chlamydien.fli.bund.de

- Friedrich-Loeffler-Institut -

Issued by FLI CA

About this certificate

This digital certificate with serial number 18:37:4c:e5:b1:0f:ec was issued on by Friedrich-Loeffler-Institut.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [ContentCommitment KeyEncipherment DigitalSignature DataEncipherment] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Friedrich-Loeffler-Institut

Organization: Friedrich-Loeffler-Institut
Organization unit: Zentrale Dienste - IT
State / Province: Mecklenburg-Vorpommern
Locality: Greifswald
Country: DE

Friedrich-Loeffler-Institut

Organization: Friedrich-Loeffler-Institut
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 18:37:4c:e5:b1:0f:ec
Serial Number (int): 6816202851684332
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: ee:7f:f6:8f:48:ab:4a:eb:ca:0e:56:9a:7d:8f:3d:33:14:42:ca:22
AuthorityKeyId: d7:49:43:7c:88:32:94:62:4c:bb:60:85:13:d1:60:fa:5c:7d:6a:44

Fingerprint (sha1): 57:92:c4:c0:2a:37:b3:42:32:e5:e6:1f:79:d8:a5:02:da:7f:b8:c9
Fingerprint (sha256): 03:8c:39:a1:2d:ab:37:e7:44:0c:f5:76:75:6c:cb:d7:7d:0a:1b:99:4d:c4:e0:1d:42:bc:9e:77:30:69:8f:84

Issuing Certificate URL: http://cdp1.pca.dfn.de/friedrich-loeffler-institut-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/friedrich-loeffler-institut-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/friedrich-loeffler-institut-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/friedrich-loeffler-institut-ca/pub/crl/cacrl.crl

Check the revocation status for certificate chlamydien.fli.bund.de

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chlamydien.fli.bund.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chlamydien.fli.bund.de
dk.fli.bund.de
emac2.fli.bund.de
formgenerator.fli.bund.de
gancq.fli.bund.de
lehre.fli.bund.de
mykobakterien.fli.bund.de
nws.fli.bund.de
via.fli.bund.de

Other certificates including the domain name bund.de

(limited to 100 certificates)
bundes.cloud.bmfsfj.in.bund.de
schulung5.eakte.zoll.in.bund.de
bamf.bund.de
ctx02.bmwi.bund.de
20220922.cloud.bcsv.in.bund.de
stu-extc.dvdv.bund.de
vlps7w4zstxe.petclin.cloud.itz.in.bund.de
cafm-tn1.cloud.bcsv.in.bund.de
promadmz.jki.bund.de
upload.prod.gsb.bmel.in.bund.de
schulung17.eakte.zoll.in.bund.de
access.bmjv.cloud.intranet.bund.de
bclogin3.bkamt.cloud.intranet.bund.de
artifactory.zssi.bva.in.bund.de
vlpvws2uyvwh.pvsplus1.cloud.zoll.in.bund.de
hosting.dwd.de
hosting.dwd.de
lernplattform.bund.de
www.normenkontrollrat.bund.de
vlpzrtfbavdp.bmigate1.cloud.bmi.in.bund.de
access.itz.cloud.intranet.bund.de
editor.egesetz.zd.in.bund.de
vlpu6xc8ixat.my1stsalone60.cloud.bcsv.in.bund.de
vlpxub43mocj.testentw.cloud.stba.in.bund.de
redconf.itz.cloud.intranet.bund.de
hashdb.mwscan.bund.de
int.bpm-extern.bzst.itzbund.net
forum.bfdi.bund.de
personalhaushalt.prod.bmf.in.bund.de
schulung.eakte.bsh.itz.res.bund.de
formularcenter.bvl.bund.de
bmfbox6.cloud.bmf.in.bund.de
gittest.bc-mgmt01.cloud.intranet.bund.de
travis.baw.res.bund.de
cafm-ti1.cloud.bcsv.in.bund.de
sicherheit.bund.de
formularcenter.bvl.bund.de
dzmgit05.bc-mgmt05.cloud.intranet.bund.de
redaktion.atu.gsb.bmi.in.bund.de
ref.xrechnung.bund.de
mob.bmz.bund.de
eakte-t.cloud.base.in.bund.de
vlpc092q2btk.btsapqp.cloud.zitis.in.bund.de
redaktion.atu.gsb.bmjv.in.bund.de
ivva-ref2.id-ref-bug.it.bund.de
list.sozialwerk.bund.de
accesst.cloud.itz.in.bund.de
gigis-s.bkg.bund.de
fis-vl.bvl.bund.de
amp1.cloud.zitis.in.bund.de
appladebaw2.front.test.adeba.wsv.itzbund.net
www.bamf.de
vlppaksi2niz.mr15pp10.cloud.bcsv.in.bund.de
www.kvb.bund.de
sso.bvl.bund.de
eservice2022.itz.res.bund.de
warnung.bund.de
webapp.staging.wire.zd.in.bund.de
cafm0322.cloud.bcsv.in.bund.de
vlpzw166d320.emakorv-cloud.cloud.itz.in.bund.de
vwpsl8qtdinb.bcwsus-05a.cloud.bcsv.in.bund.de
ilp03812.iamservice.iaas.itz.cloud.intranet.bund.de
sportal.bmi.in.bund.de
hosting.dwd.de
eakte-i.cloud.bkm.in.bund.de
bcadminjumphost.bc-mgmt05.cloud.intranet.bund.de
cafm1028.cloud.bcsv.in.bund.de
sibboxaa.cloud.bcsv.in.bund.de
cafm-tn2.cloud.bcsv.in.bund.de
ampvsp.cloud.bmf.in.bund.de
test.zbp.bund.de
ivbb.citrix.brh.intranet.bund.de
amp7.cloud.bmdv.in.bund.de
confzent.itz.cloud.intranet.bund.de
dwh-integration.goaml.fiu.in.bund.de
flufus.baf.bund.de
int.anwendungen-luzina.zd.in.bund.de
vm-test.bescha.bund.de
enstransv-entw.zoll.in.bund.de
test.sign.npa-gsd.bva.bund.de
dvtu-int.itz.in.bund.de
api.portal.atu.beihilfe.bva.bund.de
ibis.intranet.bund.de
hosting.dwd.de
bedeakte25-sm.bmjv.intranet.bund.de
accessp.itz.cloud.intranet.bund.de
collabmi.cloud.bcsv.in.bund.de
amd1.cloud.zoll.in.bund.de
eab306mi.cloud.bcsv.in.bund.de
monitoring-nachhaltigkeit.bkamt.intranet.bund.de
helpdesk-p1.pwservice.zd.in.bund.de
vlpb8at2ozfk.gwbmdv2a.cloud.bmdv.in.bund.de
amp1.cloud.bafa.in.bund.de
dit.bund.de
register.wreg.bkarta.intranet.bund.de
amp4.cloud.bmdv.in.bund.de
stage.grc.bva.intranet.bund.de
access.bpa.cloud.intranet.bund.de
gigis.bkg.bund.de
vlpx9e8vdvdq.bcmon1.cloud.base.in.bund.de

Certificate

The complete raw certificate details for chlamydien.fli.bund.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSiVUkbNCUMwMgyg5hHw
/kHvJGpqZ7/FhZeH8bF92T9PCdVh5bUcNX7IrX5zWc1pubCxOKs7ck4+EZ3Ggnek
yha5c9EJ838nrhyhjxy97CImdaBtVL7Ka7dobPYCFVz2yOKWzRBtoWvYrJiHc14E
utww/Il2Odb7ye2CNpesMI0/AGuOGBygLAWaYdt0vaObf2Zgw6q16KfoH0q4bSx7
LwP2/hJGGVrKxD5Ig92D9YHN0NplFvAPCjn7p0cocCRXP/gtYC68fNPUTIrGlLry
mw8u8FTXKb3fgVjm95P28B5H+DiCwgj9mSCOmBJ3P0Rzyo7F8G9UJjM8dh9q09vS
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6816202851684332
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Friedrich-Loeffler-Institut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FLI CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-09-16 05:49:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 23:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mecklenburg-Vorpommern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greifswald'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Friedrich-Loeffler-Institut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zentrale Dienste - IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chlamydien.fli.bund.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22869145563394868553225457644390069448715739963359092229086004265107909873565999124257189974891097181821593766544447583314268261647604977702360819350216716600305984373672162676713246644741786540770626569411542518466513158766261412719278826241592257208342068686938628359276915359003440983088054280445305046024250768555512460538687500875093944568448970828172512269494171112909109325393297887476518272583402439758310120325858264376039407869687569881653144572833251902045264070283206098053798666709778255337778848540476361174392588128371430800151138432541454351183617996800663456655056135358029350361840956044338706240103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ee7ff68f48ab4aebca0e569a7d8f3d331442ca22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d749437c883294624cbb608513d160fa5c7d6a44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (188 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chlamydien.fli.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dk.fli.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emac2.fli.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formgenerator.fli.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gancq.fli.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lehre.fli.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mykobakterien.fli.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nws.fli.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'via.fli.bund.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/friedrich-loeffler-institut-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/friedrich-loeffler-institut-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (234 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/friedrich-loeffler-institut-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/friedrich-loeffler-institut-ca/pub/cacert/cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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