ssi.dwd.de

- Deutscher Wetterdienst -

Issued by Deutscher Wetterdienst CA - G01

About this certificate

This digital certificate with serial number 17:64:a8:5c:60:fa:bd was issued on by Deutscher Wetterdienst.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [KeyEncipherment DataEncipherment DigitalSignature ContentCommitment] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Deutscher Wetterdienst

Organization: Deutscher Wetterdienst
Organization unit: TI 16
State / Province: Hessen
Locality: Offenbach
Country: DE

Deutscher Wetterdienst

Organization: Deutscher Wetterdienst
Organization unit: GB TI Ref. TI 16
Locality: Offenbach am Main
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 17:64:a8:5c:60:fa:bd
Serial Number (int): 6584598731487933
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: 56:6a:76:89:5f:86:a5:aa:f8:1e:a2:84:d1:74:a6:66:a1:cc:61:da
AuthorityKeyId: ab:7b:06:57:d9:1c:ee:f9:22:1a:56:9e:60:28:85:c0:ea:a7:fd:47

Fingerprint (sha1): 50:0d:2c:9a:e1:58:ff:fd:06:83:78:6f:07:79:13:46:36:85:f3:67
Fingerprint (sha256): 02:6f:0d:43:84:9c:a7:54:32:b9:c0:e1:ac:13:27:3c:96:01:d2:34:46:2c:70:9b:8d:de:9b:e2:a3:81:29:6d

Issuing Certificate URL: http://cdp1.pca.dfn.de/deutscher-wetterdienst-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/deutscher-wetterdienst-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/deutscher-wetterdienst-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/deutscher-wetterdienst-ca/pub/crl/cacrl.crl

Check the revocation status for certificate ssi.dwd.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssi.dwd.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssi.dwd.de

Other certificates including the domain name dwd.de

(limited to 100 certificates)
maps.dwd.de
ssi-intern.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
ssi.dwd.de
www.deutscher-wetterdienst.de
hosting.dwd.de
maps.dwd.de
kunden.dwd.de
dwdvd.dwd.de
hosting.dwd.de
nl-prox.dwd.de
www.flugwetter.de
expertennetzwerk.mandant.dwd.de
www.dwd.de
ssi.dwd.de
isedmz-p.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
wis-gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
www.dwd.de
kunden.dwd.de
oflsd46.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
ebc.mandant.dwd.de
ofvkexpc01.dwd.de
pappl.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
alephino.dwd.de
hosting.dwd.de
fralux.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
kassandra.dwd.de
maps.dwd.de
brzvpngw.dwd.de
listen-prox.dwd.de
dwdhosting.mandant.dwd.de
hosting.dwd.de
hk.mandant.dwd.de
virtadm-hosts.dwd.de
klimawandel.mandant.dwd.de
oflxd18.dwd.de
hosting.dwd.de
oflxsn10.dwd.de
hosting.dwd.de
xmdm.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
qs-ninjoservices.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
cdc.dwd.de
oflsd46.dwd.de
beobachtungen.dwd.de
ninjoservices-neu.dwd.de
oflxs616.dwd.de
prometheus.dwd.de
gdws.mandant.dwd.de
ofvkexpe01.dwd.de
hosting.dwd.de
opendata.dwd.de
hosting.dwd.de
sva.mandant.dwd.de
stbauf.mandant.dwd.de
kunden.dwd.de
beobachtungen.dwd.de
hosting.dwd.de
oflsd46.dwd.de
molrao.dwd.de
hosting.dwd.de
webwerdis-intra.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
listen-prox.dwd.de

Certificate

The complete raw certificate details for ssi.dwd.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgIHF2SoXGD6vTANBgkqhkiG9w0BAQUFADCBsTELMAkGA1UE
BhMCREUxGjAYBgNVBAcTEU9mZmVuYmFjaCBhbSBNYWluMR8wHQYDVQQKExZEZXV0
c2NoZXIgV2V0dGVyZGllbnN0MRkwFwYDVQQLExBHQiBUSSBSZWYuIFRJIDE2MSgw
JgYDVQQDEx9EZXV0c2NoZXIgV2V0dGVyZGllbnN0IENBIC0gRzAxMSAwHgYJKoZI
hvcNAQkBFhFkd2Qud2Vic3NsQGR3ZC5kZTAeFw0xNDA0MDkxMTExMDhaFw0xOTA0
MDgxMTExMDhaMHgxCzAJBgNVBAYTAkRFMQ8wDQYDVQQIEwZIZXNzZW4xEjAQBgNV
BAcTCU9mZmVuYmFjaDEfMB0GA1UEChMWRGV1dHNjaGVyIFdldHRlcmRpZW5zdDEO
MAwGA1UECxMFVEkgMTYxEzARBgNVBAMTCnNzaS5kd2QuZGUwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQCguTA/S9AfeXQbI+61xgS9W0YrL+AUC7AVXO6W
noB+XO3gq1kifO4USOxamhYOxV8odTJy1nrQf3d9form5U3O9u4/yg1gXDkh/Ul6
xN1hHPTdfdK3rm2JUetdVDxaJXrXgLOEsLIiagthfysMOxhjZFm1cc5+cyizYLVX
KD/oG9k8F8RGkngcve2WpezlN1jr6PPyYrt60qRUv7PRXkSXTahgFCBLaUhaNqZm
7fUrba9VoA0cKsUScB59tnym7x7BhDZcl4CCPmpkP4t1QSG2DEYs58fgCTjhdoVv
ULnOIN32KB1TCt5rSC0U6yN3oGaGr/QoMYwfMpIdjdNqZ7MbAgMBAAGjggJVMIIC
UTA5BgNVHSAEMjAwMBEGDysGAQQBga0hgiwBAQQDATARBg8rBgEEAYGtIYIsAgEE
AwEwCAYGZ4EMAQICMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgTwMBMGA1UdJQQMMAoG
CCsGAQUFBwMBMB0GA1UdDgQWBBRWanaJX4alqvgeooTRdKZmocxh2jAfBgNVHSME
GDAWgBSrewZX2Rzu+SIaVp5gKIXA6qf9RzAVBgNVHREEDjAMggpzc2kuZHdkLmRl
MIGfBgNVHR8EgZcwgZQwSKBGoESGQmh0dHA6Ly9jZHAxLnBjYS5kZm4uZGUvZGV1
dHNjaGVyLXdldHRlcmRpZW5zdC1jYS9wdWIvY3JsL2NhY3JsLmNybDBIoEagRIZC
aHR0cDovL2NkcDIucGNhLmRmbi5kZS9kZXV0c2NoZXItd2V0dGVyZGllbnN0LWNh
L3B1Yi9jcmwvY2FjcmwuY3JsMIHtBggrBgEFBQcBAQSB4DCB3TAzBggrBgEFBQcw
AYYnaHR0cDovL29jc3AucGNhLmRmbi5kZS9PQ1NQLVNlcnZlci9PQ1NQMFIGCCsG
AQUFBzAChkZodHRwOi8vY2RwMS5wY2EuZGZuLmRlL2RldXRzY2hlci13ZXR0ZXJk
aWVuc3QtY2EvcHViL2NhY2VydC9jYWNlcnQuY3J0MFIGCCsGAQUFBzAChkZodHRw
Oi8vY2RwMi5wY2EuZGZuLmRlL2RldXRzY2hlci13ZXR0ZXJkaWVuc3QtY2EvcHVi
L2NhY2VydC9jYWNlcnQuY3J0MA0GCSqGSIb3DQEBBQUAA4IBAQBF+5TBKCfM6WBb
QSuV4YkNtB8AiQAALurQsr2NzSNdLAN1x+vyuoUsYvbtbj66vkMYzmQ+5CVJULt2
oPlqbH2X5H98HLaOZVsLRNAEiJIBr58ud7ce4Fk5FM4u6J06bigmcUPC0EpZvi3l
pehB/pqWcYSPgZN7zfva4URPeE206tN2H90upPwR3ia5K+qQwoB6bzlDdGYv4JrI
bPOPgOK5xOoS0Ul8WurLEhHLQ+c9P4r7Z7B09SnkB12KvrQ5b8rH0zBT7+t+b99C
MayFgSq/xXP6s+U//vADBIRKTWIrhUpDucIbeWoxNC3j207v0iP1q5PK94bl/PRk
3DjuNmAV
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLkwP0vQH3l0GyPutcYE
vVtGKy/gFAuwFVzulp6Aflzt4KtZInzuFEjsWpoWDsVfKHUyctZ60H93fX6K5uVN
zvbuP8oNYFw5If1JesTdYRz03X3St65tiVHrXVQ8WiV614CzhLCyImoLYX8rDDsY
Y2RZtXHOfnMos2C1Vyg/6BvZPBfERpJ4HL3tlqXs5TdY6+jz8mK7etKkVL+z0V5E
l02oYBQgS2lIWjamZu31K22vVaANHCrFEnAefbZ8pu8ewYQ2XJeAgj5qZD+LdUEh
tgxGLOfH4Ak44XaFb1C5ziDd9igdUwrea0gtFOsjd6Bmhq/0KDGMHzKSHY3Tamez
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6584598731487933
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Offenbach am Main'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutscher Wetterdienst'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB TI Ref. TI 16'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutscher Wetterdienst CA - G01'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-09 11:11:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-08 11:11:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Offenbach'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutscher Wetterdienst'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TI 16'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssi.dwd.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20289448630603361542581158942449591561038981867362511131196515838038984886626817043041263875625489436281242423634571089220755219008100756072496451785171733922673329110873672840522459365799952373889646232342609334952428084447735037570181094810002314143443298462221788447306660107149264409560532220814450612162968940952348595332577780579882320688101518646181621881310801847622289467320760854841331262374603820571079730831378779200600903707729366266798602539269790585308227430616821181894590146562958396479702405445156518539776825812427658687198764496524234973846545874659543135733726864461558576079773132738996900180763
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							566a76895f86a5aaf81ea284d174a666a1cc61da
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ab7b0657d91ceef9221a569e602885c0eaa7fd47
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssi.dwd.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/deutscher-wetterdienst-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/deutscher-wetterdienst-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (224 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/deutscher-wetterdienst-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/deutscher-wetterdienst-ca/pub/cacert/cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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