mediathek-origin.rbb-online.de

- Rundfunk Berlin-Brandenburg -

Issued by rbb CA

About this certificate

This digital certificate with serial number 1e:d4:57:58:60:37:63:92:47:73:ab:4c was issued on by Rundfunk Berlin-Brandenburg.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Rundfunk Berlin-Brandenburg

Organization: Rundfunk Berlin-Brandenburg
Organization unit: TPS Online
State / Province: Berlin
Locality: Berlin
Country: DE

Rundfunk Berlin-Brandenburg

Organization: Rundfunk Berlin-Brandenburg
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:d4:57:58:60:37:63:92:47:73:ab:4c
Serial Number (int): 9541255044529261223630580556
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: f9:74:b3:52:1a:35:c0:af:e8:46:8b:ca:62:62:3d:c2:a3:2f:d3:78
AuthorityKeyId: 79:a5:12:8c:e7:ac:ae:c6:69:c9:04:e6:4b:07:da:72:cb:cb:5d:8d

Fingerprint (sha1): 5a:8c:c1:c9:43:23:f1:80:37:d3:10:78:74:7f:fa:2b:99:1f:a2:ec
Fingerprint (sha256): 09:6d:5c:b8:23:cc:16:a6:c4:54:36:95:a5:eb:db:72:35:1b:66:1a:99:9b:29:ab:ad:e0:75:5b:fb:0a:58:9d

Issuing Certificate URL: http://cdp1.pca.dfn.de/rundfunk-berlin-brandenburg-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/rundfunk-berlin-brandenburg-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/rundfunk-berlin-brandenburg-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/rundfunk-berlin-brandenburg-ca/pub/crl/cacrl.crl

Check the revocation status for certificate mediathek-origin.rbb-online.de

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mediathek-origin.rbb-online.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

appdata-origin-tua.rbb-online.de
appdata-origin.rbb-online.de
appdata-preview-tua.rbb-online.de
appdata-preview.rbb-online.de
mediathek-origin-tua.rbb-online.de
mediathek-origin.rbb-online.de
mediathek-preview-tua.rbb-online.de
mediathek-preview.rbb-online.de

Other certificates including the domain name rbb-online.de

(limited to 100 certificates)
evo-s0.rbb-online.de
mi-vsp02.rbb-online.de
distribution-status.rbb-online.de
sf-ad1.ad.rbb-online.de
ref.rbb-online.de
sp-flimgr03.rbb-online.de
rbb-online.de
sp-ad2.ad.rbb-online.de
sp-ttximport02.rbb-online.de
mi-s4-1.rbb-online.de
sp-vcrpad02.rbb-online.de
sp-view01.ad.rbb-online.de
presseservice.rbb-online.de
rbbot1ev1.rbb-online.de
ttool-extern.rbb-online.de
ref-s0.w3.rbb-online.de
sp-wsa01-p1.rbb-online.de
mediathek-origin.rbb-online.de
sp-jobsmgr01.rbb-online.de
intranet-s0.rbb-online.de
distribution-status.rbb-online.de
mimo.rbb-online.de
munki.rbb-online.de
ndr-news.rbb-online.de
rbb-online.de
sp-ad2.ad.rbb-online.de
sf-ad1.ad.rbb-online.de
sp-fmc01.rbb-online.de
rbb-online.de
pcp.rbb-online.de
distribution-status.rbb-online.de
distribution-status.rbb-online.de
i-doit-i.rbb-online.de
rbblog.rbb-online.de
distribution-status.rbb-online.de
sts.rbb-online.de
evo-p-awx.rbb-online.de
lodoas03.rbb-online.de
sp-im02.rbb-online.de
data.rbb-online.de
sp-ise01.rbb-online.de
sp-dsp-prod01.ad.rbb-online.de
webdoku.rbb-online.de
mi-5.rbb-online.de
webapplog.rbb-online.de
data-vis.rbb-online.de
sp-webdav01.ad.rbb-online.de
smr.rbb-online.de
m-relayb02i.rbb-online.de
rbb-online.de
rbb-online.de
m-relayp02i.rbb-online.de
sp-ttximport02.rbb-online.de
distribution-status.rbb-online.de
m-relayb02.rbb-online.de
distribution-status.rbb-online.de
ip-mgmt.rbb-online.de
ucmobile.rbb-online.de
sb-ad3.ad.rbb-online.de
distribution-status.rbb-online.de
distribution-status.rbb-online.de
sb-osuca01.rbb-online.de
entree-b.rbb-online.de
medienbroker.rbb-online.de
distribution-status.rbb-online.de
distribution-status.rbb-online.de
distribution-status.rbb-online.de
docs.rbb-online.de
evo-static.rbb-online.de
rbb-online.de
sc-ad1.ad.rbb-online.de
rbb-online.de
distribution-status.rbb-online.de
ptp-gm-b.rbb-online.de
rmsext.rbb-online.de
rbb-online.de
mi-s3-1.rbb-online.de
sp-ad4.ad.rbb-online.de
pcp.rbb-online.de
distribution-status.rbb-online.de
mond-mk.rbb-online.de
orbitdvb41.rbb-online.de
birddoghrstatus.paradox.ai
evo-s-awx.rbb-online.de
evo-t1.rbb-online.de
rbb-online.de
sb-aks-dpe00.ad.rbb-online.de
evo-p-fusion.rbb-online.de
evo-data.rbb-online.de
rbb-mon.rbb-online.de
webdoku.rbb-online.de
rbb-online.de
distribution-status.rbb-online.de
sb-ise01.rbb-online.de
sp-cpi02.rbb-online.de
entree-b.rbb-online.de
entree-p.rbb-online.de
sb-tipath01.rbb-online.de
sp-ise01.rbb-online.de
sp-mon-mk1.rbb-online.de

Certificate

The complete raw certificate details for mediathek-origin.rbb-online.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9541255044529261223630580556
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rundfunk Berlin-Brandenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rbb CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-23 10:41:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 23:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rundfunk Berlin-Brandenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TPS Online'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mediathek-origin.rbb-online.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 843440314190637463530929560714147576747960131677073697046061302857395830878511218193877180543472637328248707050884708493015905162629932102830144742080444693280629853713031012172150724155171285072416580841263116579850993896997016838462045851924859262385725162441745042068312921453525029582378269148171285908805938012204487685221983934751093672250911249318956676054830960408866762484496690538167002069105582571580814987447059739460343824767657613854899351819977746772404095920778402276873774797033337509973635248380863400368662359229912768171972321043772584810111674413181046563021596532771340738624098496252076343046708082019773279346713399931839651575048619958881269666549195076567796854982865681629318098875949143193799074707286259519327518453875285441612189966937919744119157807875995211437057020814907342170780914213065730285195596647155429967785300429190490077582887285666161266943221513249431039260559097188776703025813116993593989251270880696279050938582058903822815858577433359522003832222432369847150539592914585199794416451022495927849608304590679626384407141954207466337669663136945016649776198765522162634362686425704236923117648581605333108053704961806393181280509885828424859346509803653968482395022432964761191423405917
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f974b3521a35c0afe8468bca62623dc2a32fd378
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 79a5128ce7acaec669c904e64b07da72cbcb5d8d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (272 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appdata-origin-tua.rbb-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appdata-origin.rbb-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appdata-preview-tua.rbb-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appdata-preview.rbb-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediathek-origin-tua.rbb-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediathek-origin.rbb-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediathek-preview-tua.rbb-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediathek-preview.rbb-online.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/rundfunk-berlin-brandenburg-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/rundfunk-berlin-brandenburg-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (234 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/rundfunk-berlin-brandenburg-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/rundfunk-berlin-brandenburg-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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