pwsafe01.iis.fhg.de

- Fraunhofer -

Issued by Fraunhofer Service CA - G02

About this certificate

This digital certificate with serial number 27:84:47:be:ab:cd:16:c7:c1:99:31:a1 was issued on by Fraunhofer.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fraunhofer

Organization: Fraunhofer
State / Province: Bayern
Locality: Muenchen
Country: DE

Fraunhofer

Organization: Fraunhofer
Organization unit: Fraunhofer Corporate PKI
State / Province: Bayern
Locality: Muenchen
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 27:84:47:be:ab:cd:16:c7:c1:99:31:a1
Serial Number (int): 12229832396502822478866362785
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 41:cf:c4:ef:0b:2b:26:f7:b3:53:6d:14:de:66:3c:61:09:dc:6e:aa
AuthorityKeyId: 00:44:34:97:1c:1f:2b:99:26:8d:16:a7:1d:60:68:95:ed:9a:97:ae

Fingerprint (sha1): f8:ca:7b:72:df:1d:85:86:72:01:cc:b8:54:69:0f:8c:d0:7a:a4:e7
Fingerprint (sha256): 00:79:59:1e:63:d2:88:2a:53:cd:55:9d:d8:a0:8a:0e:54:61:a3:ce:5a:5e:ef:05:22:6b:01:c7:17:ea:b5:89

Issuing Certificate URL: http://cdp1.pca.dfn.de/fraunhofer-service-g2-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/fraunhofer-service-g2-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/fraunhofer-service-g2-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/fraunhofer-service-g2-ca/pub/crl/cacrl.crl

Check the revocation status for certificate pwsafe01.iis.fhg.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pwsafe01.iis.fhg.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pwsafe01.iis.fhg.de
pwsafe01.iis.fraunhofer.de

Other certificates including the domain name fhg.de

(limited to 100 certificates)
netsight.ise.fraunhofer.de
vergabe-mks180.iese.fraunhofer.de
www.vision.fraunhofer.de
tls1.ws.fraunhofer.de
blockchain-europe.iml.fraunhofer.de
pwsafe01.iis.fhg.de
vdi.izfp.fraunhofer.de
aem-www.iese.fraunhofer.de
mailn2.iis.fhg.de
vgw.iis.fraunhofer.de
www.isc.fraunhofer.de
www.aachen.fraunhofer.de
ildmz55.idmt.fhg.de
talentix.iml.fraunhofer.de
www.subi2ma.fraunhofer.de
foreman.iis.fhg.de
fener-webport.ise.fraunhofer.de
h2t.intern.ise.fraunhofer.de
data-h2t-el.ise.fraunhofer.de
www.enas.fraunhofer.de
rds-apps01.ise.fraunhofer.de
vpnf.iml.fraunhofer.de
mail.iaf.fraunhofer.de
www.iosb-ina.fraunhofer.de
www.eitrawmaterials.fraunhofer.de
izmmes100.berlin.izm.fhg.de
iseadmin11.iis.fhg.de
*.vlog-services.iml.fraunhofer.de
webserv01.iis.fraunhofer.de
www.mes-logistics.de
lsc.ise.fraunhofer.de
webserv01.iis.fraunhofer.de
d-xc.iml.fraunhofer.de
aem-info.ws.fraunhofer.de
henkesblog.iml.fraunhofer.de
stats.ise.fraunhofer.de
www.enabling-innovation.fraunhofer.de
solcooldry.ise.fraunhofer.de
svn.itwm.fhg.de
otrs-ng.iml.fraunhofer.de
www2.iis.fraunhofer.de
pv2go.org
ildmz18.idmt.fraunhofer.de
smc.emi.fhg.de
traveler01.ise.fraunhofer.de
www.dresden.fraunhofer.de
www.ki.fraunhofer.de
ftp.fraunhofer.de
vvp.itwm.fhg.de
eda-sync.iis.fraunhofer.de
magnopay.iis.fraunhofer.de
faq.ise.fraunhofer.de
www.pyco.fraunhofer.de
www.ipms.fraunhofer.de
matter320.iml.fraunhofer.de
mobile.zentrale.zv.fhg.de
mattermost.itwm.fraunhofer.de
forms.ise.fraunhofer.de
www.ibp.fraunhofer.de
helpdesk.iis.fhg.de
www.muse.iao.fraunhofer.de
www.lbf.fraunhofer.de
ildmz61.idmt.fraunhofer.de
www.aal.fraunhofer.de
redmine.ise.fraunhofer.de
www.resiloc.org
www.emb.fraunhofer.de
listserv.itwm.fraunhofer.de
www.kodis.iao.fraunhofer.de
www.ivv.fraunhofer.de
ies02.ise.fraunhofer.de
www.forschungsfertigung-batteriezelle.fraunhofer.de
www.wasserstoff.fraunhofer.de
seafile.idmt.de
dms-bpmstage.zentrale.zv.fhg.de
wp-monitoring.ise.fraunhofer.de
foren.int.fraunhofer.de
www.light-and-surfaces.fraunhofer.de
mailgw2.iis.fraunhofer.de
vwww01.ws.fraunhofer.de
www.testlogistik.fraunhofer.de
www.iosb.fraunhofer.de
ldap01.iis.fhg.de
heat4u.ise.fraunhofer.de
probatio.fep.fhg.de
www.manitu.fraunhofer.de
resourcespace.intern.ise.fraunhofer.de
ccpe.iml.fraunhofer.de
nc.ise.fraunhofer.de
www.imk.fraunhofer.de
bib.iese.fraunhofer.de
mail7.isi.fraunhofer.de
www.hyperspektral.fraunhofer.de
ildmz51.idmt.fraunhofer.de
ddr-run.ise.fhg.de
owa.emi.fhg.de
mgmtmatrix42.isi.fraunhofer.de
innoradar.iml.fraunhofer.de
freiburg.fraunhofer.de
vms39.intern.int.fhg.de

Certificate

The complete raw certificate details for pwsafe01.iis.fhg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSl26bxIPofWbKQYr28P
kgirwbkyiU6k8Gblh4auZmocldvHlByD6xA4bRXaeavv4+n76OdiKLZ7p4zs5NzP
QX/tPDpx0X7CPwLBGwLkGRDviLzI3g3nrmmYkCSZ3EodjcEe9FNcnPXJ6XcS9Oxt
fctU+CXHtv63vSssF7fhlxkOAYj0wRzOLyO5aL8ULol7AZtZXg4w1wZU9gSeDKAe
VnI7KHVsoGoF5VTxOVVU4ceHjchNQlpJJbixhF549QvwFJeJe8DXnr+hpShq0LaD
bSsnNq4QKz+4iuBfRKfVf04JtKaqZx+GiUAfaQTczGpjvW6dIxk4T28rzxDVuV99
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12229832396502822478866362785
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fraunhofer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fraunhofer Corporate PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fraunhofer Service CA - G02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-04 08:15:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 08:15:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fraunhofer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'pwsafe01.iis.fhg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24889392987312715515486942409399405772671151097799397134864284977499975091016988578147866872451949469274750685059973688777372381607654889260842342030244223825801430166127697782548636931708033081954791376723087743078594666674227837022315634662996988976300663696982547613431266456501798749337598842171468109620032675974921011459638777845736613138935161632782691960032387061927896703369161591470724238331768711539760860286151523712507367314521985774521517924607458433581218549628566032143751929374976834362430878077784348305213267216655523227657282678654188472599757707958171850240595062099164418329513105302770883198269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.10
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							41cfc4ef0b2b26f7b3536d14de663c6109dc6eaa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 004434971c1f2b99268d16a71d606895ed9a97ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwsafe01.iis.fhg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwsafe01.iis.fraunhofer.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/fraunhofer-service-g2-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/fraunhofer-service-g2-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (222 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/fraunhofer-service-g2-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/fraunhofer-service-g2-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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