vlp00997.adm.cloud.itzbund.net

- Informationstechnikzentrum Bund (ITZBund) -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 26:19:f1:bf:9c:fc:37:6e:ea:fa:30:a4 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Informationstechnikzentrum Bund (ITZBund)

Organization: Informationstechnikzentrum Bund (ITZBund)
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 26:19:f1:bf:9c:fc:37:6e:ea:fa:30:a4
Serial Number (int): 11791795143663945317506232484
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 45:a1:89:34:a2:ad:69:7f:c5:71:a7:1d:3c:2d:aa:cb:7b:45:bf:fe
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 39:8a:e4:6f:60:e5:32:8e:15:3c:dc:20:4e:05:4a:2c:d4:1a:46:4b
Fingerprint (sha256): 04:90:9e:ad:6b:f2:6a:fd:15:bf:af:7c:f1:e5:ba:62:93:7c:ff:0c:da:df:1a:89:b1:65:c7:23:d5:8d:83:8a

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate vlp00997.adm.cloud.itzbund.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vlp00997.adm.cloud.itzbund.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vlp00997.adm.cloud.itzbund.net

Other certificates including the domain name itzbund.net

(limited to 100 certificates)
pwservicedesk-test.itz.itzbund.net
swmvpn.md.itz.itzbund.net
prod.stdb.bmf.itzbund.net
f-bronze.monitoring.gslb.service.itzbund.net
vwp20418.zvd-p1.itzbund.net
redconf.itz.cloud.intranet.bund.de
int.bpm-extern.bzst.itzbund.net
git.gsb11.itz.itzbund.net
vle26374.entw.adler.zoll.itzbund.net
int.probenbuch.zoll.itzbund.net
vwp20295.zvd-p1.itzbund.net
web.zonec.prod.poseidon.service.itzbund.net
vwp20397.zvd-p1.itzbund.net
appladebaw2.front.test.adeba.wsv.itzbund.net
nida.itz.itzbund.net
test.zeus.anwendungen.zoll.itzbund.net
ivbb.citrix.brh.intranet.bund.de
gaucs-cloud-fi2.adm.cloud.itzbund.net
confzent.itz.cloud.intranet.bund.de
dwh-integration.goaml.fiu.in.bund.de
selfservice.wisit.itz.itzbund.net
vle30835.entw.dac6.bzst.itzbund.net
vlt62901.test.nizza.zoll.itzbund.net
vlt02781.dev.adm.cloud.itzbund.net
accessp.itz.cloud.intranet.bund.de
vwp20412.zvd-p1.itzbund.net
test2.mapz.zoll.itzbund.net
access.bpa.cloud.intranet.bund.de
symphony.test.aquanito.itz.itzbund.net
vle26846.entw.betrieb.bzst.itzbund.net
vlp21106.prod.evs.zoll.itzbund.net
proxy.access.bmvi.cloud.intranet.bund.de
fepool-b.zvd-v.itzbund.net
bn-gold.monitoring.service.itzbund.net
vwp26550.zvd-p2.itzbund.net
vlp00997.adm.cloud.itzbund.net
git.adm.cloud.itzbund.net
meldeportal-mindestlohn.zoll.itzbund.net
mitarbeiterportal.zoll.zivb.net
ntp6.ntp.service.itzbund.net
repbe100021.oob.cloud.itzbund.net
access.badv.cloud.intranet.bund.de
cmdb-ber.wisit.itz.itzbund.net
cloud-prod-cpp-fw01.adm.cloud.itzbund.net
mt2-fw.itsm-framework.service.itzbund.net
list1-mandant1.zvd-t.itzbund.net
vlt30749.test.bemis.bmf.itzbund.net
vli48382.int.reg-zensus.stba.itzbund.net
vlq27806.stu.sap.itz.itzbund.net
vlt36210.test.pvs.bmf.itzbund.net
repbn100026.oob.cloud.itzbund.net
not.riko-online.zoll.itzbund.net
smartit-zb.test.itsm-suite.service.itzbund.net
vwp20339.zvd-p1.itzbund.net
staging.service.itzbund.net
eantrag2.entw.zgr.zoll.itzbund.net
access.thw.cloud.intranet.bund.de
vlt00648.adm.cloud.itzbund.net
vlr36918.ref.egesetz.service.itzbund.net
vwt41227.zvd-t.itzbund.net
meldeportal-mindestlohn.zoll.itzbund.net
vle65935.entw.reb.zoll.itzbund.net
test.mapz.zoll.itzbund.net
portal.wisit.itz.itzbund.net
mgmt.netmon.service.itzbund.net
prod.paris.zka.itzbund.net
vwp64115.zvd-p1.itzbund.net
rlpfr113267.prod.ddi.mgmt.itzbund.net
vwp22798.zvd-p2.itzbund.net
vwp45372.zvd-t.itzbund.net
aspe1.aquanito.itz.itzbund.net
int.mapz.zoll.zivb.net
vlp20534.zvd-gw.service.itzbund.net
nida.itz.itzbund.net
soucs-cloud-fi4.adm.cloud.itzbund.net
wisit.itz.itzbund.net
vwp20411.zvd-p1.itzbund.net
vap03594.adm.cloud.itzbund.net
vpb-craas.prod.caas.bmi.itzbund.net
mt1-fw.schulung.itsm-framework.service.itzbund.net
entw.strada.zoll.itzbund.net
base-registry.bcsv.cloud.itzbund.net
vlp64629.prod.betrieb.service.itzbund.net
eakte-t.kvdb.cloud.intranet.bund.de
sib-ent.zd.intranet.bund.de
appladebaw1.front.entw.adeba.wsv.itzbund.net
vwp22611.zvd-p2.itzbund.net
access-b.v.bc.zd.intranet.bund.de
vwp20419.zvd-p1.itzbund.net
ozg-idp-tst.bzst.in.bund.de
itzbund.net
www.ausfuhrplus.internetzollanmeldung-intg.itz.itzbund.net
repbn100025.oob.cloud.itzbund.net
b1bc-fas1.adm.cloud.itzbund.net
vle31718.entw.ozean.bzst.itzbund.net
redaktion.prod.gsb.bund.zivb.net
test.live.gsb11.itz.itzbund.net
vlt68738.atu.biber.zoll.itzbund.net
lb-ar-back-zb.test.itsm-suite.service.itzbund.net
vlp21303.prod.pvs.bmf.itzbund.net

Certificate

The complete raw certificate details for vlp00997.adm.cloud.itzbund.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEAuZyDcLaPgPhhamib2
qPn50Yx6CHjBOFQf3W1LWzj+AfhuZpreJfcZsh9HtYWH5otnAFB5w/VKvb9GIFbo
EVwRCDPlt1MKsYTN9S7xTq++tPD3hY7Xw0Ga9oihiOIMfSDu0DE/TzzWhmPrb/yM
jnxEXEFdK76b3sQaG5WJvKGQS9Mjhb27OcjhDhRwaTbcMYVCYtprwZ5NyXtHOlDh
jHcaDTobL1JOxpT0S2CR7IT6v5HNfiI6exyUpoZ5qVkHGDuNoiNOLNrCIrzDRrKl
6cVxPTDvMnbH7S3yvwCwr3cR7zm5DZ9X3qcX+nSzl/hsyUMPfdIpWBbXpRy6ajOi
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11791795143663945317506232484
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-02 12:08:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-05 12:08:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Informationstechnikzentrum Bund (ITZBund)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vlp00997.adm.cloud.itzbund.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24269403512911384462830004897902323354470572574529214312442637606772508113108001493243488985771568489835059735189063448272517005452202592476037819010757411435820780035665070994296357966766608216850288394650998418600820727250323965634854000641365036202451548720030664254209634842822084884945237372216337952784006939973522922668924979584674577702949619477963881291215309973130916257850650596676957873438559521567380978083701545985590176602919453691546436289224339780022488103418621414673653951620317248992527152448936507937870552130886076866186840825432571425327609809973427767293443102548684542440899341298627878560409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.10
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45a18934a2ad697fc571a71d3c2daacb7b45bffe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlp00997.adm.cloud.itzbund.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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