rubin.cbs.mpg.de

- Max-Planck-Gesellschaft -

Issued by MPG CA

About this certificate

This digital certificate with serial number 20:02:32:1e:e7:92:ab:f5:0c:85:25:35 was issued on by Max-Planck-Gesellschaft.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Max-Planck-Gesellschaft

Organization: Max-Planck-Gesellschaft
Organization unit: Max-Planck-Institut fuer Kognitions- und Neurowissenschaften
State / Province: Sachsen
Locality: Leipzig
Country: DE

Max-Planck-Gesellschaft

Organization: Max-Planck-Gesellschaft
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 20:02:32:1e:e7:92:ab:f5:0c:85:25:35
Serial Number (int): 9906174854335325789416138037
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 5d:14:5c:c8:62:ab:6f:c0:cf:40:d7:66:a0:a9:6b:39:b9:8f:56:62
AuthorityKeyId: 02:d6:1e:6e:09:ab:bf:58:65:a7:0a:3c:48:33:61:d1:ce:7d:c3:5b

Fingerprint (sha1): bf:39:36:99:b4:c3:eb:e4:e1:20:56:be:6c:83:21:11:eb:bc:ca:7d
Fingerprint (sha256): 01:2a:a9:5e:a3:f3:dd:ab:f9:d0:46:46:71:7c:ba:40:4e:20:a6:81:47:98:f2:bb:94:5d:c4:ad:b1:0c:77:ac

Issuing Certificate URL: http://cdp1.pca.dfn.de/mpg-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/mpg-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/mpg-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/mpg-ca/pub/crl/cacrl.crl

Check the revocation status for certificate rubin.cbs.mpg.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rubin.cbs.mpg.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rubin.cbs.mpg.de

Other certificates including the domain name mpg.de

(limited to 100 certificates)
vweb14.gwdg.de
reem.mpiwg-berlin.mpg.de
calc.init.mpg.de
gitlab.pks.mpg.de
mpicc.csl.mpg.de
srzadrest-e01.vw.iame.mpg.de
porta.bgc-jena.mpg.de
gitlab.intranet.mpl.mpg.de
kanboard.mpimp-golm.mpg.de
ex-mcsrv1.mpe.mpg.de
www.mpl.mpg.de
s2000-proxmox2.mpibpc.mpg.de
tickets.mpl.mpg.de
shibb-staging.mpcdf.mpg.de
www-legacy.csl.mpg.de
idp.bpcentral.biophys.mpg.de
gv-events.mpg.de
matomo.mpdl.mpg.de
labfolder.mpdl.mpg.de
krapiwa.mpipz.mpg.de
*.mpib-berlin.mpg.de
caramba.bgc-jena.mpg.de
gc-ticket.mpipz.mpg.de
aruba-master.mpikg.mpg.de
nc.molgen.mpg.de
aircapdata.is.tue.mpg.de
common-objective.is.tuebingen.mpg.de
public.web.mpg.de
travel-magic.aesthetics.mpg.de
bcw19.sf.mpg.de
helpdesk.mpimp-golm.mpg.de
ccp-cn01.eva.mpg.de
chlorobox.mpimp-golm.mpg.de
svn.test.mpi-klsb.mpg.de
nagiosext.biochem.mpg.de
vpngv.vw.mpg.de
srzsysmanage1.vw.mpg.de
deepspace.ice.mpg.de
bfish.neuro.mpg.de
sally.molgen.mpg.de
musawwaratgraffiti.mpiwg-berlin.mpg.de
rubin.cbs.mpg.de
knb.mpiwg-berlin.mpg.de
voipgwgefo1.vw.mpg.de
vweb14.gwdg.de
srvgvexp-c02.vw.mpg.de
nextcloud.mpi-klsb.mpg.de
rubinul.tuebingen.mpg.de
mph.tuebingen.mpg.de
colloquia.mpifr-bonn.mpg.de
pubweb.mpi-inf.mpg.de
gc-web.mpipz.mpg.de.mpipz.mpg.de
sslvpn1.mis.mpg.de
lp-bookings.age.mpg.de
lnxsrv-0.mpa-garching.mpg.de
stories.mmg.mpg.de
mail.mucam.mpg.de
fhi-fpr-02-chassis.gnz.mpg.de
proton-vle2.pc.linmpi.mpg.de
atlas-innovations.de
vweb14.gwdg.de
arc-lin-cpt04.mpib-berlin.mpg.de
ftp.mpdl.mpg.de
ncatmaid.tuebingen.mpg.de
db1.aei.mpg.de
csl.mpg.de
desktop.ipp-hgw.mpg.de
intranet.age.mpg.de
www.cbs.mpg.de
prometheus.mpi-inf.mpg.de
resourcespace.mpiwg-berlin.mpg.de
s1020-dc3.d200.bpc.mpg.de
oc.rz-berlin.mpg.de
wiki-virgo.esc.rzg.mpg.de
erebos02.demogr.mpg.de
cvpn01.mis.mpg.de
voucher2.mis.mpg.de
db.arevir.de
npsw-www.mpg.de
ecocn04.eva.mpg.de
kyblab.tuebingen.mpg.de
pc-t6-166.mpipz.mpg.de
voip.ice.mpg.de
scinote.molgen.mpg.de
imap.mis.mpg.de
oak.mpipz.mpg.de
hlltwiki.hll.mpg.de
mail.ip.mpg.de
wints1.pc.linmpi.mpg.de
ds11g-dps2.zmaw.de
typo3-01.mpp.mpg.de
sciform.fkf.mpg.de
wiki.hest.brain.mpg.de
messaging.evolbio.mpg.de
auth-services.vw.mpg.de
extlyncweb.neuro.mpg.de
npsw-xedit.mpg.de
neuro.rzg.mpg.de
hilprecht.mpiwg-berlin.mpg.de
voipgwgv1.vw.mpg.de

Certificate

The complete raw certificate details for rubin.cbs.mpg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9906174854335325789416138037
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Max-Planck-Gesellschaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MPG CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-07 09:46:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 23:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Leipzig'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Max-Planck-Gesellschaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Max-Planck-Institut fuer Kognitions- und Neurowissenschaften'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'rubin.cbs.mpg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 829006199192947726437411687076523376413741833344612262925028314510473047051631987314949049253992577659459761579721033182935384700054057896267416148651754050141675248562200428157094369285089930699272654602711215059540947203506036002542757333052927845550817498561372755358270160014016160931379557881993568155689894512064878193145894693156760559012892761796863437738140204163152974657061856958522612467495598472847889846396358690675961227806657844762331567426329907245115605580855685677499930921680169752149703755531544873757825784765187929189861068762620597610356976289433447359558708289001261163565092100942442196417456645987501949109498674163805212190460026937561496724411695571318474768129075384265595706974755003319855551896003166823067243382703773862911904190523161054527884518820957143680196546804596664489166749240636299525576839038076853086285447127412006075752127473010021472616205029799744680441557449796411859454947352164917712912423018889701434133083814891011768896149123272161044802101080378995730933861392643749609533029601284783860938537935202150940800763461729396550558937200342234385087894171413822556997790844347772761252394273201807339825693499034597670195575643204914406407214469017774750858542489710728638216475713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d145cc862ab6fc0cf40d766a0a96b39b98f5662
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 02d61e6e09abbf5865a70a3c483361d1ce7dc35b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubin.cbs.mpg.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/mpg-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/mpg-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/mpg-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/mpg-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (966 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (962 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00822d5da5551e6a2d903d97b8786061c5b9e7578996c2380373433d0b3cbdab2f7ca068a561fe7378cfd2af7eff3873044239c2e71f52dec4a314d72a4b6ed606c0cce3279e32ae7a8d7310b684a5e001e7ed7906e0e8fe9c6494a5323192d292ad2f134763a53ed2e81ac05e6df1a7a242d0f00115eb7201684a978d9a4165098ea4edeb2f54993bd8a3acbef6133c9a244c310157f0875c8f32da330f974e9cdb3539912c6a2e420175e7c862b291670161f64df2cb3ce243a2622278f338fec244795274de2fdcc57bcec68d82fa0eb85741dbf206bb8ad5119863f2420dff7fb5439121b2428335aa856bddc4fe23597f2e051d1fe9c41b45330723e95e19