www.rackstation.ant.uni-bremen.de

- Universitaet Bremen -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 27:84:5f:ca:7b:65:07:66:a4:ae:ba:0f was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universitaet Bremen

Organization: Universitaet Bremen
State / Province: Bremen
Locality: Bremen
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 27:84:5f:ca:7b:65:07:66:a4:ae:ba:0f
Serial Number (int): 12229945951171285413696289295
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: a1:b0:38:72:e6:d6:9f:b3:a7:2c:d6:c2:65:f8:b7:8f:c5:ab:63:26
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 6f:bb:9f:d0:dd:e4:0b:6b:8c:f8:00:99:ff:f8:88:6b:f2:0d:3f:ca
Fingerprint (sha256): 00:d7:d6:d1:b8:f0:c8:f4:ea:b6:c6:29:42:4b:3a:2e:2e:4a:f2:5e:83:33:c1:59:f2:ee:c6:7e:4a:fc:6b:0f

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate www.rackstation.ant.uni-bremen.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rackstation.ant.uni-bremen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.rackstation.ant.uni-bremen.de
rackstation.ant.uni-bremen.de

Other certificates including the domain name uni-bremen.de

(limited to 100 certificates)
cama.uni-bremen.de
www.zrf.uni-bremen.de
www.zkpr.uni-bremen.de
psychstat.uni-bremen.de
elearning.uni-bremen.de
www.igmr.uni-bremen.de
www.tdv.uni-bremen.de
www.agcom.uni-bremen.de
www.iaas.uni-bremen.de
www.rackstation.ant.uni-bremen.de
nagios.ref54.uni-bremen.de
jitsi.vm.uni-bremen.de
www2.iniis-neu.uni-bremen.de
agim.uni-bremen.de
www.mm2014.uni-bremen.de
mail.biba.uni-bremen.de
www.sfb597b1.uni-bremen.de
www.psychologie.uni-bremen.de
www.biba.uni-bremen.de
www.informatik.uni-bremen.de
claudialubert.de
chisame.informatik.uni-bremen.de
www.isdmm15.uni-bremen.de
www.fb8.arcgisserver.uni-bremen.de
www.vfwf.uni-bremen.de
www.soziologie.uni-bremen.de
ai-comm.informatik.uni-bremen.de
www.iuv.uni-bremen.de
ctf.onoc.eu
tc-http3.testcenter.zmml.uni-bremen.de
toychest.ai.uni-bremen.de
nagios.informatik.uni-bremen.de
va-web.zmml.uni-bremen.de
ident.uni-bremen.de
www.am-course.uni-bremen.de
www.bccms.uni-bremen.de
www.wl.uni-bremen.de
soft.zfn.uni-bremen.de
crm.akademie.uni-bremen.de
www.zait.uni-bremen.de
www.infotag.uni-bremen.de
ease.informatik.uni-bremen.de
www.pflegechancen.uni-bremen.de
jupyter.zmml.uni-bremen.de
obrezkov.informatik.uni-bremen.de
www2.ew-lehramt.uni-bremen.de
gitlab.suub.uni-bremen.de
www.lpka.uni-bremen.de
litmus.informatik.uni-bremen.de
www.regionalentwicklung.uni-bremen.de
www.politikdidaktik.uni-bremen.de
www.celina.uni-bremen.de
bscw.ips.biba.uni-bremen.de
www.ingenieurinnen-sommeruni.uni-bremen.de
www.verdi.uni-bremen.de
www.deutschlandstudien.uni-bremen.de
www.wiwiselbsttest.uni-bremen.de
klima.uni-bremen.de
kipos.informatik.uni-bremen.de
scheinwerfer.uni-bremen.de
cast.zmml.uni-bremen.de
egroupware.zarm.uni-bremen.de
guest.wlan.uni-bremen.de
scheinwerfer.uni-bremen.de
mailman.zarm.uni-bremen.de
www.vivatop.de
www.ecophysiology.uni-bremen.de
gitlab.zarm.uni-bremen.de
tc-ueb2.testcenter.zmml.uni-bremen.de
oae.zmml.uni-bremen.de
umfrage.ips.biba.uni-bremen.de
www.soziologie.uni-bremen.de
www.spruehkompaktieren.uni-bremen.de
ikap-web.biba.uni-bremen.de
moin-test.uni-bremen.de
www.erasmus-initiative.uni-bremen.de
contradictionstudies.uni-bremen.de
www.soziologieselbsttest.uni-bremen.de
ines.zfn.uni-bremen.de
www.nwt18.uni-bremen.de
www.wikifg22.uni-bremen.de
rocketchat.zarm.uni-bremen.de
www.fpb.uni-bremen.de
www2.fb6.uni-bremen.de
srv-jr-www.vw.uni-bremen.de
www.europeanstudies.uni-bremen.de
transair.informatik.uni-bremen.de
www.hospo.uni-bremen.de
gerhard.meyer.uni-bremen.de
bbb-1.elearning.uni-bremen.de
ldap-cart.informatik.uni-bremen.de
www.crie-umfrage.uni-bremen.de
www.kinder-uni.uni-bremen.de
www2.fb8.uni-bremen.de
gitlab.csl.uni-bremen.de
dmis.math.uni-bremen.de
toychest.ai.uni-bremen.de
cslog-nas01.informatik.uni-bremen.de
mailman.zfn.uni-bremen.de
www.diagnostik.uni-bremen.de

Certificate

The complete raw certificate details for www.rackstation.ant.uni-bremen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12229945951171285413696289295
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-04 09:58:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 09:58:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Universitaet Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.rackstation.ant.uni-bremen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 930810149466983405625304494845458695276231234485616375253578751215172161694509510382414317242431761514482542188103377246337631243918059607464383604260629258994100460377946570104639596655330127183842757367165772095843590198737032854508891807186879237612857801327731457597945673434886807275562423288494674684693928245185366419515604874151415724954526436916743712785528142445234172055824991114713274482979033393589655971973281745862310257314634026486397850761054185947462801228669067526586381777993502055234720754603498343495965384949379133174365601935381918084395762904905319256985934900086817708470468308832097497016837525053068732641882552134053636123319136947855259288258719351423426140110652013815578862484175825210032363776004222889605986165150162774053718676442703987003580326107018591336404013851457899021047356487880859564428864367251441062955319322211102956687424072772569749888699240473327396082117580456565713290128192743073244307017708691950338318218222316683664249452765603447109005427911265931136100617281244195114972969176459213659888878963942146555564192740773518407725793302343942344638506788933393797437727487419731250260250871338802971077801094172632844721512907826201619632381707754532671844225088022269028851291877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.10
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1b03872e6d69fb3a72cd6c265f8b78fc5ab6326
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rackstation.ant.uni-bremen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rackstation.ant.uni-bremen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003768bdadd6806f344b9722bb19b0055387a15bb72be0587d7ae6476e0b8e3e30d121a1d13d25930beb8d53cb65ed56d9a132de852e69313db94e007c6e11264d4f3e0fbe9cc42966d7a98b669fcee3c54108dbf4ff4976073e1b79b373ef5a6150f0f38997880e017d4b0efca37e5cc1589bbe0297324854f1b034b173ef43f2914a08d1f0a2c8e563d843b6e6f410b98cd2a0f4611fc139b69156d35519d5b69d57c4f7d295b0fe960cda8f8ac22ac2ad89b913981633c8ad08f3f6d8b0a04d32f7e5ec3be57e21d4a0487b0ea93d51933335e77fe7207f37a12100411ca3ac65edb4deeddca435aaf945b01b56630519861d6b91109674311a50b36e490410