ivva-ref2.id-ref-bug.it.bund.de

- Informationstechnikzentrum Bund (ITZBund) -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number ff:02:97:e2:4f:81:38:c9:7b:48:3d:88:28:6f:28:97 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Informationstechnikzentrum Bund (ITZBund)

Organization: Informationstechnikzentrum Bund (ITZBund)
State / Province: Nordrhein-Westfalen
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): ff:02:97:e2:4f:81:38:c9:7b:48:3d:88:28:6f:28:97
Serial Number (int): 338966604092891032247520738568561436823
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: de:40:48:0c:72:35:d9:d7:5d:4d:59:82:79:d0:96:67:59:60:4a:72
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 1c:99:d8:b4:8b:a7:49:1b:22:c8:ba:02:7a:8d:ff:42:26:dc:51:ae
Fingerprint (sha256): 01:8f:0d:3f:01:79:3e:ca:9c:e2:80:71:9c:68:ee:ff:92:77:34:26:55:b2:ab:7a:41:78:a4:d9:40:fe:e6:cc

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate ivva-ref2.id-ref-bug.it.bund.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ivva-ref2.id-ref-bug.it.bund.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ivva-ref2.id-ref-bug.it.bund.de
www.ivva-ref2.id-ref-bug.it.bund.de

Other certificates including the domain name bund.de

(limited to 100 certificates)
eakte-i.cloud.bmel.in.bund.de
bundes.cloud.bmfsfj.in.bund.de
schulung5.eakte.zoll.in.bund.de
bamf.bund.de
vleaoq0wu5b9.git.cloud.bc-mgmt82.itz.in.bund.de
ctx02.bmwi.bund.de
20220922.cloud.bcsv.in.bund.de
oo-83b.cloud.bc-mgmt83.itz.in.bund.de
stu-extc.dvdv.bund.de
vlps7w4zstxe.petclin.cloud.itz.in.bund.de
cafm-tn1.cloud.bcsv.in.bund.de
vlphxc094986.login07.cloud.base.in.bund.de
amt3a.cloud.zoll.in.bund.de
promadmz.jki.bund.de
upload.prod.gsb.bmel.in.bund.de
schulung17.eakte.zoll.in.bund.de
access.bmjv.cloud.intranet.bund.de
bclogin3.bkamt.cloud.intranet.bund.de
artifactory.zssi.bva.in.bund.de
vlpvws2uyvwh.pvsplus1.cloud.zoll.in.bund.de
hosting.dwd.de
hosting.dwd.de
lernplattform.bund.de
vlpkrogq32qr.adminedge1c.cloud.bc-mgmt01.itz.in.bund.de
www.normenkontrollrat.bund.de
vlpzrtfbavdp.bmigate1.cloud.bmi.in.bund.de
access.itz.cloud.intranet.bund.de
editor.egesetz.zd.in.bund.de
vlpu6xc8ixat.my1stsalone60.cloud.bcsv.in.bund.de
vlpxub43mocj.testentw.cloud.stba.in.bund.de
redconf.itz.cloud.intranet.bund.de
hashdb.mwscan.bund.de
int.bpm-extern.bzst.itzbund.net
forum.bfdi.bund.de
personalhaushalt.prod.bmf.in.bund.de
schulung.eakte.bsh.itz.res.bund.de
api.mwscan.bund.de
formularcenter.bvl.bund.de
vlpgqfx8e9q8.craas-07.cloud.itz.in.bund.de
bmfbox6.cloud.bmf.in.bund.de
gittest.bc-mgmt01.cloud.intranet.bund.de
vlpmwvu2fhzh.eibos105.cloud.bcsv.in.bund.de
travis.baw.res.bund.de
cafm-ti1.cloud.bcsv.in.bund.de
sicherheit.bund.de
vlpgwu8436ks.bfgprodok.cloud.bfg.in.bund.de
formularcenter.bvl.bund.de
dzmgit05.bc-mgmt05.cloud.intranet.bund.de
redaktion.atu.gsb.bmi.in.bund.de
ref.xrechnung.bund.de
mob.bmz.bund.de
vlpv0rho8r42.pvsplus1.cloud.bmz.in.bund.de
eakte-t.cloud.base.in.bund.de
vlpc092q2btk.btsapqp.cloud.zitis.in.bund.de
dec230b.cloud.itz.in.bund.de
redaktion.atu.gsb.bmjv.in.bund.de
vlpjeue6bavk.cpmhhoch.cloud.itz.in.bund.de
ivva-ref2.id-ref-bug.it.bund.de
list.sozialwerk.bund.de
oo-06c.cloud.bc-mgmt06.itz.in.bund.de
accesst.cloud.itz.in.bund.de
gigis-s.bkg.bund.de
fis-vl.bvl.bund.de
vlepcwwjpbhu.ntp753.cloud.bpbdev05.itz.in.bund.de
amp1.cloud.zitis.in.bund.de
appladebaw2.front.test.adeba.wsv.itzbund.net
www.bamf.de
vlpmpsrojfsq.gwdpma2a.cloud.dpma.in.bund.de
vlppaksi2niz.mr15pp10.cloud.bcsv.in.bund.de
www.kvb.bund.de
amd3a.cloud.zoll.in.bund.de
sso.bvl.bund.de
eservice2022.itz.res.bund.de
oo-81c.cloud.bc-mgmt81.itz.in.bund.de
warnung.bund.de
vlpjaw7bbs1m.prodok-badv.cloud.badv.in.bund.de
vlph1rngvgyh.gwwsv2a.cloud.wsv.in.bund.de
webapp.staging.wire.zd.in.bund.de
vlpjbptohe77.gate745.cloud.eba.in.bund.de
cafm0322.cloud.bcsv.in.bund.de
amp3a.cloud.bpbdev01.itz.in.bund.de
vlpzw166d320.emakorv-cloud.cloud.itz.in.bund.de
vwpsl8qtdinb.bcwsus-05a.cloud.bcsv.in.bund.de
ilp03812.iamservice.iaas.itz.cloud.intranet.bund.de
sportal.bmi.in.bund.de
hosting.dwd.de
eakte-i.cloud.bkm.in.bund.de
bcadminjumphost.bc-mgmt05.cloud.intranet.bund.de
cafm1028.cloud.bcsv.in.bund.de
sibboxaa.cloud.bcsv.in.bund.de
cafm-tn2.cloud.bcsv.in.bund.de
ampvsp.cloud.bmf.in.bund.de
test.zbp.bund.de
vapil484joni.cloud.bc-mgmt01.itz.in.bund.de
ivbb.citrix.brh.intranet.bund.de
vlerfu14470s.login83.cloud.bpbdev01.itz.in.bund.de
vlpss8rhue2a.konsole04.cloud.bkamt.in.bund.de
amp7.cloud.bmdv.in.bund.de
confzent.itz.cloud.intranet.bund.de
dwh-integration.goaml.fiu.in.bund.de

Certificate

The complete raw certificate details for ivva-ref2.id-ref-bug.it.bund.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338966604092891032247520738568561436823
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Informationstechnikzentrum Bund (ITZBund)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ivva-ref2.id-ref-bug.it.bund.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 692981865318881750595114239927343080061213787339771395858806755701137059645967546149905299327434721501943437354387954482134113797845905486689120157190433904265180871842140542612204992190575509070322977496355406220271481010461068978113607956802390217899673017969440705681156158973890582257187143720066973821423584174141002798541898262722468355137919912296988177523663513666898304103135931627336402526860759608692608200991983762283332843245189532757718919881859010911374635133384565154875321859856622227455106751155662799255340127653645106314398621771198261448801510568862043652083164044242452956522232495672979101835400754262529315085176203513264551377278123697103579259300005636839765138081953243574797486784719562711277972330998260915082081921565615183859633869167734506062278775962884212318953092746807564476764660864708538110114658327217459795171222045841983375054831991226887356689442584482665420968987835874329198935945898904994902053746161915044333304850093600874090757712484532719279077621635424494932943919862662409945467133704192749187898230419533495177424013375747485725986149836532902529006492368296761714549870628803249067015797285179060360694421300782295857890431628840941572644937942783804656685747645002094422841674327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de40480c7235d9d75d4d598279d0966759604a72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a74000001860311037f0000040300483046022100b7ff4b73c6beb1105d379c1cb3f448fefab68a193888b5bc70d7b7a5cd20d213022100b7072df5c8a3c36713fbee34d1743e6847d904ad155d74c3d5b1805bfc545a0a007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000186031103460000040300463044022009809390bce6bb99f13efb7e633da989897c17520a52a35ebe70e46845f602b302203ebd1352869e621b8ff46802d273bae3c66963ad6ffc18ce1bfe27827d04839f007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018603110325000004030048304602210080c0e4f7d66e1b8f582debc2ba91894ee745f0b88aebea0737bff24a18b58e1102210092d3e4b69c0c04713136e86d45b5f0571f2c3d138721707bd2c52d0e5e0e3f96
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivva-ref2.id-ref-bug.it.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ivva-ref2.id-ref-bug.it.bund.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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