rbb-online.de
- Rundfunk Berlin-Brandenburg -
Issued by rbb CA
About this certificate
This digital certificate with serial number 1e:b7:8a:44:bd:23:e4:d7:dc:d8:7a:e7 was issued on by Rundfunk Berlin-Brandenburg.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Rundfunk Berlin-Brandenburg
Organization:
Rundfunk Berlin-Brandenburg
Organization unit: TPS Online
Organization unit: TPS Online
State / Province:
Berlin
Locality: Berlin
Country: DE
Locality: Berlin
Country: DE
Rundfunk Berlin-Brandenburg
Organization:
Rundfunk Berlin-Brandenburg
Country:
DE
This certificate has expire since
Certificate Details
Serial Number (hex): 1e:b7:8a:44:bd:23:e4:d7:dc:d8:7a:e7Serial Number (int): 9506436674212050737131191015
Serial Number lenght: 93 bits, 12 octets
SubjectKeyId: 87:9b:58:d1:e1:80:e7:cc:5e:a6:6d:ce:e9:89:7a:22:28:ad:e9:5c
AuthorityKeyId: 79:a5:12:8c:e7:ac:ae:c6:69:c9:04:e6:4b:07:da:72:cb:cb:5d:8d
Fingerprint (sha1): 71:4c:18:a2:69:94:28:03:72:2f:8d:cf:c6:c9:a2:1b:0f:3d:e8:e3
Fingerprint (sha256): 03:94:37:33:df:ce:51:f1:b7:a6:fe:05:5a:1b:f7:2c:97:f0:2a:f5:ca:6b:40:86:b5:00:01:e9:5a:03:15:d7
Issuing Certificate URL: http://cdp1.pca.dfn.de/rundfunk-berlin-brandenburg-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/rundfunk-berlin-brandenburg-ca/pub/cacert/cacert.crt
Revocation information
OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSPCRL Distribution Point: http://cdp1.pca.dfn.de/rundfunk-berlin-brandenburg-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/rundfunk-berlin-brandenburg-ca/pub/crl/cacrl.crl
Check the revocation status for certificate rbb-online.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rbb-online.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
rbb-online.de
Other certificates including the domain name rbb-online.de
(limited to 100 certificates)
evo-s0.rbb-online.de
mi-vsp02.rbb-online.de
distribution-status.rbb-online.de
sf-ad1.ad.rbb-online.de
ref.rbb-online.de
sp-flimgr03.rbb-online.de
rbb-online.de
sp-ad2.ad.rbb-online.de
sp-ttximport02.rbb-online.de
mi-s4-1.rbb-online.de
sp-vcrpad02.rbb-online.de
sp-view01.ad.rbb-online.de
presseservice.rbb-online.de
rbbot1ev1.rbb-online.de
ttool-extern.rbb-online.de
ref-s0.w3.rbb-online.de
sp-wsa01-p1.rbb-online.de
mediathek-origin.rbb-online.de
sp-jobsmgr01.rbb-online.de
intranet-s0.rbb-online.de
distribution-status.rbb-online.de
mimo.rbb-online.de
munki.rbb-online.de
ndr-news.rbb-online.de
rbb-online.de
sp-ad2.ad.rbb-online.de
sf-ad1.ad.rbb-online.de
sp-fmc01.rbb-online.de
rbb-online.de
pcp.rbb-online.de
distribution-status.rbb-online.de
distribution-status.rbb-online.de
i-doit-i.rbb-online.de
rbblog.rbb-online.de
distribution-status.rbb-online.de
sts.rbb-online.de
evo-p-awx.rbb-online.de
lodoas03.rbb-online.de
sp-im02.rbb-online.de
data.rbb-online.de
sp-ise01.rbb-online.de
sp-dsp-prod01.ad.rbb-online.de
webdoku.rbb-online.de
mi-5.rbb-online.de
webapplog.rbb-online.de
data-vis.rbb-online.de
sp-webdav01.ad.rbb-online.de
smr.rbb-online.de
m-relayb02i.rbb-online.de
rbb-online.de
rbb-online.de
m-relayp02i.rbb-online.de
sp-ttximport02.rbb-online.de
distribution-status.rbb-online.de
m-relayb02.rbb-online.de
distribution-status.rbb-online.de
ip-mgmt.rbb-online.de
ucmobile.rbb-online.de
sb-ad3.ad.rbb-online.de
distribution-status.rbb-online.de
distribution-status.rbb-online.de
sb-osuca01.rbb-online.de
entree-b.rbb-online.de
medienbroker.rbb-online.de
distribution-status.rbb-online.de
distribution-status.rbb-online.de
distribution-status.rbb-online.de
docs.rbb-online.de
evo-static.rbb-online.de
rbb-online.de
sc-ad1.ad.rbb-online.de
rbb-online.de
distribution-status.rbb-online.de
ptp-gm-b.rbb-online.de
rmsext.rbb-online.de
rbb-online.de
mi-s3-1.rbb-online.de
sp-ad4.ad.rbb-online.de
pcp.rbb-online.de
distribution-status.rbb-online.de
mond-mk.rbb-online.de
orbitdvb41.rbb-online.de
birddoghrstatus.paradox.ai
evo-s-awx.rbb-online.de
evo-t1.rbb-online.de
rbb-online.de
sb-aks-dpe00.ad.rbb-online.de
evo-p-fusion.rbb-online.de
evo-data.rbb-online.de
rbb-mon.rbb-online.de
webdoku.rbb-online.de
rbb-online.de
distribution-status.rbb-online.de
sb-ise01.rbb-online.de
sp-cpi02.rbb-online.de
entree-b.rbb-online.de
entree-p.rbb-online.de
sb-tipath01.rbb-online.de
sp-ise01.rbb-online.de
sp-mon-mk1.rbb-online.de
mi-vsp02.rbb-online.de
distribution-status.rbb-online.de
sf-ad1.ad.rbb-online.de
ref.rbb-online.de
sp-flimgr03.rbb-online.de
rbb-online.de
sp-ad2.ad.rbb-online.de
sp-ttximport02.rbb-online.de
mi-s4-1.rbb-online.de
sp-vcrpad02.rbb-online.de
sp-view01.ad.rbb-online.de
presseservice.rbb-online.de
rbbot1ev1.rbb-online.de
ttool-extern.rbb-online.de
ref-s0.w3.rbb-online.de
sp-wsa01-p1.rbb-online.de
mediathek-origin.rbb-online.de
sp-jobsmgr01.rbb-online.de
intranet-s0.rbb-online.de
distribution-status.rbb-online.de
mimo.rbb-online.de
munki.rbb-online.de
ndr-news.rbb-online.de
rbb-online.de
sp-ad2.ad.rbb-online.de
sf-ad1.ad.rbb-online.de
sp-fmc01.rbb-online.de
rbb-online.de
pcp.rbb-online.de
distribution-status.rbb-online.de
distribution-status.rbb-online.de
i-doit-i.rbb-online.de
rbblog.rbb-online.de
distribution-status.rbb-online.de
sts.rbb-online.de
evo-p-awx.rbb-online.de
lodoas03.rbb-online.de
sp-im02.rbb-online.de
data.rbb-online.de
sp-ise01.rbb-online.de
sp-dsp-prod01.ad.rbb-online.de
webdoku.rbb-online.de
mi-5.rbb-online.de
webapplog.rbb-online.de
data-vis.rbb-online.de
sp-webdav01.ad.rbb-online.de
smr.rbb-online.de
m-relayb02i.rbb-online.de
rbb-online.de
rbb-online.de
m-relayp02i.rbb-online.de
sp-ttximport02.rbb-online.de
distribution-status.rbb-online.de
m-relayb02.rbb-online.de
distribution-status.rbb-online.de
ip-mgmt.rbb-online.de
ucmobile.rbb-online.de
sb-ad3.ad.rbb-online.de
distribution-status.rbb-online.de
distribution-status.rbb-online.de
sb-osuca01.rbb-online.de
entree-b.rbb-online.de
medienbroker.rbb-online.de
distribution-status.rbb-online.de
distribution-status.rbb-online.de
distribution-status.rbb-online.de
docs.rbb-online.de
evo-static.rbb-online.de
rbb-online.de
sc-ad1.ad.rbb-online.de
rbb-online.de
distribution-status.rbb-online.de
ptp-gm-b.rbb-online.de
rmsext.rbb-online.de
rbb-online.de
mi-s3-1.rbb-online.de
sp-ad4.ad.rbb-online.de
pcp.rbb-online.de
distribution-status.rbb-online.de
mond-mk.rbb-online.de
orbitdvb41.rbb-online.de
birddoghrstatus.paradox.ai
evo-s-awx.rbb-online.de
evo-t1.rbb-online.de
rbb-online.de
sb-aks-dpe00.ad.rbb-online.de
evo-p-fusion.rbb-online.de
evo-data.rbb-online.de
rbb-mon.rbb-online.de
webdoku.rbb-online.de
rbb-online.de
distribution-status.rbb-online.de
sb-ise01.rbb-online.de
sp-cpi02.rbb-online.de
entree-b.rbb-online.de
entree-p.rbb-online.de
sb-tipath01.rbb-online.de
sp-ise01.rbb-online.de
sp-mon-mk1.rbb-online.de
Certificate
The complete raw certificate details for rbb-online.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIMHreKRL0j5Nfc2HrnMA0GCSqGSIb3DQEBCwUAMGsxCzAJ BgNVBAYTAkRFMSQwIgYDVQQKExtSdW5kZnVuayBCZXJsaW4tQnJhbmRlbmJ1cmcx DzANBgNVBAMTBnJiYiBDQTElMCMGCSqGSIb3DQEJARYWY2EtYWRtaW5AcmJiLW9u bGluZS5kZTAeFw0xODAzMDExNDIyNDZaFw0xOTA3MDkyMzU5MDBaMIGCMQswCQYD VQQGEwJERTEPMA0GA1UECAwGQmVybGluMQ8wDQYDVQQHDAZCZXJsaW4xJDAiBgNV BAoMG1J1bmRmdW5rIEJlcmxpbi1CcmFuZGVuYnVyZzETMBEGA1UECwwKVFBTIE9u bGluZTEWMBQGA1UEAwwNcmJiLW9ubGluZS5kZTCCAiIwDQYJKoZIhvcNAQEBBQAD ggIPADCCAgoCggIBAMyeCF73k5F1N/iH9GzBOfi5h8E+ANrEnSQZU96lSo12BG8X LObJUUv3Fr8Ilv71glQjY/VPN7WcdUPFmU7Kd/D/KmQoNKYjso1A7o6lUjs+Mq1L 9QMwI1eWM1vKE3Ag//4RnEoQqXH7Kr8ySfbBhA2+IKne9uV1DOA3AEr2+Fx2bSNu 2dV+v17lmkRG8tPqofEEjCz+Cr5d0ytPKpHO1TWtec0ey3f5+wI5HMVSZoOwX7uI 2XyO3ow40RvjflRfkdCHxOfk+vBiV/4bDTjYDP1Qw1tXhJZU6c+SgHF61LC44vB3 JTMYlj08Fq+DyssqlRiESiX+0LvQpq/SLsF8vQ/lmJMpXzeLtLJwsSCEvXXA32ih /smyaucgZ8HhnJh0FKV/GW6H88EAp0SOBo9bzvzyhJvoxLH8L54sB3CFqdkf/Dub roTBaWYqK1LsYM/rsfqN05eLHUrOBhs6F77bgO8EnuWFcvIGHWZRDRk+k1ZujIxP uFU1C1X9/2aOc6Ikf1VNLviioM1XzvXopYUW7s7H7FCU7OsI5BwvGy9ceZBXcbhv Dmo50DPrAz4KV4KmZ/C6ofWzdy1mCMZEE4QDtDQIVwKtqc3Rz5m/1o32FjrcZvZo M5Uw6lQDJOnwkKe8xX9Ohl4yR0LMBYcIKB4MaRRE3js19cQWU8/sf9XEBY49AgMB AAGjggKkMIICoDBZBgNVHSAEUjBQMAgGBmeBDAECAjANBgsrBgEEAYGtIYIsHjAP Bg0rBgEEAYGtIYIsAQEEMBEGDysGAQQBga0hgiwBAQQDBzARBg8rBgEEAYGtIYIs AgEEAwcwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYB BQUHAwEwHQYDVR0OBBYEFIebWNHhgOfMXqZtzumJeiIorelcMB8GA1UdIwQYMBaA FHmlEoznrK7GackE5ksH2nLLy12NMBgGA1UdEQQRMA+CDXJiYi1vbmxpbmUuZGUw gakGA1UdHwSBoTCBnjBNoEugSYZHaHR0cDovL2NkcDEucGNhLmRmbi5kZS9ydW5k ZnVuay1iZXJsaW4tYnJhbmRlbmJ1cmctY2EvcHViL2NybC9jYWNybC5jcmwwTaBL oEmGR2h0dHA6Ly9jZHAyLnBjYS5kZm4uZGUvcnVuZGZ1bmstYmVybGluLWJyYW5k ZW5idXJnLWNhL3B1Yi9jcmwvY2FjcmwuY3JsMIH3BggrBgEFBQcBAQSB6jCB5zAz BggrBgEFBQcwAYYnaHR0cDovL29jc3AucGNhLmRmbi5kZS9PQ1NQLVNlcnZlci9P Q1NQMFcGCCsGAQUFBzAChktodHRwOi8vY2RwMS5wY2EuZGZuLmRlL3J1bmRmdW5r LWJlcmxpbi1icmFuZGVuYnVyZy1jYS9wdWIvY2FjZXJ0L2NhY2VydC5jcnQwVwYI KwYBBQUHMAKGS2h0dHA6Ly9jZHAyLnBjYS5kZm4uZGUvcnVuZGZ1bmstYmVybGlu LWJyYW5kZW5idXJnLWNhL3B1Yi9jYWNlcnQvY2FjZXJ0LmNydDATBgorBgEEAdZ5 AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw1VssMM7kw8l6sJDId+/y0HH Wa8ARsT19s7FwLuvVqczYAiEXSmztQAosPW3fzHIuuX3IgcDjymTCnivw5I+lwOw R0edrLbcrPcXpmQjvdBzRWKtfNueozfzqB5bpZ5fqNBj0/CtrZ4S4XzW0djzoxPn +8+ubXdGyDeQyhy5nzqOCPvwptcKtg9k9qx/aHQY0A/au+nodvXU7ohnW+kO6oKc UTmHLHbVFQD0WefDpkbr2/Ddj2Cv1gWjKRVPlr9MlkwyEhOhbpAAvZShxgp7i/lp liyBpvjzPbHpXhZDLTZI6wroU/ZyjZ1r0xlnA/oiayYgf/cIrTIVY1q1y65xVw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzJ4IXveTkXU3+If0bME5 +LmHwT4A2sSdJBlT3qVKjXYEbxcs5slRS/cWvwiW/vWCVCNj9U83tZx1Q8WZTsp3 8P8qZCg0piOyjUDujqVSOz4yrUv1AzAjV5YzW8oTcCD//hGcShCpcfsqvzJJ9sGE Db4gqd725XUM4DcASvb4XHZtI27Z1X6/XuWaREby0+qh8QSMLP4Kvl3TK08qkc7V Na15zR7Ld/n7AjkcxVJmg7Bfu4jZfI7ejDjRG+N+VF+R0IfE5+T68GJX/hsNONgM /VDDW1eEllTpz5KAcXrUsLji8HclMxiWPTwWr4PKyyqVGIRKJf7Qu9Cmr9IuwXy9 D+WYkylfN4u0snCxIIS9dcDfaKH+ybJq5yBnweGcmHQUpX8ZbofzwQCnRI4Gj1vO /PKEm+jEsfwvniwHcIWp2R/8O5uuhMFpZiorUuxgz+ux+o3Tl4sdSs4GGzoXvtuA 7wSe5YVy8gYdZlENGT6TVm6MjE+4VTULVf3/Zo5zoiR/VU0u+KKgzVfO9eilhRbu zsfsUJTs6wjkHC8bL1x5kFdxuG8OajnQM+sDPgpXgqZn8Lqh9bN3LWYIxkQThAO0 NAhXAq2pzdHPmb/WjfYWOtxm9mgzlTDqVAMk6fCQp7zFf06GXjJHQswFhwgoHgxp FETeOzX1xBZTz+x/1cQFjj0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9506436674212050737131191015 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rundfunk Berlin-Brandenburg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rbb CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-01 14:22:46 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 23:59:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rundfunk Berlin-Brandenburg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TPS Online' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'rbb-online.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 834765816295506962699425457165069752515109035887065149051040398063955904633806651871389637814918394793942248603643377425119030524936515779234596919387102793973707795881680891071537619295435344970931789986599337101607094370788720913056455501704931155431687417087392939659921644663240143948379187372521892693159174395294633983690646109600057239448389305242400086874461963415947657639233301194301040222234018139649663217684269823530150088797412943868829697541770911611550965129899196803528451307093305051119903392518875281358426651852933554488290409071724661588324951494285002115650019483968202762356492830705531528979225134777176011595275079867633433443867804110145840551181874589669348496866225091804689717042416436497815821388023782463727266820832627611949151287377029799843682598212720787621471736080681958228495014354378472560432649314884918984301353460408609316016343327958863973664072646070429909890456275290797121020078179962212048326675998014819294629554862943734750977890397290998869610383516306262023983267860321741155256434888507087356172186185594616100943554722459824698217958286184311011712208448495695691323103901737472146675260262129800982817117771475883764586409715422771496353313120572659761515394072910467451507281469 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 879b58d1e180e7cc5ea66dcee9897a2228ade95c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 79a5128ce7acaec669c904e64b07da72cbcb5d8d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbb-online.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/rundfunk-berlin-brandenburg-ca/pub/crl/cacrl.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/rundfunk-berlin-brandenburg-ca/pub/crl/cacrl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (234 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/rundfunk-berlin-brandenburg-ca/pub/cacert/cacert.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/rundfunk-berlin-brandenburg-ca/pub/cacert/cacert.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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