kaffeekasse.embedded.rwth-aachen.de

- RWTH Aachen -

Issued by RWTH Aachen CA

About this certificate

This digital certificate with serial number 18:84:15:3b:6c:1d:67 was issued on by RWTH Aachen.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [KeyEncipherment DataEncipherment DigitalSignature ContentCommitment] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • SAN DNSName contains duplicate values (awslabs certlint)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

RWTH Aachen

Organization: RWTH Aachen
Organization unit: Lehrstuhl Informatik 11
State / Province: Nordrhein-Westfalen
Locality: Aachen
Country: DE

RWTH Aachen

Organization: RWTH Aachen
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 18:84:15:3b:6c:1d:67
Serial Number (int): 6900626167176551
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: 45:d6:57:22:4c:3f:84:5e:3f:97:d1:f6:9d:ce:f2:1a:fe:7c:0e:d5
AuthorityKeyId: 6e:d5:3e:c0:1c:2f:71:c9:3c:bf:49:4e:ef:6a:55:48:ec:d1:f2:38

Fingerprint (sha1): e1:af:5c:ce:78:36:33:bf:9f:e7:77:3c:a3:7c:62:d4:7a:1e:bc:4e
Fingerprint (sha256): 00:4a:a4:a4:62:78:40:d9:fb:fb:36:fe:33:a6:68:e3:38:ab:3a:fc:c1:9d:54:6f:3e:60:52:08:a9:a8:5f:ab

Issuing Certificate URL: http://cdp1.pca.dfn.de/rwth-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/rwth-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/rwth-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/rwth-ca/pub/crl/cacrl.crl

Check the revocation status for certificate kaffeekasse.embedded.rwth-aachen.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kaffeekasse.embedded.rwth-aachen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

KAFFEEKASSE.embedded.rwth-aachen.de
kaffeekasse.embedded.rwth-aachen.de

Other certificates including the domain name rwth-aachen.de

(limited to 100 certificates)
frp.landeco.rwth-aachen.de
vpn.imr.rwth-aachen.de
red.isea.rwth-aachen.de
git.isea.rwth-aachen.de
raum.arch.rwth-aachen.de
asterix.isf.rwth-aachen.de
ds10.isf.rwth-aachen.de
studibv.cms.rwth-aachen.de
zk-itc.key.rwth-aachen.de
sapportal.zhv.rwth-aachen.de
mail.dorf.rwth-aachen.de
www.rwth-aachen.de
msg-medizin.klinikum.rwth-aachen.de
itv.rwth-aachen.de
studiolo.arch.rwth-aachen.de
kaffeekasse.embedded.rwth-aachen.de
mark.tvk.rwth-aachen.de
sbc-2-extdfn.pbx.rwth-aachen.de
metafa.fsmpi.rwth-aachen.de
www.shop.rwth-aachen.de
www.rwth-aachen.de
bl.lfi.rwth-aachen.de
www.hitnet.rwth-aachen.de
admin-test.streaming.rwth-aachen.de
gigamove.rwth-aachen.de
wahlomat.stud.rwth-aachen.de
msg-medizin.klinikum.rwth-aachen.de
messenger.ima.rwth-aachen.de
cloud.halifax.rwth-aachen.de
bas47.itc.rwth-aachen.de
web-std4.itc.rwth-aachen.de
fghw-community.lfi.rwth-aachen.de
www.hitnet.rwth-aachen.de
alu.w2k.metallurgie.rwth-aachen.de
bolm.oc.rwth-aachen.de
bolm.oc.rwth-aachen.de
exam.kbsg.rwth-aachen.de
vpn.meditec.rwth-aachen.de
www.hitnet.rwth-aachen.de
fs22.hpc.itc.rwth-aachen.de
anyvpn.embedded.rwth-aachen.de
vpn2.noc.rwth-aachen.de
ifaic.ika.rwth-aachen.de
lbd.arch.rwth-aachen.de
switch-altbau-og1.isf.rwth-aachen.de
htg.ifht.rwth-aachen.de
igcs-chennai.org
files.lfi.rwth-aachen.de
www.hitnet.rwth-aachen.de
formular-ts.zhv.rwth-aachen.de
wzl-lotus2.wzl.rwth-aachen.de
mail.rwth-aachen.de
ex10-casht01.zhv.rwth-aachen.de
helfer.halifax.rwth-aachen.de
www.water.rwth-aachen.de
fachschaften.rwth-aachen.de
test.sabio.itc.rwth-aachen.de
cucm-sub-22.pbx.rwth-aachen.de
mail.ind.rwth-aachen.de
www.ideal.rwth-aachen.de
vpn.lbz.rwth-aachen.de
www-i2.informatik.rwth-aachen.de
oauth.campus.rwth-aachen.de
vmhost-esxi-smq2-idrac.e3d.rwth-aachen.de
www.fskowi.rwth-aachen.de
www.lfb.rwth-aachen.de
d-mo05.devlef.campus.rwth-aachen.de
noc96.rz.rwth-aachen.de
autodiscover.ad.ibac.rwth-aachen.de
cloud10.dbis.rwth-aachen.de
my.ram.rwth-aachen.de
www.hitnet.rwth-aachen.de
vpn.e3d.rwth-aachen.de
nc19.itv.rwth-aachen.de
otrs.ias.rwth-aachen.de
institut2a.physik.rwth-aachen.de
mail-out-4.itc.rwth-aachen.de
quic.comsys.rwth-aachen.de
reifen-db.ika.rwth-aachen.de
vispa.physik.rwth-aachen.de
malta.informatik.rwth-aachen.de
ansible.automata.rwth-aachen.de
vpn.iwm.rwth-aachen.de
www.rwth-aachen.de
vpn.lbz.rwth-aachen.de
dev.iww.rwth-aachen.de
auger.physik.rwth-aachen.de
vreiff3.arch.rwth-aachen.de
belegi.halifax.rwth-aachen.de
www.embedded.rwth-aachen.de
www.compecon.rwth-aachen.de
calculus.itmc.rwth-aachen.de
for2591.ukaachen.de
vmhost-esxi-bf2-idrac.e3d.rwth-aachen.de
seko-rocket.itc.rwth-aachen.de
mail.rwth-aachen.de
transaction.medien.rwth-aachen.de
boreas.klinikum.rwth-aachen.de
vorreiter.iaw.rwth-aachen.de
backend.i11freunde.rwth-aachen.de

Certificate

The complete raw certificate details for kaffeekasse.embedded.rwth-aachen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6900626167176551
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RWTH Aachen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RWTH Aachen CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-13 11:36:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 23:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aachen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RWTH Aachen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lehrstuhl Informatik 11'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kaffeekasse.embedded.rwth-aachen.de'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 966825214595430269859453313146013644698039003170964270452272837568445450150213314889092541806227875769763994451572376803189581702435826091588705697566644129688758580069003805371434393265585201487558876492805291503231935077902554961951536602159544022770154592885730118511095898171924429193486648908634816362495420421463180793022779861769267830056476489574923293743789123656117171083834593932527283610989437713876238060293052462622459526005369377695514532401386286056158232054177128310652919225582747845311509369830748175792196727918762781426654881347447055794911866399055253215766714557184850379718568634852911092362125644140103976347403991739430267302061593598275622077284372963720420454328243045099919026127831920130015443873213780331847686541879589224150333151766464495208313909023065264793551024182008932677201944325729505186449879700035528227261819282933539283812469225496080868944144666749656291567361107847812866504616505059065970100432442642947739964867040113485945879196115907770906369248346596475669182458806422437597615724535755642333160849159112761248500228112484078190193233438902876221669847967891608681689415386814256726789420911035895083285316382845304801021873365547384372842191464357299330890863192544288127488897881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45d657224c3f845e3f97d1f69dcef21afe7c0ed5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6ed53ec01c2f71c93cbf494eef6a5548ecd1f238
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'KAFFEEKASSE.embedded.rwth-aachen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaffeekasse.embedded.rwth-aachen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/rwth-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/rwth-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (188 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/rwth-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/rwth-ca/pub/cacert/cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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