615910538877982695488239558118563390322054388748385000681113436210143319257502398694625933512685670425320114483248146301034961059392664529313386058997271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (845 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (841 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihk-schleswig-holstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihk-schleswig-holstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihk-sh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihk-sh.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							efe30ded8f33b370cb21adb7f490ee70dc2644f4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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