smvpn.iks.cs.ovgu.de

- Otto-von-Guericke-Universitaet Magdeburg -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 27:42:5b:42:48:59:ee:82:c2:4b:7a:1b was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Otto-von-Guericke-Universitaet Magdeburg

Organization: Otto-von-Guericke-Universitaet Magdeburg
State / Province: Sachsen-Anhalt
Locality: Magdeburg
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 27:42:5b:42:48:59:ee:82:c2:4b:7a:1b
Serial Number (int): 12150135445175533497372867099
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: ca:1d:7a:c9:66:00:8e:97:82:8e:1c:2f:f3:be:d2:b5:f0:1b:c8:46
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 2b:15:03:15:b4:c0:73:89:b7:09:bc:5d:81:32:22:aa:f7:b6:d1:7f
Fingerprint (sha256): 08:2a:41:70:66:f1:06:cb:d2:56:7c:85:ce:dd:c0:01:f2:7a:cd:29:e1:2d:25:40:43:d4:19:50:87:b5:4f:1c

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate smvpn.iks.cs.ovgu.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for smvpn.iks.cs.ovgu.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

smvpn.iks.cs.ovgu.de
smvpn2.iks.cs.ovgu.de
smgw.iks.cs.ovgu.de
smgw2.iks.cs.ovgu.de

Other certificates including the domain name ovgu.de

(limited to 100 certificates)
polarion.stimulate.ovgu.de
diz-ummd-ag.med.ovgu.de
www.danss.ovgu.de
www.cs.ovgu.de
fmbcloud.ovgu.de
stipendium.ovgu.de
www27.ovgu.de
www30.ovgu.de
atlas.ub.ovgu.de
chat.ucc.ovgu.de
moodle-n.ovgu.de
tcms.iks.cs.ovgu.de
evasysweb.imed.uni-magdeburg.de
www24.ovgu.de
spoz.ovgu.de
vconk.ovgu.de
me.stimulate.ovgu.de
a01z.ucc.ovgu.de
a01z.ucc.ovgu.de
vdi-ub.ovgu.de
cloud.ucc.ovgu.de
pages.vc.cs.uni-magdeburg.de
www.apl.ovgu.de
spweb2.med.ovgu.de
www21.ovgu.de
dsms.ovgu.de
vpn10.ucc.ovgu.de
vconub.ovgu.de
m01z.ucc.ovgu.de
moodle.med.ovgu.de
aris.ucc.ovgu.de
docshare-extern.med.ovgu.de
blog.ai.ovgu.de
ontohub.org
cseweb.ivs.cs.ovgu.de
cloud.medienbildung.ovgu.de
a01z.ucc.ovgu.de
facade.med.uni-magdeburg.de
a01z.ucc.ovgu.de
smvpn.iks.cs.ovgu.de
www23.ovgu.de
serrala.med.ovgu.de
w5rs.ovgu.de
ivs-pm.ovgu.de
aris.ucc.ovgu.de
edu.cs.ovgu.de
h01-d00.ucc.ovgu.de
www.euroskills.ovgu.de
wlanauth.ovgu.de
myovgu.ovgu.de
h01-d04.ucc.ovgu.de
finca.cs.ovgu.de
fmbcloud.ovgu.de
bama-fmb.ovgu.de
owncl2.iti.cs.ovgu.de
myfmb.ovgu.de
www31.ovgu.de
wikis.ovgu.de
analytics.ucc.ovgu.de
m01z.ucc.ovgu.de
www.med.uni-magdeburg.de
www15.ovgu.de
webgtds.med.ovgu.de
laraga.ilm.ovgu.de
www.meb.ovgu.de
www.myfmb.ovgu.de
www.ci.ovgu.de
medusa.ovgu.de
pruefer.ovgu.de
vpn.ovgu.de
www.ub.ovgu.de
fmbcloud.ovgu.de
aris.ucc.ovgu.de
cse.cs.ovgu.de
open.ess-project.ovgu.de
ontohub.org
transit.urz.uni-magdeburg.de
webmail.uni-magdeburg.de
prozess-portal.ovgu.de
mediaweb.med.uni-magdeburg.de
mx1.ovgu.de
git.iti.cs.ovgu.de
www.danss.ovgu.de
www30.ovgu.de
vconw.ovgu.de
gitlab.stimulate.ovgu.de
openenergy-platform.org
ph1web01.verw.uni-magdeburg.de
ismir-explorer.ai.ovgu.de
lpm.medienbildung.ovgu.de
bmsg.ovgu.de
nc.ovgu.de
blog.ai.ovgu.de
myfmb.ovgu.de
fww-alumni.ovgu.de
project.stimulate.ovgu.de
redcap-extern.med.uni-magdeburg.de
vpn.ovgu.de
b01z.ucc.ovgu.de
csnvpn.ucc.ovgu.de

Certificate

The complete raw certificate details for smvpn.iks.cs.ovgu.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVjCCBT6gAwIBAgIMJ0JbQkhZ7oLCS3obMA0GCSqGSIb3DQEBCwUAMIGNMQsw
CQYDVQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVz
IERldXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4t
UEtJMSUwIwYDVQQDDBxERk4tVmVyZWluIEdsb2JhbCBJc3N1aW5nIENBMB4XDTIy
MDkxNTA4MDkyNloXDTIzMTAxNjA4MDkyNlowgYwxCzAJBgNVBAYTAkRFMRcwFQYD
VQQIDA5TYWNoc2VuLUFuaGFsdDESMBAGA1UEBwwJTWFnZGVidXJnMTEwLwYDVQQK
DChPdHRvLXZvbi1HdWVyaWNrZS1Vbml2ZXJzaXRhZXQgTWFnZGVidXJnMR0wGwYD
VQQDDBRzbXZwbi5pa3MuY3Mub3ZndS5kZTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANIKNmxdiBUsCzk3GwjbJ2cbMmgznhGc2lMlKkZLZ2kN3jycO0W/
xmGLlEuuT8WHpLBES5L6BTmwtVhpoR7iIvp2tOfqy5z5isZE4EhRJEH60JlzWHeT
DNlGAOWJ9HcsycfJxYYVoPtLnSWyciXHBt6ZjpjU+79W7RNzL3HtgoBq7ycnI0JP
EtgIqpnMBHKVJw/qY3YeVcM9Gm1avPc+rapueOdBeXeBlQvVXrfIL6+KdN3eLzAO
h2+AQaLveoz+SpU8ic7OqfFX5SVXHWvlJo0OHc3paVGIgBQw1lxIJlqpLp7Q4AO0
bykWmYcWZhJMRsDvGtUTdKKAsSlycg7mVg8CAwEAAaOCArMwggKvMFcGA1UdIARQ
ME4wCAYGZ4EMAQICMA0GCysGAQQBga0hgiweMA8GDSsGAQQBga0hgiwBAQQwEAYO
KwYBBAGBrSGCLAEBBAowEAYOKwYBBAGBrSGCLAIBBAowEwYDVR0lBAwwCgYIKwYB
BQUHAwEwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0OBBYEFModeslm
AI6Xgo4cL/O+0rXwG8hGMB8GA1UdIwQYMBaAFGs6mIv58lOJ2uCtsjIeCR/oqjt0
MGEGA1UdEQRaMFiCFHNtdnBuLmlrcy5jcy5vdmd1LmRlghVzbXZwbjIuaWtzLmNz
Lm92Z3UuZGWCE3NtZ3cuaWtzLmNzLm92Z3UuZGWCFHNtZ3cyLmlrcy5jcy5vdmd1
LmRlMIGNBgNVHR8EgYUwgYIwP6A9oDuGOWh0dHA6Ly9jZHAxLnBjYS5kZm4uZGUv
ZGZuLWNhLWdsb2JhbC1nMi9wdWIvY3JsL2NhY3JsLmNybDA/oD2gO4Y5aHR0cDov
L2NkcDIucGNhLmRmbi5kZS9kZm4tY2EtZ2xvYmFsLWcyL3B1Yi9jcmwvY2Fjcmwu
Y3JsMIHbBggrBgEFBQcBAQSBzjCByzAzBggrBgEFBQcwAYYnaHR0cDovL29jc3Au
cGNhLmRmbi5kZS9PQ1NQLVNlcnZlci9PQ1NQMEkGCCsGAQUFBzAChj1odHRwOi8v
Y2RwMS5wY2EuZGZuLmRlL2Rmbi1jYS1nbG9iYWwtZzIvcHViL2NhY2VydC9jYWNl
cnQuY3J0MEkGCCsGAQUFBzAChj1odHRwOi8vY2RwMi5wY2EuZGZuLmRlL2Rmbi1j
YS1nbG9iYWwtZzIvcHViL2NhY2VydC9jYWNlcnQuY3J0MBMGCisGAQQB1nkCBAMB
Af8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBV6lgLz4UC0v+Z7ctyPEz6LDBMUe2L
EHg/mB8+F/FXgwj1wmDGst5t7b6tas7942flvAVG4QJS9xULOkNK95s9o70dDrMD
LDIzo8htf2Sq4PgVFGMgySA44rlmijTv9lFncIcT+Lur2atfniLkuPrQHLCFGx+8
4T83szuegXkHRitUgOGHcZArNaNd7zjg5Xk+MqGt8lEYxB+S3NOUAKTCCkMUsh6f
7PuMYum8RKWpdWRY0daLfO33YpWJRJLdr2Mol010JrUboWpifxaWxq186/Sf5nyy
f+jHZEXyv3k1VAl9RhP90ktuc7ibT95oxNPj6iaSrL1y9OUL2w+rIs9c
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0go2bF2IFSwLOTcbCNsn
ZxsyaDOeEZzaUyUqRktnaQ3ePJw7Rb/GYYuUS65PxYeksERLkvoFObC1WGmhHuIi
+na05+rLnPmKxkTgSFEkQfrQmXNYd5MM2UYA5Yn0dyzJx8nFhhWg+0udJbJyJccG
3pmOmNT7v1btE3Mvce2CgGrvJycjQk8S2AiqmcwEcpUnD+pjdh5Vwz0abVq89z6t
qm5450F5d4GVC9Vet8gvr4p03d4vMA6Hb4BBou96jP5KlTyJzs6p8VflJVcda+Um
jQ4dzelpUYiAFDDWXEgmWqkuntDgA7RvKRaZhxZmEkxGwO8a1RN0ooCxKXJyDuZW
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12150135445175533497372867099
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-15 08:09:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-16 08:09:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sachsen-Anhalt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Magdeburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Otto-von-Guericke-Universitaet Magdeburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'smvpn.iks.cs.ovgu.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26515080059201210595091291429895325653794012669880190525904535133215335137203090946153327047159179001124459076608964626347014223553267112620875451908936830462954672777580118473033655664537132953479778612816910027532190033389735916852955416958140188899725139887504327384175825165239942181452294202173712730477628563555228646250808330397353265453563564954333194631308909228885806420106008382557845394696976286831132337170562138629981860035893718308428595984995016067350265433959916610134952510624754360303987137194862841039960067101747681233535086198088809859154267939074167009191788234828595725939147147060153443309071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.10
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca1d7ac966008e97828e1c2ff3bed2b5f01bc846
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smvpn.iks.cs.ovgu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smvpn2.iks.cs.ovgu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smgw.iks.cs.ovgu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smgw2.iks.cs.ovgu.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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