www.zrf.uni-bremen.de

- Universitaet Bremen -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 1f:6d:59:cf:4f:5f:cb:c6:c5:a0:07:4c was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universitaet Bremen

Organization: Universitaet Bremen
State / Province: Bremen
Locality: Bremen
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:6d:59:cf:4f:5f:cb:c6:c5:a0:07:4c
Serial Number (int): 9726232333612204473175770956
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 56:98:fd:a8:f9:86:5b:dc:31:1c:03:10:2b:14:b0:1e:cf:18:d0:7f
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 37:26:cb:f6:42:43:e7:d6:20:47:e7:ac:88:0c:19:6e:9d:cd:5d:2b
Fingerprint (sha256): 00:37:96:d9:d9:5d:3b:b8:ce:36:56:d8:51:ea:09:f9:c9:45:27:bd:93:c4:70:f1:1b:0f:a9:51:ae:76:52:95

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate www.zrf.uni-bremen.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.zrf.uni-bremen.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.zrf.uni-bremen.de

Other certificates including the domain name uni-bremen.de

(limited to 100 certificates)
cama.uni-bremen.de
www.zrf.uni-bremen.de
www.zkpr.uni-bremen.de
psychstat.uni-bremen.de
elearning.uni-bremen.de
www.igmr.uni-bremen.de
www.tdv.uni-bremen.de
www.agcom.uni-bremen.de
www.iaas.uni-bremen.de
www.rackstation.ant.uni-bremen.de
nagios.ref54.uni-bremen.de
jitsi.vm.uni-bremen.de
www2.iniis-neu.uni-bremen.de
agim.uni-bremen.de
www.mm2014.uni-bremen.de
mail.biba.uni-bremen.de
www.sfb597b1.uni-bremen.de
www.psychologie.uni-bremen.de
www.biba.uni-bremen.de
www.informatik.uni-bremen.de
claudialubert.de
chisame.informatik.uni-bremen.de
www.isdmm15.uni-bremen.de
www.fb8.arcgisserver.uni-bremen.de
www.vfwf.uni-bremen.de
www.soziologie.uni-bremen.de
ai-comm.informatik.uni-bremen.de
www.iuv.uni-bremen.de
ctf.onoc.eu
tc-http3.testcenter.zmml.uni-bremen.de
toychest.ai.uni-bremen.de
nagios.informatik.uni-bremen.de
va-web.zmml.uni-bremen.de
ident.uni-bremen.de
www.am-course.uni-bremen.de
www.bccms.uni-bremen.de
www.wl.uni-bremen.de
soft.zfn.uni-bremen.de
crm.akademie.uni-bremen.de
www.zait.uni-bremen.de
www.infotag.uni-bremen.de
ease.informatik.uni-bremen.de
www.pflegechancen.uni-bremen.de
jupyter.zmml.uni-bremen.de
obrezkov.informatik.uni-bremen.de
www2.ew-lehramt.uni-bremen.de
gitlab.suub.uni-bremen.de
www.lpka.uni-bremen.de
litmus.informatik.uni-bremen.de
www.regionalentwicklung.uni-bremen.de
www.politikdidaktik.uni-bremen.de
www.celina.uni-bremen.de
bscw.ips.biba.uni-bremen.de
www.ingenieurinnen-sommeruni.uni-bremen.de
www.verdi.uni-bremen.de
www.deutschlandstudien.uni-bremen.de
www.wiwiselbsttest.uni-bremen.de
klima.uni-bremen.de
kipos.informatik.uni-bremen.de
scheinwerfer.uni-bremen.de
cast.zmml.uni-bremen.de
egroupware.zarm.uni-bremen.de
guest.wlan.uni-bremen.de
scheinwerfer.uni-bremen.de
mailman.zarm.uni-bremen.de
www.vivatop.de
www.ecophysiology.uni-bremen.de
gitlab.zarm.uni-bremen.de
tc-ueb2.testcenter.zmml.uni-bremen.de
oae.zmml.uni-bremen.de
umfrage.ips.biba.uni-bremen.de
www.soziologie.uni-bremen.de
www.spruehkompaktieren.uni-bremen.de
ikap-web.biba.uni-bremen.de
moin-test.uni-bremen.de
www.erasmus-initiative.uni-bremen.de
contradictionstudies.uni-bremen.de
www.soziologieselbsttest.uni-bremen.de
ines.zfn.uni-bremen.de
www.nwt18.uni-bremen.de
www.wikifg22.uni-bremen.de
rocketchat.zarm.uni-bremen.de
www.fpb.uni-bremen.de
www2.fb6.uni-bremen.de
srv-jr-www.vw.uni-bremen.de
www.europeanstudies.uni-bremen.de
transair.informatik.uni-bremen.de
www.hospo.uni-bremen.de
gerhard.meyer.uni-bremen.de
bbb-1.elearning.uni-bremen.de
ldap-cart.informatik.uni-bremen.de
www.crie-umfrage.uni-bremen.de
www.kinder-uni.uni-bremen.de
www2.fb8.uni-bremen.de
gitlab.csl.uni-bremen.de
dmis.math.uni-bremen.de
toychest.ai.uni-bremen.de
cslog-nas01.informatik.uni-bremen.de
mailman.zfn.uni-bremen.de
www.diagnostik.uni-bremen.de

Certificate

The complete raw certificate details for www.zrf.uni-bremen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DsV9uHJ9ytJXtp6JxbH
gpccZbLo4yhVLI5uf00qigEDDpzx4FqY6aeAJ4DVbpzWnv1Fh8CyCfOQPrALLFD/
N3r01TbFoZu47TUwdLzr7BtoRHBxqsrekpXJZjfw8G3l2vBxO8eWSN4EcQdh4Cya
uu3c2vO1YxzKHyJoKwxR4Fvo8ODBF/fd/K3S0CvzxgIPl0sf+DnYBUhaHvRynMIu
Lu0Z8omfDw+hitpc0/hEbv2jw9/ibI7O16sLCxER6ai5OuGQZP9tzJNRWjo/2FLV
Tq4Q4/Q28WZ0z13fFOlOdYdgl067niRLDWS3NoSz6lkb5aKTrvZv4hCXiqopbS69
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9726232333612204473175770956
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-17 12:08:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-19 12:08:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Universitaet Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.zrf.uni-bremen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27296610165769512433811254809714699905184781806609600729748327580517389165328840971373698563406688285206013259714197568419225967610143206137849290055014227507283306547550187517001960668077460983492980953737180046998314790203225128778218687702269179377429229078476074885499333220396513782176532018018819155218505882623450110524706779642644401386657175308481402190277657800134439833582622412200380089416787709682309526414764715887085283529648198596240613520305438297859582930855068921646425240072385778342352103834060582018305232408656012366546935253721296797376214795535775761863308730587225479909736054034965440937329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5698fda8f9865bdc311c03102b14b01ecf18d07f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zrf.uni-bremen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (969 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (965 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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