www.physik.uni-karlsruhe.de

- Karlsruhe Institute of Technology -

Issued by KIT-CA

About this certificate

This digital certificate with serial number 18:7c:65:6b:db:ae:b4 was issued on by Karlsruhe Institute of Technology.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DigitalSignature KeyEncipherment ContentCommitment DataEncipherment] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Karlsruhe Institute of Technology

Organization: Karlsruhe Institute of Technology
State / Province: Baden-Wuerttemberg
Locality: Karlsruhe
Country: DE

Karlsruhe Institute of Technology

Organization: Karlsruhe Institute of Technology
Organization unit: Steinbuch Centre for Computing
State / Province: Baden-Wuerttemberg
Locality: Karlsruhe
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 18:7c:65:6b:db:ae:b4
Serial Number (int): 6892174484156084
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: 50:a5:cf:b7:49:04:63:b5:1e:e9:e7:ee:52:9c:3a:34:93:fd:c4:c8
AuthorityKeyId: 1f:74:65:f4:9a:1d:7a:f6:31:e9:df:61:1b:73:2b:0d:6d:d0:33:49

Fingerprint (sha1): 3e:cd:27:54:76:3e:06:6d:c8:7a:ef:7c:9d:ec:70:66:63:9e:97:e9
Fingerprint (sha256): 06:9b:c8:90:b2:9f:26:99:82:ad:08:17:34:cd:ff:22:50:9f:c5:ac:fb:3d:a4:1b:74:c9:23:15:a0:84:54:b3

Issuing Certificate URL: http://cdp1.pca.dfn.de/kit-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/kit-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/kit-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/kit-ca/pub/crl/cacrl.crl

Check the revocation status for certificate www.physik.uni-karlsruhe.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.physik.uni-karlsruhe.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.physik.uni-karlsruhe.de

Other certificates including the domain name uni-karlsruhe.de

(limited to 100 certificates)
www.lehrer.uni-karlsruhe.de
karrieretag.awika.uni-karlsruhe.de
code.em.uni-karlsruhe.de
www.kv-reihe.kit.edu
www.lists.uni-karlsruhe.de
www.mobilitaetssysteme.kit.edu
mail.akaflieg.uni-karlsruhe.de
www.oew.kit.edu
i72projekte.tm.uni-karlsruhe.de
wbkmail2.wbk.uni-karlsruhe.de
pp.info.uni-karlsruhe.de
irans-test.ira.uni-karlsruhe.de
ce.ioc.kit.edu
www.tvt.kit.edu
symposium.fbv.uni-karlsruhe.de
www.iiit.kit.edu
www.eti.kit.edu
www.mathematik.uni-karlsruhe.de
www.eti.kit.edu
www.fsz.kit.edu
www.philosophie.kit.edu
fsmi-www.fsmi.uni-karlsruhe.de
www.ite.kit.edu
www.ipc.kit.edu
www.ibu.uni-karlsruhe.de
www.itiv.kit.edu
i70tmdocs.tm.uni-karlsruhe.de
www.entechnon.kit.edu
www.konzertchor.kit.edu
www.kammerchor.kit.edu
www.mvm.uni-karlsruhe.de
wbkwss.wbk.uni-karlsruhe.de
pi-4pcm.physik.uni-karlsruhe.de
www.iww.uni-karlsruhe.de
atisverleih.informatik.kit.edu
www.physik.uni-karlsruhe.de
wasserversorgung.iwg.kit.edu
ekpwww.ekp.kit.edu
www.iam.kit.edu
www.ieh.kit.edu
www.intl.kit.edu
www.fs-fmc.kit.edu
mml-backup.informatik.kit.edu
www.mobilitaetssysteme.kit.edu
www.ifr.kit.edu
www.tm.kit.edu
fgt.ieb.kit.edu
www.fsm.kit.edu
www.stud.uni-karlsruhe.de
isnt.ikm.uni-karlsruhe.de
i81pc50.iar.kit.edu
i40dc3.uni-karlsruhe.de
fmi.fbv.uni-karlsruhe.de
geotech.ibf.uni-karlsruhe.de
i81server.iar.kit.edu
www.chem-bio.kit.edu
www.ibu.kit.edu
www.zak.kit.edu
www.ibt.kit.edu
www.cfn.uni-karlsruhe.de
iag1.webarchiv.kit.edu
www.konzertchor.kit.edu
test-www.rz.uni-karlsruhe.de
www.cfn.kit.edu
bup.ieb.kit.edu
www.paedagogik.uni-karlsruhe.de
munin.ira.uni-karlsruhe.de
www.kafep.uni-karlsruhe.de
stahl.vaka.kit.edu
www.agw.kit.edu
www.philosophie.kit.edu
fwi-servicebackend.wiwi.uni-karlsruhe.de
www.zak.kit.edu
www.stk.uni-karlsruhe.de
www.hek.uni-karlsruhe.de
smtp.ira.uni-karlsruhe.de
tfpimap-ext.tfp.uni-karlsruhe.de
kki-us-srv-01.informatik.kit.edu
listen.informatik.kit.edu
i02mac47.informatik.uni-karlsruhe.de
www.scc.kit.edu
www.its.kit.edu
zebio.zoo.kit.edu
www.botanik2.uni-karlsruhe.de
www.sport.kit.edu
www.fast.kit.edu
www.bgu.uni-karlsruhe.de
www.kit.edu
www.oew.kit.edu
www.kit.edu
cmwiki.cm-tm.uni-karlsruhe.de
www.rsm.kit.edu
aifb.kit.edu
i08workbench.informatik.kit.edu
www.imt.kit.edu
www.iam.kit.edu
www.imb.kit.edu
ts1.ubka.uni-karlsruhe.de
www.its.kit.edu
portal.akaflieg.uni-karlsruhe.de

Certificate

The complete raw certificate details for www.physik.uni-karlsruhe.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMigX/Wcwr1AYgxz9DUF
htUrHlgE1pK/65SUzvhl9VaCBc1D1eLElDC9oLUCXfgueti1kPo42GmHXzZz421w
hMQMO2BDrLR6EZo2Z1efTuQegZ3FVIyg8pcSO47DlKuGM6k1Cwj4ybnZjzrxTgZ8
FBi/WviKrP4nOT+VvgK1sOEZbxXvS2KyCvpzMeYoUgUgOm8ClzUzufdiSkTJcEwB
I2xsnL54Fb1VLZFJBZMFKxdbjuJr2bOscPPt+9P5cTitQ8Bdi++6wEU690TLNoVl
s9UVR+nrQfmmpA0q/uqqOjhlUlN41Ob02Gx9Abh9t/ZPKA41vnFPmqlpkIvfK2of
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6892174484156084
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Karlsruhe Institute of Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Steinbuch Centre for Computing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KIT-CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-07 15:40:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-06 15:40:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Karlsruhe Institute of Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.physik.uni-karlsruhe.de'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23831733930396547556793575524825360469053310240509069892828678097261037065181450403784094533131448908115210943189026231558833948071899547743798969096907211145541762038021960081776284397494870049891969838297372317704473089106112467679875316894399598386586428132936540523510533334646472301323686186970788496227129115431760553248991246257883066009690587659507962124442337086319970613680043649708188118868643264572815401817170341654654252394126078434722642205546467654961227777502488795328474026464768104868831891985840762797062031790668643681910048843098781425260005027152222594308919358597345564552367401278156898443071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							50a5cfb7490463b51ee9e7ee529c3a3493fdc4c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1f7465f49a1d7af631e9df611b732b0d6dd03349
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.physik.uni-karlsruhe.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/kit-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/kit-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/kit-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/kit-ca/pub/cacert/cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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