mx.hiskp.uni-bonn.de

- Rheinische Friedrich-Wilhelms-Universitaet Bonn -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 21:f7:1d:2b:92:29:9d:5d:95:82:1b:d9 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 36 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Rheinische Friedrich-Wilhelms-Universitaet Bonn

Organization: Rheinische Friedrich-Wilhelms-Universitaet Bonn
Organization unit: Helmholtz-Institut fuer Strahlen- und Kernphysik
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 21:f7:1d:2b:92:29:9d:5d:95:82:1b:d9
Serial Number (int): 10511747753919321292140583897
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: c5:d4:60:f3:fb:97:5b:ab:f3:07:8f:ab:60:91:1d:82:12:5b:7e:e8
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 0e:fe:37:55:67:21:df:08:02:0d:dc:84:92:c3:23:19:33:48:e7:5a
Fingerprint (sha256): 05:a2:48:00:3b:b0:d1:32:e9:8f:f8:ab:51:aa:c2:fa:aa:a9:d7:6c:78:66:26:62:01:c7:34:be:5b:27:a6:44

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate mx.hiskp.uni-bonn.de

36

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mx.hiskp.uni-bonn.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

httpmail.hiskp.uni-bonn.de
httpsmail.hiskp.uni-bonn.de
im.hiskp.uni-bonn.de
imap.hiskp.uni-bonn.de
imaps.hiskp.uni-bonn.de
jabber.hiskp.uni-bonn.de
lists.hiskp.uni-bonn.de
lists1.hiskp.uni-bonn.de
lists2.hiskp.uni-bonn.de
lists3.hiskp.uni-bonn.de
lists4.hiskp.uni-bonn.de
lists5.hiskp.uni-bonn.de
lists6.hiskp.uni-bonn.de
lists7.hiskp.uni-bonn.de
lists8.hiskp.uni-bonn.de
mail.hiskp.uni-bonn.de
mail1.hiskp.uni-bonn.de
mail2.hiskp.uni-bonn.de
mail3.hiskp.uni-bonn.de
mail4.hiskp.uni-bonn.de
mailbrowser.hiskp.uni-bonn.de
mx.hiskp.uni-bonn.de
mx1.hiskp.uni-bonn.de
mx2.hiskp.uni-bonn.de
mx3.hiskp.uni-bonn.de
mx4.hiskp.uni-bonn.de
mx5.hiskp.uni-bonn.de
mx6.hiskp.uni-bonn.de
mx7.hiskp.uni-bonn.de
mx8.hiskp.uni-bonn.de
pop3.hiskp.uni-bonn.de
pop3s.hiskp.uni-bonn.de
smtp.hiskp.uni-bonn.de
smtps.hiskp.uni-bonn.de
webmail.hiskp.uni-bonn.de
wwwmail.hiskp.uni-bonn.de

Other certificates including the domain name uni-bonn.de

(limited to 100 certificates)
bbbfallback.informatik.uni-bonn.de
weblogin.physik.uni-bonn.de
iweb.meb.uni-bonn.de
www.tumorzentrum-bonn.de
gitlab.geo.uni-bonn.de
agp-vpn.rhrz.uni-bonn.de
www.vorklinikstage.uni-bonn.de
ems.math.uni-bonn.de
vpn-test.rhrz.uni-bonn.de
fdi-s3.uni-bonn.de
container-registry.hrz.uni-bonn.de
merry.ulb.uni-bonn.de
wiki.zem.uni-bonn.de
zveshop.verwaltung.uni-bonn.de
ins.uni-bonn.de
www.bonngutstage.uni-bonn.de
ortsnc.verwaltung.uni-bonn.de
cytometry.uni-bonn.de
trave.math.uni-bonn.de
bonfor.uni-bonn.de
xerox-og.meteo.uni-bonn.de
www1.hiskp.uni-bonn.de
ova-vpn.ova.uni-bonn.de
intranet.ais.uni-bonn.de
sp.uni-bonn.de
iweb.meb.uni-bonn.de
cens.uni-bonn.de
slk.informatik.uni-bonn.de
peene.math.uni-bonn.de
www.arithmeum.uni-bonn.de
mail.uni-bonn.de
gosa-dev.gosa.uni-bonn.de
www.bonngutstage.uni-bonn.de
webconf.meteo.uni-bonn.de
www.lms.uni-bonn.de
cytometry-ldap.uni-bonn.de
ad1.iai.uni-bonn.de
userserver.informatik.uni-bonn.de
hio-web-test.uni-bonn.de
proxmox-info4.cs.uni-bonn.de
chat.zem.uni-bonn.de
bbbfallback.informatik.uni-bonn.de
www.uni-bonn.de
sympa.vi.cs.uni-bonn.de
ea-author.rhrz.uni-bonn.de
cores.ukb.uni-bonn.de
web3.physik.uni-bonn.de
jester.uni-bonn.de
www.zhf.uni-bonn.de
confluence.bzh.uni-bonn.de
ad0.iai.uni-bonn.de
docs.physik.uni-bonn.de
www.lateinamerikazentrumstage.uni-bonn.de
k8stest-sealed-secrets.uni-bonn.de
agthoma.hiskp.uni-bonn.de
www.mnfstage.uni-bonn.de
styx.asta.uni-bonn.de
lwf-vpn.rhrz.uni-bonn.de
wiki.physik.uni-bonn.de
jhub.physik.uni-bonn.de
sms.wiwi.uni-bonn.de
csengine-test.rhrz.uni-bonn.de
mailer.ukb.uni-bonn.de
portal.grade-rc.de
imbie.meb.uni-bonn.de
admin-wiki.home.ins.uni-bonn.de
www.arithmeum.uni-bonn.de
prb.verwaltung.uni-bonn.de
butterbur05.iai.uni-bonn.de
www.or.uni-bonn.de
prb.verwaltung.uni-bonn.de
merry.ulb.uni-bonn.de
cores.ukb.uni-bonn.de
tools.net.cs.uni-bonn.de
warnow.math.uni-bonn.de
v-for1.ilb.uni-bonn.de
mail.ins.uni-bonn.de
www.uni-bonn.de
www.versoehnungstage.uni-bonn.de
www1.hiskp.uni-bonn.de
mx.hiskp.uni-bonn.de
sentry.hive.cs.uni-bonn.de
drze-vpn.rhrz.uni-bonn.de
www.philfak.uni-bonn.de
wahlen.uni-bonn.de
hicap.uni-bonn.de
pi01.hrz.uni-bonn.de
portal.grade-rc.de
intern.hrz.uni-bonn.de
warnow.math.uni-bonn.de
kata.doelger.uni-bonn.de
butterbur01.iai.uni-bonn.de
smtpclient-sol.iai.uni-bonn.de
ems.math.uni-bonn.de
smtpub.iai.uni-bonn.de
gast-bonnet4.uni-bonn.de
hcm.uni-bonn.de
tm.verwaltung.uni-bonn.de
rds-sap.verwaltung.uni-bonn.de
www.cb.uni-bonn.de

Certificate

The complete raw certificate details for mx.hiskp.uni-bonn.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMsDCCC5igAwIBAgIMIfcdK5IpnV2VghvZMA0GCSqGSIb3DQEBCwUAMIGNMQsw
CQYDVQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVz
IERldXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4t
UEtJMSUwIwYDVQQDDBxERk4tVmVyZWluIEdsb2JhbCBJc3N1aW5nIENBMB4XDTE5
MTEyMjA4NDMwOVoXDTIyMDIyMzA4NDMwOVowgc4xCzAJBgNVBAYTAkRFMRwwGgYD
VQQIDBNOb3JkcmhlaW4tV2VzdGZhbGVuMQ0wCwYDVQQHDARCb25uMTgwNgYDVQQK
DC9SaGVpbmlzY2hlIEZyaWVkcmljaC1XaWxoZWxtcy1Vbml2ZXJzaXRhZXQgQm9u
bjE5MDcGA1UECwwwSGVsbWhvbHR6LUluc3RpdHV0IGZ1ZXIgU3RyYWhsZW4tIHVu
ZCBLZXJucGh5c2lrMR0wGwYDVQQDDBRteC5oaXNrcC51bmktYm9ubi5kZTCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALqyDkMwBruP1Evx2AbPQbSz61A1
vD4wk7AvlecWrqvF59tA5x5mNAcqXx1xiV6CImVM3jc1Phk7CRB6oHCBXq78uIvt
2TSLTU6GipZUpnjThQBnGqvHeqAGMdlEssoGmD2yKCAtFD1mNjr6/23w97MXoDeQ
cer1V6aAiLGTtj/4CB6RH6trb5ySIN1MS31r1fckxr/aOuhfnitxGPo1ejIO260s
Ns/NaiuHv+f0c65MPwkQTjpiV5T+0m4WGriTlgwYBoo+FQwQXYIEBzcV+80hTvID
icopfbemrNtDPQfaavKsxKG9ys0xqNQDYHTkhtdYS9W5jkWCzf/L3e6kz62Aufwz
MUvFcBdX7n5V1uFYyLc3fozI/isc43gP3RD9ovyIGYglp+dMldEmxsSbgn5BRRQR
SDfsiYm7ByFs0AF2JAeYA1ACwSFpunfzC/TRHyw3fZbTPVK9ZJoHq9ODd/bsw5rc
0PExGp8psZJXJUgyptTL8NkIdaH1MFL7CqWqj33K73cl1spXfHPSbkDb0qxVV4mf
3OXvvtVo0uvcdGgG2NbCCqEOBKKlxluUaQJUDTqITNY1MGGp0j5p2MUTFeRJKkc1
sGt54/fJFnEhEqNBAvVqQ70xMDV9J2odcbaxyyqJCUWnTVyRlnBkpGw35KLrjdv0
FrtIknhT7ix2WPaVAgMBAAGjggfLMIIHxzBXBgNVHSAEUDBOMAgGBmeBDAECAjAN
BgsrBgEEAYGtIYIsHjAPBg0rBgEEAYGtIYIsAQEEMBAGDisGAQQBga0hgiwBAQQE
MBAGDisGAQQBga0hgiwCAQQEMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMBMG
A1UdJQQMMAoGCCsGAQUFBwMBMB0GA1UdDgQWBBTF1GDz+5dbq/MHj6tgkR2CElt+
6DAfBgNVHSMEGDAWgBRrOpiL+fJTidrgrbIyHgkf6Ko7dDCCA5EGA1UdEQSCA4gw
ggOEghpodHRwbWFpbC5oaXNrcC51bmktYm9ubi5kZYIbaHR0cHNtYWlsLmhpc2tw
LnVuaS1ib25uLmRlghRpbS5oaXNrcC51bmktYm9ubi5kZYIWaW1hcC5oaXNrcC51
bmktYm9ubi5kZYIXaW1hcHMuaGlza3AudW5pLWJvbm4uZGWCGGphYmJlci5oaXNr
cC51bmktYm9ubi5kZYIXbGlzdHMuaGlza3AudW5pLWJvbm4uZGWCGGxpc3RzMS5o
aXNrcC51bmktYm9ubi5kZYIYbGlzdHMyLmhpc2twLnVuaS1ib25uLmRlghhsaXN0
czMuaGlza3AudW5pLWJvbm4uZGWCGGxpc3RzNC5oaXNrcC51bmktYm9ubi5kZYIY
bGlzdHM1Lmhpc2twLnVuaS1ib25uLmRlghhsaXN0czYuaGlza3AudW5pLWJvbm4u
ZGWCGGxpc3RzNy5oaXNrcC51bmktYm9ubi5kZYIYbGlzdHM4Lmhpc2twLnVuaS1i
b25uLmRlghZtYWlsLmhpc2twLnVuaS1ib25uLmRlghdtYWlsMS5oaXNrcC51bmkt
Ym9ubi5kZYIXbWFpbDIuaGlza3AudW5pLWJvbm4uZGWCF21haWwzLmhpc2twLnVu
aS1ib25uLmRlghdtYWlsNC5oaXNrcC51bmktYm9ubi5kZYIdbWFpbGJyb3dzZXIu
aGlza3AudW5pLWJvbm4uZGWCFG14Lmhpc2twLnVuaS1ib25uLmRlghVteDEuaGlz
a3AudW5pLWJvbm4uZGWCFW14Mi5oaXNrcC51bmktYm9ubi5kZYIVbXgzLmhpc2tw
LnVuaS1ib25uLmRlghVteDQuaGlza3AudW5pLWJvbm4uZGWCFW14NS5oaXNrcC51
bmktYm9ubi5kZYIVbXg2Lmhpc2twLnVuaS1ib25uLmRlghVteDcuaGlza3AudW5p
LWJvbm4uZGWCFW14OC5oaXNrcC51bmktYm9ubi5kZYIWcG9wMy5oaXNrcC51bmkt
Ym9ubi5kZYIXcG9wM3MuaGlza3AudW5pLWJvbm4uZGWCFnNtdHAuaGlza3AudW5p
LWJvbm4uZGWCF3NtdHBzLmhpc2twLnVuaS1ib25uLmRlghl3ZWJtYWlsLmhpc2tw
LnVuaS1ib25uLmRlghl3d3dtYWlsLmhpc2twLnVuaS1ib25uLmRlMIGNBgNVHR8E
gYUwgYIwP6A9oDuGOWh0dHA6Ly9jZHAxLnBjYS5kZm4uZGUvZGZuLWNhLWdsb2Jh
bC1nMi9wdWIvY3JsL2NhY3JsLmNybDA/oD2gO4Y5aHR0cDovL2NkcDIucGNhLmRm
bi5kZS9kZm4tY2EtZ2xvYmFsLWcyL3B1Yi9jcmwvY2FjcmwuY3JsMIHbBggrBgEF
BQcBAQSBzjCByzAzBggrBgEFBQcwAYYnaHR0cDovL29jc3AucGNhLmRmbi5kZS9P
Q1NQLVNlcnZlci9PQ1NQMEkGCCsGAQUFBzAChj1odHRwOi8vY2RwMS5wY2EuZGZu
LmRlL2Rmbi1jYS1nbG9iYWwtZzIvcHViL2NhY2VydC9jYWNlcnQuY3J0MEkGCCsG
AQUFBzAChj1odHRwOi8vY2RwMi5wY2EuZGZuLmRlL2Rmbi1jYS1nbG9iYWwtZzIv
cHViL2NhY2VydC9jYWNlcnQuY3J0MIIB9wYKKwYBBAHWeQIEAgSCAecEggHjAeEA
dwDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAW6SR4iLAAAEAwBI
MEYCIQCb9HZI041EHQor/dxbkb84B66kZzCUuZnaAfxxwm4ZxwIhAO84a60I8ZeO
GCfNxw6ExCGCAWSZHDUZos+YGVb/6QqDAHcApLkJkLQYWBSHuxOizGdwCjw1mAT5
G9+443fNDsgN3BAAAAFukkeIwwAABAMASDBGAiEAjSj81fct7uwkaPHW05h0ELNs
jIiuSwZFWXsqhJfw2ysCIQCbErZ7aDD/PKPJKwzgNnI1UbqBCmJ93JNVG+pZlqUF
hAB1AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABbpJHiVcAAAQD
AEYwRAIgR6wYutvzp9hCsyo+ryqKo315fxtTSctyjrA7W57tofICIEB8vzGMWf5Y
/stx+EDj1X6s3dGTXe2K48WHqsw5s21eAHYAVYHUwhaQNgFK6gubVzxT8MDkOHhw
JQgXL6OqHQcT0wwAAAFukkeKWwAABAMARzBFAiBKyclU2FG2IERyRsesn0eHK06b
VSkyAYU9Qru24nQ4+wIhALL1UtxcKmKGqq130I5+u17MzGx/snvzKTjOS9cmaIXd
MA0GCSqGSIb3DQEBCwUAA4IBAQBF1pbC1+cnb8DCTkY2Qq8XDIEZ/mT8wRhoZqwq
Ka3t+6iRKrv2iSvX1JeYAdcy3eGzZQ1PsofjUeqVkiLuD/Q3k18ZejkKnRvwC3zS
H4GiSIrlCzMdSn2GPfHOw1OZZnIyqJk2LyoTCjSPoKa0xNu/Ebxy78Nfyn/uDo66
s6UgRxBucDZEuZmGqSil4C+cl9+SY9kr/B8zalwr0faW3oBNC6s4nbnMY2BDdXy1
OWIQe1HxZW1+VFlzRyBmFDAA6vwfMdntq1f9B2WTn/AQerU6mIU8fTdFS1shcbqy
AWsl8KRl77CjEyoCW+0N2YJuI5YkEH4ATmvEfSkMhJhvMkON
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10511747753919321292140583897
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-22 08:43:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-23 08:43:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rheinische Friedrich-Wilhelms-Universitaet Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helmholtz-Institut fuer Strahlen- und Kernphysik'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mx.hiskp.uni-bonn.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 761651312011507672491880917725467265784123519853679994298455098101084843925392816825938120679486259160993529382934167299018236185505694828245311245700921159785874403004878463788084003910923373110266263446037816229472521314372335887315277258049402094267878411670103588990655925795413607936108512840464781034463587005703764374602338349327138490748028772869043890481255842196433044614780214966782693800318508514762877825042423897241905444890514508047556993411969016446472515284887709739726808074048618299218762839370725030852816081882853706349843957924279872722864329029461198869742324043109683080314042196764646350339450058517413301715681045439565746077003217475813888450574206362852651470887031767345903705475193169456479488215486157396059461417567820537180474315463706620446608561424114042494400117308491483693969081900987562775692300640087236170494813108350011855509657110962951019708209713771825099178897209280543196248957755429329983829333733262099467395453547282572483054918318742811515042748543280626722970695594595739308115877493648765288018045745689587904298444893492725723993506228617529401182034737879793494726605788453308507386625987421426713079305145876559359693876693913493371063088740403622408506369831690759258330691221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5d460f3fb975babf3078fab60911d82125b7ee8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (904 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'httpmail.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'httpsmail.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'im.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imaps.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jabber.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists1.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists2.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists3.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists4.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists5.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists6.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists7.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists8.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail1.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail2.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail3.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail4.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailbrowser.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx1.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx2.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx3.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx4.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx5.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx6.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx7.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx8.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop3.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop3s.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtps.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwmail.hiskp.uni-bonn.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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