cil.bbaw.de

- Berlin-Brandenburgische Akademie der Wissenschaften -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 20:28:b6:a8:5a:ff:a8:51:0e:6b:b6:7e was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Berlin-Brandenburgische Akademie der Wissenschaften

Organization: Berlin-Brandenburgische Akademie der Wissenschaften
Organization unit: Informationstechnologie
State / Province: Berlin
Locality: Berlin
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 20:28:b6:a8:5a:ff:a8:51:0e:6b:b6:7e
Serial Number (int): 9952739923377658673377293950
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: d1:56:5a:ed:58:e7:68:46:61:8b:08:ec:d4:9b:6c:23:f5:53:ac:ed
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 45:52:c7:21:e3:d1:b8:fe:b3:89:61:53:4a:49:e9:57:22:52:96:32
Fingerprint (sha256): 00:9a:b3:f3:ea:4f:a1:d8:6c:4c:cd:d5:9e:51:43:e7:81:fd:95:e2:db:8e:87:2d:be:eb:2b:e0:b3:16:ca:a2

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate cil.bbaw.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cil.bbaw.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cil.bbaw.de

Other certificates including the domain name bbaw.de

(limited to 100 certificates)
cil.bbaw.de
telotawebpublic.bbaw.de
nubes.bbaw.de
telotawebdev.bbaw.de
gorkon.bbaw.de
achard.bbaw.de
abfallenergieverwertung.bbaw.de
bibelexegese.bbaw.de
wirt1.bbaw.de
login.bbaw.de
veranstaltungszentrum.bbaw.de
virtuelles-schuelerlabor.bbaw.de
bareos-director.bbaw.de
mgh.bbaw.de
bureau.bbaw.de
brainudl.bbaw.de
aaew.bbaw.de
praesidenten.bbaw.de
gitlab.bbaw.de
mx1.bbaw.de
zeugs.bbaw.de
devbib.bbaw.de
cil.bbaw.de
shibboleth.bbaw.de
mailman.bbaw.de
census.bbaw.de
wsus64.bbaw.de
cmg.bbaw.de
www.gentechnologiebericht.de
clarin.bbaw.de
ldap.bbaw.de
edoc.bbaw.de
syslog.bbaw.de
vimes.bbaw.de
proxy.bbaw.de
cmg.bbaw.de
xmlpublic.bbaw.de
forschungsdatenmanagement.bbaw.de
telotadev.bbaw.de
www.bbaw.de
bureau.bbaw.de
akademieregistres.bbaw.de
pdrprod.bbaw.de
xmledit.bbaw.de
praesidenten.bbaw.de
login.bbaw.de
achard.bbaw.de
mailman.bbaw.de
www2.bbaw.de
actaborussica.bbaw.de
telotadev.bbaw.de
pdrprod.bbaw.de
eduroam2.bbaw.de
www.correspsearch.net
proxy2.bbaw.de
mailix.bbaw.de
digiclass.bbaw.de
mailix2.bbaw.de
aaew-dev.bbaw.de
lebenswelten-digital.bbaw.de
shibboleth.bbaw.de
brainudl.bbaw.de
mailix.bbaw.de
wwwdev.bbaw.de
gaerten.bbaw.de
vimes.bbaw.de
gerechtigkeit.bbaw.de
census-lod.bbaw.de
login2.bbaw.de
brainjae.bbaw.de
hws.bbaw.de
ldap.bbaw.de
kollokationen.bbaw.de
telotadev.bbaw.de
edoc.bbaw.de
shibboleth.bbaw.de
frauenvertretung.bbaw.de
bibliothek.bbaw.de
kant.bbaw.de
vimes.bbaw.de
agora.bbaw.de
bibelexegese.bbaw.de
edition-humboldt.de
t3extern.bbaw.de
mittelalterzentrum.bbaw.de
tla.bbaw.de
actaborussica.bbaw.de
tableau.bbaw.de
dschutz.bbaw.de
ostwald.bbaw.de
encoding-correspondence.bbaw.de
forschungsdatenmanagement.bbaw.de
avh-r.bbaw.de
cil.bbaw.de
aaew.bbaw.de
hippo.bbaw.de
agora.bbaw.de
hippo.bbaw.de
idqw.bbaw.de
inetbbaw.bbaw.de

Certificate

The complete raw certificate details for cil.bbaw.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGx2xnFFp6J7LLifQDBa
7OQHIWqo1wefX++Xwm3QKhQHQVfFodA3qadcdYUExc4ToEnqEZHGY6uo3XkKPCJg
tv97nN0DeHRZNzZAjF+WbwMhXBVpEjSR0XhuJJ8eh2WpFwocDBSx4jVvgpeQh3jg
0Mf05lD8FyxXLrjxw34wUDDMKHtfq8J2WATwtmn2C/BmwusLFA0wi4syULVx/ldQ
aTftpHgSLgVoERpSMcbb1MyGJ4bLjpB2pKp6jR/dFd3GsRmqDYxeH+YQLQBlhWS3
fHCiHEi11XzFhFGqrhETnzq/LA1SR3tge/iVlAwdRwQxM9ANpCQl5b64tYkwicQe
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9952739923377658673377293950
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-06 14:58:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-09 14:58:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin-Brandenburgische Akademie der Wissenschaften'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Informationstechnologie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'cil.bbaw.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19746661149523813062141199134023746834044892257330755334316939265107402255705117001274403667047880266013253692737183130147970151947974518889531718275644128086236960596988760382006613673099548192240675779339307543347107946438158945688726511181195055142483220234349200744386566452513277748763968846202110024046955476335982963860760668717676631787068811322765808990897228110697858025221669483969282490801249334090109880933017467561386089082259395259923967828925081149636558836797930152179153765103755392286534309771744789587861333345335573705681163255993039449016535932185621918220022682796189789322675091742016137338479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1565aed58e76846618b08ecd49b6c23f553aced
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cil.bbaw.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (845 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (841 bytes)
							03470076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000167840726ca000004030047304502200277bf7633556422266f100447b4cbf411a86622140b959ddc43e6ec398d1f84022100d19d8e22cafe4dd280edddd86332aae1a08365df0c05ec2e796b8bdec79dd28e007500aae70b7f3cb8d566c86c2f16979c9f445f69ab0eb4535589b2f77a030104f3cd00000167840726c7000004030046304402205501bd72ea4c36d7470ef08e14fb0e7b867dcfcb40d4fe7e39c3e8f63a2e570302205350196dd3153ee169bdad7eb635ae49aaf3e5feab53201e1d4bb7112e0c49e8007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000167840726960000040300483046022100a201cbed6aa3b49822ea94e0f9ff0cc51defa4e5bff02460e0acf9620011459b02210087d73b654310364ebc3f282832077a890c76825434fbc3d1687a761a7c0bfe44007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001678407268b000004030046304402202b737c890737c2b763bbc92a69705e097ac9b86a0fc584acebae73070eb0757602201cbb70d27a1b80bd0055fb52a69f4543e5c9ebd56d706e0682e60fab07a055b70076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000167840727c8000004030047304502201ef32a9c56b172b041b88984686d92c39eb370c7eba8983caa9c4725fef5f157022100adcf8c7a578b50adb1169aa9745bcae8e3f78ac6923d2e087ed2584141e0e1a60077004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a8000001678407292e0000040300483046022100d968b84ab4227850bd6fe9ba97e48dc4eccd2ce215a99613c1fb17db8e6bce3f022100d2aab55fe0a916bc037978007cf181a8e778fe89d70a505cb04504c6652e43ae007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001678407269d0000040300463044022075a0971f54afd961d9238e9460a1cfa93cd948f58474ecc67ad4f4c65c4cae5f0220211ad48960491ce6c3a82191dc67caf5c2870b2ef8309e8f1899a134fe2a9671
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0009b7b52038519fa352b24d3d4ccb418267fd64e92f852054d16aa7a1f5cc460404cbabd82371a827a03f2ffe0eb26a92949a631aa0a4787be2f4672c5a5a08a7a8cd382ede45c30930b37de81a799a392f7a408df9d2a29b4426998e2b70db9a3ed8ebc46c1ecccbf10a9cdc352312b8cc66622229a2853e1464887f372b4d454b0119039d1f8c0159615038669035cc9718e98f05482d5d01c654535d1fc8f8e4921b2518cbb0c887de4ec69c55791a885668b26fd294b40638415f91c918b2e656ba680c7184b5c2607d85fcb0c4d9c565e64edf5f25d4eaa716432c64beecb410d37b3f93ce391a1dd8e635c9e55c0a45145859e8ae95af830f54168a1105