www.governikus.de

- Governikus GmbH & Co. KG -

Issued by TeleSec ServerPass CA 2

About this certificate

This digital certificate with serial number d8:6b:97:0d:1f:61:3f:e7 was issued on by T-Systems International GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Governikus GmbH & Co. KG

Organization: Governikus GmbH & Co. KG
Organization unit: SE
State / Province: Bremen
Locality: Bremen
Country: DE

T-Systems International GmbH

Organization: T-Systems International GmbH
Organization unit: Trust Center Services
Address: Untere Industriestr. 20
Postal code: 57250
State / Province: Nordrhein Westfalen
Locality: Netphen
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): d8:6b:97:0d:1f:61:3f:e7
Serial Number (int): 15594724217317310439
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 9d:ca:2a:8b:bc:41:b6:d6:85:ea:a0:52:a7:50:4e:31:85:32:75:80
AuthorityKeyId: 15:bb:de:d6:25:6f:bd:f2:31:9f:62:13:dc:5c:a6:f4:65:b4:6d:f2

Fingerprint (sha1): ca:58:3b:66:da:ff:05:55:9f:9a:a2:0c:e9:e3:ca:82:18:97:a9:0e
Fingerprint (sha256): 02:77:3c:1c:ab:9d:c4:37:98:d1:26:0c:d4:ef:e1:5d:f4:27:1a:b4:b8:72:64:dc:b2:18:d5:dc:a5:21:6c:d8

Issuing Certificate URL: http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_CA_2.cer
Issuing Certificate URL: ldap://ldap.serverpass.telesec.de/cn=TeleSec%20ServerPass%20CA%202,ou=Trust%20Center%20Services,o=T-Systems%20International%20GmbH,c=de?cACertificate

Revocation information

OCSP Server: http://ocsp.serverpass.telesec.de/ocspr
CRL Distribution Point: http://crl.serverpass.telesec.de/rl/TeleSec_ServerPass_CA_2.crl
CRL Distribution Point: ldap://ldap.serverpass.telesec.de/cn=TeleSec%20ServerPass%20CA%202,ou=Trust%20Center%20Services,o=T-Systems%20International%20GmbH,c=de?certificateRevocationlist?base?certificateRevocationlist=*

Check the revocation status for certificate www.governikus.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.governikus.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.governikus.de

Other certificates including the domain name governikus.de

(limited to 100 certificates)
pilot.id.governikus.de
*.governikus.de
autclient.governikus.de
www.governikus.de
www.jahrestagung.governikus.de
*.governikus.de
localhost.governikus.de
messe.governikus.de
pgp.governikus.de
portal.governikus.de
messeapp.governikus.de
www.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
repo.portal.governikus.de
*.governikus.de
pgp.governikus.de
cloud.governikus.de
www.anbieter-ausweisapp2.governikus.de
sirs.governikus.de
portal.governikus.de
www.anbieter-ausweisapp2.governikus.de
www.governikus.de
messe.governikus.de
*.governikus.de
portal.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de

Certificate

The complete raw certificate details for www.governikus.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15594724217317310439
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'T-Systems International GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Center Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TeleSec ServerPass CA 2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '57250'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Netphen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Untere Industriestr. 20'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-20 13:31:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Governikus GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.governikus.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 772512470813345649909512857266564839190775545914786726522506405699194396129040734916100953607356407703318568164045481578165266203781164107625012050133880223205945720770923658291307911680885875576811498449940858212387067792850573757804559993755796860888903184936722154742161104745786519116514797609790109840423519488666546188212023097056042667557781782617726348856987052099043875908439097548487717906020496778361469907108922437688722742449176965413043467586546150414025312369501058357137770826200255412853608813522833978632206433107304277535638006035408702158302710851078446107989201079231195280586553360149306419421040837866576347315388490489282049939219875147839638536666345132388855992021449389592106201371801619065729832049284641924167155962818852323040234307826731737607494118403582892867507546151507343650958462814077756194934269914394761551346416229327426394420868916149235845297911986009389220549439590330000810440653247854290674436946390963244019643401404562393165443423205664889830869676529711521348778800445015152877308759805464713777271380480078269387486189307707043863710298722367440008723071995183283836608959135598227624936223497299060529166136989433650461880400530967069012640198106823399959491207662618725572540251251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 15bbded6256fbdf2319f6213dc5ca6f465b46df2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9dca2a8bbc41b6d685eaa052a7504e3185327580
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.7879.13.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.telesec.de/serverpass/cps.html'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (281 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/rl/TeleSec_ServerPass_CA_2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.serverpass.telesec.de/cn=TeleSec%20ServerPass%20CA%202,ou=Trust%20Center%20Services,o=T-Systems%20International%20GmbH,c=de?certificateRevocationlist?base?certificateRevocationlist=*'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (300 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.serverpass.telesec.de/ocspr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_CA_2.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.serverpass.telesec.de/cn=TeleSec%20ServerPass%20CA%202,ou=Trust%20Center%20Services,o=T-Systems%20International%20GmbH,c=de?cACertificate'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.governikus.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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