domdc1.idmdom.rz.intern.uni-leipzig.de

- Universitaet Leipzig -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 25:61:45:78:b2:de:e4:52:92:7c:85:2a was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universitaet Leipzig

Organization: Universitaet Leipzig
Organization unit: URZ
State / Province: Sachsen
Locality: Leipzig
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 25:61:45:78:b2:de:e4:52:92:7c:85:2a
Serial Number (int): 11568539237677983650306360618
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: d6:8f:df:f1:62:93:99:02:82:03:04:81:64:fd:d9:02:4e:38:49:07
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 72:5c:7e:57:dc:d9:67:71:45:63:63:eb:97:a6:c9:aa:4c:61:55:fc
Fingerprint (sha256): 07:6d:25:b7:7a:eb:39:73:c0:fa:96:cf:05:97:3a:70:b2:48:fa:31:68:14:2c:e3:10:db:5c:cf:99:2b:d2:b5

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate domdc1.idmdom.rz.intern.uni-leipzig.de

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for domdc1.idmdom.rz.intern.uni-leipzig.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

addc1.idmdad.rz.intern.uni-leipzig.de
domdc1.idmdom.rz.intern.uni-leipzig.de
geodc1.geographie.idmdom.rz.intern.uni-leipzig.de
geographie.idmdom.rz.intern.uni-leipzig.de
idivdc1.idmidiv.rz.intern.uni-leipzig.de
idmdom.rz.intern.uni-leipzig.de
idmidiv.rz.intern.uni-leipzig.de

Other certificates including the domain name uni-leipzig.de

(limited to 100 certificates)
misun102.mathematik.uni-leipzig.de
vobtest.uni-leipzig.de
vmcollection.rz.uni-leipzig.de
umfrage.uni-leipzig.de
folio-demo.ub.uni-leipzig.de
www.uni-leipzig.de
lldevelopment.wifa.uni-leipzig.de
exchange.ads.uni-leipzig.de
project.medizin.uni-leipzig.de
sport.uni-leipzig.de
urzdomscom01.dom.uni-leipzig.de
v1.rz.uni-leipzig.de
budgeford.imise.uni-leipzig.de
ldap.ad.uni-leipzig.de
foblive.uni-leipzig.de
ldap2.informatik.uni-leipzig.de
smee.life.uni-leipzig.de
urzubvdicon01.dom.uni-leipzig.de
katalog.ub.uni-leipzig.de
hobbitdata.informatik.uni-leipzig.de
urzaddc1.ad.uni-leipzig.de
bbb.sc.uni-leipzig.de
ub.uni-leipzig.de
pcai017.informatik.uni-leipzig.de
www.uni-leipzig.de
mail.stura.uni-leipzig.de
vmtoxiportal.rz.uni-leipzig.de
urzsfboos.uni-leipzig.de
www.uniklinikum-leipzig.de
nagios.rz.uni-leipzig.de
rzbupvss.dom.uni-leipzig.de
clarinws.informatik.uni-leipzig.de
olat.informatik.uni-leipzig.de
lyncpool.dom.uni-leipzig.de
urzdomrdgw01.dom.uni-leipzig.de
rstudio02.sc.uni-leipzig.de
vmcollection.rz.uni-leipzig.de
srvterminal06.swl.uni-leipzig.de
vdi.wifa.uni-leipzig.de
home.uni-leipzig.de
zugangsproxy.ub.uni-leipzig.de
bsvgit.informatik.uni-leipzig.de
lldevelopment.wifa.uni-leipzig.de
rvs.informatik.uni-leipzig.de
www.uniklinikum-leipzig.de
videocampustest.rz.uni-leipzig.de
lldevelopment.wifa.uni-leipzig.de
ucanmdm.vetmed.uni-leipzig.de
www.uni-leipzig.de
v2.rz.uni-leipzig.de
katalog.ub.uni-leipzig.de
www.uni-leipzig.de
vdi02.wifa.uni-leipzig.de
nikolaus.imise.uni-leipzig.de
pfadi.wifa.uni-leipzig.de
vmtima2.rz.uni-leipzig.de
zvappdam.dom.uni-leipzig.de
kait.health
lex.sozphil.uni-leipzig.de
vpn.medizin.uni-leipzig.de
home.uni-leipzig.de
lb.life.uni-leipzig.de
milab7.mathematik.uni-leipzig.de
kommunikation.uni-leipzig.de
auth.life.uni-leipzig.de
bierfass.bioinf.uni-leipzig.de
exchange.bach-leipzig.de
osa.wifa.uni-leipzig.de
home.uni-leipzig.de
urzdomdc23.dom.uni-leipzig.de
ilias.wifa.uni-leipzig.de
zugangsproxy.ub.uni-leipzig.de
www.hds.uni-leipzig.de
mail.stura.uni-leipzig.de
iis10.imise.uni-leipzig.de
vcs51.wifa.uni-leipzig.de
pvz.uni-leipzig.de
www.uni-leipzig.de
leia.informatik.uni-leipzig.de
domdc1.idmdom.rz.intern.uni-leipzig.de
bachweb3.rz.uni-leipzig.de
alpha.ub.uni-leipzig.de
izbifs3.izbi.uni-leipzig.de
mail.stura.uni-leipzig.de
moodletest.rz.uni-leipzig.de
portal2.medizin.uni-leipzig.de
zvts01.dom.uni-leipzig.de
register.sc.uni-leipzig.de
lldevelopment.wifa.uni-leipzig.de
www.uni-leipzig.de
home.uni-leipzig.de
awts.intern.uni-leipzig.de
lha-dev.imise.uni-leipzig.de
studserv.uni-leipzig.de
qnapnas4.wifa.intern.uni-leipzig.de
clarinoai.informatik.uni-leipzig.de
mail.stura.uni-leipzig.de
intern.finc.info
cloud.kleintierklinik.uni-leipzig.de
fob.uni-leipzig.de

Certificate

The complete raw certificate details for domdc1.idmdom.rz.intern.uni-leipzig.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11568539237677983650306360618
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-15 10:16:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-16 10:16:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Leipzig'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Universitaet Leipzig'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'URZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'domdc1.idmdom.rz.intern.uni-leipzig.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 784835599106974192335091022564716496237225262171522598516346459044217343475074487873156340903513521821806212870402798310212417510643455397338109013834847232305261934330008589847037184258964837828033648262325821104067444436686214758505456462022979011938330374615249351768071242681537189552667527481584499026075158486404279769889007023333262531205551256390586333886929564371569278065268672098907874436858088360638297537195622191234800183424960649636893061767905098489614123865528414753001184373254076829977940179696752879243177402272826623512454427204226220677083612120377993505797154387522676117303677595757392033103931636805422421967262284420134997325534987356276152181934296510013943771201954346267519297463128776834438020457355325387603575191964507396671003357425307963393226118053801209089195805357151801554361724039234128087820491727552871961373044880210331809546800253280687498166986230633630827252895523989946149909616182089879218670187010776765477308429360817223980505371294230110925980215027387367609607564267273966383060369717115107543025832494967005754143961545869482250741112686731886503251859779234950168743326187904708134114908884438660596937138765573033309758426366578851630216985213499173030707401906143457720451461843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.9
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d68fdff1629399028203048164fdd9024e384907
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (287 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'addc1.idmdad.rz.intern.uni-leipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domdc1.idmdom.rz.intern.uni-leipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geodc1.geographie.idmdom.rz.intern.uni-leipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geographie.idmdom.rz.intern.uni-leipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idivdc1.idmidiv.rz.intern.uni-leipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idmdom.rz.intern.uni-leipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idmidiv.rz.intern.uni-leipzig.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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