Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c4:26:c0:84:0e:e4:ad:d5:28:32:5c:6e:98:80:6f
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
        Validity
            Not Before: Jan  2 00:00:00 2025 GMT
            Not After : Jan  7 23:59:59 2026 GMT
        Subject: C=DE, L=D\xC3\xBCsseldorf, O=NRW.BANK, CN=app.nrwbank.de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (3072 bit)
                Modulus:
                    00:d8:c3:d7:cc:50:30:fa:e7:93:9a:28:a6:7d:83:
                    ad:ac:6a:bb:3e:a4:00:4d:c4:aa:a0:75:41:35:d5:
                    09:72:5d:a6:5c:7a:0e:49:dd:14:0d:ba:7b:7a:f9:
                    16:62:dd:34:05:47:cc:0b:e6:d1:73:38:24:35:bd:
                    93:00:b9:17:55:97:eb:66:83:87:6f:7c:47:54:20:
                    92:79:19:50:61:24:a8:86:1a:11:c0:71:db:a0:61:
                    80:13:83:a1:e4:a7:96:1c:14:b9:f1:89:a1:60:56:
                    66:cf:c1:bc:4a:6e:09:1e:06:b9:52:94:a4:be:b1:
                    24:e1:70:50:c4:5a:b2:aa:c7:08:a0:be:57:2c:3c:
                    e4:60:07:a1:38:a9:fb:37:c3:0d:b2:ea:c2:24:39:
                    a3:4e:22:88:29:52:f0:79:ad:e2:09:55:6a:c9:e2:
                    31:8b:7a:58:4e:95:53:1f:d7:62:39:44:a1:54:fb:
                    12:fe:e8:14:ab:0a:36:c4:93:15:65:23:92:54:30:
                    f8:22:86:56:3c:4e:79:4b:77:e8:75:a4:15:a9:b4:
                    b5:01:b3:63:d2:61:f7:26:1a:74:89:cb:a6:d5:db:
                    7d:5e:6e:20:44:8d:20:2d:37:ce:d5:d6:6f:2c:a5:
                    13:32:0c:8c:94:90:c2:ed:44:57:4d:39:6e:f4:43:
                    ea:6d:11:b4:db:b2:bd:a3:31:fd:08:be:4b:fd:f3:
                    60:9e:5d:21:31:ee:4a:06:ff:72:0b:e4:ab:e0:39:
                    dd:2a:a4:a2:1a:58:17:0c:da:19:ec:b6:81:76:11:
                    7c:34:c8:f8:5b:bc:02:42:11:10:e2:de:d1:10:52:
                    8b:85:09:42:4d:8d:43:8e:87:ba:e8:b5:48:d6:8d:
                    79:8d:a7:6f:ec:fc:a2:6e:42:51:af:24:d6:9a:ef:
                    d5:64:38:5c:1e:32:81:3a:1b:de:ce:5d:5e:e2:37:
                    33:84:67:09:7a:df:03:d1:83:53:51:34:c6:b8:78:
                    ba:e3:de:cc:02:a4:c0:5a:fc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
            X509v3 Subject Key Identifier: 
                2B:CF:95:B5:26:51:4A:36:A6:CE:7C:AD:A1:1D:B7:47:9C:53:DC:E7
            X509v3 Subject Alternative Name: 
                DNS:app.nrwbank.de, DNS:www.app.nrwbank.de
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                  CPS: http://www.digicert.com/CPS
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
                Full Name:
                  URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:
                                DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21
                    Timestamp : Jan  2 06:46:03.757 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:17:AA:AB:0B:A4:92:70:B1:4D:63:0D:89:
                                8D:3C:56:B1:57:D9:DC:F4:9E:DA:F7:39:F4:67:3C:37:
                                01:CC:E7:3B:02:20:31:75:89:45:91:8A:03:76:66:3E:
                                1C:A3:C8:AC:71:31:EF:B2:F1:60:3D:0C:FD:4B:5C:23:
                                FB:6B:AF:16:77:58
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
                                4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
                    Timestamp : Jan  2 06:46:03.786 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:26:DD:AD:CA:6E:88:27:AB:1C:67:52:81:
                                E5:4E:1B:31:C5:50:C5:39:FA:A5:B4:52:71:F5:56:E8:
                                7B:8A:72:3C:02:20:4E:24:9C:1E:67:B4:FB:A4:79:86:
                                57:65:F6:67:E0:85:C0:8D:7E:A4:CE:43:0E:3E:F3:2F:
                                4A:2E:E5:BF:8A:A2
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8:
                                5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3
                    Timestamp : Jan  2 06:46:03.806 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:C1:8F:C9:DE:B0:99:1F:C0:89:A3:8A:
                                7A:C8:7D:5A:65:BF:BF:6A:84:48:3A:6C:E3:9A:96:5A:
                                4F:D8:0A:94:47:02:21:00:A2:0D:C7:8F:56:61:6C:84:
                                49:F9:C1:7B:36:17:67:9F:10:00:66:B6:A7:74:AF:CF:
                                17:47:BE:F7:90:E9:20:63
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        44:ae:c9:6f:db:39:75:34:da:e0:6c:0d:cd:dd:35:7d:63:16:
        21:77:b9:36:a3:2b:a2:17:b5:d3:ac:90:df:3d:18:27:84:40:
        f1:7e:a1:8f:cd:0c:3a:da:96:ca:46:0d:fb:ce:d0:99:81:7c:
        52:bb:7e:93:9a:dd:91:b8:fa:ea:a4:6d:f8:c3:ed:29:3e:5a:
        b5:d8:33:a7:97:f1:d2:e0:1c:a3:d7:97:9c:04:b0:9d:e4:2e:
        65:f3:57:90:98:ca:63:c1:d0:19:ce:14:47:35:55:ec:62:e0:
        58:6e:a9:9b:de:3e:47:a9:57:c0:c3:e2:76:d5:f4:0f:5f:7f:
        00:2d:d3:03:04:10:d1:e3:d4:42:dd:93:56:cb:f1:3c:8c:b9:
        66:de:70:e7:06:f0:bb:39:1d:73:73:21:e6:38:ad:06:17:4b:
        15:91:73:2d:34:b7:b4:45:67:98:69:6c:72:cf:92:76:1a:be:
        d0:15:11:5e:18:9d:fb:4e:d0:a7:6b:2a:88:c2:4c:92:17:83:
        09:f3:a0:b3:c7:69:72:d0:ac:f3:47:48:d9:f3:71:ce:8b:1b:
        b7:ae:7f:15:bc:81:1a:ac:3a:a5:70:cc:a7:a2:6a:f3:93:5d:
        73:c2:db:7a:e2:88:bc:68:28:f0:a7:8e:87:04:e7:c0:c3:2f:
        8f:d1:cf:66