i40dc3.uni-karlsruhe.de

- Karlsruhe Institute of Technology -

Issued by KIT-CA

About this certificate

This digital certificate with serial number 25:50:5f:5f:ad:b0:00:8e:0e:78:79:b1 was issued on by Karlsruhe Institute of Technology.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Karlsruhe Institute of Technology

Organization: Karlsruhe Institute of Technology
Organization unit: IPD Boehm
State / Province: Baden-Wuerttemberg
Locality: Karlsruhe
Country: DE

Karlsruhe Institute of Technology

Organization: Karlsruhe Institute of Technology
State / Province: Baden-Wuerttemberg
Locality: Karlsruhe
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 25:50:5f:5f:ad:b0:00:8e:0e:78:79:b1
Serial Number (int): 11548109818731001470086838705
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: f6:13:bd:2f:c7:00:21:02:cf:f8:57:db:26:94:1c:ff:98:cf:7f:24
AuthorityKeyId: 04:1a:bf:1c:93:91:3d:d3:d9:3d:b0:de:13:23:e5:9a:70:f4:2e:08

Fingerprint (sha1): ab:2a:81:cc:f4:00:b4:44:de:bb:0c:ec:2f:d0:d1:9e:a4:bb:68:3d
Fingerprint (sha256): 08:75:91:84:a6:b3:6b:fa:60:93:e0:29:19:6d:85:ce:df:dc:16:be:de:b4:cc:62:3d:ce:40:7a:40:dd:cb:2f

Issuing Certificate URL: http://cdp1.pca.dfn.de/kit-ca-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/kit-ca-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/kit-ca-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/kit-ca-g2/pub/crl/cacrl.crl

Check the revocation status for certificate i40dc3.uni-karlsruhe.de

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for i40dc3.uni-karlsruhe.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

i40dc3.kit.edu
i40dc3.uka.de
i40dc3.uni-karlsruhe.de
ipd-i40dc3.kit.edu
ipd-i40dc3.uka.de
ipd-i40dc3.uni-karlsruhe.de

Other certificates including the domain name uni-karlsruhe.de

(limited to 100 certificates)
www.lehrer.uni-karlsruhe.de
karrieretag.awika.uni-karlsruhe.de
code.em.uni-karlsruhe.de
www.kv-reihe.kit.edu
www.lists.uni-karlsruhe.de
www.mobilitaetssysteme.kit.edu
mail.akaflieg.uni-karlsruhe.de
www.oew.kit.edu
i72projekte.tm.uni-karlsruhe.de
wbkmail2.wbk.uni-karlsruhe.de
pp.info.uni-karlsruhe.de
irans-test.ira.uni-karlsruhe.de
ce.ioc.kit.edu
www.tvt.kit.edu
symposium.fbv.uni-karlsruhe.de
www.iiit.kit.edu
www.eti.kit.edu
www.mathematik.uni-karlsruhe.de
www.eti.kit.edu
www.fsz.kit.edu
www.philosophie.kit.edu
fsmi-www.fsmi.uni-karlsruhe.de
www.ite.kit.edu
www.ipc.kit.edu
www.ibu.uni-karlsruhe.de
www.itiv.kit.edu
i70tmdocs.tm.uni-karlsruhe.de
www.entechnon.kit.edu
www.konzertchor.kit.edu
www.kammerchor.kit.edu
www.mvm.uni-karlsruhe.de
wbkwss.wbk.uni-karlsruhe.de
pi-4pcm.physik.uni-karlsruhe.de
www.iww.uni-karlsruhe.de
atisverleih.informatik.kit.edu
www.physik.uni-karlsruhe.de
wasserversorgung.iwg.kit.edu
ekpwww.ekp.kit.edu
www.iam.kit.edu
www.ieh.kit.edu
www.intl.kit.edu
www.fs-fmc.kit.edu
mml-backup.informatik.kit.edu
www.mobilitaetssysteme.kit.edu
www.ifr.kit.edu
www.tm.kit.edu
fgt.ieb.kit.edu
www.fsm.kit.edu
www.stud.uni-karlsruhe.de
isnt.ikm.uni-karlsruhe.de
i81pc50.iar.kit.edu
i40dc3.uni-karlsruhe.de
fmi.fbv.uni-karlsruhe.de
geotech.ibf.uni-karlsruhe.de
i81server.iar.kit.edu
www.chem-bio.kit.edu
www.ibu.kit.edu
www.zak.kit.edu
www.ibt.kit.edu
www.cfn.uni-karlsruhe.de
iag1.webarchiv.kit.edu
www.konzertchor.kit.edu
test-www.rz.uni-karlsruhe.de
www.cfn.kit.edu
bup.ieb.kit.edu
www.paedagogik.uni-karlsruhe.de
munin.ira.uni-karlsruhe.de
www.kafep.uni-karlsruhe.de
stahl.vaka.kit.edu
www.agw.kit.edu
www.philosophie.kit.edu
fwi-servicebackend.wiwi.uni-karlsruhe.de
www.zak.kit.edu
www.stk.uni-karlsruhe.de
www.hek.uni-karlsruhe.de
smtp.ira.uni-karlsruhe.de
tfpimap-ext.tfp.uni-karlsruhe.de
kki-us-srv-01.informatik.kit.edu
listen.informatik.kit.edu
i02mac47.informatik.uni-karlsruhe.de
www.scc.kit.edu
www.its.kit.edu
zebio.zoo.kit.edu
www.botanik2.uni-karlsruhe.de
www.sport.kit.edu
www.fast.kit.edu
www.bgu.uni-karlsruhe.de
www.kit.edu
www.oew.kit.edu
www.kit.edu
cmwiki.cm-tm.uni-karlsruhe.de
www.rsm.kit.edu
aifb.kit.edu
i08workbench.informatik.kit.edu
www.imt.kit.edu
www.iam.kit.edu
www.imb.kit.edu
ts1.ubka.uni-karlsruhe.de
www.its.kit.edu
portal.akaflieg.uni-karlsruhe.de

Certificate

The complete raw certificate details for i40dc3.uni-karlsruhe.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsGW3YCMr2nWhT0Syn1c2
oesoH5O3RzuGoDPHPtOK2Vc2zCSMjknyNAwdVvHiMKLcJsLNpNtsuwSalQsLVydu
cNAMOpjXrA3XdkNog5sBj4v8Gd+KJttMtiqx+uRpM1vvJWIU/c6v7mWVd0iHbqI5
YH/Ertv8QAAiJRqiHGO8IqVP1Fx8dsO6JxgGeL4pb673EkPtjjt4HSlPKSn0dIW3
iHLG2RlWUXiMGLcbrOUUN++/v20J4DYGR2Lz6Ay+27bokbWjRbGhZx/xirlJtDyb
yRI8e8FJNyrjwBrRPzrmtw9vh6IeI8g+uDKfg9wCmvlmP9ZkSubxYjsB4GjegQfH
YIMqwS+WAyOE7xsm9S6lUKN6GEb3j3K41VcMDvr1xCcFGfoEmBWtyuZccCcDM4oh
WgkNrwD39qs8+8EmbLmxH13P+GxD8Czgb3IJPEjx2XqUklWmgttvEpigg1ymAyWw
UyuzbZDAQido+v9mhdBsXpvbbAWkll3VbLuiDWKU9MNDrSTNh29M5oyGqid419KI
GTx0PmH8yNIUpJIbCaPbJESOnK7VEFfVEi3Jg70+DA+/S2J3Wz+woosQ627YVx2y
Qt9afI4Bjn7QJxx+RmJ7O5k1MOhU1p9p/w7Iz2quPIp8l3Yim0r1WPywJQHPucGq
nHrhfzOmzKZMfcP/JxYk6O8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11548109818731001470086838705
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe Institute of Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KIT-CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-02 14:38:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-03 14:38:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe Institute of Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IPD Boehm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'i40dc3.uni-karlsruhe.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 719638318250948021840029998045293047841534788288165575450255655463632296205468519194147002269025390530350060357724249554503170610636990004405429759994761781925270641011595536897326261603960857978919810669171652045185601091970886901890873914630452545953542542234125783680704748313548488510318538909966778526411880237033242942449779473444936349639715979442783808790976963100781533202236701168275732484532738163192486460234893050431363171147949238496311570737829694922079960489768234549694516635726410989365483682185012913910368529299371857349070382994389610441220347414080315092286695902252931223538237535838230340609103858602817770882949467646015160968101391402985795541583375271988015729723051162944676593425390928321951939392716452392146090421200566566519640213697866843182784058665812960189933813310444222160077354552671466306947911196371963849871391209199688644295164798827175759911000791524427173067635717008521461437586108278863403379432326173459743047854075750781932265776371481562392946507336828760380267049030201930772386432442219531011186669050461508007229091335977550739207156214704898784487857943057101970133300629608075395868544458126605864740630518622770732100765694947222677024602777429187377359411011787254059072022767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f613bd2fc7002102cff857db26941cff98cf7f24
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 041abf1c93913dd3d93db0de1323e59a70f42e08
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i40dc3.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i40dc3.uka.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i40dc3.uni-karlsruhe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipd-i40dc3.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipd-i40dc3.uka.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipd-i40dc3.uni-karlsruhe.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/kit-ca-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/kit-ca-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (192 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/kit-ca-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/kit-ca-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.9
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000e7053b3b5a1712b2cb383301fe4af7e4612aa6fc2d0d8cb44d2c030816ac78c96011d9294baa1b36c1b55cbd6e9b588c9b07a1c4da832a868ae2a66756b9ad85a852c78400b564c3cd846012c808e324b89def6b29c3b6604f9d4b43f3b347023405bb6eaa18f45b87e1ec8fa267b4298fe8857556bf8c4845557b9508e28d33ef7328b2b2f2b082e73cb8da8913dc2a8e3f98c0bcbde25b53d7f506e1974ab956c22391e859ab566f1911b93af11e0b1851eceea147bcc3498473488f82e77bb71e4dbeaaa8316d2232c36c561f1e79c36870dae9e9a5b67834464df6ad67088e154a08deddc966d617faffbd4a4582bfe0ea39be77467b408925bf8232986