remote.dfg.de
- Deutsche Forschungsgemeinschaft e.V. -
Issued by Sectigo RSA Extended Validation Secure Server CA
About this certificate
This digital certificate with serial number 18:e3:1a:dc:80:54:eb:1e:18:e4:17:55:2b:79:6e:cd was issued on by Sectigo Limited.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Deutsche Forschungsgemeinschaft e.V.
Company registration number:
VR 2030
Organization: Deutsche Forschungsgemeinschaft e.V.
Organization: Deutsche Forschungsgemeinschaft e.V.
State / Province:
Nordrhein-Westfalen
Country: DE
Country: DE
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): 18:e3:1a:dc:80:54:eb:1e:18:e4:17:55:2b:79:6e:cdSerial Number (int): 33080668098287576240252263753192140493
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId: b6:6f:d8:59:8c:cd:c6:e1:4d:02:ff:40:05:55:df:d3:58:f8:7c:15
AuthorityKeyId: 2c:69:ff:80:c9:87:90:ae:34:e1:b4:e7:4c:93:85:99:40:e9:a7:b2
Fingerprint (sha1): cc:5b:ab:ef:0a:e9:a6:95:30:28:56:a9:bb:3a:99:31:9b:0e:38:c2
Fingerprint (sha256): 06:2a:9c:66:d4:3f:a1:5e:e7:0e:81:b6:ed:87:1c:55:8b:e4:6a:eb:3e:a2:5d:d6:9c:dc:1c:a2:3b:fe:2d:12
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCRL Distribution Point: http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl
Check the revocation status for certificate remote.dfg.de
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for remote.dfg.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
remote.dfg.de
fta.dfg.de
gepris-extern.dfg.de
gepris.dfg.de
karten.dfg.de
mfa.dfg.de
quicklink.dfg.de
remote-t.dfg.de
sd.dfg.de
fta.dfg.de
gepris-extern.dfg.de
gepris.dfg.de
karten.dfg.de
mfa.dfg.de
quicklink.dfg.de
remote-t.dfg.de
sd.dfg.de
Other certificates including the domain name dfg.de
(limited to 100 certificates)
fta.dfg.de
remote.dfg.de
dfg.de
mediathek.dfg.de
mail.dfg.de
remote.dfg.de
elan-t.dfg.de
elan.dfg.de
wlan.dfg.de
mbx.t.dfg.de
remote.dfg.de
konten-entw.dfg.de
mediant.dfg.de
jira.dfg.de
mx2.dfg.de
mediathek.dfg.de
ai-initiative.dfg.de
elan-entw.dfg.de
log-t.dfg.de
oos.dfg.de
log-t.dfg.de
jobs.dfg.de
autodiscover.t.dfg.de
ot.dfg.de
mediant.dfg.de
dfg.de
log.dfg.de
spamverdacht.dfg.de
fta-eval.dfg.de
elan.dfg.de
remote.dfg.de
log-t.dfg.de
telearbeit.int.dfg.de
srwgp319.dfg.de
jobs.dfg.de
captiveportal.dfg.de
uc.dfg.de
instrumentenkasten.dfg.de
mediant.dfg.de
elan-ci-entw.dfg.de
srlgp042.dfg.de
elan.dfg.de
dfg.de
dfggast.dfg.de
meeting.dfg.de
jobs.dfg.de
ics.t.dfg.de
dfg.de
konten-entw.dfg.de
log.dfg.de
wlan.dfg.de
remote.dfg.de
fta.dfg.de
www.sites.dfg.de
elan-entw-en.dfg.de
da.dfg.de
autodiscover.dfg.de
www.sites.dfg.de
uc.dfg.de
autodiscover.dfg.de
wlan.dfg.de
log-t.dfg.de
dfg.de
dfggast.dfg.de
itsm-web.int.dfg.de
elan.dfg.de
www.events.dfg.de
mediathek.dfg.de
*.dfg.de
elan.dfg.de
remote.dfg.de
eduroam.dfg.de
quicklink-t.dfg.de
elan-entw.en.dfg.de
konten-entw.dfg.de
www.sites.dfg.de
wlan.dfg.de
uc.t.dfg.de
elan.dfg.de
dfg.de
*.dfg.de
remote.dfg.de
itsm-web.int.dfg.de
ai-initiative.dfg.de
wlan.dfg.de
quicklink-t.dfg.de
log.dfg.de
vpn-tau.dfg.de
fta.dfg.de
ai-initiative.dfg.de
dfggast.dfg.de
groupware.dfg.de
remote-entw.dfg.de
dfg.de
dfg.de
wlan.dfg.de
dfggast.dfg.de
konten-entw.dfg.de
quicklink-t.dfg.de
dfg.de
remote.dfg.de
dfg.de
mediathek.dfg.de
mail.dfg.de
remote.dfg.de
elan-t.dfg.de
elan.dfg.de
wlan.dfg.de
mbx.t.dfg.de
remote.dfg.de
konten-entw.dfg.de
mediant.dfg.de
jira.dfg.de
mx2.dfg.de
mediathek.dfg.de
ai-initiative.dfg.de
elan-entw.dfg.de
log-t.dfg.de
oos.dfg.de
log-t.dfg.de
jobs.dfg.de
autodiscover.t.dfg.de
ot.dfg.de
mediant.dfg.de
dfg.de
log.dfg.de
spamverdacht.dfg.de
fta-eval.dfg.de
elan.dfg.de
remote.dfg.de
log-t.dfg.de
telearbeit.int.dfg.de
srwgp319.dfg.de
jobs.dfg.de
captiveportal.dfg.de
uc.dfg.de
instrumentenkasten.dfg.de
mediant.dfg.de
elan-ci-entw.dfg.de
srlgp042.dfg.de
elan.dfg.de
dfg.de
dfggast.dfg.de
meeting.dfg.de
jobs.dfg.de
ics.t.dfg.de
dfg.de
konten-entw.dfg.de
log.dfg.de
wlan.dfg.de
remote.dfg.de
fta.dfg.de
www.sites.dfg.de
elan-entw-en.dfg.de
da.dfg.de
autodiscover.dfg.de
www.sites.dfg.de
uc.dfg.de
autodiscover.dfg.de
wlan.dfg.de
log-t.dfg.de
dfg.de
dfggast.dfg.de
itsm-web.int.dfg.de
elan.dfg.de
www.events.dfg.de
mediathek.dfg.de
*.dfg.de
elan.dfg.de
remote.dfg.de
eduroam.dfg.de
quicklink-t.dfg.de
elan-entw.en.dfg.de
konten-entw.dfg.de
www.sites.dfg.de
wlan.dfg.de
uc.t.dfg.de
elan.dfg.de
dfg.de
*.dfg.de
remote.dfg.de
itsm-web.int.dfg.de
ai-initiative.dfg.de
wlan.dfg.de
quicklink-t.dfg.de
log.dfg.de
vpn-tau.dfg.de
fta.dfg.de
ai-initiative.dfg.de
dfggast.dfg.de
groupware.dfg.de
remote-entw.dfg.de
dfg.de
dfg.de
wlan.dfg.de
dfggast.dfg.de
konten-entw.dfg.de
quicklink-t.dfg.de
dfg.de
Certificate
The complete raw certificate details for remote.dfg.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHnTCCBoWgAwIBAgIQGOMa3IBU6x4Y5BdVK3luzTANBgkqhkiG9w0BAQsFADCB kTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTkwNwYDVQQD EzBTZWN0aWdvIFJTQSBFeHRlbmRlZCBWYWxpZGF0aW9uIFNlY3VyZSBTZXJ2ZXIg Q0EwHhcNMjIxMTAzMDAwMDAwWhcNMjMxMTA4MjM1OTU5WjCBuDEQMA4GA1UEBRMH VlIgMjAzMDETMBEGCysGAQQBgjc8AgEDEwJERTEdMBsGA1UEDxMUUHJpdmF0ZSBP cmdhbml6YXRpb24xCzAJBgNVBAYTAkRFMRwwGgYDVQQIExNOb3JkcmhlaW4tV2Vz dGZhbGVuMS0wKwYDVQQKEyREZXV0c2NoZSBGb3JzY2h1bmdzZ2VtZWluc2NoYWZ0 IGUuVi4xFjAUBgNVBAMTDXJlbW90ZS5kZmcuZGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnEjDYMNvxeA8U9pZJcM+WBfNQrmnnCEWfch0og1F337Dc Ea6FDyeZWAkILV64ugGZvhJwpuoeTSr7aqh+iU2jk7Gh19VnRz1Qq7udWrCFpE9G s9ieIBEwxn80rYHMck2uJtaAfH0RE2lM09bQH7cEn8GWMwIdOfD2bMyiOKhULutP xiMjv1JqIZwAwQeNRu2WqJlWvrmEzNTiZOfFjTG1+qa/LqSNp1HewFMWA5nwqI3E YmXmJFUTU2uiEsuRrElQ44730aLi4OjGqS3elF714X6Z0Z8J7l6QyY6TDn96eGnz zzBGXD3wT1z6Ycf1BpnsaGeJ0xtL3AWk9m1nQTBhAgMBAAGjggPGMIIDwjAfBgNV HSMEGDAWgBQsaf+AyYeQrjThtOdMk4WZQOmnsjAdBgNVHQ4EFgQUtm/YWYzNxuFN Av9ABVXf01j4fBUwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1UdIARCMEAwNQYMKwYBBAGyMQEC AQUBMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAcGBWeB DAEBMFYGA1UdHwRPME0wS6BJoEeGRWh0dHA6Ly9jcmwuc2VjdGlnby5jb20vU2Vj dGlnb1JTQUV4dGVuZGVkVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNybDCBhgYI KwYBBQUHAQEEejB4MFEGCCsGAQUFBzAChkVodHRwOi8vY3J0LnNlY3RpZ28uY29t L1NlY3RpZ29SU0FFeHRlbmRlZFZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcnQw IwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMIIBfgYKKwYBBAHW eQIEAgSCAW4EggFqAWgAdQCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yC igAAAYQ9B//UAAAEAwBGMEQCIDV2U2fc25pcnGienIlnOZ9H8xguvR9FNgMqlxvx gG2mAiBiIlcGGCEGmA6uwdsR47pj7bYfSGQPcrMpkVmf+ZDxwAB3AFWB1MIWkDYB SuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABhD0H/3EAAAQDAEgwRgIhALfO4f1J hZ+eJvf5nJjGd6RB0bxu8nk9igoY5HUxLUDJAiEAxWo02A6k9k7St3pZfA2Q0tub jAm1i7bcwxjdE0f+/GwAdgB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1Lr UgAAAYQ9B/+oAAAEAwBHMEUCIExnVAzmt3K73Opq1K8x1rOzuTpnD6iStZCgIPE1 TprtAiEA/Fuc6iEJmPCAKtcfrhsVXCSs60v7AFDXNGMFJ6SDmhUwgZQGA1UdEQSB jDCBiYINcmVtb3RlLmRmZy5kZYIKZnRhLmRmZy5kZYIUZ2VwcmlzLWV4dGVybi5k ZmcuZGWCDWdlcHJpcy5kZmcuZGWCDWthcnRlbi5kZmcuZGWCCm1mYS5kZmcuZGWC EHF1aWNrbGluay5kZmcuZGWCD3JlbW90ZS10LmRmZy5kZYIJc2QuZGZnLmRlMA0G CSqGSIb3DQEBCwUAA4IBAQCM9ujHzuQWIaGF7JQLwUDxx528vdCHgi4DrtxeNLFP KGAqWOn2WCsyxX3QyE1rHStq67m3kKV9MpV4poGY1aOXsYuwF63A6homUNPC7PV5 0CF4T+anzNuXabBX4fhjORcS4GzUk+NO4T3V3u/SBZobiVD4/OQbnGK2AUq6crYd aGitcCOGNApJg2ryWZ0RL/9ESgSb/Hynpukrdp73luHYRFDIFLt9T7thh1+UXnvw GH17xQMvE34ucLnM4osN7g0dp6XKMVskpmRpNfGG04kR1Ee//rEjgLIZIuVVjkKg UIqChK0hqPX96YYSa8xQnbpRCA19S70kMt4j1tvJ5sfl -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxIw2DDb8XgPFPaWSXDP lgXzUK5p5whFn3IdKINRd9+w3BGuhQ8nmVgJCC1euLoBmb4ScKbqHk0q+2qofolN o5OxodfVZ0c9UKu7nVqwhaRPRrPYniARMMZ/NK2BzHJNribWgHx9ERNpTNPW0B+3 BJ/BljMCHTnw9mzMojioVC7rT8YjI79SaiGcAMEHjUbtlqiZVr65hMzU4mTnxY0x tfqmvy6kjadR3sBTFgOZ8KiNxGJl5iRVE1NrohLLkaxJUOOO99Gi4uDoxqkt3pRe 9eF+mdGfCe5ekMmOkw5/enhp888wRlw98E9c+mHH9QaZ7GhnidMbS9wFpPZtZ0Ew YQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 33080668098287576240252263753192140493 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Extended Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VR 2030' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsche Forschungsgemeinschaft e.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'remote.dfg.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21090767146549905437484976751432617541751497730551381063676539544628511573328906043189763401061361061323541271840841594812135970602079564289445307165408671083492252354249902861676837635277657250835926859611268348709304912524110172908518874431815656723082632767569870210504095536402504922407485934554082780498767231857028658717018219924014063116359524142281417172315740852263507773363671443668861102431344292125443686176498424501381128446132326085602706580939409685949742007497018679419045439733279713200122792360158586068183856212278983769855177967761545291170526847057765586283809040644061456091583648092019291664481 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2c69ff80c98790ae34e1b4e74c93859940e9a7b2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b66fd8598ccdc6e14d02ff400555dfd358f87c15 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.dfg.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fta.dfg.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gepris-extern.dfg.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gepris.dfg.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karten.dfg.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfa.dfg.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quicklink.dfg.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote-t.dfg.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sd.dfg.de' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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