sec21-dmz2b.gfz-potsdam.de

- Helmholtz-Zentrum Potsdam - Deutsches GeoForschungsZentrum GFZ -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 21:46:ee:9f:c3:28:b1:f4:4f:d5:23:0b was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Helmholtz-Zentrum Potsdam - Deutsches GeoForschungsZentrum GFZ

Organization: Helmholtz-Zentrum Potsdam - Deutsches GeoForschungsZentrum GFZ
Organization unit: Section 2.6, GEM Testing and Evaluation Group
State / Province: Brandenburg
Locality: Potsdam
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 21:46:ee:9f:c3:28:b1:f4:4f:d5:23:0b
Serial Number (int): 10298757001795327504860652299
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: c4:75:d9:2e:d0:79:29:e7:60:9a:a8:6c:5b:5c:de:bd:df:31:b9:76
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 2d:7c:af:c0:5a:fa:b4:26:9f:4b:da:4f:b2:64:1d:d6:af:78:ec:86
Fingerprint (sha256): 08:68:a5:92:43:86:8c:3b:bf:85:b4:49:fd:8f:28:c3:c7:4b:53:96:9e:c8:45:7a:07:6b:96:d3:11:43:5a:db

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate sec21-dmz2b.gfz-potsdam.de

65

DNS Names

0

Email Addresses

2

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sec21-dmz2b.gfz-potsdam.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

12oder3.cedim.gfz-potsdam.de
12oder3.obm.gfz-potsdam.de
12oder3.osm.gfz-potsdam.de
6or7.obm.gfz-potsdam.de
6or7.osm.gfz-potsdam.de
a-tiles.obm.gfz-potsdam.de
a-tiles.osm.gfz-potsdam.de
admin.obm.gfz-potsdam.de
admin.osm.gfz-potsdam.de
b-tiles.obm.gfz-potsdam.de
b-tiles.osm.gfz-potsdam.de
buildings.obm.gfz-potsdam.de
buildings.osm.gfz-potsdam.de
c-tiles.obm.gfz-potsdam.de
c-tiles.osm.gfz-potsdam.de
cdn.cedim.gfz-potsdam.de
cdn.obm.gfz-potsdam.de
cdn.osm.gfz-potsdam.de
cloud.cedim.gfz-potsdam.de
cloud.obm.gfz-potsdam.de
cloud.osm.gfz-potsdam.de
d-tiles.obm.gfz-potsdam.de
d-tiles.osm.gfz-potsdam.de
data.obm.gfz-potsdam.de
data.osm.gfz-potsdam.de
devel.obm.gfz-potsdam.de
devel.osm.gfz-potsdam.de
docs.obm.gfz-potsdam.de
docs.osm.gfz-potsdam.de
e-tiles.obm.gfz-potsdam.de
e-tiles.osm.gfz-potsdam.de
f-tiles.obm.gfz-potsdam.de
f-tiles.osm.gfz-potsdam.de
feed.obm.gfz-potsdam.de
feed.osm.gfz-potsdam.de
logger.cedim.gfz-potsdam.de
logger.obm.gfz-potsdam.de
logger.osm.gfz-potsdam.de
map.cedim.gfz-potsdam.de
obm.gfz-potsdam.de
osm.gfz-potsdam.de
proxy.cedim.gfz-potsdam.de
proxy.obm.gfz-potsdam.de
proxy.osm.gfz-potsdam.de
sec21-dmz2b.gfz-potsdam.de
store.cedim.gfz-potsdam.de
svn.obm.gfz-potsdam.de
svn.osm.gfz-potsdam.de
tb.cedim.gfz-potsdam.de
tb.obm.gfz-potsdam.de
tb.osm.gfz-potsdam.de
test.obm.gfz-potsdam.de
test.osm.gfz-potsdam.de
tiles.obm.gfz-potsdam.de
tiles.osm.gfz-potsdam.de
tracker.obm.gfz-potsdam.de
tracker.osm.gfz-potsdam.de
wiki.cedim.gfz-potsdam.de
wiki.obm.gfz-potsdam.de
wiki.osm.gfz-potsdam.de
www.obm.gfz-potsdam.de
www.osm.gfz-potsdam.de
xyz.cedim.gfz-potsdam.de
xyz.obm.gfz-potsdam.de
xyz.osm.gfz-potsdam.de
139.17.3.35
139.17.3.36

Other certificates including the domain name gfz-potsdam.de

(limited to 100 certificates)
geofon.gfz-potsdam.de
rz-vcs1.gfz-potsdam.de
d3m.gfz-potsdam.de
rz-vm140.gfz-potsdam.de
hydro.gfz-potsdam.de
gisasaprouter.gfz-potsdam.de
sec21-dmz1b.gfz-potsdam.de
hydro.gfz-potsdam.de
sec21-dmz1b.gfz-potsdam.de
wol.gfz-potsdam.de
webstats.gfz-potsdam.de
email.gwdg.de
mobilehub.gfz-potsdam.de
intranet.gfz-potsdam.de
dokuwiki.gfz-potsdam.de
sec21-dmz2b.gfz-potsdam.de
moses-dmp.gfz-potsdam.de
spaceweather.gfz-potsdam.de
events.gfz-potsdam.de
rbm9.gfz-potsdam.de
nera-ern.gfz-potsdam.de
api.itsm.gfz-potsdam.de
wlc.gfz-potsdam.de
ebissiq.gfz-potsdam.de
exportcontrol.gfz-potsdam.de
rz-support.gfz-potsdam.de
sec21-dmz1b.gfz-potsdam.de
email.gwdg.de
git.gfz-potsdam.de
rz-vm175.gfz-potsdam.de
hydro.gfz-potsdam.de
varve.gfz-potsdam.de
idp-dev.gfz-potsdam.de
webstats.gfz-potsdam.de
geomagia.gfz-potsdam.de
www.gfz-potsdam.de
fw-ext.gfz-potsdam.de
rz-vm213.gfz-potsdam.de
fw-ext.gfz-potsdam.de
geofon.gfz-potsdam.de
gfzpublic.gfz-potsdam.de
eismassendynamik.gfz-potsdam.de
rz-vm174.gfz-potsdam.de
rz-vm112.gfz-potsdam.de
simultan.gfz-potsdam.de
events.gfz-potsdam.de
rz-vm234.gfz-potsdam.de
gfzock.gfz-potsdam.de
collabora.gfz-potsdam.de
www-app5.gfz-potsdam.de
enhsp.gfz-potsdam.de
timeseries.gfz-potsdam.de
printer-core.gfz-potsdam.de
rz-vm457.gfz-potsdam.de
nextcloud.gfz-potsdam.de
geomagia.gfz-potsdam.de
escidoc.gfz-potsdam.de
idp-test.gfz-potsdam.de
sec21-bbb.gfz-potsdam.de
rz-vm62.gfz-potsdam.de
rz-vm119.gfz-potsdam.de
gfz-potsdam.de
ccmp-pompei.gfz-potsdam.de
moses-dmp.gfz-potsdam.de
wlantickets.gfz-potsdam.de
aschera.gfz-potsdam.de
dep1doc.gfz-potsdam.de
varve.gfz-potsdam.de
index-search-prod.gfz-potsdam.de
ebiss.gfz-potsdam.de
rz-vm89.gfz-potsdam.de
gisasaprouter.gfz-potsdam.de
www.gfz-potsdam.de
forms.gfz-potsdam.de
asip.gfz-potsdam.de
bscw.gfz-potsdam.de
nextcloud.gfz-potsdam.de
benno.gfz-potsdam.de
ad.gfz-potsdam.de
rz-vm278.gfz-potsdam.de
intranet-test.gfz-potsdam.de
rz-ftp1.gfz-potsdam.de
s3ceph.gfz-potsdam.de
ssl.gfz-potsdam.de
moses-data.gfz-potsdam.de
egsim.gfz-potsdam.de
systemerde.gfz-potsdam.de
itsm.gfz-potsdam.de
dataservices.gfz-potsdam.de
rz-monstor3.gfz-potsdam.de
geso122.gfz-potsdam.de
d3m.gfz-potsdam.de
v4-server3.gfz-potsdam.de
trideccloud.gfz-potsdam.de
rz-vm65-dev.gfz-potsdam.de
otms.gfz-potsdam.de
kg3-dmz.gfz-potsdam.de
benno.gfz-potsdam.de
ldapext.gfz-potsdam.de
rz-vm121.gfz-potsdam.de

Certificate

The complete raw certificate details for sec21-dmz2b.gfz-potsdam.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10298757001795327504860652299
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-11 17:25:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-12 17:25:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Brandenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Potsdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helmholtz-Zentrum Potsdam - Deutsches GeoForschungsZentrum GFZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Section 2.6, GEM Testing and Evaluation Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sec21-dmz2b.gfz-potsdam.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 866958409764287086049630132802494617807575078482383625106304998545113246435787961211446395960917548227863087086561831146334138858171164049533883559057865092451680069922119106370820031564300560091962911150325429645596686221816609483321416713667435319336162407995474033075699226045141626892653298313171566885900087438608733237706235547620964810928666183868013308624319165366592183443885658818833452165759115140779013204705319584597279176589608835356504603727511804406473242865239507950932336093147217971529835507837802959729199291282937459911944358374265019223775747313413742558733876748560277807060265212865657106918221945676399355354544766646477491890493953165706399262410395434919530600786874284785397019166666013407761200699415055422798317047120389228437621544428413211624552266662707959099260978048795907785453547939181735264433876467394299085917579267376683632803025616027677530556299756493306456238014426552997353178297345618132782337099972962531723821433746971448732367122000489428179498660257648900425060159481541394061434481696053310147608552242025415805535604164691293691659760638572162380026140442777159963214907269014041697600723848714056105123291186304426751107563018022097872758117735592766679865665383675619681935736553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c475d92ed07929e7609aa86c5b5cdebddf31b976
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1717 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12oder3.cedim.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12oder3.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12oder3.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6or7.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6or7.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-tiles.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-tiles.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-tiles.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-tiles.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildings.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildings.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c-tiles.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c-tiles.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cedim.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.cedim.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd-tiles.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd-tiles.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devel.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devel.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-tiles.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-tiles.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f-tiles.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f-tiles.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feed.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feed.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logger.cedim.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logger.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logger.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'map.cedim.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxy.cedim.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxy.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxy.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec21-dmz2b.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.cedim.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svn.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svn.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tb.cedim.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tb.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tb.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiles.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiles.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracker.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracker.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.cedim.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xyz.cedim.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xyz.obm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xyz.osm.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:7|false] OCTET STRING '139.17.3.35'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:7|false] OCTET STRING '139.17.3.36'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (844 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (840 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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