www.fs-fmc.kit.edu

- Karlsruhe Institute of Technology -

Issued by KIT-CA

About this certificate

This digital certificate with serial number 1f:d6:c3:44:42:75:d1:37:1c:ea:29:a6 was issued on by Karlsruhe Institute of Technology.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Karlsruhe Institute of Technology

Organization: Karlsruhe Institute of Technology
State / Province: Baden-Wuerttemberg
Locality: Karlsruhe
Country: DE

Karlsruhe Institute of Technology

Organization: Karlsruhe Institute of Technology
State / Province: Baden-Wuerttemberg
Locality: Karlsruhe
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:d6:c3:44:42:75:d1:37:1c:ea:29:a6
Serial Number (int): 9853667550490948180338420134
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 56:1c:33:9a:b8:16:f5:fc:68:0d:1a:1d:92:7f:96:21:ae:47:a6:7e
AuthorityKeyId: 04:1a:bf:1c:93:91:3d:d3:d9:3d:b0:de:13:23:e5:9a:70:f4:2e:08

Fingerprint (sha1): 1b:0c:46:d3:8a:f3:52:4a:7e:3c:ae:43:74:c5:a2:7b:62:95:4d:7d
Fingerprint (sha256): 07:07:98:bf:9c:0e:09:37:6a:a1:94:9e:6e:c8:2a:7a:19:15:93:f5:54:8c:04:59:28:b1:f4:f9:61:fa:b9:8d

Issuing Certificate URL: http://cdp1.pca.dfn.de/kit-ca-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/kit-ca-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/kit-ca-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/kit-ca-g2/pub/crl/cacrl.crl

Check the revocation status for certificate www.fs-fmc.kit.edu

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fs-fmc.kit.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

anmeldung.fs-fmc.kit.edu
app.fs-fmc.kit.edu
fatama.fmc.uni-karlsruhe.de
fatama.fs-fmc.kit.edu
intern.fs-fmc.kit.edu
o-phase.fs-fmc.kit.edu
service.fs-fmc.kit.edu
sso.fs-fmc.kit.edu
vorstand.fs-fmc.kit.edu
www.fs-fmc.kit.edu

Other certificates including the domain name kit.edu

(limited to 100 certificates)
primo.bibliothek.kit.edu
bmc-cdp2-b2.scc.kit.edu
bwlsdf-owncloud1.lsdf.kit.edu
zeus2011.aifb.kit.edu
bvt.blt.kit.edu
www.botanik.kit.edu
surveys.scc.kit.edu
www.kitcard.kit.edu
*.k8s.iism.kit.edu
i43vm-slt.ipd.kit.edu
officeonlineserver.scc.kit.edu
cm.tm.kit.edu
technik.anka.kit.edu
scc-owa-test.scc.kit.edu
sccemc-isi-04-dmgmt.scc.kit.edu
architekturen2019.ipd.kit.edu
www.mensch-und-technik.kit.edu
concerto.ee.kit.edu
www.for583.kit.edu
www.energiezustandsdaten.kit.edu
intern.math.kit.edu
www.soziologie.kit.edu
www.radio.kit.edu
fm-energo.fm.kit.edu
bpe.iesl.kit.edu
test-protokolle.asta.kit.edu
bmc-v1-11.scc.kit.edu
www.kv-reihe.kit.edu
test2-heike.scc.kit.edu
actinides13.ine.kit.edu
code.ipd.kit.edu
pse-virturell.kit.edu
dualcareer.pst.kit.edu
scc-p-iis-intern.scc.kit.edu
umfrage.zml.kit.edu
www.myhealth.kit.edu
www.stg-mit.kit.edu
gitlab.itiv.kit.edu
int-digimat.int.kit.edu
svnserver.informatik.kit.edu
apps.scc.kit.edu
stage-bip.ibcs.kit.edu
www.sport.kit.edu
www-2.mach.kit.edu
derivate.fbv.kit.edu
iam-cloud.iam.kit.edu
itunesu.informatik.kit.edu
www.itt.kit.edu
mediaservice.bibliothek.kit.edu
event.aserv.kit.edu
square.phi.kit.edu
sapwdp02.kit-sap.kit.edu
vcsa-11b.scc.kit.edu
www.mobilitaetssysteme.kit.edu
rll.ipr.kit.edu
bmc-v2-21.scc.kit.edu
doculib-extern.fusion.kit.edu
vbt.ebi.kit.edu
www.afk.kit.edu
www.energiezustandsdaten.kit.edu
e-installation.forschung.kit.edu
koroibot-motion-database.humanoids.kit.edu
socketio1.lectrans.scc.kit.edu
campus.studium.kit.edu
iai-lupoth.iai.kit.edu
www.oew.kit.edu
scc-big-ip-04.scc.kit.edu
www.khys.kit.edu
todo-management.cm.tm.kit.edu
rds-test.bibliothek.kit.edu
i72projekte.tm.uni-karlsruhe.de
captive-portal.scc.kit.edu
scc-spamtrap-always-defer.scc.kit.edu
tts.fm.kit.edu
i58bibdc3.informatik.kit.edu
scc-ilias-05.scc.kit.edu
wsm.scc.kit.edu
mail.fs-fmc.kit.edu
www.wiwi.kit.edu
www.ipf.kit.edu
km.aifb.kit.edu
www.izeus.kit.edu
stage-vbt.ebi.kit.edu
munin.informatik.kit.edu
cloud.aifb.kit.edu
www.gloria.kit.edu
ltipc2007.lti.kit.edu
irans-test.ira.uni-karlsruhe.de
a1proxy.scc.kit.edu
asr.anthropomatik.kit.edu
kit-cd.scc.kit.edu
todo-management.cm.tm.kit.edu
ama-orgapi-prod.scc.kit.edu
formal.iti.kit.edu
ce.ioc.kit.edu
www.bausim2018.kit.edu
fw.scc.kit.edu
www.tvt.kit.edu
bg.ikb.kit.edu
iai-kisgrid2.iai.kit.edu

Certificate

The complete raw certificate details for www.fs-fmc.kit.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAugqgrKF/s07Y1mrMNGGp
l3EWu1ebY9DFlNj7Yd+oKjU5YPEEMLQJsO297EnwOEYWSB4/yjLbfICGnz7Vc3EJ
rBb/VXUqk1EsTS+Sv8vdzgdDwWfeCdJyUUOaCwsQCZTrdHDbrpmHiwjgYqhKc4ns
3Y0JuYmRSwgHtN8QJqFIUbcn0jTx1Adb7j5iY4bkbu8cgwBjM5n7Pks00I0LFt3I
jaX8fVYsvTIP+QwVMvFxXo7ctEzMyEgWmT3i5cOnbHsITwfk+tLDwAHM0ufUhIka
KIU/8wajvLQ2nY72YuzgNpnrkywHdagkRTxp43b3dYCBe3Gs6MJJcDvC13s4bKXy
qmJgc3w5XexyZBiye+S6hZdOLkidpyHTDdx4w1SMiTgc7bauvNy5KAsqgWVFXi4V
Dew/5uttVMgtMW590edPS3CVrG2FpoFQumbLSoBpCxiM1UYyQYNJXdJrI71sdLB5
R3lOevHwdTuJgpoKe1xF4xSUCKw/WxS8of4WcqJ0uQ+ZPDsJp8A2svMwyuCVImxG
TtQaLq7Vk8A20/2Aha34UMs155pn3HltU58MW244O7Zw9IINkFD444Yff/xhc77e
bTXEaPEzdZMJPUKgKaYN195KS3sD4EcmuBJLGbSiZhXurRpdP1jnpAdwM3dPWdcu
PAgbfumW65/buE4uiVZaR4ECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9853667550490948180338420134
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe Institute of Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KIT-CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-05 11:06:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-22 10:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe Institute of Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.fs-fmc.kit.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 758983159794584869777953211553615165338661305739449848970301823241945508506913891000755681033286260413046247603558095571568201079278500375318200652567292728757854138177651065020927163939391525911030652165614470392028235462051173589099486034089647284534814174331643535854491520317438933864005865925938145489765307965582953905731827761157296633743035548847705529613320378223795272684115910014464295835011240071507135568403537441674646842948206392009878926029720525078045423965154155464438352960463711919333056566090496354857856843063125997730708659712278686809032889147976806352365378354390371560054684368043102002526934055263666907757713971393124808226812449351401406046959797018401707399512811265128275628637298349005341417739823708357798587558830673502789944642810612259075477642781442228656160149097995927171107140871659285936748486479946573975121536631691519177575535829488246393059457357013121941758703302379778204081194876875030633669120432940664627063834441198134588541617749990178175831159549206387201585415148576970151538362440185949805431278519999415539054803911802037569011551381343548768397030996602804611017674517231014196761417798745021357208735198008787079569820836360444056305239097030258622454515597525068811771463553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							561c339ab816f5fc680d1a1d927f9621ae47a67e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 041abf1c93913dd3d93db0de1323e59a70f42e08
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (237 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anmeldung.fs-fmc.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.fs-fmc.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatama.fmc.uni-karlsruhe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatama.fs-fmc.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intern.fs-fmc.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o-phase.fs-fmc.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.fs-fmc.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.fs-fmc.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vorstand.fs-fmc.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fs-fmc.kit.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/kit-ca-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/kit-ca-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (192 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/kit-ca-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/kit-ca-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (969 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (965 bytes)
							03c30077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016643e864a00000040300483046022100dd6c7be83dc91a93362afc2c855e956849518d05d439485897cfb9e2094d8a0502210083d95bf664d22cd938b359e6c7e78934ea9fd684fa5e701496ded5983326590c007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016643e8649800000403004730450221008af271ac69eb2ab97665b77d7864012f9ed917578c1ebf722643f5388b9f2c55022076e21ae8802a49a0009db80aeaccde7ff4e3389dadf5734dc9dd4dcba998fff60077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016643e865a50000040300483046022100d08687e4181f51cedb8643e89458c8f03e608471cbabd23d1048e7cf11688acd022100d40392f9a6108a7775959046ba8ce5b430af051d22c51afe980a63975dc364c8007700aae70b7f3cb8d566c86c2f16979c9f445f69ab0eb4535589b2f77a030104f3cd0000016643e8649f0000040300483046022100c31cbcd205cbda4d321ca12d6ae6d8760f8b3f4b61d98b7af613ec013f655de90221008972c255a477b42725d89331fdf8bfe534056be589908a9ab0441198a837f8da007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016643e866d70000040300463044022034b10d3c897c5581e3f1741bdfad8efe54c89c9534945566b5e5b30740943cf102207fb6da4fbc7e7bdc98d8768398d455d6b3ef733f40bcb06890208a25b99df4ce0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016643e869310000040300473045022078a08f4ed0acc6f02dce975d4ae8e254ff9a72ef9afbf83599f11fd518a540fe022100b2c7f092614b6b9c142287c450fb3c992e982ab25a7044d2d34d0b2ba416fb19007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016643e866fd0000040300483046022100e5672d1ad30e49ff77ac74010d3272fd42a62db70916c20879cfc36e834166f7022100fa4d5fc348907d778daa17b370e1a94cb57fbad985980cb4eb6e94492cb45363007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016643e8665c0000040300473045022062c99b4f760bb9fa31c114a778f85d967e8428c83d6af09cafe8e3f3114fc31e022100dfd9556b3876db2d51e13ba639e6ffe7eeb4ce10d8bb3d6da6a9d48fae566204
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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