www.infsec.rub.de

- Ruhr-Universitaet Bochum -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 1e:b3:6c:57:1e:41:f3:e5:3a:8b:0e:90 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ruhr-Universitaet Bochum

Organization: Ruhr-Universitaet Bochum
Organization unit: Arbeitsgruppe Informationssicherheit
Organization unit: Fakultaet Elektrotechnik und Informationstechnik
State / Province: Nordrhein-Westfalen
Locality: Bochum
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:b3:6c:57:1e:41:f3:e5:3a:8b:0e:90
Serial Number (int): 9501459638978546878909189776
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: dc:68:10:1e:22:8e:de:76:73:b6:2c:d4:26:e7:b2:fb:a9:0a:32:25
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): c3:60:b9:53:d1:ad:65:82:06:3a:8f:33:8c:7c:6f:d7:e2:1f:88:18
Fingerprint (sha256): 02:60:92:58:33:d1:77:5f:80:f7:aa:de:96:1d:a9:af:48:08:9e:d7:d9:d6:48:67:e9:9a:46:2b:47:8b:f0:0c

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate www.infsec.rub.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.infsec.rub.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.infsec.rub.de
infsec.rub.de
www.infsec.ruhr-uni-bochum.de
infsec.ruhr-uni-bochum.de

Other certificates including the domain name rub.de

(limited to 100 certificates)
ldap.ruhr-uni-bochum.de
evaluation.physik.ruhr-uni-bochum.de
ipegespraeche.ruhr-uni-bochum.de
chat.dks.ruhr-uni-bochum.de
py-doc.hal.emsec.rub.de
www.cost-jet.eu
chat.ub.rub.de
rus.rub.de
ev-theol.egroupware.rub.de
hermod.itm.ruhr-uni-bochum.de
portal.et-cip.rub.de
www.sth.rub.de
www.linguistics.rub.de
web.physik.ruhr-uni-bochum.de
portal.et-cip.rub.de
zefirmailserver.zefir.rub.de
wav.physik.ruhr-uni-bochum.de
it-ausbildung.ruhr-uni-bochum.de
clonezilla.et-cip.ruhr-uni-bochum.de
repo.nds.ruhr-uni-bochum.de
wiki.wtech.rub.de
wav.physik.ruhr-uni-bochum.de
readerprinter-ub.egroupware.rub.de
praktika.wiwi.rub.de
zm1.vs.rub.de
web.physik.ruhr-uni-bochum.de
www.flexnow.rub.de
plas.ep2.ruhr-uni-bochum.de
digisign-02.it-services.ruhr-uni-bochum.de
wtech.rub.de
oc-worker03.ruhr-uni-bochum.de
ad-imtm.iaw.ruhr-uni-bochum.de
webnacht.et-cip.ruhr-uni-bochum.de
ub-zeitschriftenteam.egroupware.rub.de
exchange.wtech.rub.de
fsr-etits.et-cip.rub.de
www.theochem.ruhr-uni-bochum.de
enesys0011.enesys.ruhr-uni-bochum.de
noc.ruhr-uni-bochum.de
digikat.ub.rub.de
calendar.dks.ruhr-uni-bochum.de
unirep.zrs.ruhr-uni-bochum.de
www.zew.ruhr-uni-bochum.de
medizin.ruhr-uni-bochum.de
dbs-lin.rub.de
alexa-ba-2.cloud.syssec.rub.de
gwtp2.egroupware.rub.de
www.hfs.rub.de
api.ub.rub.de
www.infsec.rub.de
tracker-test.cloud.syssec.rub.de
astro.stat.ruhr-uni-bochum.de
it-ausbildung.ruhr-uni-bochum.de
digikat.ub.rub.de
nedi.noc.ruhr-uni-bochum.de
ifu.egroupware.rub.de
ls-csc.ruhr-uni-bochum.de
kea.vdi.ruhr-uni-bochum.de
groupware.physik.ruhr-uni-bochum.de
implant.rubion.ruhr-uni-bochum.de
gwmathe12.egroupware.rub.de
labhub.hal.emsec.rub.de
ikmk.ruhr-uni-bochum.de
synnas.wtech.rub.de
www.zew.ruhr-uni-bochum.de
zrsweb.zrs.rub.de
digikat.ub.rub.de
boskop.egroupware.rub.de
www.icams.de
praktika.wiwi.rub.de
syn.inf.bi.ruhr-uni-bochum.de
www.cost-jet.eu
forschung-test.ruhr-uni-bochum.de
datenschutz-wiki.de
bscw.iaw.rub.de
fluidvt.ruhr-uni-bochum.de
vcenter.glt.ruhr-uni-bochum.de
api.ub.ruhr-uni-bochum.de
noc.rub.de
ds.methoden.ruhr-uni-bochum.de
www.fluidvt.ruhr-uni-bochum.de
www.hgi.rub.de
nagios.physik.ruhr-uni-bochum.de
hgd.geographie.ruhr-uni-bochum.de
spw.physik.ruhr-uni-bochum.de
synnas.wtech.rub.de
www.ruhr-uni-bochum.de
offwebapps.uv.ruhr-uni-bochum.de
ap-imtm.iaw.ruhr-uni-bochum.de
www.tp1.rub.de
uni.ruhr-uni-bochum.de
ojs.ub.rub.de
repo.ub.rub.de
www.mobsec.rub.de
apps.uv.ruhr-uni-bochum.de
www.hfs.rub.de
zulip.wtech.rub.de
utrm.ruhr-uni-bochum.de
fluidvt.ruhr-uni-bochum.de
git.noc.ruhr-uni-bochum.de

Certificate

The complete raw certificate details for www.infsec.rub.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKEjCCCPqgAwIBAgIMHrNsVx5B8+U6iw6QMA0GCSqGSIb3DQEBCwUAMIGNMQsw
CQYDVQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVz
IERldXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4t
UEtJMSUwIwYDVQQDDBxERk4tVmVyZWluIEdsb2JhbCBJc3N1aW5nIENBMB4XDTE4
MDIyNjExMjYwNFoXDTIwMDUzMTExMjYwNFowgeUxCzAJBgNVBAYTAkRFMRwwGgYD
VQQIDBNOb3JkcmhlaW4tV2VzdGZhbGVuMQ8wDQYDVQQHDAZCb2NodW0xITAfBgNV
BAoMGFJ1aHItVW5pdmVyc2l0YWV0IEJvY2h1bTEtMCsGA1UECwwkQXJiZWl0c2dy
dXBwZSBJbmZvcm1hdGlvbnNzaWNoZXJoZWl0MTkwNwYDVQQLDDBGYWt1bHRhZXQg
RWxla3Ryb3RlY2huaWsgdW5kIEluZm9ybWF0aW9uc3RlY2huaWsxGjAYBgNVBAMM
EXd3dy5pbmZzZWMucnViLmRlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEA7Zcpum5eagsqgF/Z5892JcNORqN9X/VqFGrELPC0PjFqqREH0k4iuwl9hWam
yLudcRB7Dpko3w4uUVeRHO5Tuq2IuSHa56eAooL0KLjk0ppzknic+xzj6vOrpUr1
eotkOTyi8Rk3drQOFTpgWL2WJXMk1sxDCTIvTn33W0UrOHonCyF9TXfShRZ9CxSw
YDkUtN/id6rxXGvQabZyw4eDQD457OlifBxyiEGy51ziU2AWrSOw7PelNB2HQx2E
Lw0Ada7i3RLHDhY9pSOs/IaDyLhtsEI2djn4efjazpETH5flVeVcHbHjKDdJgpCL
WjBi4Ik/OyDY8E56QrNtXCY0zf5wMXUZr8dwgI7NX5QP57MM7qbO/HrxG3syJ9Qn
vwBUg84mz1W59IszWr4uxIpNCuJ2QHfiH4l04h6cUJccMJNyq3NpTTE790py1ulb
nsHGxiEITvu/s2EQCs8Lzlvn1uAUBzpg+3EwyWkgzQIw9+V/40W1Vd76pzurTMUw
0H9dAosNv/vVTcx1RwcL50+7ZtAOPonGtp5lHGAbN0gV9UevUQpAJ6Ub6lj1iFyG
Jcov3GKFCxSfq1BMZfk66Ipv2geJw+33Urw6KslEimccx/T8J4gxuo30crU7Duev
/Aj2uN4n8sMmRrvh4188alKzMm+mF6QacQTVw2S9osojPAUCAwEAAaOCBRYwggUS
MFkGA1UdIARSMFAwCAYGZ4EMAQICMA0GCysGAQQBga0hgiweMA8GDSsGAQQBga0h
giwBAQQwEQYPKwYBBAGBrSGCLAEBBAMHMBEGDysGAQQBga0hgiwCAQQDBzAJBgNV
HRMEAjAAMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAdBgNV
HQ4EFgQU3GgQHiKO3nZztizUJuey+6kKMiUwHwYDVR0jBBgwFoAUazqYi/nyU4na
4K2yMh4JH+iqO3QwZQYDVR0RBF4wXIIRd3d3LmluZnNlYy5ydWIuZGWCDWluZnNl
Yy5ydWIuZGWCHXd3dy5pbmZzZWMucnVoci11bmktYm9jaHVtLmRlghlpbmZzZWMu
cnVoci11bmktYm9jaHVtLmRlMIGNBgNVHR8EgYUwgYIwP6A9oDuGOWh0dHA6Ly9j
ZHAxLnBjYS5kZm4uZGUvZGZuLWNhLWdsb2JhbC1nMi9wdWIvY3JsL2NhY3JsLmNy
bDA/oD2gO4Y5aHR0cDovL2NkcDIucGNhLmRmbi5kZS9kZm4tY2EtZ2xvYmFsLWcy
L3B1Yi9jcmwvY2FjcmwuY3JsMIHbBggrBgEFBQcBAQSBzjCByzAzBggrBgEFBQcw
AYYnaHR0cDovL29jc3AucGNhLmRmbi5kZS9PQ1NQLVNlcnZlci9PQ1NQMEkGCCsG
AQUFBzAChj1odHRwOi8vY2RwMS5wY2EuZGZuLmRlL2Rmbi1jYS1nbG9iYWwtZzIv
cHViL2NhY2VydC9jYWNlcnQuY3J0MEkGCCsGAQUFBzAChj1odHRwOi8vY2RwMi5w
Y2EuZGZuLmRlL2Rmbi1jYS1nbG9iYWwtZzIvcHViL2NhY2VydC9jYWNlcnQuY3J0
MIICbgYKKwYBBAHWeQIEAgSCAl4EggJaAlgAdgDuS723dc5guuFCaR+r4Z5mow9+
X7By2IMAxHuJeqj9ywAAAWHR3NWWAAAEAwBHMEUCIQD+sTE3sSe2eQRaKQ7C8Z8a
myGv2/HYGwB5gGbbrem7SgIgaYm4f1SiQB2n8PT1yC8z27fBWWBqx3lvQfY/k5WF
F1sAdgBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWHR3NW/AAAE
AwBHMEUCIFchwII5vjcUP5h0Vh2yYixT3XH5GG2JotYA/3Q0SZPGAiEAtuQbhSVn
ND6QiLKhhFI6nOX0+b7Ks2vcyJPBY/0MJ6UAdQCq5wt/PLjVZshsLxaXnJ9EX2mr
DrRTVYmy93oDAQTzzQAAAWHR3NVjAAAEAwBGMEQCIDFR+RjMMXza2NQybUikHDUE
K2JDGnodietmSuUa0cSIAiAnw4fYmCMCahjN77tkvOEyBOlGadLF0hsucjZQJj7E
BAB3AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABYdHc1tgAAAQD
AEgwRgIhAJJWSQsxosKGoTyHrogG4pSmSZPWDAZPa+1kIQGQHwKbAiEAqLzWZvos
0xNdpX0EdBq1h6QO5A+ubNjROMqXBFbp94UAdgCkuQmQtBhYFIe7E6LMZ3AKPDWY
BPkb37jjd80OyA3cEAAAAWHR3NeNAAAEAwBHMEUCIQCHoDj4h34MQM1ESos/lb4U
lE983JPNMLbQU/52M58YrwIgKloOdI0NtV1zYWJTibf4mjhIqkANFBC7RkoDsHDJ
LFwwDQYJKoZIhvcNAQELBQADggEBAD0goBzSTdgYXHcuxhuTHquq9zm7/epEAo53
qjp1hmlX3cnPUpsBwcp8P1bFwgZoAHLJbYqI57cc+luFW/Yev4aG+nw2hJkfR8ix
frtExYDJfBsM8gUKaJXxTc9L88tX9cET1M1AGGgHAVvtU+yt21ONXSAmfNdn3/N8
gjdLQIkAzWV3zMiwXK34fJf0R2QYgigKHZYiEOFlDZLZfYxq+XvIsidIDpTj9XTx
uXPpt1rJkAfrWvzgX5cMB62q4Ma+K/1Tx9WPVhNEZ2u918nYlKojCBBSt14WkrQu
YwuwnhAmY8eO7vKU/VYOQx6aKSvNBMS0K2CmTWCQVgJu6p+09xk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7Zcpum5eagsqgF/Z5892
JcNORqN9X/VqFGrELPC0PjFqqREH0k4iuwl9hWamyLudcRB7Dpko3w4uUVeRHO5T
uq2IuSHa56eAooL0KLjk0ppzknic+xzj6vOrpUr1eotkOTyi8Rk3drQOFTpgWL2W
JXMk1sxDCTIvTn33W0UrOHonCyF9TXfShRZ9CxSwYDkUtN/id6rxXGvQabZyw4eD
QD457OlifBxyiEGy51ziU2AWrSOw7PelNB2HQx2ELw0Ada7i3RLHDhY9pSOs/IaD
yLhtsEI2djn4efjazpETH5flVeVcHbHjKDdJgpCLWjBi4Ik/OyDY8E56QrNtXCY0
zf5wMXUZr8dwgI7NX5QP57MM7qbO/HrxG3syJ9QnvwBUg84mz1W59IszWr4uxIpN
CuJ2QHfiH4l04h6cUJccMJNyq3NpTTE790py1ulbnsHGxiEITvu/s2EQCs8Lzlvn
1uAUBzpg+3EwyWkgzQIw9+V/40W1Vd76pzurTMUw0H9dAosNv/vVTcx1RwcL50+7
ZtAOPonGtp5lHGAbN0gV9UevUQpAJ6Ub6lj1iFyGJcov3GKFCxSfq1BMZfk66Ipv
2geJw+33Urw6KslEimccx/T8J4gxuo30crU7Duev/Aj2uN4n8sMmRrvh4188alKz
Mm+mF6QacQTVw2S9osojPAUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9501459638978546878909189776
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-26 11:26:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-31 11:26:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bochum'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ruhr-Universitaet Bochum'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Arbeitsgruppe Informationssicherheit'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fakultaet Elektrotechnik und Informationstechnik'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.infsec.rub.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 969284594277738377810827934670423159337002651212133298737538357426909552339208950519729607141218886530006305850618673224384532585777824997425680653314178652273223289122905352249871198310096686744710493512189764297895558015697289778587804616129617400449924188255188359831576576357716082316691634354876148202534146920311987548686852003820078014345263259555476446334672417799517512798047275449396827033478941796538286831857622838007652337557430609764423321830108427269058095801870903563840161011018258661984346606747618363775611714851192418853946814988138751370227449222572014700847168178486076596703715187878513784241035727193523300948036684229750173384899072302118562934386317917509507696701706023336963833365876638564440982933964249096720266667983617756036110271560956239538370372313651712547440526274702503657687879185671021888069938426030060977774197613283697187173489403132787306935437607179517137213403652263415592648896544431924997536013380469873695605037017103922391189646891479993230670521124277993672327242408367880685634756482715318889022124182083419811886538575695481881514648577979132704237186723031714576447734482873005348468001909476211680280796859332505376628188200944754456515454713011455364165834927394842734378564613
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc68101e228ede7673b62cd426e7b2fba90a3225
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infsec.rub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infsec.rub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infsec.ruhr-uni-bochum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infsec.ruhr-uni-bochum.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003d20a01cd24dd8185c772ec61b931eabaaf739bbfdea44028e77aa3a75866957ddc9cf529b01c1ca7c3f56c5c206680072c96d8a88e7b71cfa5b855bf61ebf8686fa7c3684991f47c8b17ebb44c580c97c1b0cf2050a6895f14dcf4bf3cb57f5c113d4cd40186807015bed53ecaddb538d5d20267cd767dff37c82374b408900cd6577ccc8b05cadf87c97f447641882280a1d962210e1650d92d97d8c6af97bc8b227480e94e3f574f1b973e9b75ac99007eb5afce05f970c07adaae0c6be2bfd53c7d58f561344676bbdd7c9d894aa23081052b75e1692b42e630bb09e102663c78eeef294fd560e431e9a292bcd04c4b42b60a64d609056026eea9fb4f719