www.bundesnotbrunnen.bund.de

- Informationstechnikzentrum Bund (ITZBund) -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 1e:c5:f9:94:dc:0e:be:61:f6:34:8e:29 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Informationstechnikzentrum Bund (ITZBund)

Organization: Informationstechnikzentrum Bund (ITZBund)
Organization unit: IV B 4
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:c5:f9:94:dc:0e:be:61:f6:34:8e:29
Serial Number (int): 9523887296333612125802237481
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: e1:c1:60:55:19:45:04:dc:9e:5f:2e:bb:0c:47:49:09:c2:92:b0:37
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 5d:3a:60:5c:84:ff:8a:d8:78:38:ce:02:5e:32:4e:38:80:10:3a:c1
Fingerprint (sha256): 03:42:29:b4:f8:ca:9e:fb:37:43:35:91:fc:2c:c4:5e:af:6a:1d:67:e0:41:e6:65:e3:9f:3b:6c:91:f0:1c:26

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate www.bundesnotbrunnen.bund.de

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bundesnotbrunnen.bund.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bundesnotbrunnen.bund.de
bundesnotbrunnen.intranet.bund.de
stu.bundesnotbrunnen.bund.de
stu.bundesnotbrunnen.intranet.bund.de
www.bundesnotbrunnen.bund.de
www.stu.bundesnotbrunnen.bund.de

Other certificates including the domain name bund.de

(limited to 100 certificates)
bundes.cloud.bmfsfj.in.bund.de
schulung5.eakte.zoll.in.bund.de
bamf.bund.de
ctx02.bmwi.bund.de
20220922.cloud.bcsv.in.bund.de
stu-extc.dvdv.bund.de
vlps7w4zstxe.petclin.cloud.itz.in.bund.de
cafm-tn1.cloud.bcsv.in.bund.de
promadmz.jki.bund.de
upload.prod.gsb.bmel.in.bund.de
schulung17.eakte.zoll.in.bund.de
access.bmjv.cloud.intranet.bund.de
bclogin3.bkamt.cloud.intranet.bund.de
artifactory.zssi.bva.in.bund.de
vlpvws2uyvwh.pvsplus1.cloud.zoll.in.bund.de
hosting.dwd.de
hosting.dwd.de
lernplattform.bund.de
www.normenkontrollrat.bund.de
vlpzrtfbavdp.bmigate1.cloud.bmi.in.bund.de
access.itz.cloud.intranet.bund.de
editor.egesetz.zd.in.bund.de
vlpu6xc8ixat.my1stsalone60.cloud.bcsv.in.bund.de
vlpxub43mocj.testentw.cloud.stba.in.bund.de
redconf.itz.cloud.intranet.bund.de
hashdb.mwscan.bund.de
int.bpm-extern.bzst.itzbund.net
forum.bfdi.bund.de
personalhaushalt.prod.bmf.in.bund.de
schulung.eakte.bsh.itz.res.bund.de
formularcenter.bvl.bund.de
bmfbox6.cloud.bmf.in.bund.de
gittest.bc-mgmt01.cloud.intranet.bund.de
travis.baw.res.bund.de
cafm-ti1.cloud.bcsv.in.bund.de
sicherheit.bund.de
formularcenter.bvl.bund.de
dzmgit05.bc-mgmt05.cloud.intranet.bund.de
redaktion.atu.gsb.bmi.in.bund.de
ref.xrechnung.bund.de
mob.bmz.bund.de
eakte-t.cloud.base.in.bund.de
vlpc092q2btk.btsapqp.cloud.zitis.in.bund.de
redaktion.atu.gsb.bmjv.in.bund.de
ivva-ref2.id-ref-bug.it.bund.de
list.sozialwerk.bund.de
accesst.cloud.itz.in.bund.de
gigis-s.bkg.bund.de
fis-vl.bvl.bund.de
amp1.cloud.zitis.in.bund.de
appladebaw2.front.test.adeba.wsv.itzbund.net
www.bamf.de
vlppaksi2niz.mr15pp10.cloud.bcsv.in.bund.de
www.kvb.bund.de
sso.bvl.bund.de
eservice2022.itz.res.bund.de
warnung.bund.de
webapp.staging.wire.zd.in.bund.de
cafm0322.cloud.bcsv.in.bund.de
vlpzw166d320.emakorv-cloud.cloud.itz.in.bund.de
vwpsl8qtdinb.bcwsus-05a.cloud.bcsv.in.bund.de
ilp03812.iamservice.iaas.itz.cloud.intranet.bund.de
sportal.bmi.in.bund.de
hosting.dwd.de
eakte-i.cloud.bkm.in.bund.de
bcadminjumphost.bc-mgmt05.cloud.intranet.bund.de
cafm1028.cloud.bcsv.in.bund.de
sibboxaa.cloud.bcsv.in.bund.de
cafm-tn2.cloud.bcsv.in.bund.de
ampvsp.cloud.bmf.in.bund.de
test.zbp.bund.de
ivbb.citrix.brh.intranet.bund.de
amp7.cloud.bmdv.in.bund.de
confzent.itz.cloud.intranet.bund.de
dwh-integration.goaml.fiu.in.bund.de
flufus.baf.bund.de
int.anwendungen-luzina.zd.in.bund.de
vm-test.bescha.bund.de
enstransv-entw.zoll.in.bund.de
test.sign.npa-gsd.bva.bund.de
dvtu-int.itz.in.bund.de
api.portal.atu.beihilfe.bva.bund.de
ibis.intranet.bund.de
hosting.dwd.de
bedeakte25-sm.bmjv.intranet.bund.de
accessp.itz.cloud.intranet.bund.de
collabmi.cloud.bcsv.in.bund.de
amd1.cloud.zoll.in.bund.de
eab306mi.cloud.bcsv.in.bund.de
monitoring-nachhaltigkeit.bkamt.intranet.bund.de
helpdesk-p1.pwservice.zd.in.bund.de
vlpb8at2ozfk.gwbmdv2a.cloud.bmdv.in.bund.de
amp1.cloud.bafa.in.bund.de
dit.bund.de
register.wreg.bkarta.intranet.bund.de
amp4.cloud.bmdv.in.bund.de
stage.grc.bva.intranet.bund.de
access.bpa.cloud.intranet.bund.de
gigis.bkg.bund.de
vlpx9e8vdvdq.bcmon1.cloud.base.in.bund.de

Certificate

The complete raw certificate details for www.bundesnotbrunnen.bund.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1nlaqI61jOURXO1WSHz
nirAp8k4lqgipqYCIpU0bXR08M0DR8dGuPuZI1gv04QY3+VzMRE8d0ZsHT/78s+s
yiZnpyFNG/f7b8tuMrhhrdaTKzqyzhFXkdM9buEQEbzCLq8pDEl/U27sp7x4LH2P
gEfAFVGh8D95pESz7sJp0Sh3GpFN8CSWHeVjdNwxdhnMEszeO8dRo+tVF/XGJ2eD
J16daQGNjSb59x+SWrz7fvv8MzIt0VcTtlTScjch7+hpEzkdYm+WWMahM5ab5BEf
VNtY9awQBIklYl/lK6KhBCqMRhensDQcuezXwHaPzDb7D9T41xiFn2kPOW4nI04n
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9523887296333612125802237481
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-12 13:09:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-14 13:09:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Informationstechnikzentrum Bund (ITZBund)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IV B 4'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.bundesnotbrunnen.bund.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23145939256652897820991548519587032441229214420292305564155210769994409982986973693789967891631471475870560387110697397758386619056051670718825510320170599733538714136785810491688706053879648199590573583608215924526781149602298762680988464388248094280024492722596067968868904101733713526776981547994881918222565430796147465965115332706744761221757908863905237769475611267413511318122303838341385604428816632406084972994541823400039743613865371882664848709410072336053441563838512852536166547831482202390381016095799921488929156378085450857027174930400249162573577039811622208522047194896502268885516918778749558597427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1c16055194504dc9e5f2ebb0c474909c292b037
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (197 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bundesnotbrunnen.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bundesnotbrunnen.intranet.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stu.bundesnotbrunnen.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stu.bundesnotbrunnen.intranet.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bundesnotbrunnen.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stu.bundesnotbrunnen.bund.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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