pgp.governikus.de

- Governikus GmbH & Co. KG -

Issued by TeleSec ServerPass Class 2 CA

About this certificate

This digital certificate with serial number 32:47:3a:38:15:b8:42:b9:66:3b:2f:6a:34:cd:fb:e6 was issued on by T-Systems International GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Governikus GmbH & Co. KG

Organization: Governikus GmbH & Co. KG
Organization unit: SE
State / Province: Bremen
Locality: Bremen
Country: DE

T-Systems International GmbH

Organization: T-Systems International GmbH
Organization unit: T-Systems Trust Center
Address: Untere Industriestr. 20
Postal code: 57250
State / Province: Nordrhein Westfalen
Locality: Netphen
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 32:47:3a:38:15:b8:42:b9:66:3b:2f:6a:34:cd:fb:e6
Serial Number (int): 66831233689457821655762907425338686438
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 8b:19:e7:e4:e7:bc:ef:e5:48:6e:51:75:76:16:5d:77:04:09:90:26
AuthorityKeyId: 94:c8:74:46:f5:3a:b4:46:48:26:f8:2b:ca:34:1e:56:26:04:12:00

Fingerprint (sha1): 29:2b:e2:1e:b5:54:2e:cc:9d:f6:9a:d4:e5:78:0d:b3:ed:3c:16:13
Fingerprint (sha256): 42:f7:6e:8f:98:b5:9d:7f:07:1e:1c:c1:ad:92:ee:a8:c1:b5:72:29:9a:f2:8c:9f:2e:34:f5:1b:72:b7:3c:6a

Issuing Certificate URL: http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_Class_2_CA.cer

Revocation information

OCSP Server: http://ocsp.serverpass.telesec.de/ocspr
CRL Distribution Point: http://crl.serverpass.telesec.de/rl/ServerPass_Class_2.crl

Check the revocation status for certificate pgp.governikus.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pgp.governikus.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pgp.governikus.de

Other certificates including the domain name governikus.de

(limited to 100 certificates)
pilot.id.governikus.de
*.governikus.de
autclient.governikus.de
www.governikus.de
www.jahrestagung.governikus.de
*.governikus.de
localhost.governikus.de
messe.governikus.de
pgp.governikus.de
kommone.dvdv.governikus.de
portal.governikus.de
messeapp.governikus.de
kommone.dvdv.governikus.de
www.governikus.de
pilot.id.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
repo.portal.governikus.de
*.governikus.de
pgp.governikus.de
cloud.governikus.de
www.anbieter-ausweisapp2.governikus.de
sirs.governikus.de
portal.governikus.de
www.anbieter-ausweisapp2.governikus.de
auth.governikus.de
www.anbieter-ausweisapp2.governikus.de
www.governikus.de
www.anbieter-ausweisapp.governikus.de
messe.governikus.de
*.governikus.de
portal.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de

Certificate

The complete raw certificate details for pgp.governikus.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG4DCCBcigAwIBAgIQMkc6OBW4QrlmOy9qNM375jANBgkqhkiG9w0BAQsFADCB
3zELMAkGA1UEBhMCREUxJTAjBgNVBAoMHFQtU3lzdGVtcyBJbnRlcm5hdGlvbmFs
IEdtYkgxHzAdBgNVBAsMFlQtU3lzdGVtcyBUcnVzdCBDZW50ZXIxHDAaBgNVBAgM
E05vcmRyaGVpbiBXZXN0ZmFsZW4xDjAMBgNVBBEMBTU3MjUwMRAwDgYDVQQHDAdO
ZXRwaGVuMSAwHgYDVQQJDBdVbnRlcmUgSW5kdXN0cmllc3RyLiAyMDEmMCQGA1UE
AwwdVGVsZVNlYyBTZXJ2ZXJQYXNzIENsYXNzIDIgQ0EwHhcNMTgwNjI5MTAxNTMz
WhcNMjAwNzA0MjM1OTU5WjB7MQswCQYDVQQGEwJERTEhMB8GA1UECgwYR292ZXJu
aWt1cyBHbWJIICYgQ28uIEtHMQswCQYDVQQLEwJTRTEPMA0GA1UECBMGQnJlbWVu
MQ8wDQYDVQQHEwZCcmVtZW4xGjAYBgNVBAMTEXBncC5nb3Zlcm5pa3VzLmRlMIIC
IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnK98sbw/CVLUvCOwwOxake2Y
m0+i61pLkFa9I7Ah/YCMooUN/XPId2RunDhVYdWZyMKMtJkknq3OTnkXHBsTWB8f
jWAQxXlSUIRGiE+s2WhkchZCkPuPsf+ob8zR5wTHpt0fc9Dfi5i+dXg6Tkkp4/rT
bVpjtwouWKZaqGePj1rQd+vIKRMeW0qQI4HrIffvm5EQKyf7HgK0NhbpU7aF7uVH
8mViDryvqSQPhMCKNnUXW5aq7xB9INofocwO9UoeAyr6N+ntGnYDgFyqkmMaK4HC
huwq72QogbVY3pVtGp1exSvwCSNf3tiCGKs6N50iZeaPzEQeWvcrnKUQspFHIObt
9ZJEUJB0Y74aUsQ410PBMLXk4r/aPt5tBB67OqSluXzfnrnP1qcOLkGKHrEgbJig
Be4Jo71g6UH5uDnB+Lc7iizpzOATpWoPOth4rkhmqZwZgKON/3kYo0E26trr97Ge
ggJFhkmQcyu/AENG6QXkY6y+9nMOYQvIDAm3xltzLsiNis7i1V6B9rnig+OFh4rN
EB73/+eYevePHbfoTQfAaEE27HXmDDSTUaxkW+UbGEdCZeakiaey+IsbOGlKn6qu
ixVQpjSW8Chfuk6cEs/hqSCzHdIDZGrnVZUO4EXNaSntxlGfhIyDJUBdSMKtQNfL
TeuRE1AIyFzc48D/gy0CAwEAAaOCAfkwggH1MB8GA1UdIwQYMBaAFJTIdEb1OrRG
SCb4K8o0HlYmBBIAMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AgYIKwYBBQUHAwEwHQYDVR0OBBYEFIsZ5+TnvO/lSG5RdXYWXXcECZAmMFoGA1Ud
IARTMFEwRQYKKwYBBAG9Rw0XATA3MDUGCCsGAQUFBwIBFilodHRwOi8vd3d3LnRl
bGVzZWMuZGUvc2VydmVycGFzcy9jcHMuaHRtbDAIBgZngQwBAgIwSwYDVR0fBEQw
QjBAoD6gPIY6aHR0cDovL2NybC5zZXJ2ZXJwYXNzLnRlbGVzZWMuZGUvcmwvU2Vy
dmVyUGFzc19DbGFzc18yLmNybDCBmQYIKwYBBQUHAQEEgYwwgYkwMwYIKwYBBQUH
MAGGJ2h0dHA6Ly9vY3NwLnNlcnZlcnBhc3MudGVsZXNlYy5kZS9vY3NwcjBSBggr
BgEFBQcwAoZGaHR0cDovL2NybC5zZXJ2ZXJwYXNzLnRlbGVzZWMuZGUvY3J0L1Rl
bGVTZWNfU2VydmVyUGFzc19DbGFzc18yX0NBLmNlcjAMBgNVHRMBAf8EAjAAMBwG
A1UdEQQVMBOCEXBncC5nb3Zlcm5pa3VzLmRlMBMGCisGAQQB1nkCBAMBAf8EAgUA
MA0GCSqGSIb3DQEBCwUAA4IBAQBezCazqvuQTerxEMC2B2+yjsJtwk85eDFYxI/V
wSUbxXm6+f+gVveGO9o4fmWAVCCrOECj0YUKPXIZjAMSaqAWx+hww0g75YCY76JP
WYYvXzJD9hrg5K+ns2ug+4k4qjezinppw857z6u4CVBNYO836cf7fGglTwoXObY6
TSbpLg3LimNFGxW7CpgUhFv8QZQsq2bZsFKAP0n433vSte4SJMChYjmJwRv8MIxB
edFiCyN1nbD3Hp+UQqzpds45XMa0dt/fhADuG82JY7w7icmqvj6PxtdbtjM71PpU
mbMvFm/l8kKZXt2OXZchtMgI8AE+WOkXSoqpWc6wAkB+y9z1
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 66831233689457821655762907425338686438
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'T-Systems International GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'T-Systems Trust Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '57250'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Netphen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Untere Industriestr. 20'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeleSec ServerPass Class 2 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-29 10:15:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Governikus GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pgp.governikus.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 639221056070514067246386834332323487534938230562803711535760632025214954231582623946280081068479244538614323704042044499330216505642688993693381578769197156213022085744600603738419434956022735055268906220387209493879903713301459285848909212198975122697157229103709113554732394520926775906164346930672086094870197620940146898409908757352249355099231638839589244632881592029219510624455294283447322177847575750410236117679191585165259731682177847910389040726714459134275214604347117250709680494033193863698122064636185112249183821258381650892535382671988308368599150800753627174021092326839702729951870377116311665737595177268713033575593399500672802922367393298490460274444842891571520016995698030269966292208517004740364729289061419388864829680396605102037055641703640458859693695898868290364715722234277309363702980505550391183524640247070044747738324350866317199297030537988313465641512875065679170873012341562630769386928491313874829876560129431201295295159196398766760720708548609319364089495439207707461129277096617073607358512556638664874275779137636480077048655437549658897189287410626793862956747651350195594659007596366937117153527197261720938884955089722019273399657484810109601360115387681592425814864125377386108615099181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 94c87446f53ab4464826f82bca341e5626041200
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8b19e7e4e7bcefe5486e517576165d7704099026
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.7879.13.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.telesec.de/serverpass/cps.html'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/rl/ServerPass_Class_2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.serverpass.telesec.de/ocspr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_Class_2_CA.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgp.governikus.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005ecc26b3aafb904deaf110c0b6076fb28ec26dc24f39783158c48fd5c1251bc579baf9ffa056f7863bda387e65805420ab3840a3d1850a3d72198c03126aa016c7e870c3483be58098efa24f59862f5f3243f61ae0e4afa7b36ba0fb8938aa37b38a7a69c3ce7bcfabb809504d60ef37e9c7fb7c68254f0a1739b63a4d26e92e0dcb8a63451b15bb0a9814845bfc41942cab66d9b052803f49f8df7bd2b5ee1224c0a1623989c11bfc308c4179d1620b23759db0f71e9f9442ace976ce395cc6b476dfdf8400ee1bcd8963bc3b89c9aabe3e8fc6d75bb6333bd4fa5499b32f166fe5f242995edd8e5d9721b4c808f0013e58e9174a8aa959ceb002407ecbdcf5