vpn-test.rhrz.uni-bonn.de

- Universitaet Bonn -

Issued by Universitaet Bonn CA

About this certificate

This digital certificate with serial number 14:c4:34:33:ff:ef:d9 was issued on by Universitaet Bonn.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DNSNames must have a valid TLD. (BRs: 3.2.2.4)
  • KeyUsage [DigitalSignature ContentCommitment KeyEncipherment] (00000111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • 1 DNS name(s) are bare public suffixes: vpn-test The domain SHOULD NOT have a bare public suffix (awslabs certlint)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Universitaet Bonn

Organization: Universitaet Bonn
Organization unit: Hochschulrechenzentrum
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

Universitaet Bonn

Organization: Universitaet Bonn
Organization unit: Hochschulrechenzentrum
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 14:c4:34:33:ff:ef:d9
Serial Number (int): 5845228023967705
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: d3:23:b0:3d:34:14:35:9f:f0:be:66:e0:c6:1c:0e:95:0a:3a:f6:4d
AuthorityKeyId: eb:37:d0:eb:d7:84:2e:46:9e:12:d3:b3:18:db:8d:e5:82:e4:68:a7

Fingerprint (sha1): 81:0d:78:f0:6d:ae:7c:fa:be:b8:b2:1d:be:77:47:c0:a9:b6:be:67
Fingerprint (sha256): 00:ba:52:6d:77:26:38:84:11:4b:e1:31:39:38:2d:26:06:9a:ad:47:01:ab:80:cc:c2:c1:d8:2a:26:9e:c1:db

Issuing Certificate URL: http://cdp1.pca.dfn.de/uni-bonn-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/uni-bonn-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/uni-bonn-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/uni-bonn-ca/pub/crl/cacrl.crl

Check the revocation status for certificate vpn-test.rhrz.uni-bonn.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn-test.rhrz.uni-bonn.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn-test
vpn-test-intern.rhrz.uni-bonn.de
vpn-test.rhrz.uni-bonn.de

Other certificates including the domain name uni-bonn.de

(limited to 100 certificates)
bbbfallback.informatik.uni-bonn.de
weblogin.physik.uni-bonn.de
iweb.meb.uni-bonn.de
www.tumorzentrum-bonn.de
gitlab.geo.uni-bonn.de
agp-vpn.rhrz.uni-bonn.de
www.vorklinikstage.uni-bonn.de
ems.math.uni-bonn.de
vpn-test.rhrz.uni-bonn.de
fdi-s3.uni-bonn.de
container-registry.hrz.uni-bonn.de
merry.ulb.uni-bonn.de
wiki.zem.uni-bonn.de
zveshop.verwaltung.uni-bonn.de
ins.uni-bonn.de
www.bonngutstage.uni-bonn.de
ortsnc.verwaltung.uni-bonn.de
cytometry.uni-bonn.de
trave.math.uni-bonn.de
bonfor.uni-bonn.de
xerox-og.meteo.uni-bonn.de
www1.hiskp.uni-bonn.de
ova-vpn.ova.uni-bonn.de
intranet.ais.uni-bonn.de
sp.uni-bonn.de
iweb.meb.uni-bonn.de
cens.uni-bonn.de
slk.informatik.uni-bonn.de
peene.math.uni-bonn.de
www.arithmeum.uni-bonn.de
mail.uni-bonn.de
gosa-dev.gosa.uni-bonn.de
www.bonngutstage.uni-bonn.de
webconf.meteo.uni-bonn.de
www.lms.uni-bonn.de
cytometry-ldap.uni-bonn.de
ad1.iai.uni-bonn.de
userserver.informatik.uni-bonn.de
hio-web-test.uni-bonn.de
proxmox-info4.cs.uni-bonn.de
chat.zem.uni-bonn.de
bbbfallback.informatik.uni-bonn.de
www.uni-bonn.de
sympa.vi.cs.uni-bonn.de
ea-author.rhrz.uni-bonn.de
cores.ukb.uni-bonn.de
web3.physik.uni-bonn.de
jester.uni-bonn.de
www.zhf.uni-bonn.de
confluence.bzh.uni-bonn.de
ad0.iai.uni-bonn.de
docs.physik.uni-bonn.de
www.lateinamerikazentrumstage.uni-bonn.de
k8stest-sealed-secrets.uni-bonn.de
agthoma.hiskp.uni-bonn.de
www.mnfstage.uni-bonn.de
styx.asta.uni-bonn.de
lwf-vpn.rhrz.uni-bonn.de
wiki.physik.uni-bonn.de
jhub.physik.uni-bonn.de
sms.wiwi.uni-bonn.de
csengine-test.rhrz.uni-bonn.de
mailer.ukb.uni-bonn.de
portal.grade-rc.de
imbie.meb.uni-bonn.de
admin-wiki.home.ins.uni-bonn.de
www.arithmeum.uni-bonn.de
prb.verwaltung.uni-bonn.de
butterbur05.iai.uni-bonn.de
www.or.uni-bonn.de
prb.verwaltung.uni-bonn.de
merry.ulb.uni-bonn.de
cores.ukb.uni-bonn.de
tools.net.cs.uni-bonn.de
warnow.math.uni-bonn.de
v-for1.ilb.uni-bonn.de
mail.ins.uni-bonn.de
www.uni-bonn.de
www.versoehnungstage.uni-bonn.de
www1.hiskp.uni-bonn.de
mx.hiskp.uni-bonn.de
sentry.hive.cs.uni-bonn.de
drze-vpn.rhrz.uni-bonn.de
www.philfak.uni-bonn.de
wahlen.uni-bonn.de
hicap.uni-bonn.de
pi01.hrz.uni-bonn.de
portal.grade-rc.de
intern.hrz.uni-bonn.de
warnow.math.uni-bonn.de
kata.doelger.uni-bonn.de
butterbur01.iai.uni-bonn.de
smtpclient-sol.iai.uni-bonn.de
ems.math.uni-bonn.de
smtpub.iai.uni-bonn.de
gast-bonnet4.uni-bonn.de
hcm.uni-bonn.de
tm.verwaltung.uni-bonn.de
rds-sap.verwaltung.uni-bonn.de
www.cb.uni-bonn.de

Certificate

The complete raw certificate details for vpn-test.rhrz.uni-bonn.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn5ebaz3lDZBcXJNxZTD
qz4Hep16dz6PLnKNcHoV0iFTeSd4xuweqBF/dPePI1e6F0/fNgy+HiBP9WRrpYmw
IS9UrtnjLmpb/+ZHiWiU9JRS8BgK4vAbD5HwXR+pnTPiIhCf4F0hTBQhtgGMT/YA
BFUpFps0RB+LiWrWJkcSu9lEgL/OaUWwYBh/HkPkzpRmlbMMLNLAi+vNN0HZJJQ2
NsoOIxwUcfM4A8HWold6LEoWpLbq+OTAaZrYZTITuMsqEOK6JhCMoZT75OFsedN7
u5P2Dci5vr3a0BT7Kq1CZjFbod+UaBWth+R1EEF2wc3SWN5RQ3s/Ho2450Px2Ak4
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5845228023967705
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universitaet Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hochschulrechenzentrum'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universitaet Bonn CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-11-15 09:32:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-31 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universitaet Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hochschulrechenzentrum'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn-test.rhrz.uni-bonn.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22532733091830933450432768988949545278251768592232136571777440857614331707205926819240918193853769029937693586163026827447394284902728694902968677725699237521374930046972482111934195314313330860235937735569778289309883357789583268739229811845278145515126572063143110976588883872351061177426205619930250921583264338617598907222532531007080635935199531764272138084565877109684053735024392053325031368240268308112962387140612951892055749218231315476800602412105802920353964313530581875922662313257615009523677160571120782146004053545200233743648164082259822281347048787802700372980100865706075284777602390539264967915663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d323b03d3414359ff0be66e0c61c0e950a3af64d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eb37d0ebd7842e469e12d3b318db8de582e468a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn-test'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn-test-intern.rhrz.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn-test.rhrz.uni-bonn.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/uni-bonn-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/uni-bonn-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (196 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/uni-bonn-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/uni-bonn-ca/pub/cacert/cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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