k3.bsz-bw.de

- Bibliotheksservice-Zentrum Baden-Wuerttemberg -

Issued by BSZ-BW CA - G02

About this certificate

This digital certificate with serial number 1a:07:e8:96:56:ca:cd was issued on by Bibliotheksservice-Zentrum Baden-Wuerttemberg.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [KeyEncipherment DataEncipherment DigitalSignature ContentCommitment] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Bibliotheksservice-Zentrum Baden-Wuerttemberg

Organization: Bibliotheksservice-Zentrum Baden-Wuerttemberg
Organization unit: Bibliothekssysteme
State / Province: Baden-Wuerttemberg
Locality: Konstanz
Country: DE

Bibliotheksservice-Zentrum Baden-Wuerttemberg

Organization: Bibliotheksservice-Zentrum Baden-Wuerttemberg
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1a:07:e8:96:56:ca:cd
Serial Number (int): 7327044930554573
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: 17:41:ec:05:a9:23:63:36:86:b8:c7:a8:61:8a:60:1f:37:35:ef:26
AuthorityKeyId: 29:ad:00:de:cb:66:e5:1f:de:aa:8d:6d:ec:9c:b4:42:fe:fb:9b:21

Fingerprint (sha1): 91:3e:e5:f2:d7:3c:08:6f:18:ca:54:61:02:f7:c4:23:fe:6c:d1:01
Fingerprint (sha256): 03:30:6d:70:34:c0:e5:f9:08:61:2c:8b:37:09:26:1d:8e:81:57:77:52:21:f6:4a:64:9a:64:d2:54:02:b0:1c

Issuing Certificate URL: http://cdp1.pca.dfn.de/bsz-bw-ca/pub/cacert/g_cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/bsz-bw-ca/pub/cacert/g_cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/bsz-bw-ca/pub/crl/g_cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/bsz-bw-ca/pub/crl/g_cacrl.crl

Check the revocation status for certificate k3.bsz-bw.de

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for k3.bsz-bw.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

k3.bsz-bw.de
hgbo.k3.bsz-bw.de
htwg.k3.bsz-bw.de
swb.k3.bsz-bw.de
hsas.k3.bsz-bw.de
hsbi.k3.bsz-bw.de
hses.k3.bsz-bw.de
phhd.k3.bsz-bw.de
dhhn.k3.bsz-bw.de
hshn.k3.bsz-bw.de
dhmo.k3.bsz-bw.de
hsnt.k3.bsz-bw.de
hsog.k3.bsz-bw.de
hspf.k3.bsz-bw.de
hssg.k3.bsz-bw.de
hsul.k3.bsz-bw.de
dhvs.k3.bsz-bw.de
fernleihe.k3.bsz-bw.de
phsg.k3.bsz-bw.de
hdms.k3.bsz-bw.de

Other certificates including the domain name bsz-bw.de

(limited to 100 certificates)
fuji.bsz-bw.de
archiv.bsz-bw.de
ffb.bsz-bw.de
k3.bsz-bw.de
asterix.bsz-bw.de
toronto.bsz-bw.de
dl05test.bsz-bw.de
webpac7.bsz-bw.de
koha01.bsz-bw.de
opus4.bsz-bw.de
kopac.bsz-bw.de
caracas.bsz-bw.de
dbprod.bsz-bw.de
bvfg.bsz-bw.de
repos02.bsz-bw.de
webpac6.bsz-bw.de
mare01test.bsz-bw.de
opus4.bsz-bw.de
seminar-esslingen.bsz-bw.de
ffb.bsz-bw.de
london.bsz-bw.de
bosstest.bsz-bw.de
www.bsz-bw.de
mfo.bsz-bw.de
webpac1.bsz-bw.de
dl04.bsz-bw.de
matomo.bsz-bw.de
zfl.bsz-bw.de
gvi1.bsz-bw.de
idp.bsz-bw.de
iris.bsz-bw.de
zfl-test.bsz-bw.de
lachesis.bsz-bw.de
webpac9.bsz-bw.de
hsportal.bsz-bw.de
wikitest.bsz-bw.de
swbtestproxy.bsz-bw.de
gvi2.bsz-bw.de
hsg.bsz-bw.de
hs-lorsch.bsz-bw.de
sehn.bsz-bw.de
repos02.bsz-bw.de
ffb.bsz-bw.de
biberkopf.bsz-bw.de
bibsysteme.bsz-bw.de
wiki.bsz-bw.de
portal19.bsz-bw.de
repos.bsz-bw.de
eh-freiburgt.bsz-bw.de
bodensee.bsz-bw.de
opusdev.bsz-bw.de
swbplus.bsz-bw.de
windhoek.bsz-bw.de
gvi1.bsz-bw.de
karachi.bsz-bw.de
hfjs.bsz-bw.de
tbilisi.bsz-bw.de
koha02.bsz-bw.de
mailrelay.bsz-bw.de
repos.bsz-bw.de
skat.bsz-bw.de
zfl-test.bsz-bw.de
boss.bsz-bw.de
goethe.bsz-bw.de
silberhorn.bsz-bw.de
dlr-literatursuche.bsz-bw.de
paris.bsz-bw.de
karachi.bsz-bw.de
wiki.bsz-bw.de
dlre.bsz-bw.de
zfl-prod.bsz-bw.de
koha03.bsz-bw.de
dlr-literatursuche.bsz-bw.de
k10bouftest.bsz-bw.de
fltest.bsz-bw.de
mailrelay.bsz-bw.de
swbplus.bsz-bw.de
vpn.bsz-bw.de
vpn.bsz-bw.de
cairo.bsz-bw.de
zfl-dev.bsz-bw.de
bernina.bsz-bw.de
kix.bsz-bw.de
dhaka.bsz-bw.de
hsportal.bsz-bw.de
dl04test.bsz-bw.de
pizol.bsz-bw.de
kopac.bsz-bw.de
vzabbix.bsz-bw.de
bibsysteme.bsz-bw.de
swop.bsz-bw.de
hfjs.bsz-bw.de
mare01.bsz-bw.de
hshl.bsz-bw.de
bahia.bsz-bw.de
santiago.bsz-bw.de
repos.bsz-bw.de
asterope.bsz-bw.de
ebmtool.de
gvi.bsz-bw.de

Certificate

The complete raw certificate details for k3.bsz-bw.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7327044930554573
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bibliotheksservice-Zentrum Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BSZ-BW CA - G02'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-03 15:45:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-30 15:45:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Konstanz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bibliotheksservice-Zentrum Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bibliothekssysteme'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'k3.bsz-bw.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 941069215805117560294046163054744550443280411516871779803456553268050964309663324346588592675575269637282837724161222870425362846907133071753637249444583811966069246679338204086130654147772210477961777674470130965775372780738616729447400788146848714736144688637773794576049470964455040344818129674229180469486143824228901261859921434431941143004761765573477403547938894091415160743719894921496068012131312960991109057055526949360298938881882872692034899183724837037455826471032549738635935603270049985044901240901220236124965576112801290028951218226655261173258766380136391964905576857635084039521912230350988957213670838451267452196325080674013974528323737102781752325294705729009955918862506734241973037468315093771151820157480027408991325838556674563942245913970947375382150364590347404599589321693391317997130913056212484906647025869846724245272248316622923061457164777254366971591505151019231354258705010464255793318483132130105178476555919855830302881608020940809586682599005433388404070911967363178246557470870110411688100786773255216462935930400893983016186532214086780758702373353074638529732037527406004074290762929191559058652934691241098597044328572149014750438960754302252854274829770564914925223865009684151840703071501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1741ec05a923633686b8c7a8618a601f3735ef26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 29ad00decb66e51fdeaa8d6dec9cb442fefb9b21
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (383 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k3.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hgbo.k3.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htwg.k3.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swb.k3.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsas.k3.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsbi.k3.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hses.k3.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phhd.k3.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhhn.k3.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hshn.k3.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhmo.k3.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsnt.k3.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsog.k3.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hspf.k3.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hssg.k3.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsul.k3.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhvs.k3.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fernleihe.k3.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phsg.k3.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdms.k3.bsz-bw.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/bsz-bw-ca/pub/crl/g_cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/bsz-bw-ca/pub/crl/g_cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (196 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/bsz-bw-ca/pub/cacert/g_cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/bsz-bw-ca/pub/cacert/g_cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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