*.governikus.de

- Governikus GmbH & Co. KG -

Issued by TeleSec ServerPass Class 2 CA

About this certificate

This digital certificate with serial number 57:e7:ce:a2:36:3f:29:16 was issued on by T-Systems International GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Governikus GmbH & Co. KG

Organization: Governikus GmbH & Co. KG
Organization unit: SE
State / Province: Bremen
Locality: Bremen
Country: DE

T-Systems International GmbH

Organization: T-Systems International GmbH
Organization unit: T-Systems Trust Center
Address: Untere Industriestr. 20
Postal code: 57250
State / Province: Nordrhein Westfalen
Locality: Netphen
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 57:e7:ce:a2:36:3f:29:16
Serial Number (int): 6334258597010024726
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 78:1f:c8:8e:97:aa:4b:b4:ba:07:31:58:9d:78:93:e3:e4:b8:9b:7f
AuthorityKeyId: 94:c8:74:46:f5:3a:b4:46:48:26:f8:2b:ca:34:1e:56:26:04:12:00

Fingerprint (sha1): cb:ff:88:8e:f9:89:bc:5f:b9:de:9c:54:86:dc:1e:ae:54:f7:c7:0b
Fingerprint (sha256): cb:35:8a:e1:94:b5:1a:d4:e1:75:dc:87:ab:e0:e9:26:64:e1:b0:6a:76:4c:f9:e7:89:40:d8:71:73:f8:53:82

Issuing Certificate URL: http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_Class_2_CA.cer
Issuing Certificate URL: ldap://ldap.serverpass.telesec.de/CN=TeleSec%20ServerPass%20Class%202%20CA,OU=T-Systems%20Trust%20Center,O=T-Systems%20International%20GmbH,C=DE?cACertificate

Revocation information

OCSP Server: http://ocsp.serverpass.telesec.de/ocspr
CRL Distribution Point: http://crl.serverpass.telesec.de/rl/ServerPass_Class_2.crl
CRL Distribution Point: ldap://ldap.serverpass.telesec.de/CN=TeleSec%20ServerPass%20Class%202%20CA,OU=T-Systems%20Trust%20Center,O=T-Systems%20International%20GmbH,C=DE?CertificateRevocationList

Check the revocation status for certificate *.governikus.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.governikus.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.governikus.de
governikus.de

Other certificates including the domain name governikus.de

(limited to 100 certificates)
pilot.id.governikus.de
*.governikus.de
autclient.governikus.de
www.governikus.de
www.jahrestagung.governikus.de
*.governikus.de
localhost.governikus.de
messe.governikus.de
pgp.governikus.de
kommone.dvdv.governikus.de
portal.governikus.de
messeapp.governikus.de
kommone.dvdv.governikus.de
www.governikus.de
pilot.id.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
repo.portal.governikus.de
*.governikus.de
pgp.governikus.de
cloud.governikus.de
www.anbieter-ausweisapp2.governikus.de
sirs.governikus.de
portal.governikus.de
www.anbieter-ausweisapp2.governikus.de
auth.governikus.de
www.anbieter-ausweisapp2.governikus.de
www.governikus.de
www.anbieter-ausweisapp.governikus.de
messe.governikus.de
*.governikus.de
portal.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de

Certificate

The complete raw certificate details for *.governikus.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6334258597010024726
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'T-Systems International GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'T-Systems Trust Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '57250'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Netphen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Untere Industriestr. 20'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeleSec ServerPass Class 2 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-26 08:19:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Governikus GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.governikus.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 773563919436329886657968098545260824080879982026742735277482028377864031396970308368878281916196272079471987803124940015478660956883034751134729962746876008090612177288825860898464132217838534223501924014768959025840406077107082506108520927825901560667339875741520445790233067651056714966767032176552491348396859576014116754823166269573859684111334048436638518234730639085179359426860230591883196212252391157855224868276727454401995560673381127556097152468837558546927432722034519408740575834459785900967097889866825470724543972548843002734144516931040167217613577871108798456987571173037565481023180416756028986210070825634677946291520622731737295867531914765508977538685052202121258237350173218578162243613418107431597869091169020656481622864264361263577322187709847221944617602137580087064393109378537481655907510427670709440282729958695249703656884377379533410809187995431319203317928358266610076681910166010075470674126003688195463367895305247020491585865387624105557875856478874335752641241518808241366338378514047228290892221490874518656460639585092341947626685019934864335434448535985925836614033067258598388254498283650006585421806217299663543945667958142543336762959643672908069549254666914080513554172769785071371706087577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 94c87446f53ab4464826f82bca341e5626041200
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							781fc88e97aa4bb4ba0731589d7893e3e4b89b7f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.7879.13.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.telesec.de/serverpass/cps.html'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (251 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/rl/ServerPass_Class_2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.serverpass.telesec.de/CN=TeleSec%20ServerPass%20Class%202%20CA,OU=T-Systems%20Trust%20Center,O=T-Systems%20International%20GmbH,C=DE?CertificateRevocationList'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (315 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.serverpass.telesec.de/ocspr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_Class_2_CA.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.serverpass.telesec.de/CN=TeleSec%20ServerPass%20Class%202%20CA,OU=T-Systems%20Trust%20Center,O=T-Systems%20International%20GmbH,C=DE?cACertificate'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.governikus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'governikus.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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