MX-2800-1.gwdg.de

- Gesellschaft fuer wissenschaftliche Datenverarbeitung -

Issued by GWDG CA

About this certificate

This digital certificate with serial number 19:2f:8f:32:34:5c:96 was issued on by Gesellschaft fuer wissenschaftliche Datenverarbeitung.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DigitalSignature ContentCommitment KeyEncipherment DataEncipherment] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Gesellschaft fuer wissenschaftliche Datenverarbeitung

Organization: Gesellschaft fuer wissenschaftliche Datenverarbeitung
Organization unit: GWDG
State / Province: NIEDERSACHSEN
Locality: GOETTINGEN
Country: DE

Gesellschaft fuer wissenschaftliche Datenverarbeitung

Organization: Gesellschaft fuer wissenschaftliche Datenverarbeitung
Organization unit: GWDG
State / Province: NIEDERSACHSEN
Locality: GOETTINGEN
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 19:2f:8f:32:34:5c:96
Serial Number (int): 7089166486887574
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: c0:88:4d:3f:44:4c:6b:55:02:ac:34:a0:12:9a:9f:06:2c:f3:42:1b
AuthorityKeyId: a6:e4:ff:98:fd:e5:49:32:7e:5c:75:f2:16:a2:4d:8c:74:35:de:22

Fingerprint (sha1): 11:85:20:bc:df:37:74:d2:3f:89:8b:c9:a2:0a:76:f5:55:da:90:bc
Fingerprint (sha256): 03:d1:3b:11:7f:5a:87:c4:73:c0:6a:a7:b2:b9:66:8a:6b:18:ef:96:61:cc:ee:4a:89:4c:f2:5c:22:58:3d:09

Issuing Certificate URL: http://cdp1.pca.dfn.de/gwdg-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/gwdg-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/gwdg-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/gwdg-ca/pub/crl/cacrl.crl

Check the revocation status for certificate MX-2800-1.gwdg.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for MX-2800-1.gwdg.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

MX-2800-1.gwdg.de

Other certificates including the domain name gwdg.de

(limited to 100 certificates)
rop-server.ph4.physik.uni-goettingen.de
vweb14.gwdg.de
c105-187.cloud.gwdg.de
c098-221.cloud.gwdg.de
c104-131.cloud.gwdg.de
highmed.gwdg.de
dariah-cdstar.gwdg.de
vweb14.gwdg.de
cdstar-prod01.gwdg.de
koala-jenkins.gwdg.de
vweb14.gwdg.de
wsus.gwdg.de
statoek.wiwi.uni-goettingen.de
sso.gwdg.de
c106-211.cloud.gwdg.de
radardb.gwdg.de
voucher.gwdg.de
atto.mpch-mainz.gwdg.de
x-shib-idp.gwdg.de
vweb14.gwdg.de
mailer.gwdg.de
MX-2800-1.gwdg.de
sharepoint4.top.gwdg.de
vweb14.gwdg.de
b2share.gwdg.de
email.gwdg.de
statoek.wiwi.uni-goettingen.de
vweb14.gwdg.de
idm-logstash.gwdg.de
vweb14.gwdg.de
captive-portal.gwdg.de
vm24120.virt.gwdg.de
*.wiki.gwdg.de
listserv.gwdg.de
georoc.eu
svago92.gwdg.de
emm.top.gwdg.de
c104-131.cloud.gwdg.de
gwd-cert-uddi64.top.gwdg.de
gwd-wsus-manage.top.gwdg.de
npsw-www.mpg.de
buffet.gwdg.de
vweb14.gwdg.de
mpg-fm-s1.top.gwdg.de
email.gwdg.de
vweb14.gwdg.de
lotus1.gwdg.de
becotesust.gwdg.de
vojel.kellnerweg.de
vm19105.virt.gwdg.de
foodle.mpg.de
c104-131.cloud.gwdg.de
vweb14.gwdg.de
vpn.gwdg.de
vweb14.gwdg.de
dcups.uni-math.gwdg.de
vojel.kellnerweg.de
voucher.gwdg.de
benutzer-portal.gwdg.de
vm19002.virt.gwdg.de
sfr.sofi.gwdg.de
c105-187.cloud.gwdg.de
email.gwdg.de
host01.accounting.gwdg.de
gwd-rds-azure.top.gwdg.de
observium.gwdg.de
mx1.gwdg.de
umgpid.gwdg.de
vweb14.gwdg.de
c104-131.cloud.gwdg.de
harbor.gwdg.de
vweb14.gwdg.de
efforts-is.uni-goettingen.de
*.sharepointstore.gwdg.de
jupyter-cloud.gwdg.de
studip-dev-fe.gwdg.de
faq.gwdg.de
vweb14.gwdg.de
status.gwdg.de
oraw0.gwdg.de
rstudio.gwdg.de
c103-171.cloud.gwdg.de
voucher.gwdg.de
c103-171.cloud.gwdg.de
email.gwdg.de
npsw-www.mpg.de
npsw-www.mpg.de
swww3.gwdg.de
test.gwdg.de
vm18011.virt.gwdg.de
office.owncloud.gwdg.de
studip.uni-goettingen.de
gwdu111.gwdg.de
vweb14.gwdg.de
www.gwdg.de
c104-131.cloud.gwdg.de
vweb14.gwdg.de
vweb14.gwdg.de
vweb14.gwdg.de
timbuktu.physik3.gwdg.de

Certificate

The complete raw certificate details for MX-2800-1.gwdg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdQrPRjeADfMR9lsIC/u
IJZrW4krI0ljt+C2/X7iMok3bqdS49T0ZzWbS0LZHdR5CBED9k8E1q2o7EIvsRtW
LkmDwyiismKkNq85wEYmNtSNFKN52XmniL5TZtV0PvD4GCAbKgLiZf7uXN/gkk1S
HCZlVmLBa94z7ufosTjG+imwVp2bDfpd7umi25fHfVofi4Y/ebspIk3E2r0JYgvW
L3AnfRwwpJn+oot6UITM0LfcJWvRENulbh+gcW9LzOfbMpK3XrYkPPwy35SbEhnA
pXHs89aS43rZvUKAfn1BHBf0EwFEtOfwwLsq3EnRP6HdcbTva0JKfry2O6ANoVTk
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7089166486887574
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NIEDERSACHSEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GOETTINGEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gesellschaft fuer wissenschaftliche Datenverarbeitung'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GWDG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GWDG CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-23 13:14:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 23:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NIEDERSACHSEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'GOETTINGEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gesellschaft fuer wissenschaftliche Datenverarbeitung'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'GWDG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MX-2800-1.gwdg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18409178604574851060655501686251482465396794454420009629002900370255163695277921872767866538815523661578795971487168853498146255262521453342665861635671108701895902042487714284567332998938337360119228728500744459550710353732227142532201650028163271650966752542076730691980474936601602785968023280953249004360024020193045617557635691301026286723213828486921310851183006334709503196129951328053633630805828629117321834571531074704809895855896898281588607723125738932486429240364069295885935037998267610189391645112482726694232305666259854239655980312640631807024018253333942794628966050791436853955836528127961327789291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c0884d3f444c6b5502ac34a0129a9f062cf3421b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a6e4ff98fde549327e5c75f216a24d8c7435de22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'MX-2800-1.gwdg.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/gwdg-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/gwdg-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (188 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/gwdg-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/gwdg-ca/pub/cacert/cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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