sec21-dmz1b.gfz-potsdam.de

- GeoForschungsZentrum Potsdam -

Issued by GeoForschungsZentrum Potsdam CA - G01

About this certificate

This digital certificate with serial number 17:7d:8b:9e:cb:59:57 was issued on by GeoForschungsZentrum Potsdam.

With 59 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • KeyUsage [KeyEncipherment DigitalSignature ContentCommitment DataEncipherment] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

GeoForschungsZentrum Potsdam

Organization: GeoForschungsZentrum Potsdam
Organization unit: Section 2.1, GEM Testing and Evaluation Group
State / Province: Brandenburg
Locality: Potsdam
Country: DE

GeoForschungsZentrum Potsdam

Organization: GeoForschungsZentrum Potsdam
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 17:7d:8b:9e:cb:59:57
Serial Number (int): 6611963082398039
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: 8c:13:2d:7e:42:79:19:d6:e9:25:e5:61:73:65:1d:c9:9d:73:fa:e4
AuthorityKeyId: 9c:c8:a2:e5:9b:00:6c:cb:0e:a2:88:eb:a4:ba:6b:9f:b3:39:59:84

Fingerprint (sha1): 6a:ab:ac:60:f9:fe:9f:50:19:db:c3:3e:4d:4a:d9:ed:08:f6:11:73
Fingerprint (sha256): 02:ce:8d:b5:63:dd:a0:f0:74:14:e8:21:29:8f:da:f0:3d:4b:b5:31:32:96:0d:bc:46:d4:2a:ee:37:b3:34:08

Issuing Certificate URL: http://cdp1.pca.dfn.de/gfz-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/gfz-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/gfz-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/gfz-ca/pub/crl/cacrl.crl

Check the revocation status for certificate sec21-dmz1b.gfz-potsdam.de

59

DNS Names

1

Email Addresses

2

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sec21-dmz1b.gfz-potsdam.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

12oder3.gem.gfz-potsdam.de
12oder3.quake.gfz-potsdam.de
12oder3.volcano.gfz-potsdam.de
6or7.gem.gfz-potsdam.de
6or7.quake.gfz-potsdam.de
6or7.volcano.gfz-potsdam.de
admin.completenessweb.gfz-potsdam.de
admin.quake.gfz-potsdam.de
bugs.completenessweb.gfz-potsdam.de
bugs.gem.gfz-potsdam.de
bugs.quake.gfz-potsdam.de
cdn.gem.gfz-potsdam.de
cdn.quake.gfz-potsdam.de
cdn.volcano.gfz-potsdam.de
cloud.gem.gfz-potsdam.de
cloud.quake.gfz-potsdam.de
cloud.volcano.gfz-potsdam.de
completenessweb.gfz-potsdam.de
data.completenessweb.gfz-potsdam.de
data.gem.gfz-potsdam.de
data.quake.gfz-potsdam.de
data.volcano.gfz-potsdam.de
devel.quake.gfz-potsdam.de
docs.quake.gfz-potsdam.de
docs.volcano.gfz-potsdam.de
eval.gem.gfz-potsdam.de
feed.gem.gfz-potsdam.de
feed.quake.gfz-potsdam.de
feed.volcano.gfz-potsdam.de
gem.gfz-potsdam.de
hewolog.quake.gfz-potsdam.de
hewolog.volcano.gfz-potsdam.de
html5.gem.gfz-potsdam.de
html5.quake.gfz-potsdam.de
html6.gem.gfz-potsdam.de
html6.quake.gfz-potsdam.de
ipe.gem.gfz-potsdam.de
ipe.quake.gfz-potsdam.de
nicky.volcano.gfz-potsdam.de
obmwiki.gem.gfz-potsdam.de
quake.gfz-potsdam.de
sec21-dmz1.gfz-potsdam.de
sec21-dmz1b.gfz-potsdam.de
statsei9.quake.gfz-potsdam.de
svn.completenessweb.gfz-potsdam.de
svn.quake.gfz-potsdam.de
tb.gem.gfz-potsdam.de
tb.quake.gfz-potsdam.de
tb.volcano.gfz-potsdam.de
test.quake.gfz-potsdam.de
tracker.completenessweb.gfz-potsdam.de
tracker.gem.gfz-potsdam.de
tracker.quake.gfz-potsdam.de
tracker.volcano.gfz-potsdam.de
websvn.quake.gfz-potsdam.de
www.completenessweb.gfz-potsdam.de
xsampls.gem.gfz-potsdam.de
xyz.gem.gfz-potsdam.de
xyz.volcano.gfz-potsdam.de
[email protected]
139.17.3.231
139.17.3.232

Other certificates including the domain name gfz-potsdam.de

(limited to 100 certificates)
geofon.gfz-potsdam.de
rz-vcs1.gfz-potsdam.de
d3m.gfz-potsdam.de
rz-vm140.gfz-potsdam.de
hydro.gfz-potsdam.de
gisasaprouter.gfz-potsdam.de
sec21-dmz1b.gfz-potsdam.de
hydro.gfz-potsdam.de
sec21-dmz1b.gfz-potsdam.de
wol.gfz-potsdam.de
webstats.gfz-potsdam.de
email.gwdg.de
mobilehub.gfz-potsdam.de
intranet.gfz-potsdam.de
dokuwiki.gfz-potsdam.de
sec21-dmz2b.gfz-potsdam.de
moses-dmp.gfz-potsdam.de
spaceweather.gfz-potsdam.de
events.gfz-potsdam.de
rbm9.gfz-potsdam.de
nera-ern.gfz-potsdam.de
api.itsm.gfz-potsdam.de
wlc.gfz-potsdam.de
ebissiq.gfz-potsdam.de
exportcontrol.gfz-potsdam.de
rz-support.gfz-potsdam.de
sec21-dmz1b.gfz-potsdam.de
email.gwdg.de
git.gfz-potsdam.de
rz-vm175.gfz-potsdam.de
hydro.gfz-potsdam.de
varve.gfz-potsdam.de
idp-dev.gfz-potsdam.de
webstats.gfz-potsdam.de
geomagia.gfz-potsdam.de
www.gfz-potsdam.de
fw-ext.gfz-potsdam.de
rz-vm213.gfz-potsdam.de
fw-ext.gfz-potsdam.de
geofon.gfz-potsdam.de
gfzpublic.gfz-potsdam.de
eismassendynamik.gfz-potsdam.de
rz-vm174.gfz-potsdam.de
rz-vm112.gfz-potsdam.de
simultan.gfz-potsdam.de
events.gfz-potsdam.de
rz-vm234.gfz-potsdam.de
gfzock.gfz-potsdam.de
collabora.gfz-potsdam.de
www-app5.gfz-potsdam.de
enhsp.gfz-potsdam.de
timeseries.gfz-potsdam.de
printer-core.gfz-potsdam.de
rz-vm457.gfz-potsdam.de
nextcloud.gfz-potsdam.de
geomagia.gfz-potsdam.de
escidoc.gfz-potsdam.de
idp-test.gfz-potsdam.de
sec21-bbb.gfz-potsdam.de
rz-vm62.gfz-potsdam.de
rz-vm119.gfz-potsdam.de
gfz-potsdam.de
ccmp-pompei.gfz-potsdam.de
moses-dmp.gfz-potsdam.de
wlantickets.gfz-potsdam.de
aschera.gfz-potsdam.de
dep1doc.gfz-potsdam.de
varve.gfz-potsdam.de
index-search-prod.gfz-potsdam.de
ebiss.gfz-potsdam.de
rz-vm89.gfz-potsdam.de
gisasaprouter.gfz-potsdam.de
www.gfz-potsdam.de
forms.gfz-potsdam.de
asip.gfz-potsdam.de
bscw.gfz-potsdam.de
nextcloud.gfz-potsdam.de
benno.gfz-potsdam.de
ad.gfz-potsdam.de
rz-vm278.gfz-potsdam.de
intranet-test.gfz-potsdam.de
rz-ftp1.gfz-potsdam.de
s3ceph.gfz-potsdam.de
ssl.gfz-potsdam.de
moses-data.gfz-potsdam.de
egsim.gfz-potsdam.de
systemerde.gfz-potsdam.de
itsm.gfz-potsdam.de
dataservices.gfz-potsdam.de
rz-monstor3.gfz-potsdam.de
geso122.gfz-potsdam.de
d3m.gfz-potsdam.de
v4-server3.gfz-potsdam.de
trideccloud.gfz-potsdam.de
rz-vm65-dev.gfz-potsdam.de
otms.gfz-potsdam.de
kg3-dmz.gfz-potsdam.de
benno.gfz-potsdam.de
ldapext.gfz-potsdam.de
rz-vm121.gfz-potsdam.de

Certificate

The complete raw certificate details for sec21-dmz1b.gfz-potsdam.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY3QeRbZSvFHj0Mm4u0j
0oag6UzxevzcNnUz6EJVgzfqtbBj0+l82GsF6ByukYMIL85nWuTvLwLZEp2aqAnO
RLfLI9lEscKlfQxvPomZaUH6Fwur2Voj7El2ffxejiNpd4K04KDN4KctBwLnjNnI
qDVc1Oz5y586k91SjKR4msRDqaI2ujy7xR8BYF3GRAWfJkCEd/xBiUzBECIzKzsn
HmmKeLlGX23YiWAtCgNsVRABBcZfR5ONA05a0glcqfrG5Rb5mQ4bUKGrrwG18iOI
5MHGWJ3jFHSIXLK22YZ6e0gDueQJ/adxCa5y2aYynAg+DusXBFlp3RHpdTOo5XpV
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6611963082398039
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoForschungsZentrum Potsdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoForschungsZentrum Potsdam CA - G01'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-28 08:15:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-28 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brandenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Potsdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoForschungsZentrum Potsdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Section 2.1, GEM Testing and Evaluation Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sec21-dmz1b.gfz-potsdam.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23928970899797603713293283557865148465647723006913855519861960975378979533846965629852292836187298505715688747223211452394242369681216548239240309951272986533726555659586186159357395722304041409257509009582221435742297202742457751688314504145501182423222188788138772782612516847492170689559926593882146048107503858091268640116447381998456982373327986633088651209419570076569930536623847350946904806917936599943864957915815765980720399995809544810100531734328167865460519135928972294269417555736780864688048937476707933127697682020033550404302348981986552923053820205543896317383025142593115643903550392238992705344953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c132d7e427919d6e925e56173651dc99d73fae4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9cc8a2e59b006ccb0ea288eba4ba6b9fb3395984
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1712 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12oder3.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12oder3.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12oder3.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6or7.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6or7.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6or7.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.completenessweb.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugs.completenessweb.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugs.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugs.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'completenessweb.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.completenessweb.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devel.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eval.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feed.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feed.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feed.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hewolog.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hewolog.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'html5.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'html5.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'html6.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'html6.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipe.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipe.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicky.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obmwiki.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec21-dmz1.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec21-dmz1b.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statsei9.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svn.completenessweb.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svn.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tb.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tb.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tb.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracker.completenessweb.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracker.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracker.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracker.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websvn.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.completenessweb.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xsampls.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xyz.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xyz.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:7|false] OCTET STRING '139.17.3.231'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:7|false] OCTET STRING '139.17.3.232'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/gfz-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/gfz-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/gfz-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/gfz-ca/pub/cacert/cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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