dfg.de

- Deutsche Forschungsgemeinschaft e.V. -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 26:b4:13:07:d0:a4:63:41:95:3c:7d:06 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Deutsche Forschungsgemeinschaft e.V.

Organization: Deutsche Forschungsgemeinschaft e.V.
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 26:b4:13:07:d0:a4:63:41:95:3c:7d:06
Serial Number (int): 11978126889866379491612065030
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: c5:65:c8:e5:52:0d:49:aa:3c:49:1e:68:1c:7e:5b:ac:5c:a1:0a:e4
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 15:75:80:c2:ce:4e:14:f5:ee:8d:16:29:7c:57:1a:f8:72:78:26:45
Fingerprint (sha256): 01:f0:bf:b5:d8:05:08:38:27:d9:52:c4:42:fa:4c:df:2d:5b:90:9b:e8:44:ab:04:30:49:15:d9:66:6f:4e:10

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate dfg.de

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dfg.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dfg.de
as-ma.dfg.de
autodiscover.dfg.de
pop.dfg.de
as.dfg.de
mbx3.dfg.de
mbx2.dfg.de
mbx1.dfg.de
mbx.dfg.de
oa.dfg.de
smtp-intern.dfg.de
smtp-intern-unauth.dfg.de
srwgp781.int.dfg.de
srwgp783.int.dfg.de
srwgp784.int.dfg.de
srwgp785.int.dfg.de

Other certificates including the domain name dfg.de

(limited to 100 certificates)
fta.dfg.de
remote.dfg.de
dfg.de
mediathek.dfg.de
mail.dfg.de
remote.dfg.de
elan-t.dfg.de
elan.dfg.de
wlan.dfg.de
mbx.t.dfg.de
remote.dfg.de
konten-entw.dfg.de
mediant.dfg.de
jira.dfg.de
mx2.dfg.de
mediathek.dfg.de
ai-initiative.dfg.de
elan-entw.dfg.de
log-t.dfg.de
oos.dfg.de
log-t.dfg.de
jobs.dfg.de
autodiscover.t.dfg.de
ot.dfg.de
mediant.dfg.de
dfg.de
log.dfg.de
spamverdacht.dfg.de
fta-eval.dfg.de
elan.dfg.de
remote.dfg.de
log-t.dfg.de
telearbeit.int.dfg.de
srwgp319.dfg.de
jobs.dfg.de
captiveportal.dfg.de
uc.dfg.de
instrumentenkasten.dfg.de
mediant.dfg.de
elan-ci-entw.dfg.de
srlgp042.dfg.de
elan.dfg.de
dfg.de
dfggast.dfg.de
meeting.dfg.de
jobs.dfg.de
ics.t.dfg.de
dfg.de
konten-entw.dfg.de
log.dfg.de
wlan.dfg.de
remote.dfg.de
fta.dfg.de
www.sites.dfg.de
elan-entw-en.dfg.de
da.dfg.de
autodiscover.dfg.de
www.sites.dfg.de
uc.dfg.de
autodiscover.dfg.de
wlan.dfg.de
log-t.dfg.de
dfg.de
dfggast.dfg.de
itsm-web.int.dfg.de
elan.dfg.de
www.events.dfg.de
mediathek.dfg.de
*.dfg.de
elan.dfg.de
remote.dfg.de
eduroam.dfg.de
quicklink-t.dfg.de
elan-entw.en.dfg.de
konten-entw.dfg.de
www.sites.dfg.de
wlan.dfg.de
uc.t.dfg.de
elan.dfg.de
dfg.de
*.dfg.de
remote.dfg.de
itsm-web.int.dfg.de
ai-initiative.dfg.de
wlan.dfg.de
quicklink-t.dfg.de
log.dfg.de
vpn-tau.dfg.de
fta.dfg.de
ai-initiative.dfg.de
dfggast.dfg.de
groupware.dfg.de
remote-entw.dfg.de
dfg.de
dfg.de
wlan.dfg.de
dfggast.dfg.de
konten-entw.dfg.de
quicklink-t.dfg.de
dfg.de

Certificate

The complete raw certificate details for dfg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11978126889866379491612065030
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-30 09:59:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-30 09:59:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Deutsche Forschungsgemeinschaft e.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'dfg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 749298375042434759984188081171746632210065413577949618515793515446268654660043722413931679985094718589970791693733821295224606681506415658155547397238935425112062450931601932212851860438052167923811406807583521978674907222248184191131767480955729773869695316302120926693027424651803190431005437118820416151172230243458962140084783819740026939651902480923988284607960790293861343403499226395269808611376156975121534602627230640171988487583839452564367588146591193012347549763522752282118597248686526815735160380271165782006739969691103519501163573807120990875092738383854968874392933963818035879294843832175863707665158666539994230520063959627162249720805065314513444726389907715271081655220290200025258271422360868026653570661887742789254186175471823743924155469014988030788804361816815188227713665731446053512909728736766198070823441183373583458274589636422108254157890891135926763284179173418462813209040225572150144033618129706061478705932499684732650587464682358970536273902937693689159100458343942948739882334436857045488612724402041052572991608785692085680847744945768596819998289511670050761813447287090753042680962411303876413251470796044019894990352598471606352215203024827388552383453704475821122346584912317246914949902253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.10
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c565c8e5520d49aa3c491e681c7e5bac5ca10ae4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (263 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'as-ma.dfg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.dfg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop.dfg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'as.dfg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbx3.dfg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbx2.dfg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbx1.dfg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbx.dfg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oa.dfg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp-intern.dfg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp-intern-unauth.dfg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srwgp781.int.dfg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srwgp783.int.dfg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srwgp784.int.dfg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srwgp785.int.dfg.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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