x-shib-idp.gwdg.de

- Gesellschaft fuer wissenschaftliche Datenverarbeitung -

Issued by GWDG CA

About this certificate

This digital certificate with serial number 17:9e:6d:6f:23:c0:1d was issued on by Gesellschaft fuer wissenschaftliche Datenverarbeitung.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • KeyUsage [ContentCommitment DigitalSignature KeyEncipherment] (00000111) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Gesellschaft fuer wissenschaftliche Datenverarbeitung

Organization: Gesellschaft fuer wissenschaftliche Datenverarbeitung
State / Province: NIEDERSACHSEN
Locality: GOETTINGEN
Country: DE

Gesellschaft fuer wissenschaftliche Datenverarbeitung

Organization: Gesellschaft fuer wissenschaftliche Datenverarbeitung
Organization unit: GWDG
State / Province: NIEDERSACHSEN
Locality: GOETTINGEN
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 17:9e:6d:6f:23:c0:1d
Serial Number (int): 6648117317582877
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: ab:29:bc:18:5c:6e:e2:22:cb:a8:50:02:bf:b0:30:75:c0:5f:bb:55
AuthorityKeyId: a6:e4:ff:98:fd:e5:49:32:7e:5c:75:f2:16:a2:4d:8c:74:35:de:22

Fingerprint (sha1): 2d:c5:95:5b:13:40:20:9d:27:47:aa:7a:9f:85:99:35:f5:d4:2f:a0
Fingerprint (sha256): 03:77:20:cf:c7:c6:59:6d:2d:c4:a3:3e:b3:93:3b:b9:d3:c6:18:49:fe:8d:fc:11:be:c4:05:6a:09:5a:21:e6

Issuing Certificate URL: http://cdp1.pca.dfn.de/gwdg-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/gwdg-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/gwdg-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/gwdg-ca/pub/crl/cacrl.crl

Check the revocation status for certificate x-shib-idp.gwdg.de

1

DNS Names

1

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for x-shib-idp.gwdg.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

x-shib-idp.gwdg.de [email protected]

Other certificates including the domain name gwdg.de

(limited to 100 certificates)
rop-server.ph4.physik.uni-goettingen.de
vweb14.gwdg.de
c105-187.cloud.gwdg.de
c098-221.cloud.gwdg.de
c104-131.cloud.gwdg.de
highmed.gwdg.de
dariah-cdstar.gwdg.de
vweb14.gwdg.de
cdstar-prod01.gwdg.de
koala-jenkins.gwdg.de
vweb14.gwdg.de
wsus.gwdg.de
statoek.wiwi.uni-goettingen.de
sso.gwdg.de
c106-211.cloud.gwdg.de
radardb.gwdg.de
voucher.gwdg.de
atto.mpch-mainz.gwdg.de
x-shib-idp.gwdg.de
vweb14.gwdg.de
mailer.gwdg.de
MX-2800-1.gwdg.de
sharepoint4.top.gwdg.de
vweb14.gwdg.de
b2share.gwdg.de
email.gwdg.de
statoek.wiwi.uni-goettingen.de
vweb14.gwdg.de
idm-logstash.gwdg.de
vweb14.gwdg.de
captive-portal.gwdg.de
vm24120.virt.gwdg.de
*.wiki.gwdg.de
listserv.gwdg.de
georoc.eu
svago92.gwdg.de
emm.top.gwdg.de
c104-131.cloud.gwdg.de
gwd-cert-uddi64.top.gwdg.de
gwd-wsus-manage.top.gwdg.de
npsw-www.mpg.de
buffet.gwdg.de
vweb14.gwdg.de
mpg-fm-s1.top.gwdg.de
email.gwdg.de
vweb14.gwdg.de
lotus1.gwdg.de
becotesust.gwdg.de
vojel.kellnerweg.de
vm19105.virt.gwdg.de
foodle.mpg.de
c104-131.cloud.gwdg.de
vweb14.gwdg.de
vpn.gwdg.de
vweb14.gwdg.de
dcups.uni-math.gwdg.de
vojel.kellnerweg.de
voucher.gwdg.de
benutzer-portal.gwdg.de
vm19002.virt.gwdg.de
sfr.sofi.gwdg.de
c105-187.cloud.gwdg.de
email.gwdg.de
host01.accounting.gwdg.de
gwd-rds-azure.top.gwdg.de
observium.gwdg.de
mx1.gwdg.de
umgpid.gwdg.de
vweb14.gwdg.de
c104-131.cloud.gwdg.de
harbor.gwdg.de
vweb14.gwdg.de
efforts-is.uni-goettingen.de
*.sharepointstore.gwdg.de
jupyter-cloud.gwdg.de
studip-dev-fe.gwdg.de
faq.gwdg.de
vweb14.gwdg.de
status.gwdg.de
oraw0.gwdg.de
rstudio.gwdg.de
c103-171.cloud.gwdg.de
voucher.gwdg.de
c103-171.cloud.gwdg.de
email.gwdg.de
npsw-www.mpg.de
npsw-www.mpg.de
swww3.gwdg.de
test.gwdg.de
vm18011.virt.gwdg.de
office.owncloud.gwdg.de
studip.uni-goettingen.de
gwdu111.gwdg.de
vweb14.gwdg.de
www.gwdg.de
c104-131.cloud.gwdg.de
vweb14.gwdg.de
vweb14.gwdg.de
vweb14.gwdg.de
timbuktu.physik3.gwdg.de

Certificate

The complete raw certificate details for x-shib-idp.gwdg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CkJ74tR+X8nApUvI16f
UuCG0yCbx/FfwoSSLtZ+IPu7tlcuWw+c/dfN8jd0+WakJuXA+XtsbqFGZHKVVfhz
aNkFmAU5MecP9KmQLz3hID6HfkvkOnu5hUMQ920jmsNm+7akSAHXegUXTpr0eLfd
kavexjWWAQOqgARSBhf6xXvMiyFxGG/FjKSRB8mLhw4gRA1Lv9fjXoI38gKVWRKF
B4cTpBlNnjFt/mQi9PBw+xeuPCijbB+fJe16xH0FbiivHzRaxKkRAEZtqy4sp7W0
ypmevq5jtU7AWrYJK8JLYV8+9uh4VmiuqCuYmPnCSPKtnkLCUOlGG8qm3fNpi3uU
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6648117317582877
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NIEDERSACHSEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GOETTINGEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gesellschaft fuer wissenschaftliche Datenverarbeitung'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GWDG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GWDG CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-23 06:51:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-22 06:51:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NIEDERSACHSEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GOETTINGEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gesellschaft fuer wissenschaftliche Datenverarbeitung'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'x-shib-idp.gwdg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28802570524408058553534845315936768562708125438721725710860049517354889009493858379120714733801245413985773826545286262670403166339999176987238286222633611562408727373469661648994996624170648443742924607414332030164854224572349548642199317271620569715149828801817455030364506654086454495175911758531749502352646332670514121203903374843670689681023389517349631668903574011582359951636722121873871173700972182783141887052142334140105686563403811373130551573425287731162455686133580045311893330277718977956931387537476461733573215886419933074417319989823744730486953248968838234209020085435127298277464386721050078712839
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab29bc185c6ee222cba85002bfb03075c05fbb55
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a6e4ff98fde549327e5c75f216a24d8c7435de22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x-shib-idp.gwdg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/gwdg-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/gwdg-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (188 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/gwdg-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/gwdg-ca/pub/cacert/cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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