weblogin.physik.uni-bonn.de

- Rheinische Friedrich-Wilhelms-Universitaet Bonn -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 21:03:29:3e:58:b3:46:80:df:32:7d:e9 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Rheinische Friedrich-Wilhelms-Universitaet Bonn

Organization: Rheinische Friedrich-Wilhelms-Universitaet Bonn
Organization unit: Physikalisches Institut
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 21:03:29:3e:58:b3:46:80:df:32:7d:e9
Serial Number (int): 10216826868678691196371107305
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 8e:3e:3e:4b:66:36:b3:b8:8b:4f:11:2e:5e:f2:9b:04:97:86:c2:2c
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 76:9f:23:b3:a1:89:1f:c0:1a:59:55:e0:ee:29:84:c8:bb:db:ad:57
Fingerprint (sha256): 00:18:d7:eb:60:bd:f5:e8:f7:03:1f:41:79:80:fc:cf:f1:f7:22:89:c9:e0:f1:2e:1d:14:e5:2f:35:91:e0:cf

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate weblogin.physik.uni-bonn.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for weblogin.physik.uni-bonn.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

weblogin.physik.uni-bonn.de

Other certificates including the domain name uni-bonn.de

(limited to 100 certificates)
bbbfallback.informatik.uni-bonn.de
weblogin.physik.uni-bonn.de
iweb.meb.uni-bonn.de
www.tumorzentrum-bonn.de
gitlab.geo.uni-bonn.de
agp-vpn.rhrz.uni-bonn.de
www.vorklinikstage.uni-bonn.de
ems.math.uni-bonn.de
vpn-test.rhrz.uni-bonn.de
fdi-s3.uni-bonn.de
container-registry.hrz.uni-bonn.de
merry.ulb.uni-bonn.de
wiki.zem.uni-bonn.de
zveshop.verwaltung.uni-bonn.de
ins.uni-bonn.de
www.bonngutstage.uni-bonn.de
ortsnc.verwaltung.uni-bonn.de
cytometry.uni-bonn.de
trave.math.uni-bonn.de
bonfor.uni-bonn.de
xerox-og.meteo.uni-bonn.de
www1.hiskp.uni-bonn.de
ova-vpn.ova.uni-bonn.de
intranet.ais.uni-bonn.de
sp.uni-bonn.de
iweb.meb.uni-bonn.de
cens.uni-bonn.de
slk.informatik.uni-bonn.de
peene.math.uni-bonn.de
www.arithmeum.uni-bonn.de
mail.uni-bonn.de
gosa-dev.gosa.uni-bonn.de
www.bonngutstage.uni-bonn.de
webconf.meteo.uni-bonn.de
www.lms.uni-bonn.de
cytometry-ldap.uni-bonn.de
ad1.iai.uni-bonn.de
userserver.informatik.uni-bonn.de
hio-web-test.uni-bonn.de
proxmox-info4.cs.uni-bonn.de
chat.zem.uni-bonn.de
bbbfallback.informatik.uni-bonn.de
www.uni-bonn.de
sympa.vi.cs.uni-bonn.de
ea-author.rhrz.uni-bonn.de
cores.ukb.uni-bonn.de
web3.physik.uni-bonn.de
jester.uni-bonn.de
www.zhf.uni-bonn.de
confluence.bzh.uni-bonn.de
ad0.iai.uni-bonn.de
docs.physik.uni-bonn.de
www.lateinamerikazentrumstage.uni-bonn.de
k8stest-sealed-secrets.uni-bonn.de
agthoma.hiskp.uni-bonn.de
www.mnfstage.uni-bonn.de
styx.asta.uni-bonn.de
lwf-vpn.rhrz.uni-bonn.de
wiki.physik.uni-bonn.de
jhub.physik.uni-bonn.de
sms.wiwi.uni-bonn.de
csengine-test.rhrz.uni-bonn.de
mailer.ukb.uni-bonn.de
portal.grade-rc.de
imbie.meb.uni-bonn.de
admin-wiki.home.ins.uni-bonn.de
www.arithmeum.uni-bonn.de
prb.verwaltung.uni-bonn.de
butterbur05.iai.uni-bonn.de
www.or.uni-bonn.de
prb.verwaltung.uni-bonn.de
merry.ulb.uni-bonn.de
cores.ukb.uni-bonn.de
tools.net.cs.uni-bonn.de
warnow.math.uni-bonn.de
v-for1.ilb.uni-bonn.de
mail.ins.uni-bonn.de
www.uni-bonn.de
www.versoehnungstage.uni-bonn.de
www1.hiskp.uni-bonn.de
mx.hiskp.uni-bonn.de
sentry.hive.cs.uni-bonn.de
drze-vpn.rhrz.uni-bonn.de
www.philfak.uni-bonn.de
wahlen.uni-bonn.de
hicap.uni-bonn.de
pi01.hrz.uni-bonn.de
portal.grade-rc.de
intern.hrz.uni-bonn.de
warnow.math.uni-bonn.de
kata.doelger.uni-bonn.de
butterbur01.iai.uni-bonn.de
smtpclient-sol.iai.uni-bonn.de
ems.math.uni-bonn.de
smtpub.iai.uni-bonn.de
gast-bonnet4.uni-bonn.de
hcm.uni-bonn.de
tm.verwaltung.uni-bonn.de
rds-sap.verwaltung.uni-bonn.de
www.cb.uni-bonn.de

Certificate

The complete raw certificate details for weblogin.physik.uni-bonn.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKnTCCCYWgAwIBAgIMIQMpPlizRoDfMn3pMA0GCSqGSIb3DQEBCwUAMIGNMQsw
CQYDVQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVz
IERldXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4t
UEtJMSUwIwYDVQQDDBxERk4tVmVyZWluIEdsb2JhbCBJc3N1aW5nIENBMB4XDTE5
MDUyMTA3NDEzOFoXDTIxMDgyMjA3NDEzOFowgbwxCzAJBgNVBAYTAkRFMRwwGgYD
VQQIDBNOb3JkcmhlaW4tV2VzdGZhbGVuMQ0wCwYDVQQHDARCb25uMTgwNgYDVQQK
DC9SaGVpbmlzY2hlIEZyaWVkcmljaC1XaWxoZWxtcy1Vbml2ZXJzaXRhZXQgQm9u
bjEgMB4GA1UECwwXUGh5c2lrYWxpc2NoZXMgSW5zdGl0dXQxJDAiBgNVBAMMG3dl
YmxvZ2luLnBoeXNpay51bmktYm9ubi5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIP
ADCCAgoCggIBAOE3p9TKu0Pt3o5pAHnSZJgOsLn8nl6sLQaV5+i5X9ZDWr0Md9pS
CDxGToB47Hq4gixig+oXjd8qC/lC48d8iyhb1lOjHBMvaL2USzEcARg7/QGacRhG
NU33IlHP5qcSOgcToDKxhcRLlGBQmzER/OZbbDDN4bIg/KKmNhrzGNl890jmX2KF
y3xDFtf1BkF3GNu7+F9EgvmtH+VaJ6KEhKERaVs18OdOV00BQBlE9JdxR3G8irMx
8wh/f/mNeYR9mREt+DB7O++UlPjhp2OLry0opIHPIbU8xHSMxnsFxCMTtoJ08lpz
LFo3V0/lFZnMpmfKKp6XBgdUnJs0GrDupPM3B7IrjAPMKuamssM+9TNgb6MIOs+l
vL0nAreQI/7mIp3agR2aVUfzlqBAhpdtRRElTcuDNz85p9Zt5HHTdos4ZNCmH/PH
vqIgPzOHUD7/c7G2TpsIq5so+65jXZBPJbTcXzRI9KxFlVTChVpu4LMJsZ2X+S0r
iRFz/9LunBeYc5RofADMzyVwzy4wIkEJ9CMI2DU5utQkqaUG+kaC71prG1gobZKD
FqSR2LR8Cl/oJz0AIWG37epv7FPuRxaLAuDE0vis2advLSYF0yQI/Yeg4A8f0Hdd
xuhI0VrKLsYO0KrCJ4/6IUsL0AVnCWrs+0Z8S1T1iR6pcJdRx3Xp+ZllAgMBAAGj
ggXKMIIFxjBXBgNVHSAEUDBOMAgGBmeBDAECAjANBgsrBgEEAYGtIYIsHjAPBg0r
BgEEAYGtIYIsAQEEMBAGDisGAQQBga0hgiwBAQQEMBAGDisGAQQBga0hgiwCAQQE
MAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMB
MB0GA1UdDgQWBBSOPj5LZjazuItPES5e8psEl4bCLDAfBgNVHSMEGDAWgBRrOpiL
+fJTidrgrbIyHgkf6Ko7dDAmBgNVHREEHzAdght3ZWJsb2dpbi5waHlzaWsudW5p
LWJvbm4uZGUwgY0GA1UdHwSBhTCBgjA/oD2gO4Y5aHR0cDovL2NkcDEucGNhLmRm
bi5kZS9kZm4tY2EtZ2xvYmFsLWcyL3B1Yi9jcmwvY2FjcmwuY3JsMD+gPaA7hjlo
dHRwOi8vY2RwMi5wY2EuZGZuLmRlL2Rmbi1jYS1nbG9iYWwtZzIvcHViL2NybC9j
YWNybC5jcmwwgdsGCCsGAQUFBwEBBIHOMIHLMDMGCCsGAQUFBzABhidodHRwOi8v
b2NzcC5wY2EuZGZuLmRlL09DU1AtU2VydmVyL09DU1AwSQYIKwYBBQUHMAKGPWh0
dHA6Ly9jZHAxLnBjYS5kZm4uZGUvZGZuLWNhLWdsb2JhbC1nMi9wdWIvY2FjZXJ0
L2NhY2VydC5jcnQwSQYIKwYBBQUHMAKGPWh0dHA6Ly9jZHAyLnBjYS5kZm4uZGUv
ZGZuLWNhLWdsb2JhbC1nMi9wdWIvY2FjZXJ0L2NhY2VydC5jcnQwggNjBgorBgEE
AdZ5AgQCBIIDUwSCA08DTQB3AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgia
N9kTAAABatlWvVcAAAQDAEgwRgIhAJ+dN+4UTNaHlx64s8CCwpc7gX6oLR9jMQ/U
pnAx4gTyAiEAlPXfPPBBUywXnYnBtY3oxuogS2xgHByWkzoXbigsAHgAdwCq5wt/
PLjVZshsLxaXnJ9EX2mrDrRTVYmy93oDAQTzzQAAAWrZVr1dAAAEAwBIMEYCIQC5
PB+JEo41vPCV+c52dpxCllXNIecGT9fRmeJZYek8gAIhAMr/J+7R8KN1hdhFzC1m
PM4wwDDoiTEJx/i3QZSNmqaQAHcAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6Oq
HQcT0wwAAAFq2Va+UQAABAMASDBGAiEAp5sBVvek2MVQ/+3O39XwxiEXSSk7yie0
wATvDmJxQu4CIQCh4QhOSLsbzsteBVlrfNdT1r7QUFcxdMdpJCXBsuZ3twB3AESU
ZS6w7s6vxEAH2Kj+KMDa5oK+2MsxtT/TM5a1toGoAAABatlWwHIAAAQDAEgwRgIh
AKq15uuRGU76k1XrLgCnn0/JVMVRGuhs1rH6JtCJ3tCSAiEAujNF4DNc9Ca4Vrt6
2+igUn+zCz46rwg4sX/Y3pqphbMAdgDuS723dc5guuFCaR+r4Z5mow9+X7By2IMA
xHuJeqj9ywAAAWrZVr07AAAEAwBHMEUCIGYmSq9FswbhxuS1u75ci1evWMQMq127
PZRRmwSHgd3SAiEA6H0yzs/BaoTvjzf4rj8mmYnK/VdX4xxFEPTMnvQAq34AdwC7
2d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWrZVr06AAAEAwBIMEYC
IQCerpXKsQ9EYdJxUBPJdjVrF2vDxkMwFbIqV13Np6nzdwIhANu/kIAEV4WT8Gih
kmgH6pay0jgYISuWLc3BDVdDux3lAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+4
43fNDsgN3BAAAAFq2Va9PAAABAMARzBFAiA8fs/SmpWXFMyEYs0nXehzEDM9NdKw
CLTfAvu534S10AIhAMTV9bnwMDlumd9wrO5i+60HpN6YF+7WZPK4cMV3n0bbMA0G
CSqGSIb3DQEBCwUAA4IBAQBZXOlrzVeWhRdCJop62tIud2Ehymmvr2VKnQxYSvrc
3g+JssHfqIaIkh7kuOxpyNg6KT1K8sDUIyw84KRMBOf3Vh6lP0444e8lzTPoZmL0
nq4yslAjLHGdWNHo7Gbb8/jKSwJG/JLYl15TCkorBM8C6Yd1IFlm/SXzZxEVtAiq
mIIQQtOk7MAw6sq38VXAOvT9ljC+ByC3meguEAB2zXudEyOaU8+opscsHWcC2OxO
RZSc2uu0Im+T8NSXMyg9OAS025sVwqMRKM0pMoNcfo8cBmCq1qu1vmRFUc65sfXK
SVbtM+EKtqySacwoW33V/2lcu0RfcAtI9Ajfw6kiFZyk
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10216826868678691196371107305
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-21 07:41:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-22 07:41:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rheinische Friedrich-Wilhelms-Universitaet Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Physikalisches Institut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'weblogin.physik.uni-bonn.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 918806848899994415179683987592220703845382617400334688159728805871018231688804375462379578552601129570812525457899574289145424383933982077837918521270434006672942575632611321451001060877064087405320031542731443420435373904532034252804157684868608603044487667919447367319754937039163933057836174444918760509371522750591154444659970560424291868204748051918899176308180969472580075655623442577298982619960756964501572600743859765403290138302146630339021226076376913770243836949397060169334926044615019913875761108639673176603055065873757387320141368987470619873735906084293027166389702557544740063142589045107688811500933878968414346650293124385580642120540886140240142824821879741532111173182391040953600244454037769081746431930905137893067470494312662718627184957120380566336651954903124708750733795530189724686851925563470670407419589859506887539978070210805599119788141640124344154245423559601697054643135025328400095922430523913917220219276430918970640148164258276589902822231734888207605180948306984661599793267064604594006624068749028265286999903587506469425950909334039430399870981044717972478812255790471286123002341582252212424313390628566909210483252613643139594488975391547328413866384196246040955574927877507264112703936869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e3e3e4b6636b3b88b4f112e5ef29b049786c22c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weblogin.physik.uni-bonn.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (851 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (847 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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