mailgw2.iis.fraunhofer.de

- Fraunhofer -

Issued by Fraunhofer Service CA - G02

About this certificate

This digital certificate with serial number 26:3d:9d:6e:0a:46:b3:69:45:4a:87:b7 was issued on by Fraunhofer.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fraunhofer

Organization: Fraunhofer
State / Province: Bayern
Locality: Muenchen
Country: DE

Fraunhofer

Organization: Fraunhofer
Organization unit: Fraunhofer Corporate PKI
State / Province: Bayern
Locality: Muenchen
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 26:3d:9d:6e:0a:46:b3:69:45:4a:87:b7
Serial Number (int): 11834918289627740087012460471
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: bd:89:81:08:b6:89:53:cd:bc:c0:ac:7c:a9:75:9b:00:9f:5f:6d:c7
AuthorityKeyId: 00:44:34:97:1c:1f:2b:99:26:8d:16:a7:1d:60:68:95:ed:9a:97:ae

Fingerprint (sha1): aa:23:9e:79:75:f1:ef:9a:e9:43:af:9e:6b:86:bb:b1:2f:6f:b3:6b
Fingerprint (sha256): 09:d2:ad:a3:a1:ca:02:65:2a:35:7b:7b:99:c6:86:78:28:bc:eb:09:ba:d3:ef:a4:e3:a0:78:f6:be:da:fb:c0

Issuing Certificate URL: http://cdp1.pca.dfn.de/fraunhofer-service-g2-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/fraunhofer-service-g2-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/fraunhofer-service-g2-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/fraunhofer-service-g2-ca/pub/crl/cacrl.crl

Check the revocation status for certificate mailgw2.iis.fraunhofer.de

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mailgw2.iis.fraunhofer.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mailgw2.iis.fhg.de
mailgw.iis.fraunhofer.de
mailgw.iis.fhg.de
mailgw-inside.iis.fraunhofer.de
mailgw-inside.iis.fhg.de
mailgw-dmz.iis.fraunhofer.de
mailgw-dmz.iis.fhg.de
mailgw2.iis.fraunhofer.de

Other certificates including the domain name fraunhofer.de

(limited to 100 certificates)
vhfraqototcs03.hec.fraunhofer.de
guest.mevis.fraunhofer.de
hmi-umfrage.iao.fraunhofer.de
www.iitb.fraunhofer.de
igb-bitwarden.igb.fraunhofer.de
wnlab.hhi.fraunhofer.de
webmail.fit.fraunhofer.de
nm-service.iais.fraunhofer.de
exilligare.iao.fraunhofer.de
bscw.izb.fraunhofer.de
applik-idz08.iee.fraunhofer.de
immufw-m.imm.fraunhofer.de
social.izm.fraunhofer.de
vceg.hhi.fraunhofer.de
vpn-gaeste-hh.ime.fraunhofer.de
netman.ipk.fraunhofer.de
www.umsicht-suro.fraunhofer.de
llcs-vi2.sit.fraunhofer.de
netsight.ise.fraunhofer.de
guest-lan2.zv.fraunhofer.de
vergabe-mks180.iese.fraunhofer.de
maverick.iao.fraunhofer.de
www.vision.fraunhofer.de
spitzentreffen.edu.cell.vfk.fraunhofer.de
kaa.iais.fraunhofer.de
vpn.fep.fraunhofer.de
iwu.crm.fraunhofer.de
tls1.ws.fraunhofer.de
filedirector.imw.fraunhofer.de
blockchain-europe.iml.fraunhofer.de
sharepoint.sit.fraunhofer.de
muc-gv-dna.aisec.fraunhofer.de
issues.mevis.fraunhofer.de
ksi.scai.fraunhofer.de
iwes-spoke-pri.intra.fraunhofer.de
pwsafe01.iis.fhg.de
applik-idz21.iee.fraunhofer.de
vpn.idmt.fraunhofer.de
vdi.izfp.fraunhofer.de
vindex.fit.fraunhofer.de
ivv-dd.list.fraunhofer.de
nettools.igd.fraunhofer.de
cq-publish2.ws.fraunhofer.de
projekte-lfs.iff.fraunhofer.de
ipa-uipath140.ipa.fraunhofer.de
humit.fit.fraunhofer.de
iap.list.fraunhofer.de
listsrv03.fraunhofer.de
status.arb.fhr.fraunhofer.de
vhfraqototaw01.hec.fraunhofer.de
keepass.iosb.fraunhofer.de
xcom.isst.fraunhofer.de
mellon.hhi.fraunhofer.de
maestral.fit.fraunhofer.de
cryptshare.fraunhofer.de
zerobin.sit.fraunhofer.de
aem-www.iese.fraunhofer.de
wqtool.igd.fraunhofer.de
vhfraqototwslb.hec.fraunhofer.de
mailn2.iis.fhg.de
vgw.iis.fraunhofer.de
subdepot.mevis.fraunhofer.de
wpa.emi.fraunhofer.de
www.isc.fraunhofer.de
blockchainlab-git.ipk.fraunhofer.de
www.aachen.fraunhofer.de
test.servicedesk.fraunhofer.de
gordian.ipa.fraunhofer.de
ildmz55.idmt.fhg.de
talentix.iml.fraunhofer.de
exim2.iao.fraunhofer.de
pathme.scai.fraunhofer.de
www.subi2ma.fraunhofer.de
vpn-gaeste.iosb-ast.fraunhofer.de
fener-webport.ise.fraunhofer.de
upload.c.fraunhofer.de
h2t.intern.ise.fraunhofer.de
ldap.ibmt.fraunhofer.de
piwik.ipk.fraunhofer.de
gitlab-i.eas.iis.fraunhofer.de
reaalmarketplace.universaal.info
kub001.iao.fraunhofer.de
download.scai.fraunhofer.de
openproject.sit.fraunhofer.de
helpdesk.imw.fraunhofer.de
data-h2t-el.ise.fraunhofer.de
ipib.ci.moez.fraunhofer.de
vpn.s.c.fraunhofer.de
vpn.ivi.fraunhofer.de
sand2.fokus.fraunhofer.de
diasim.igd-r.fraunhofer.de
miraculix-dmz.ivi.fraunhofer.de
portal.moez.fraunhofer.de
vpn.iem.fraunhofer.de
remote3.fraunhofer.de
zf-prognose.iao.fraunhofer.de
dynamo.sit.fraunhofer.de
dci2.easw2k.eas.iis.fraunhofer.de
support.igd-r.fraunhofer.de
tfs-extern.ibp.fraunhofer.de

Certificate

The complete raw certificate details for mailgw2.iis.fraunhofer.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaCvBXKlO4BfyWof9U9H
mdhbEDaOlw8D41MuUtOsawKPd1dnx00M3ya2mjEgLhK2bU6CyQ41W5Scx257v2eN
Q5NzZZl3h3Vr0SpHtryWI0wZ5u92/Aw5yPDIMmeo/eZ1UFHlHx/bp45b+YGp3fss
xH25kk8ccWT+htaB1n3bbzCBufMTLk+KpANMCMjhwOllJynTtoKNlYgC/xCBXraH
4Pboy1m3UDkzpXfrT4J+T0C9VXTU5u3GTFCNCoguOs9Ms5GUvdv6764VlqkQYx9w
y1s0PwF0Dkwzubnv3inN3TzYeVT/zoowzjuhWgY9YeP5Iu31Co+alSMJd02Tpb6w
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11834918289627740087012460471
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fraunhofer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fraunhofer Corporate PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fraunhofer Service CA - G02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-01 13:30:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-01 13:30:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fraunhofer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mailgw2.iis.fraunhofer.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25453135372414931611980618778453054946044115743926393005885762605573025230708810644602585152043759482001824739656877172576469883892379848490019562440786387279531866037220697072370883506246376445141133211951604931806716078770048990153885328474420148733695990231885455002040812637203213917463856765283545832803000694902520899600151184022790290023245764736133026609239967618988925283911773341426052499587337998703234213064952337295372673450655928414347628109026354182790158621547274325055705902280640222089489233919066302376849228886186867318765673581065727765308020779421461045723622978576823143024972598838805105914029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.10
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd898108b68953cdbcc0ac7ca9759b009f5f6dc7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 004434971c1f2b99268d16a71d606895ed9a97ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (207 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailgw2.iis.fhg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailgw.iis.fraunhofer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailgw.iis.fhg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailgw-inside.iis.fraunhofer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailgw-inside.iis.fhg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailgw-dmz.iis.fraunhofer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailgw-dmz.iis.fhg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailgw2.iis.fraunhofer.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/fraunhofer-service-g2-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/fraunhofer-service-g2-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (222 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/fraunhofer-service-g2-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/fraunhofer-service-g2-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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