vpn.s.c.fraunhofer.de

- Fraunhofer -

Issued by Fraunhofer Service CA - G02

About this certificate

This digital certificate with serial number 1e:d9:87:c7:36:e2:58:ca:ac:ec:61:88 was issued on by Fraunhofer.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fraunhofer

Organization: Fraunhofer
Organization unit: Services
State / Province: Bayern
Locality: Muenchen
Country: DE

Fraunhofer

Organization: Fraunhofer
Organization unit: Fraunhofer Corporate PKI
State / Province: Bayern
Locality: Muenchen
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:d9:87:c7:36:e2:58:ca:ac:ec:61:88
Serial Number (int): 9547528391828805713251819912
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 45:7b:d4:0b:39:2b:12:c1:dd:48:47:c5:04:77:df:2b:2c:4b:b9:1b
AuthorityKeyId: 00:44:34:97:1c:1f:2b:99:26:8d:16:a7:1d:60:68:95:ed:9a:97:ae

Fingerprint (sha1): c8:0c:4d:f8:05:c0:15:09:3f:79:63:05:71:91:9c:b7:cb:d3:3f:15
Fingerprint (sha256): 01:44:99:5d:09:e1:54:52:7d:97:d9:b1:76:15:bc:e1:1a:4b:ac:0b:99:64:a2:28:8f:c8:63:9b:24:8a:82:0d

Issuing Certificate URL: http://cdp1.pca.dfn.de/fraunhofer-service-g2-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/fraunhofer-service-g2-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/fraunhofer-service-g2-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/fraunhofer-service-g2-ca/pub/crl/cacrl.crl

Check the revocation status for certificate vpn.s.c.fraunhofer.de

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.s.c.fraunhofer.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.s.c.fraunhofer.de
asa5585x-s.mgmt.c.fraunhofer.de
asa5585x1-s.mgmt.c.fraunhofer.de
asa5585x2-s.mgmt.c.fraunhofer.de
asa5585x.s.c.fraunhofer.de

Other certificates including the domain name fraunhofer.de

(limited to 100 certificates)
vhfraqototcs03.hec.fraunhofer.de
guest.mevis.fraunhofer.de
hmi-umfrage.iao.fraunhofer.de
www.iitb.fraunhofer.de
igb-bitwarden.igb.fraunhofer.de
wnlab.hhi.fraunhofer.de
webmail.fit.fraunhofer.de
nm-service.iais.fraunhofer.de
exilligare.iao.fraunhofer.de
bscw.izb.fraunhofer.de
applik-idz08.iee.fraunhofer.de
immufw-m.imm.fraunhofer.de
social.izm.fraunhofer.de
vceg.hhi.fraunhofer.de
vpn-gaeste-hh.ime.fraunhofer.de
netman.ipk.fraunhofer.de
www.umsicht-suro.fraunhofer.de
llcs-vi2.sit.fraunhofer.de
netsight.ise.fraunhofer.de
guest-lan2.zv.fraunhofer.de
vergabe-mks180.iese.fraunhofer.de
maverick.iao.fraunhofer.de
www.vision.fraunhofer.de
spitzentreffen.edu.cell.vfk.fraunhofer.de
kaa.iais.fraunhofer.de
vpn.fep.fraunhofer.de
iwu.crm.fraunhofer.de
tls1.ws.fraunhofer.de
filedirector.imw.fraunhofer.de
blockchain-europe.iml.fraunhofer.de
sharepoint.sit.fraunhofer.de
muc-gv-dna.aisec.fraunhofer.de
issues.mevis.fraunhofer.de
ksi.scai.fraunhofer.de
iwes-spoke-pri.intra.fraunhofer.de
pwsafe01.iis.fhg.de
applik-idz21.iee.fraunhofer.de
vpn.idmt.fraunhofer.de
vdi.izfp.fraunhofer.de
vindex.fit.fraunhofer.de
ivv-dd.list.fraunhofer.de
nettools.igd.fraunhofer.de
cq-publish2.ws.fraunhofer.de
projekte-lfs.iff.fraunhofer.de
ipa-uipath140.ipa.fraunhofer.de
humit.fit.fraunhofer.de
iap.list.fraunhofer.de
listsrv03.fraunhofer.de
status.arb.fhr.fraunhofer.de
vhfraqototaw01.hec.fraunhofer.de
keepass.iosb.fraunhofer.de
xcom.isst.fraunhofer.de
mellon.hhi.fraunhofer.de
maestral.fit.fraunhofer.de
cryptshare.fraunhofer.de
zerobin.sit.fraunhofer.de
aem-www.iese.fraunhofer.de
wqtool.igd.fraunhofer.de
vhfraqototwslb.hec.fraunhofer.de
mailn2.iis.fhg.de
vgw.iis.fraunhofer.de
subdepot.mevis.fraunhofer.de
wpa.emi.fraunhofer.de
www.isc.fraunhofer.de
blockchainlab-git.ipk.fraunhofer.de
www.aachen.fraunhofer.de
test.servicedesk.fraunhofer.de
gordian.ipa.fraunhofer.de
ildmz55.idmt.fhg.de
talentix.iml.fraunhofer.de
exim2.iao.fraunhofer.de
pathme.scai.fraunhofer.de
www.subi2ma.fraunhofer.de
vpn-gaeste.iosb-ast.fraunhofer.de
fener-webport.ise.fraunhofer.de
upload.c.fraunhofer.de
h2t.intern.ise.fraunhofer.de
ldap.ibmt.fraunhofer.de
piwik.ipk.fraunhofer.de
gitlab-i.eas.iis.fraunhofer.de
reaalmarketplace.universaal.info
kub001.iao.fraunhofer.de
download.scai.fraunhofer.de
openproject.sit.fraunhofer.de
helpdesk.imw.fraunhofer.de
data-h2t-el.ise.fraunhofer.de
ipib.ci.moez.fraunhofer.de
vpn.s.c.fraunhofer.de
vpn.ivi.fraunhofer.de
sand2.fokus.fraunhofer.de
diasim.igd-r.fraunhofer.de
miraculix-dmz.ivi.fraunhofer.de
portal.moez.fraunhofer.de
vpn.iem.fraunhofer.de
remote3.fraunhofer.de
zf-prognose.iao.fraunhofer.de
dynamo.sit.fraunhofer.de
dci2.easw2k.eas.iis.fraunhofer.de
support.igd-r.fraunhofer.de
tfs-extern.ibp.fraunhofer.de

Certificate

The complete raw certificate details for vpn.s.c.fraunhofer.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJDzCCB/egAwIBAgIMHtmHxzbiWMqs7GGIMA0GCSqGSIb3DQEBCwUAMIGPMQsw
CQYDVQQGEwJERTEPMA0GA1UECAwGQmF5ZXJuMREwDwYDVQQHDAhNdWVuY2hlbjET
MBEGA1UECgwKRnJhdW5ob2ZlcjEhMB8GA1UECwwYRnJhdW5ob2ZlciBDb3Jwb3Jh
dGUgUEtJMSQwIgYDVQQDDBtGcmF1bmhvZmVyIFNlcnZpY2UgQ0EgLSBHMDIwHhcN
MTgwMzI3MDkwOTEzWhcNMjAwNjI5MDkwOTEzWjB5MQswCQYDVQQGEwJERTEPMA0G
A1UECAwGQmF5ZXJuMREwDwYDVQQHDAhNdWVuY2hlbjETMBEGA1UECgwKRnJhdW5o
b2ZlcjERMA8GA1UECwwIU2VydmljZXMxHjAcBgNVBAMMFXZwbi5zLmMuZnJhdW5o
b2Zlci5kZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAModoYuJR31I
CmvYMGR9K/KHRdJFkoatthgmF8GdBVbLo2JNuVhWm5txnqR7ym4MoH5xtQVpiTKK
ss9GxUzspoYdFij6pCwI8CL0wRMhSq9lWQbFGfUQN16l4DEh/ohAogj/pbAVW5o8
oNnUJHXylSIls7cWGU0sXk0Ymb0Hx9fs9IHzHMmiLCc+myX82SWheN4/BsVYiWga
0314lnpzlpVeoE9dFyou4x4cx0eHGQ9o3TNjRqzoEAPoIVcck3Ore1/7AnaD0VdT
Rtg9LRuvYmBqQQw+TnVlHs1jXbUcwu2AF7OD4KSJEGWQfQGctu+QFqT68SrG6cTG
BPxIYSsys2kCAwEAAaOCBX4wggV6MFkGA1UdIARSMFAwCAYGZ4EMAQICMA0GCysG
AQQBga0hgiweMA8GDSsGAQQBga0hgiwBAQQwEQYPKwYBBAGBrSGCLAEBBAMIMBEG
DysGAQQBga0hgiwCAQQDCDAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwHQYDVR0OBBYEFEV71As5KxLB3UhH
xQR33yssS7kbMB8GA1UdIwQYMBaAFABENJccHyuZJo0Wpx1gaJXtmpeuMIGjBgNV
HREEgZswgZiCFXZwbi5zLmMuZnJhdW5ob2Zlci5kZYIfYXNhNTU4NXgtcy5tZ210
LmMuZnJhdW5ob2Zlci5kZYIgYXNhNTU4NXgxLXMubWdtdC5jLmZyYXVuaG9mZXIu
ZGWCIGFzYTU1ODV4Mi1zLm1nbXQuYy5mcmF1bmhvZmVyLmRlghphc2E1NTg1eC5z
LmMuZnJhdW5ob2Zlci5kZTCBnQYDVR0fBIGVMIGSMEegRaBDhkFodHRwOi8vY2Rw
MS5wY2EuZGZuLmRlL2ZyYXVuaG9mZXItc2VydmljZS1nMi1jYS9wdWIvY3JsL2Nh
Y3JsLmNybDBHoEWgQ4ZBaHR0cDovL2NkcDIucGNhLmRmbi5kZS9mcmF1bmhvZmVy
LXNlcnZpY2UtZzItY2EvcHViL2NybC9jYWNybC5jcmwwgesGCCsGAQUFBwEBBIHe
MIHbMDMGCCsGAQUFBzABhidodHRwOi8vb2NzcC5wY2EuZGZuLmRlL09DU1AtU2Vy
dmVyL09DU1AwUQYIKwYBBQUHMAKGRWh0dHA6Ly9jZHAxLnBjYS5kZm4uZGUvZnJh
dW5ob2Zlci1zZXJ2aWNlLWcyLWNhL3B1Yi9jYWNlcnQvY2FjZXJ0LmNydDBRBggr
BgEFBQcwAoZFaHR0cDovL2NkcDIucGNhLmRmbi5kZS9mcmF1bmhvZmVyLXNlcnZp
Y2UtZzItY2EvcHViL2NhY2VydC9jYWNlcnQuY3J0MIICbQYKKwYBBAHWeQIEAgSC
Al0EggJZAlcAdgBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWJm
t/r/AAAEAwBHMEUCIBDk9fJea4uYnclJy7lvOwcUJm6vl9UfDIFBKh3w7TX8AiEA
iW/l81cvWpVhXxDp7R+B71RoLsNvaWhQUFZ9oHp1f0oAdgDuS723dc5guuFCaR+r
4Z5mow9+X7By2IMAxHuJeqj9ywAAAWJmt/s7AAAEAwBHMEUCIQCXvy1E2DnQmxlp
/GGD6ysqskhjUviVKG2dGwjElN3UJAIgEubXXiBZ9Q8MUNJJKMLH5lfulY1E0Sdt
3TwGgbslAY4AdgBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWJm
t/v9AAAEAwBHMEUCIQCvMlag+rBwYjR69ubR5wpnflJ8QdkPBfJJiaPQoqFv4AIg
c9Q/iOJuYw1HLAZR+xxUEFbv2fAirmMzwXRsUkcFnfQAdQCq5wt/PLjVZshsLxaX
nJ9EX2mrDrRTVYmy93oDAQTzzQAAAWJmt/sOAAAEAwBGMEQCIBQ8ZkmDG/Da1Kf/
oC1IQ+QTHMdSUXyYMNEzbuKWf7oyAiAP/HfabfUik893XvmuZaNnlbEYYXiLnF6C
zZbQvwUmawB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABYma3
/aAAAAQDAEcwRQIgIuU6uUyV4SKTLzCNRrwlIVV4eKjF7dGMYQcKEpE4sHoCIQDO
rKUIeZWep5AiiJXlqKEl947M5Qi33Qw8+0jbME4UnzANBgkqhkiG9w0BAQsFAAOC
AQEAFqlnKOzP6WXwPm3FpJH+o4344XLpoHP0FoBz9+8Mtz6D0Gv9urSrbUXGrDb/
ww7s3L0SZcpV2tn/tN5G1wPu9dmMypiW4zgYgHjUQSe35egBYjN57hT93to5S5jF
jJj1+BViDvsJoYM2vZpRva8u/bN6q3EL3DwNufrhlPBBdMTgTq3lPhTRYVN2ONOs
Te9f4l3uH5q7jouiv6r8bIDpyrBQsxA+1eSsmMmqDAMCfSRkKS0rYUJwi9Atc685
/vqFQHQopRILak5zBYNE8PvG9a5VFL+6MvfPRcRvD634dbriqWPgx8iKSXhy/7G1
COYkDQnE6W/g28ma9U5z7Pv9yg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh2hi4lHfUgKa9gwZH0r
8odF0kWShq22GCYXwZ0FVsujYk25WFabm3GepHvKbgygfnG1BWmJMoqyz0bFTOym
hh0WKPqkLAjwIvTBEyFKr2VZBsUZ9RA3XqXgMSH+iECiCP+lsBVbmjyg2dQkdfKV
IiWztxYZTSxeTRiZvQfH1+z0gfMcyaIsJz6bJfzZJaF43j8GxViJaBrTfXiWenOW
lV6gT10XKi7jHhzHR4cZD2jdM2NGrOgQA+ghVxyTc6t7X/sCdoPRV1NG2D0tG69i
YGpBDD5OdWUezWNdtRzC7YAXs4PgpIkQZZB9AZy275AWpPrxKsbpxMYE/EhhKzKz
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9547528391828805713251819912
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fraunhofer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fraunhofer Corporate PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fraunhofer Service CA - G02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-27 09:09:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-29 09:09:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fraunhofer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vpn.s.c.fraunhofer.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25514749211283726654757596984698097050541600932788466404473243687341265258691001608497306976876524091918111057888600599304533384556627402217640089819202754489692176342229824037742065709138344391219632975771244484052681155064481265648665187678006742787804961282301163444285385766674517851658176223010206914360596483979070906636790051594340468707176273240154886261006986288159298022427269622945311013569286409828160970997990554998714784164832321162854130010041379397082931648174910113003010359373851216718068328107872700192789814562324818321807691191975749209738606524772085198985138068491747966701893749601296771625833
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							457bd40b392b12c1dd4847c50477df2b2c4bb91b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 004434971c1f2b99268d16a71d606895ed9a97ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (155 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.s.c.fraunhofer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asa5585x-s.mgmt.c.fraunhofer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asa5585x1-s.mgmt.c.fraunhofer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asa5585x2-s.mgmt.c.fraunhofer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asa5585x.s.c.fraunhofer.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/fraunhofer-service-g2-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/fraunhofer-service-g2-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (222 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/fraunhofer-service-g2-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/fraunhofer-service-g2-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0016a96728eccfe965f03e6dc5a491fea38df8e172e9a073f4168073f7ef0cb73e83d06bfdbab4ab6d45c6ac36ffc30eecdcbd1265ca55dad9ffb4de46d703eef5d98cca9896e338188078d44127b7e5e801623379ee14fddeda394b98c58c98f5f815620efb09a18336bd9a51bdaf2efdb37aab710bdc3c0db9fae194f04174c4e04eade53e14d161537638d3ac4def5fe25dee1f9abb8e8ba2bfaafc6c80e9cab050b3103ed5e4ac98c9aa0c03027d2464292d2b6142708bd02d73af39fefa85407428a5120b6a4e73058344f0fbc6f5ae5514bfba32f7cf45c46f0fadf875bae2a963e0c7c88a497872ffb1b508e6240d09c4e96fe0dbc99af54e73ecfbfdca