atto.mpch-mainz.gwdg.de

- Gesellschaft fuer wissenschaftliche Datenverarbeitung -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 20:94:97:82:c5:29:2c:d1:54:af:bc:36 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Gesellschaft fuer wissenschaftliche Datenverarbeitung

Organization: Gesellschaft fuer wissenschaftliche Datenverarbeitung
State / Province: NIEDERSACHSEN
Locality: GOETTINGEN
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 20:94:97:82:c5:29:2c:d1:54:af:bc:36
Serial Number (int): 10083156825208585992816016438
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 76:8e:68:db:50:9a:14:ba:71:d3:20:64:b4:d4:34:90:f7:8b:8a:b8
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 82:7b:91:51:e0:6f:40:e3:8b:b0:71:3c:c7:75:e5:91:c3:97:f7:38
Fingerprint (sha256): 03:53:80:75:e8:6a:6e:eb:ab:6f:f0:03:f3:1a:d3:ac:cd:e5:0c:5d:f9:5b:c6:a3:73:29:61:e4:10:2b:8d:ae

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate atto.mpch-mainz.gwdg.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for atto.mpch-mainz.gwdg.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atto.mpch-mainz.gwdg.de
georem.mpch-mainz.gwdg.de
georoc.mpch-mainz.gwdg.de

Other certificates including the domain name gwdg.de

(limited to 100 certificates)
rop-server.ph4.physik.uni-goettingen.de
vweb14.gwdg.de
c105-187.cloud.gwdg.de
c098-221.cloud.gwdg.de
c104-131.cloud.gwdg.de
highmed.gwdg.de
dariah-cdstar.gwdg.de
vweb14.gwdg.de
cdstar-prod01.gwdg.de
koala-jenkins.gwdg.de
vweb14.gwdg.de
wsus.gwdg.de
statoek.wiwi.uni-goettingen.de
sso.gwdg.de
c106-211.cloud.gwdg.de
radardb.gwdg.de
voucher.gwdg.de
atto.mpch-mainz.gwdg.de
x-shib-idp.gwdg.de
vweb14.gwdg.de
mailer.gwdg.de
MX-2800-1.gwdg.de
sharepoint4.top.gwdg.de
vweb14.gwdg.de
b2share.gwdg.de
email.gwdg.de
statoek.wiwi.uni-goettingen.de
vweb14.gwdg.de
idm-logstash.gwdg.de
vweb14.gwdg.de
captive-portal.gwdg.de
vm24120.virt.gwdg.de
*.wiki.gwdg.de
listserv.gwdg.de
georoc.eu
svago92.gwdg.de
emm.top.gwdg.de
c104-131.cloud.gwdg.de
gwd-cert-uddi64.top.gwdg.de
gwd-wsus-manage.top.gwdg.de
npsw-www.mpg.de
buffet.gwdg.de
vweb14.gwdg.de
mpg-fm-s1.top.gwdg.de
email.gwdg.de
vweb14.gwdg.de
lotus1.gwdg.de
becotesust.gwdg.de
vojel.kellnerweg.de
vm19105.virt.gwdg.de
foodle.mpg.de
c104-131.cloud.gwdg.de
vweb14.gwdg.de
vpn.gwdg.de
vweb14.gwdg.de
dcups.uni-math.gwdg.de
vojel.kellnerweg.de
voucher.gwdg.de
benutzer-portal.gwdg.de
vm19002.virt.gwdg.de
sfr.sofi.gwdg.de
c105-187.cloud.gwdg.de
email.gwdg.de
host01.accounting.gwdg.de
gwd-rds-azure.top.gwdg.de
observium.gwdg.de
mx1.gwdg.de
umgpid.gwdg.de
vweb14.gwdg.de
c104-131.cloud.gwdg.de
harbor.gwdg.de
vweb14.gwdg.de
efforts-is.uni-goettingen.de
*.sharepointstore.gwdg.de
jupyter-cloud.gwdg.de
studip-dev-fe.gwdg.de
faq.gwdg.de
vweb14.gwdg.de
status.gwdg.de
oraw0.gwdg.de
rstudio.gwdg.de
c103-171.cloud.gwdg.de
voucher.gwdg.de
c103-171.cloud.gwdg.de
email.gwdg.de
npsw-www.mpg.de
npsw-www.mpg.de
swww3.gwdg.de
test.gwdg.de
vm18011.virt.gwdg.de
office.owncloud.gwdg.de
studip.uni-goettingen.de
gwdu111.gwdg.de
vweb14.gwdg.de
www.gwdg.de
c104-131.cloud.gwdg.de
vweb14.gwdg.de
vweb14.gwdg.de
vweb14.gwdg.de
timbuktu.physik3.gwdg.de

Certificate

The complete raw certificate details for atto.mpch-mainz.gwdg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJqTCCCJGgAwIBAgIMIJSXgsUpLNFUr7w2MA0GCSqGSIb3DQEBCwUAMIGNMQsw
CQYDVQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVz
IERldXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4t
UEtJMSUwIwYDVQQDDBxERk4tVmVyZWluIEdsb2JhbCBJc3N1aW5nIENBMB4XDTE5
MDIyNjEwNTAzMFoXDTIxMDUzMDEwNTAzMFowgZwxCzAJBgNVBAYTAkRFMRYwFAYD
VQQIDA1OSUVERVJTQUNIU0VOMRMwEQYDVQQHDApHT0VUVElOR0VOMT4wPAYDVQQK
DDVHZXNlbGxzY2hhZnQgZnVlciB3aXNzZW5zY2hhZnRsaWNoZSBEYXRlbnZlcmFy
YmVpdHVuZzEgMB4GA1UEAwwXYXR0by5tcGNoLW1haW56Lmd3ZGcuZGUwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS+BydJ0XmlGpRVxboAKtLksJbYAwg
j3BhnO2n/QIGn6AcTRoj/Or5RhTM6wdwIMrUT97JN1+SpHfMO0oi/e4sYgX5r6EJ
Nz1H9EKJXcuSU0kUqOTh1+ERthA2zcUZtpC0Gei2eYI/nvasHmYp2uQmcPljk210
4aNAhYYgt6NlLqCcEZNU+DlogOfJQ+vwDvgH17wsAB4AkxELwBj2nzkk/ZNFou+z
9fZ+nlWNHBgIGSalyhlKKVCW8BqfItQgNubIWhF1k/pyXhVS/rVfNHTliIAxd3P1
Gkq+YYaQaD59NDcGOvaC1xGabmvdcGJAdQOoJldBzWNCbEelymeMUi5zAgMBAAGj
ggX2MIIF8jBZBgNVHSAEUjBQMAgGBmeBDAECAjANBgsrBgEEAYGtIYIsHjAPBg0r
BgEEAYGtIYIsAQEEMBEGDysGAQQBga0hgiwBAQQDCTARBg8rBgEEAYGtIYIsAgEE
AwkwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH
AwEwHQYDVR0OBBYEFHaOaNtQmhS6cdMgZLTUNJD3i4q4MB8GA1UdIwQYMBaAFGs6
mIv58lOJ2uCtsjIeCR/oqjt0MFgGA1UdEQRRME+CF2F0dG8ubXBjaC1tYWluei5n
d2RnLmRlghlnZW9yZW0ubXBjaC1tYWluei5nd2RnLmRlghlnZW9yb2MubXBjaC1t
YWluei5nd2RnLmRlMIGNBgNVHR8EgYUwgYIwP6A9oDuGOWh0dHA6Ly9jZHAxLnBj
YS5kZm4uZGUvZGZuLWNhLWdsb2JhbC1nMi9wdWIvY3JsL2NhY3JsLmNybDA/oD2g
O4Y5aHR0cDovL2NkcDIucGNhLmRmbi5kZS9kZm4tY2EtZ2xvYmFsLWcyL3B1Yi9j
cmwvY2FjcmwuY3JsMIHbBggrBgEFBQcBAQSBzjCByzAzBggrBgEFBQcwAYYnaHR0
cDovL29jc3AucGNhLmRmbi5kZS9PQ1NQLVNlcnZlci9PQ1NQMEkGCCsGAQUFBzAC
hj1odHRwOi8vY2RwMS5wY2EuZGZuLmRlL2Rmbi1jYS1nbG9iYWwtZzIvcHViL2Nh
Y2VydC9jYWNlcnQuY3J0MEkGCCsGAQUFBzAChj1odHRwOi8vY2RwMi5wY2EuZGZu
LmRlL2Rmbi1jYS1nbG9iYWwtZzIvcHViL2NhY2VydC9jYWNlcnQuY3J0MIIDWwYK
KwYBBAHWeQIEAgSCA0sEggNHA0UAdgBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkG
jbIImjfZEwAAAWkpbXp1AAAEAwBHMEUCIBfxKdQ8SIaKoUVpUkTLcJz57zOyYTFj
/tN5RmU7JkFfAiEArINNp36yCDSFVoYVdYoXvYSaVJR+cPw45LXR7Sl21E4AdQBV
gdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWkpbXt2AAAEAwBGMEQC
IBTB1CAFegCLI8F4QHna2xpmgIYTxRyb+oPEnOwIhtP9AiBjlt4w+wrXQkAH8eEx
hLW2mc9M+gieFYixXj+0d3o7TgB1AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDE
e4l6qP3LAAABaSltep0AAAQDAEYwRAIgJg1LFS3G5FcnC+4/vCnsbWbKcNF7JYY4
FljSIsazQhICIAE5iNibTgdsm/LHV1EXaluT6LLxBvxegC78jsNlOnWjAHUAqucL
fzy41WbIbC8Wl5yfRF9pqw60U1WJsvd6AwEE880AAAFpKW16agAABAMARjBEAiBr
BC/JcTT+zNUg5lgM7thohMuDALVdTWg8tGMF7+8XwgIgZ5u9g2/Onbb/6TWReY8M
NjG55SfTfG9tXWQFtZ5m9soAdgC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2
jh7RhQAAAWkpbXqCAAAEAwBHMEUCIQCC8ICtHW9A30mIvjiZySssEnIsZtsZelg6
dUvO6H9M8gIgRutzzzPtyPHQVK8qxl31PPDvFaFsGFlKfjvFLYlGhN0AdQCkuQmQ
tBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAWkpbXrIAAAEAwBGMEQCIAOx
8dmqj9ad7i5EU1LMkbeGbJt7LQyAT/BVHXT81/ROAiAR4Eq97E1u9hFCxETZdylE
U8F/Q7t41ezOlbfr2ydhAAB3AESUZS6w7s6vxEAH2Kj+KMDa5oK+2MsxtT/TM5a1
toGoAAABaSltf3IAAAQDAEgwRgIhAI/KwCbNuy+N7DJsHoGglF7zUEP9yQPqdTHz
qP9pVJSXAiEAvsKxn9leq0AWl2C5wJ40Sa4ry7UqnNR9Gn90HbK8CMgwDQYJKoZI
hvcNAQELBQADggEBAGShtP+7N5puK5q6OhIHgnNuNU7HfAiuQqxeiDc9BKKtAsb7
GvQdffA83335wZpbgaMgUFh0LN4nDBUTJlTebMMo2S8Rm/MWsSRt55JPMQPr6t6l
7U1u1qPr5GGL5B8xS0KumVPHsVk6ccYJUviCKdtZ1qFYNX1PjKboblEHlu0UbuxA
6wL2GGRFyOZLOrv/oITXWjnzW7cedT/1HaThoTZngIH6kES+cGzDr5FHP3Kxkdsd
4EVip4w2rgIO1KJesYhoSffYwdwOH4v1CQRTUG8ocRpi6i2Hkaq3vPtniVf4oZ3+
Qwp0L9zXKzTJ8QTtd1/gXE5hSANrkiKPEjqsbqs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvgcnSdF5pRqUVcW6ACr
S5LCW2AMII9wYZztp/0CBp+gHE0aI/zq+UYUzOsHcCDK1E/eyTdfkqR3zDtKIv3u
LGIF+a+hCTc9R/RCiV3LklNJFKjk4dfhEbYQNs3FGbaQtBnotnmCP572rB5mKdrk
JnD5Y5NtdOGjQIWGILejZS6gnBGTVPg5aIDnyUPr8A74B9e8LAAeAJMRC8AY9p85
JP2TRaLvs/X2fp5VjRwYCBkmpcoZSilQlvAanyLUIDbmyFoRdZP6cl4VUv61XzR0
5YiAMXdz9RpKvmGGkGg+fTQ3Bjr2gtcRmm5r3XBiQHUDqCZXQc1jQmxHpcpnjFIu
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10083156825208585992816016438
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-26 10:50:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-30 10:50:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NIEDERSACHSEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'GOETTINGEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gesellschaft fuer wissenschaftliche Datenverarbeitung'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'atto.mpch-mainz.gwdg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18553141000286549665869209085120745325120622277586270514607996001645287421546704714359878378506059907690186143649142199608870404610214124626519973593690832154567629555398479135582382263122696773106348951120854998391926233084596267777027802243124946274215749028989076911829548941901248659423577389516717277020415738075243582443816053389539511915647743653929914216603584992779739707033644577435810204054814056564664903056901658570229193361491957067971258531221649192034891539553950294331857832138980712903433296333970290269892284753121977272259496802898575719023569747194837939168836122519198145940138433929283957304947
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.9
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							768e68db509a14ba71d32064b4d43490f78b8ab8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atto.mpch-mainz.gwdg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georem.mpch-mainz.gwdg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georoc.mpch-mainz.gwdg.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (843 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (839 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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