banane.mathi.uni-heidelberg.de

- Ruprecht-Karls-Universitaet Heidelberg -

Issued by Uni-HD2-CA

About this certificate

This digital certificate with serial number 1e:c9:ca:b9:ce:63:f0:13:3b:68:b8:a7 was issued on by Universitaet Heidelberg.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ruprecht-Karls-Universitaet Heidelberg

Organization: Ruprecht-Karls-Universitaet Heidelberg
Organization unit: Mathematisches Institut
State / Province: Baden-Wuerttemberg
Locality: Heidelberg
Country: DE

Universitaet Heidelberg

Organization: Universitaet Heidelberg
Organization unit: uni
State / Province: Baden-Wuerttemberg
Locality: Heidelberg
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:c9:ca:b9:ce:63:f0:13:3b:68:b8:a7
Serial Number (int): 9528501729932080190358861991
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 0e:63:65:b6:f2:d4:67:40:22:c4:93:44:3e:6e:0a:1a:d2:44:b0:0b
AuthorityKeyId: bb:a0:3b:ac:f8:f0:60:8c:b4:d0:d5:f9:b8:90:e0:ac:92:15:57:1b

Fingerprint (sha1): 93:27:a5:49:a6:1a:b4:aa:dd:67:73:e2:2a:5d:2a:cf:46:34:9e:b3
Fingerprint (sha256): 03:39:f3:be:cf:d4:ab:5e:5b:c1:50:6f:a7:57:5b:fd:9c:de:38:9b:5d:53:39:44:73:7d:23:91:3d:4c:ec:e1

Issuing Certificate URL: http://cdp1.pca.dfn.de/uni-heidelberg-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/uni-heidelberg-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/uni-heidelberg-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/uni-heidelberg-ca/pub/crl/cacrl.crl

Check the revocation status for certificate banane.mathi.uni-heidelberg.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for banane.mathi.uni-heidelberg.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

almighty-bob.mathi.uni-heidelberg.de
banane.mathi.uni-heidelberg.de

Other certificates including the domain name uni-heidelberg.de

(limited to 100 certificates)
hch19.cl.uni-heidelberg.de
www.mathematik.uni-heidelberg.de
klassphil.stura.uni-heidelberg.de
heimap-app.uni-heidelberg.de
heidocs1.zuv.uni-heidelberg.de
haw-pallas.adw.uni-heidelberg.de
flagship.kip.uni-heidelberg.de
cloud.kip.uni-heidelberg.de
ra.ziti.uni-heidelberg.de
neu.stura.uni-heidelberg.de
imap.iup.uni-heidelberg.de
calc.mathphys.stura.uni-heidelberg.de
vcg.iwr.uni-heidelberg.de
crispr.cos.uni-heidelberg.de
datashield.bioquant.uni-heidelberg.de
zinser-pc.physi.uni-heidelberg.de
weyauu.physi.uni-heidelberg.de
hcicloud.iwr.uni-heidelberg.de
cft2011.mathi.uni-heidelberg.de
public.urz.uni-heidelberg.de
virtualmin.urz.uni-heidelberg.de
karriere.klinikum.uni-heidelberg.de
www.soz.uni-heidelberg.de
www2.uniarchiv.uni-heidelberg.de
bud.iwr.uni-heidelberg.de
www.kip.uni-heidelberg.de
osm-vis.geog.uni-heidelberg.de
svn.ifi.uni-heidelberg.de
namse.med.uni-heidelberg.de
tc-hissva-prod1.zuv.uni-heidelberg.de
gisservices.geog.uni-heidelberg.de
mobility.zuv.uni-heidelberg.de
jupyter18.kip.uni-heidelberg.de
heiboxone.urz.uni-heidelberg.de
bq-mon-01.bioquant.uni-heidelberg.de
indico.physi.uni-heidelberg.de
mtk-online.urz.uni-heidelberg.de
neueslehramt.stura.uni-heidelberg.de
brassibase-dev.cos.uni-heidelberg.de
rewi-alumni.stura.uni-heidelberg.de
thbw-www.adw.uni-heidelberg.de
physikadmin.kip.uni-heidelberg.de
mp-force.ziti.uni-heidelberg.de
fsjapo.stura.uni-heidelberg.de
parcomp-git.iwr.uni-heidelberg.de
klimaschutzkarte.de
serv5.ub.uni-heidelberg.de
fachschaft.cl.uni-heidelberg.de
abhilekha.adw.uni-heidelberg.de
moodle.umm.uni-heidelberg.de
Sharepoint.urz.uni-heidelberg.de
kibana-dev.realm.bwinfosec.uni-heidelberg.de
brassibase-dev.cos.uni-heidelberg.de
exchange.uni-heidelberg.de
drw-www.adw.uni-heidelberg.de
cumulus.cos.uni-heidelberg.de
git.kip.uni-heidelberg.de
medusys.medma.uni-heidelberg.de
emp.kip.uni-heidelberg.de
relay2.uni-heidelberg.de
wrangler.mathi.uni-heidelberg.de
sturawahl.stura.uni-heidelberg.de
gistools.geog.uni-heidelberg.de
banane.mathi.uni-heidelberg.de
webapp-test.zuv.uni-heidelberg.de
mail.stw.uni-heidelberg.de
owncloud.itp.uni-heidelberg.de
ki.stura.uni-heidelberg.de
hisapp.uni-heidelberg.de
pille.iwr.uni-heidelberg.de
znfshop.zbt.uni-heidelberg.de
dschungelbuch.stura.uni-heidelberg.de
ui-test.heicloud.uni-heidelberg.de
aid.krz.uni-heidelberg.de
fszahnmedizin.stura.uni-heidelberg.de
dag.adw.uni-heidelberg.de
gitlab.gistools.geog.uni-heidelberg.de
survey.csi.uni-heidelberg.de
mtk-online.urz.uni-heidelberg.de
mats.stura.uni-heidelberg.de
hci-iweb.iwr.uni-heidelberg.de
ora3.zuv.uni-heidelberg.de
sso-02-dmed.urz.uni-heidelberg.de
beowulf.bioquant.uni-heidelberg.de
web.imbi.uni-heidelberg.de
aci.uni-heidelberg.de
jesajanet-pepa-test.med.uni-heidelberg.de
pix.umm.uni-heidelberg.de
wvz1.stura.uni-heidelberg.de
books.ub.uni-heidelberg.de
ext01.dmed.uni-heidelberg.de
serv5.ub.uni-heidelberg.de
cegit.ziti.uni-heidelberg.de
fsiued.stura.uni-heidelberg.de
dsf-dbmi.umm.uni-heidelberg.de
fs-sino.stura.uni-heidelberg.de
lists.cl.uni-heidelberg.de
bud.iwr.uni-heidelberg.de
dms.urz.uni-heidelberg.de
ipa.iwr.uni-heidelberg.de

Certificate

The complete raw certificate details for banane.mathi.uni-heidelberg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9528501729932080190358861991
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Heidelberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universitaet Heidelberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uni'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Uni-HD2-CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-15 10:38:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 23:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Heidelberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ruprecht-Karls-Universitaet Heidelberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mathematisches Institut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'banane.mathi.uni-heidelberg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 917117905205355158733155085165812256943271571293826217666051523925318964131311195711742153882258459203676187908251969435460013554851212775446589667507804637523921107631111556337576028499032679344452952854735699357533583466604534103030088777761747821065879545479008334436046175928483233279119555642487218722804483971244715175016995202566015433856452357328520906924891352207843656941427861432612979265628961446764733042185962278806121730126069624409891171249663425902648225966024423010039369215908517906443042979160802698885551542958331278213570740127519785846205317831232008924006563970696354450703553834040072519843308813678028510151750620300987909178240760685527719970822451491463484296324205857850712839904761991821443114202031822745996044916404655960610518904671303543607153720719607419911361912741012010141239694876702341441347827089809649690974016432468362749281890780680983706628526264160195418677128309389190415430127093860847702149223429185861814947281177277759991318147237409524823456828616010565856124238489257112088135322596492718246748777326757098555399437910083629601929454692749663739657750844703063248431963318205065977972858834310418957790274982235672081073808870185298005833145386278018238668419354456985715726547079
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e6365b6f2d4674022c493443e6e0a1ad244b00b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bba03bacf8f0608cb4d0d5f9b890e0ac9215571b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almighty-bob.mathi.uni-heidelberg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banane.mathi.uni-heidelberg.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/uni-heidelberg-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/uni-heidelberg-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (208 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/uni-heidelberg-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/uni-heidelberg-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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