retmaan.is.inf.uni-due.de

- Universitaet Duisburg-Essen -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 1f:df:c4:8c:ba:88:43:23:05:b8:f4:f0 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universitaet Duisburg-Essen

Organization: Universitaet Duisburg-Essen
Organization unit: Fachgebiet Informationssysteme
State / Province: Nordrhein-Westfalen
Locality: Duisburg
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:df:c4:8c:ba:88:43:23:05:b8:f4:f0
Serial Number (int): 9864553942051639111812969712
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 76:94:20:8d:36:f7:b7:44:f0:fa:26:25:8a:d5:8f:ad:74:31:2c:12
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 28:04:e9:aa:28:bd:ae:0c:23:a7:ee:71:d6:0f:ac:93:25:89:40:bf
Fingerprint (sha256): 02:58:f0:41:31:36:73:3a:84:a3:05:55:5a:48:2d:51:46:7e:46:46:73:70:da:19:23:d8:75:f0:c6:77:44:04

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate retmaan.is.inf.uni-due.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for retmaan.is.inf.uni-due.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

retmaan.is.inf.uni-due.de

Other certificates including the domain name uni-due.de

(limited to 100 certificates)
limesurvey.allgpsy.uni-due.de
allgpsy.uni-due.de
hivemanager-ng.wlan.zim.uni-due.de
r940xa-esx-bio09.cvis.uni-due.de
jira.is.inf.uni-due.de
mail1.wiwinf.uni-due.de
jack-hsn.s3.uni-due.de
nxcl.fwc-cim.uni-due.de
cebar-raumverwaltung.allgpsy.uni-due.de
limesurvey.allgpsy.uni-due.de
paluno.uni-due.de
gitlab.vs.uni-due.de
jack-server04.s3.uni-due.de
matush.wiwinf.uni-due.de
wiki.fsri.uni-due.de
nanoboard.iw.uni-due.de
www.elfe.wiwi.uni-due.de
www.mhb-mathematik.uni-due.de
vdi-vcsa01.win.uni-due.de
iot.energiemanagement.tgm.uni-due.de
kilives.vs.uni-due.de
moodle.uni-due.de
ns2.netz.uni-duisburg-essen.de
office.zim.uni-due.de
retmaan.is.inf.uni-due.de
www.syssec.wiwi.uni-due.de
sparql.es.uni-due.de
archiv.psychmeth.uni-due.de
insights-baumeister.allgpsy.uni-due.de
janus.theochem.uni-due.de
blogs.uni-due.de
www.elokov.wiwi.uni-due.de
shiny.ub.uni-due.de
fin-ztree.wiwinf.uni-due.de
isefs.uni-due.de
web01.mhci.uni-due.de
owoche.fsri.uni-due.de
otrs.uni-duisburg-essen.de
www.ebus.wiwi.uni-due.de
km-test.win.uni-due.de
www.is.inf.uni-due.de
stipendium.w.uni-due.de
piwik.w.uni-due.de
smtp.is.inf.uni-due.de
source.ub.uni-due.de
janus.theochem.uni-due.de
www.beagle.msm.uni-due.de
www.pim.wiwi.uni-due.de
services.ub.uni-due.de
etherpad.uni-due.de
lib-intel-test.ub.uni-due.de
paluno.uni-due.de
www.rwpc.msm.uni-due.de
commodiswiki.s3.uni-duisburg-essen.de
pim-umfrage.wiwinf.uni-due.de
*.gitpages.uni-due.de
jack-server18.s3.uni-due.de
server.uni-due.de
portal.wiwinf.uni-due.de
fruehstudium.w.uni-due.de
nanoboard.iw.uni-due.de
nc.tdr.uni-due.de
paluno.uni-due.de
www.oek.wiwi.uni-due.de
janus.theochem.uni-due.de
transformingtransport.paluno.uni-due.de
uee-web.wiwinf.uni-due.de
jack-server16.s3.uni-due.de
www.iis.wiwi.uni-due.de
pl10.physlab.uni-due.de
labbook-med.escience.uni-due.de
redmine.uni-due.de
www.wpunco.wiwi.uni-due.de
workshop.cinch.uni-due.de
autotool.fmi.uni-due.de
eggnog.is.inf.uni-due.de
vpn.uni-due.de
time2-3.uni-duisburg-essen.de
gitlab.theochem.uni-due.de
www.op-us.wiwi.uni-due.de
etherpad.uni-due.de
isefs.uni-due.de
www.mas.wiwi.uni-due.de
www.ebus.wiwi.uni-due.de
shop.uni-due.de
prozessportal.uni-due.de
www.bielschowsky.de
www.ibes.wiwi.uni-due.de
primo.uni-due.de
zim.web.uni-due.de
jack-romanistik.s3.uni-due.de
sse.uni-due.de
view-esx-bau01.cvis.uni-due.de
www.thp.uni-due.de
www.vs.uni-due.de
radius1.uni-duisburg-essen.de
campus.uni-due.de
gitlab.mas.uni-due.de
www.wida.wiwi.uni-due.de
stubo.w.uni-due.de

Certificate

The complete raw certificate details for retmaan.is.inf.uni-due.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJjDCCCHSgAwIBAgIMH9/EjLqIQyMFuPTwMA0GCSqGSIb3DQEBCwUAMIGNMQsw
CQYDVQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVz
IERldXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4t
UEtJMSUwIwYDVQQDDBxERk4tVmVyZWluIEdsb2JhbCBJc3N1aW5nIENBMB4XDTE4
MTAxMjA3MDIyNFoXDTIxMDExMzA3MDIyNFowgbExCzAJBgNVBAYTAkRFMRwwGgYD
VQQIDBNOb3JkcmhlaW4tV2VzdGZhbGVuMREwDwYDVQQHDAhEdWlzYnVyZzEkMCIG
A1UECgwbVW5pdmVyc2l0YWV0IER1aXNidXJnLUVzc2VuMScwJQYDVQQLDB5GYWNo
Z2ViaWV0IEluZm9ybWF0aW9uc3N5c3RlbWUxIjAgBgNVBAMMGXJldG1hYW4uaXMu
aW5mLnVuaS1kdWUuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq
ga1DThqBm0J7Jf95Ul5Y1cUVJoaddVVYP/alTvLdjAjA00VNN7k+h6SF9ZsmmLfZ
sXvNZ0e9rkFDGk7vgDr1+t/S09rhCC65W4AJQLiPw5ythMqo6qfnMlcGsEGnlpJM
8ao7Jv93OhlrwZanncU1feysjhRFOWcw4dN6+5yOQ+kYcJr7qDtXgUugmr+lLYSN
KxB214s04+43xyHUonkcUnvFcVaG1Ducwym47EaXBBpeq2mbRN9ubMzuRQuWL6u2
76oPkizS8a22kxGItvOEDQR5JRTK/HMCKe3tgnUXSugNblJYMpZQKURUdIMVgm25
HTXrlkCzfefs/a1fXh6DAgMBAAGjggXEMIIFwDBZBgNVHSAEUjBQMAgGBmeBDAEC
AjANBgsrBgEEAYGtIYIsHjAPBg0rBgEEAYGtIYIsAQEEMBEGDysGAQQBga0hgiwB
AQQDCDARBg8rBgEEAYGtIYIsAgEEAwgwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMC
BaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwHQYDVR0OBBYEFHaUII0297dE8PomJYrV
j610MSwSMB8GA1UdIwQYMBaAFGs6mIv58lOJ2uCtsjIeCR/oqjt0MCQGA1UdEQQd
MBuCGXJldG1hYW4uaXMuaW5mLnVuaS1kdWUuZGUwgY0GA1UdHwSBhTCBgjA/oD2g
O4Y5aHR0cDovL2NkcDEucGNhLmRmbi5kZS9kZm4tY2EtZ2xvYmFsLWcyL3B1Yi9j
cmwvY2FjcmwuY3JsMD+gPaA7hjlodHRwOi8vY2RwMi5wY2EuZGZuLmRlL2Rmbi1j
YS1nbG9iYWwtZzIvcHViL2NybC9jYWNybC5jcmwwgdsGCCsGAQUFBwEBBIHOMIHL
MDMGCCsGAQUFBzABhidodHRwOi8vb2NzcC5wY2EuZGZuLmRlL09DU1AtU2VydmVy
L09DU1AwSQYIKwYBBQUHMAKGPWh0dHA6Ly9jZHAxLnBjYS5kZm4uZGUvZGZuLWNh
LWdsb2JhbC1nMi9wdWIvY2FjZXJ0L2NhY2VydC5jcnQwSQYIKwYBBQUHMAKGPWh0
dHA6Ly9jZHAyLnBjYS5kZm4uZGUvZGZuLWNhLWdsb2JhbC1nMi9wdWIvY2FjZXJ0
L2NhY2VydC5jcnQwggNdBgorBgEEAdZ5AgQCBIIDTQSCA0kDRwB2AG9Tdqwx8DEZ
2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABZmcVaUAAAAQDAEcwRQIhAM/fnsm/
ZDpA17nU9K/+3ueSkUuRcRtPjOuoQkbOfA7VAiA5KJRZ7s5kdbkDeakHaYCjhEsL
5QW6ouqa9ItxVlQxWgB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3L
AAABZmcVaSwAAAQDAEcwRQIgVrAQHUOBGQSgiL9mZDJh2qo6HX1bvGqGfC11z4lO
tdsCIQDDNpMEMO+AIouTydiSgmWl+J6KHchJPPRoI0UCftM2SwB2AFWB1MIWkDYB
SuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABZmcVajQAAAQDAEcwRQIgAj6ZSlhU
l91e+L7V7wptkh4DoegLEyhCoGqFX4gbAqcCIQDCwyJUcMqVYubfq/W2z46sBTXL
S9OSxnHZKgFa1vd74AB2AKrnC388uNVmyGwvFpecn0RfaasOtFNVibL3egMBBPPN
AAABZmcVaSYAAAQDAEcwRQIhAJ5eHima/CpbUNahc+JyVL2A/zJagclG3OQ0XW1K
8NuFAiAX4Qfe5XvmdLstwse6utUQzjjyBlJRi0LF/mo0dbUCCQB3ALvZ37wfinG1
k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABZmcVa2MAAAQDAEgwRgIhAMh0aU5i
DzYOfRBANRCcIMlTNzC8RAC0xRGAcImIUrEfAiEAkTwN85p2NDizgkTKPDjhTSVH
gAOxLCHc2LAJpO9XNXAAdACkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3c
EAAAAWZnFW2FAAAEAwBFMEMCH1qVQ/wsLaWdsHJLUXqDBeAn6fOMlKQ+ZWLElM+n
N4cCIFzhGKJ8lKrfVsJLaSpiS9MATmjL8No6bu2m4v2xQzu6AHYARJRlLrDuzq/E
QAfYqP4owNrmgr7YyzG1P9MzlrW2gagAAAFmZxVuJAAABAMARzBFAiBGWveDjLCi
FhK6AsmF8Csl66CJXDp5d4gqaSvBa7QtyQIhAOs0M1D9QUsNe68f1SoqSu8TnRMW
8g5XaBP1UCl8EPGpMA0GCSqGSIb3DQEBCwUAA4IBAQCD0LEtl7bkjsfbXY1rGW8h
m7vEqhZPIrZgdD8uXLL1s18DFlNtfCZlojonidiQV5Yu/RMk80PpsmqPsxswLNen
mAQ2c8ozSj4gVb08U0a2sd9I+YZt0/5hvphIWLl8q2LJzPQ7nTjG4gAEbHlebrnm
DzIPbfLPvFjzVVsLf12yb+omY/3zG3YFfIfqbUcsxd9anl+vNycEJVf/MqhYLh1t
OrnyqUunJLig/4TrJpyyD3DrCHnquo2Gsxk2OAOK3pzmn6ZZiAimIHj1lvEjZ0Wv
DF+Cb/v7L0yeGiXu231QLzVRO9FglUn7gBDhqS3Ht3sTJdjcVI+eKNYeFLNyi/gG
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoGtQ04agZtCeyX/eVJe
WNXFFSaGnXVVWD/2pU7y3YwIwNNFTTe5PoekhfWbJpi32bF7zWdHva5BQxpO74A6
9frf0tPa4QguuVuACUC4j8OcrYTKqOqn5zJXBrBBp5aSTPGqOyb/dzoZa8GWp53F
NX3srI4URTlnMOHTevucjkPpGHCa+6g7V4FLoJq/pS2EjSsQdteLNOPuN8ch1KJ5
HFJ7xXFWhtQ7nMMpuOxGlwQaXqtpm0TfbmzM7kULli+rtu+qD5Is0vGttpMRiLbz
hA0EeSUUyvxzAint7YJ1F0roDW5SWDKWUClEVHSDFYJtuR0165ZAs33n7P2tX14e
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9864553942051639111812969712
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-12 07:02:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-13 07:02:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Duisburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Universitaet Duisburg-Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fachgebiet Informationssysteme'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'retmaan.is.inf.uni-due.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21524457861675889789030468264782586815595117441787669119736583321865406173370533733848515640908359662913174213478791933455187860753350549121242945435263687964486393282763796253188856863876804870152660673437725076640218826864710980449773370905551529163615651611217853287742006710470412783367830244574085745962476321195251868042497582298759273947506252156339861614110980571041547914531329978014326588777725419379310426960638229944035229857155011114784689814543529230368905927353262148758259567418163140503313333091746146033454433700779228085194564995452478224126499219096101515129724733676374253362391405097148609339011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7694208d36f7b744f0fa26258ad58fad74312c12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retmaan.is.inf.uni-due.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (845 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (841 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (560 bits)
								0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000166671569400000040300473045022100cfdf9ec9bf643a40d7b9d4f4affedee792
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:17|false]  
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:3|t:4|false]  
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:3|t:19|false]  
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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