www.anbieter-ausweisapp2.governikus.de

- Governikus GmbH & Co. KG -

Issued by TeleSec ServerPass Class 2 CA

About this certificate

This digital certificate with serial number 26:60:db:50:2d:78:0b:df was issued on by T-Systems International GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Governikus GmbH & Co. KG

Organization: Governikus GmbH & Co. KG
Organization unit: SE
State / Province: Bremen
Locality: Bremen
Country: DE

T-Systems International GmbH

Organization: T-Systems International GmbH
Organization unit: T-Systems Trust Center
Address: Untere Industriestr. 20
Postal code: 57250
State / Province: Nordrhein Westfalen
Locality: Netphen
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 26:60:db:50:2d:78:0b:df
Serial Number (int): 2765451308612193247
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: d2:00:65:fe:04:fc:d6:15:88:81:61:9b:56:c0:2a:8a:73:94:58:b1
AuthorityKeyId: 94:c8:74:46:f5:3a:b4:46:48:26:f8:2b:ca:34:1e:56:26:04:12:00

Fingerprint (sha1): 6f:47:47:a4:48:b9:9e:99:22:bb:31:12:cf:d2:ff:22:86:5c:9e:d0
Fingerprint (sha256): f5:e1:53:1a:82:ed:01:55:3b:2a:04:ff:94:c9:81:40:5f:76:5d:68:07:fc:96:61:66:da:3f:88:4d:34:c9:bf

Issuing Certificate URL: http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_Class_2_CA.cer
Issuing Certificate URL: ldap://ldap.serverpass.telesec.de/CN=TeleSec%20ServerPass%20Class%202%20CA,OU=T-Systems%20Trust%20Center,O=T-Systems%20International%20GmbH,C=DE?cACertificate

Revocation information

OCSP Server: http://ocsp.serverpass.telesec.de/ocspr
CRL Distribution Point: http://crl.serverpass.telesec.de/rl/ServerPass_Class_2.crl
CRL Distribution Point: ldap://ldap.serverpass.telesec.de/CN=TeleSec%20ServerPass%20Class%202%20CA,OU=T-Systems%20Trust%20Center,O=T-Systems%20International%20GmbH,C=DE?CertificateRevocationList

Check the revocation status for certificate www.anbieter-ausweisapp2.governikus.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.anbieter-ausweisapp2.governikus.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.anbieter-ausweisapp2.governikus.de
anbieter-ausweisapp2.governikus.de

Other certificates including the domain name governikus.de

(limited to 100 certificates)
pilot.id.governikus.de
*.governikus.de
autclient.governikus.de
www.governikus.de
www.jahrestagung.governikus.de
*.governikus.de
localhost.governikus.de
messe.governikus.de
pgp.governikus.de
kommone.dvdv.governikus.de
portal.governikus.de
messeapp.governikus.de
kommone.dvdv.governikus.de
www.governikus.de
pilot.id.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
repo.portal.governikus.de
*.governikus.de
pgp.governikus.de
cloud.governikus.de
www.anbieter-ausweisapp2.governikus.de
sirs.governikus.de
portal.governikus.de
www.anbieter-ausweisapp2.governikus.de
auth.governikus.de
www.anbieter-ausweisapp2.governikus.de
www.governikus.de
www.anbieter-ausweisapp.governikus.de
messe.governikus.de
*.governikus.de
portal.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de

Certificate

The complete raw certificate details for www.anbieter-ausweisapp2.governikus.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2765451308612193247
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'T-Systems International GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'T-Systems Trust Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '57250'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Netphen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Untere Industriestr. 20'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeleSec ServerPass Class 2 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-20 10:01:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Governikus GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.anbieter-ausweisapp2.governikus.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 861068208980060487442240640496958915367006188120780055709178524828659588339282918567175198943603233091993349224952165529032130566419243592324163794681104526720399756296441006796865235356238149972734067337703959967229839265597731537101070440940082088600318184956087126479082420278896149661454595306278097967253871344576368591906463023761002954420943107098384259485529195040931502208974464987543855854415524111430208319143504599975905703153218567902747635513159462439669498125948887142221381881719956192332664035017851025169737988537418910267605899123413076602229503215402130037318103202421632000343773636195935614458525480191749411969146618672612414898069415846270829935757656612503506205503846017603023974315097454961845348874663009347116427416485863444178251597908066262609837392917835721041307958604567475636228893783994287081574334265217493583891213759883392817510356713070465536073490955852673874373624173661833930032828124873860409044489099713095622037007297628930688225637345357857078336869850549945171762314378345164570048310286748158945210755054516849291201554358777551799806409805253421686510797537149102483437892419312327505892405065013395608959992465203678468976607142750310817057615424543272427552105970121098102618110723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 94c87446f53ab4464826f82bca341e5626041200
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d20065fe04fcd6158881619b56c02a8a739458b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.7879.13.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.telesec.de/serverpass/cps.html'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (251 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/rl/ServerPass_Class_2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.serverpass.telesec.de/CN=TeleSec%20ServerPass%20Class%202%20CA,OU=T-Systems%20Trust%20Center,O=T-Systems%20International%20GmbH,C=DE?CertificateRevocationList'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (315 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.serverpass.telesec.de/ocspr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_Class_2_CA.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.serverpass.telesec.de/CN=TeleSec%20ServerPass%20Class%202%20CA,OU=T-Systems%20Trust%20Center,O=T-Systems%20International%20GmbH,C=DE?cACertificate'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anbieter-ausweisapp2.governikus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anbieter-ausweisapp2.governikus.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0065d4aae166a76dafba08b7682a1a81f107280d89757ae816b30991551ad9cd2d1ed6a7486200651ed16e61a3cee35c3681180c621094c421417d1b38c3225560a51ece61d2bf9cc9fe023bb549fd3eb40e8643b2249ca6bd3ce78c347c6ab8f44b603c068e5bbcc3b1e3e98be28f235715b357b8528ded24cedba56382f8c6efeedac2cd04e53aabe88306f29ae5a8658c86e4431e31b0340123c3aa4a153b39b0634265f87b99df79ce740018f4849dabc7623f0d48a246671a8b188b14939f859db37090dd1529f43c4c05f6cdf6b3c1de2837c47bde717c5bf5b2a1cd58bf158b1432ff00b110f3fe374152ac07bde89e7ccafe50595ea018e31ac03b1518