www.ki.fraunhofer.de

- Fraunhofer -

Issued by Fraunhofer Service CA - G02

About this certificate

This digital certificate with serial number 27:88:5b:25:3b:e7:19:ae:59:c6:ec:e6 was issued on by Fraunhofer.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fraunhofer

Organization: Fraunhofer
State / Province: Bayern
Locality: Muenchen
Country: DE

Fraunhofer

Organization: Fraunhofer
Organization unit: Fraunhofer Corporate PKI
State / Province: Bayern
Locality: Muenchen
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 27:88:5b:25:3b:e7:19:ae:59:c6:ec:e6
Serial Number (int): 12234759716695966117473479910
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: c1:0b:5c:6b:f4:1f:3e:56:32:1b:a2:14:c4:0e:d8:53:9c:d1:15:d9
AuthorityKeyId: 00:44:34:97:1c:1f:2b:99:26:8d:16:a7:1d:60:68:95:ed:9a:97:ae

Fingerprint (sha1): 2b:fc:2e:03:21:fc:36:72:1d:65:b9:61:8f:f6:ba:5a:e6:22:c8:e3
Fingerprint (sha256): 05:82:c8:2d:54:05:fe:97:82:7f:fe:73:94:e0:6f:60:11:0f:e8:84:a8:f5:18:ef:14:8b:dd:79:21:5a:ab:1c

Issuing Certificate URL: http://cdp1.pca.dfn.de/fraunhofer-service-g2-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/fraunhofer-service-g2-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/fraunhofer-service-g2-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/fraunhofer-service-g2-ca/pub/crl/cacrl.crl

Check the revocation status for certificate www.ki.fraunhofer.de

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ki.fraunhofer.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ki.fraunhofer.de
ki.fraunhofer.de
www.ki.fhg.de
ki.fhg.de
www.artificial-intelligence.fraunhofer.de
artificial-intelligence.fraunhofer.de
www.ai.fraunhofer.de
ai.fraunhofer.de
www.kuenstliche-intelligenz.fraunhofer.de
kuenstliche-intelligenz.fraunhofer.de

Other certificates including the domain name fraunhofer.de

(limited to 100 certificates)
vhfraqototcs03.hec.fraunhofer.de
guest.mevis.fraunhofer.de
hmi-umfrage.iao.fraunhofer.de
www.iitb.fraunhofer.de
igb-bitwarden.igb.fraunhofer.de
wnlab.hhi.fraunhofer.de
webmail.fit.fraunhofer.de
nm-service.iais.fraunhofer.de
exilligare.iao.fraunhofer.de
bscw.izb.fraunhofer.de
applik-idz08.iee.fraunhofer.de
immufw-m.imm.fraunhofer.de
social.izm.fraunhofer.de
vceg.hhi.fraunhofer.de
vpn-gaeste-hh.ime.fraunhofer.de
netman.ipk.fraunhofer.de
www.umsicht-suro.fraunhofer.de
llcs-vi2.sit.fraunhofer.de
netsight.ise.fraunhofer.de
guest-lan2.zv.fraunhofer.de
vergabe-mks180.iese.fraunhofer.de
maverick.iao.fraunhofer.de
www.vision.fraunhofer.de
spitzentreffen.edu.cell.vfk.fraunhofer.de
kaa.iais.fraunhofer.de
vpn.fep.fraunhofer.de
iwu.crm.fraunhofer.de
tls1.ws.fraunhofer.de
filedirector.imw.fraunhofer.de
blockchain-europe.iml.fraunhofer.de
sharepoint.sit.fraunhofer.de
muc-gv-dna.aisec.fraunhofer.de
issues.mevis.fraunhofer.de
ksi.scai.fraunhofer.de
iwes-spoke-pri.intra.fraunhofer.de
pwsafe01.iis.fhg.de
applik-idz21.iee.fraunhofer.de
vpn.idmt.fraunhofer.de
vdi.izfp.fraunhofer.de
vindex.fit.fraunhofer.de
ivv-dd.list.fraunhofer.de
nettools.igd.fraunhofer.de
cq-publish2.ws.fraunhofer.de
projekte-lfs.iff.fraunhofer.de
ipa-uipath140.ipa.fraunhofer.de
humit.fit.fraunhofer.de
iap.list.fraunhofer.de
listsrv03.fraunhofer.de
status.arb.fhr.fraunhofer.de
vhfraqototaw01.hec.fraunhofer.de
keepass.iosb.fraunhofer.de
xcom.isst.fraunhofer.de
mellon.hhi.fraunhofer.de
maestral.fit.fraunhofer.de
cryptshare.fraunhofer.de
zerobin.sit.fraunhofer.de
aem-www.iese.fraunhofer.de
wqtool.igd.fraunhofer.de
vhfraqototwslb.hec.fraunhofer.de
mailn2.iis.fhg.de
vgw.iis.fraunhofer.de
subdepot.mevis.fraunhofer.de
wpa.emi.fraunhofer.de
www.isc.fraunhofer.de
blockchainlab-git.ipk.fraunhofer.de
www.aachen.fraunhofer.de
test.servicedesk.fraunhofer.de
gordian.ipa.fraunhofer.de
ildmz55.idmt.fhg.de
talentix.iml.fraunhofer.de
exim2.iao.fraunhofer.de
pathme.scai.fraunhofer.de
www.subi2ma.fraunhofer.de
vpn-gaeste.iosb-ast.fraunhofer.de
fener-webport.ise.fraunhofer.de
upload.c.fraunhofer.de
h2t.intern.ise.fraunhofer.de
ldap.ibmt.fraunhofer.de
piwik.ipk.fraunhofer.de
gitlab-i.eas.iis.fraunhofer.de
reaalmarketplace.universaal.info
kub001.iao.fraunhofer.de
download.scai.fraunhofer.de
openproject.sit.fraunhofer.de
helpdesk.imw.fraunhofer.de
data-h2t-el.ise.fraunhofer.de
ipib.ci.moez.fraunhofer.de
vpn.s.c.fraunhofer.de
vpn.ivi.fraunhofer.de
sand2.fokus.fraunhofer.de
diasim.igd-r.fraunhofer.de
miraculix-dmz.ivi.fraunhofer.de
portal.moez.fraunhofer.de
vpn.iem.fraunhofer.de
remote3.fraunhofer.de
zf-prognose.iao.fraunhofer.de
dynamo.sit.fraunhofer.de
dci2.easw2k.eas.iis.fraunhofer.de
support.igd-r.fraunhofer.de
tfs-extern.ibp.fraunhofer.de

Certificate

The complete raw certificate details for www.ki.fraunhofer.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr01WJ7bbzU+8tLqS3NG3
9PiwK4vFBjVvICep3fmSLrxBMZlkxHI2j1r4Nk0RqmQJIdU0j8dY5RojD43tibVE
/G7RP3Qj0oHQacNj5Ixvi2wb3SzcpOYLj+hL2YkXDwyfMqwm7Ae1HvrNbUpuOt0a
FvBZZz2KPaT9OfR0Y+qbGUiYzRelILENGBiOCsxZgMI8oHH+AZVvIY+a5hLtg04R
yVWJaIi25ZlMYNO0bVP1mfIf1CTczxSoONYJIIniXYDqVwKk/6gCVShByObeqdET
KQwOE2DfvvUx/y7uDTfRNYTs+efgpbK853DmAQlQnj/vntyvRcq4FxfHgC2G+GBJ
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12234759716695966117473479910
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fraunhofer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fraunhofer Corporate PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fraunhofer Service CA - G02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-07 10:27:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 10:27:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fraunhofer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.ki.fraunhofer.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22129839440006990830458426401126695357261417396386880377463687995462920916949656802212963235171665636085674353711754351669891385018319578533362151709049457046241411374738550133504668969052773856397816972323446398939855206942539584064391192575731155037402766119804296879613508185771196644236608523577493298408754893963746736092607181017781969856184251945414456482265988130118474184703984502589695873310297022229199484657710533021820395593013390427636789831544426190497652345266147361975008563121016859244782136006966274062303726974918686291244304746336043944328438787007256333491565612058483266009544510838809978489131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.10
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c10b5c6bf41f3e56321ba214c40ed8539cd115d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 004434971c1f2b99268d16a71d606895ed9a97ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (274 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ki.fraunhofer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ki.fraunhofer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ki.fhg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ki.fhg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artificial-intelligence.fraunhofer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artificial-intelligence.fraunhofer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ai.fraunhofer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ai.fraunhofer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuenstliche-intelligenz.fraunhofer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuenstliche-intelligenz.fraunhofer.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/fraunhofer-service-g2-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/fraunhofer-service-g2-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (222 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/fraunhofer-service-g2-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/fraunhofer-service-g2-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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