cloud.governikus.de

- Governikus GmbH & Co. KG -

Issued by TeleSec ServerPass Class 2 CA

About this certificate

This digital certificate with serial number 4c:fb:a4:ac:f0:5e:38:53 was issued on by T-Systems International GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Governikus GmbH & Co. KG

Organization: Governikus GmbH & Co. KG
Organization unit: SE
State / Province: Bremen
Locality: Bremen
Country: DE

T-Systems International GmbH

Organization: T-Systems International GmbH
Organization unit: T-Systems Trust Center
Address: Untere Industriestr. 20
Postal code: 57250
State / Province: Nordrhein Westfalen
Locality: Netphen
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:fb:a4:ac:f0:5e:38:53
Serial Number (int): 5547208428710934611
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 55:b9:bd:f7:a4:8f:96:20:82:3e:3e:a7:96:56:a1:fe:62:f5:6c:7b
AuthorityKeyId: 94:c8:74:46:f5:3a:b4:46:48:26:f8:2b:ca:34:1e:56:26:04:12:00

Fingerprint (sha1): f7:75:cd:01:6b:ba:97:b3:5a:5f:f2:79:0b:a0:76:58:c6:bb:7f:df
Fingerprint (sha256): 76:fd:01:a4:d8:0e:7a:90:ce:39:2a:ac:3b:17:cc:3e:55:72:b3:32:27:b3:9f:ff:80:69:f9:60:f0:49:0d:26

Issuing Certificate URL: http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_Class_2_CA.cer
Issuing Certificate URL: ldap://ldap.serverpass.telesec.de/CN=TeleSec%20ServerPass%20Class%202%20CA,OU=T-Systems%20Trust%20Center,O=T-Systems%20International%20GmbH,C=DE?cACertificate

Revocation information

OCSP Server: http://ocsp.serverpass.telesec.de/ocspr
CRL Distribution Point: http://crl.serverpass.telesec.de/rl/ServerPass_Class_2.crl
CRL Distribution Point: ldap://ldap.serverpass.telesec.de/CN=TeleSec%20ServerPass%20Class%202%20CA,OU=T-Systems%20Trust%20Center,O=T-Systems%20International%20GmbH,C=DE?CertificateRevocationList

Check the revocation status for certificate cloud.governikus.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cloud.governikus.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cloud.governikus.de

Other certificates including the domain name governikus.de

(limited to 100 certificates)
pilot.id.governikus.de
*.governikus.de
autclient.governikus.de
www.governikus.de
www.jahrestagung.governikus.de
*.governikus.de
localhost.governikus.de
messe.governikus.de
pgp.governikus.de
kommone.dvdv.governikus.de
portal.governikus.de
messeapp.governikus.de
kommone.dvdv.governikus.de
www.governikus.de
pilot.id.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
repo.portal.governikus.de
*.governikus.de
pgp.governikus.de
cloud.governikus.de
www.anbieter-ausweisapp2.governikus.de
sirs.governikus.de
portal.governikus.de
www.anbieter-ausweisapp2.governikus.de
auth.governikus.de
www.anbieter-ausweisapp2.governikus.de
www.governikus.de
www.anbieter-ausweisapp.governikus.de
messe.governikus.de
*.governikus.de
portal.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de

Certificate

The complete raw certificate details for cloud.governikus.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5547208428710934611
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'T-Systems International GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'T-Systems Trust Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '57250'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Netphen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Untere Industriestr. 20'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeleSec ServerPass Class 2 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-20 08:16:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Governikus GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cloud.governikus.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803514267862135908415183515802107684268271363364623035616436258433765969877695603910713393826961108342342477422283388115650636034262935958463591227894312016995374357931229567619170937107731270009194315315819265922049324837972004203992298901894568734322868897298653332088903255555177462095363321802559828012033104723249789621680301533092179263655242828282300769211271104060010427274352901040481470931089084329251932052151253077868708622621019289876682829090168195154464891365715986299140386565283569534843005281021232075294741555595440483908802486376188529144659546893443736887489644659171492903582686142010679957819835080109661989523801737772193077232623030066201206289826979289530456936024123005283933407589258514626723016296842635691797810821501940610098952766308662836490903815121185790097228760952374220031114611923510492246687832898385692597041964240836734579193965535456067954830213332937215661374773298000423651573337471162583872354727850534002328030749782043050157349540005721887586168714457855852766771558993105236843596772771942498965933038424386384969830759109173050461016093193283335680524960855351844332705853866721977888619546289353107106682262695203268637257238391312178874045853545032918557290280656828711143395223297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 94c87446f53ab4464826f82bca341e5626041200
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55b9bdf7a48f9620823e3ea79656a1fe62f56c7b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.7879.13.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.telesec.de/serverpass/cps.html'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (251 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/rl/ServerPass_Class_2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.serverpass.telesec.de/CN=TeleSec%20ServerPass%20Class%202%20CA,OU=T-Systems%20Trust%20Center,O=T-Systems%20International%20GmbH,C=DE?CertificateRevocationList'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (315 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.serverpass.telesec.de/ocspr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_Class_2_CA.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.serverpass.telesec.de/CN=TeleSec%20ServerPass%20Class%202%20CA,OU=T-Systems%20Trust%20Center,O=T-Systems%20International%20GmbH,C=DE?cACertificate'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.governikus.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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