www.nanosys.physik.lmu.de

- Ludwig-Maximilians-Universitaet Muenchen -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 1f:ed:6e:3b:ee:7f:3a:b4:de:f7:d4:6b was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ludwig-Maximilians-Universitaet Muenchen

Organization: Ludwig-Maximilians-Universitaet Muenchen
Organization unit: Fakultaet fuer Physik
State / Province: Bayern
Locality: Muenchen
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:ed:6e:3b:ee:7f:3a:b4:de:f7:d4:6b
Serial Number (int): 9881071289566899506289038443
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 46:86:c7:94:d9:08:49:e6:23:1d:fa:8e:1f:b2:6b:50:a8:f1:e7:33
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 29:db:58:9e:26:ba:8e:d9:53:04:73:4b:2e:c2:62:3a:8d:1e:34:f5
Fingerprint (sha256): 09:ef:6f:4a:8e:fd:41:8b:2e:53:d6:71:d4:f2:45:aa:3d:47:63:98:10:1e:5d:b2:ec:db:5c:cc:49:24:4c:ea

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate www.nanosys.physik.lmu.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nanosys.physik.lmu.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nanosys.physik.lmu.de
www.nanosys.physik.uni-muenchen.de

Other certificates including the domain name lmu.de

(limited to 100 certificates)
debian.bio.lmu.de
wwwv1.mwn.de
lmussl.verwaltung.uni-muenchen.de
webmail.fs.lmu.de
evol.bio.lmu.de
www.physcos.physik.uni-muenchen.de
hilbert.bio.ifi.lmu.de
wwwv1.mwn.de
philo.fs.lmu.de
printserv.cip.ifi.lmu.de
cloud-11.bio.lmu.de
automatx.pms.ifi.lmu.de
backstage2.pms.ifi.lmu.de
f11-apache-2.fak11.uni-muenchen.de
f11-apache-2.fak11.uni-muenchen.de
www.portal.graduatecenter.uni-muenchen.de
lmussl18.verwaltung.uni-muenchen.de
wwwv1.mwn.de
www.e-assessment.uni-muenchen.de
zoomorphologie.bio.lmu.de
www.physcos.physik.uni-muenchen.de
webcontent.ifkw.uni-muenchen.de
wwwv1.lrz.uni-muenchen.de
en.zoomorphologie.bio.lmu.de
hilbert.bio.ifi.lmu.de
collab.lmu.de
www.cip.ifi.lmu.de
sysbot.bio.lmu.de
webcontent.ifkw.uni-muenchen.de
filr.fak11.lmu.de
webarchiv-ulrich-beck.soziologie.uni-muenchen.de
wwwv1.lrz.uni-muenchen.de
lmussl00.verwaltung.uni-muenchen.de
hilbert.bio.ifi.lmu.de
lmussl16.verwaltung.uni-muenchen.de
autoconfig.bio.lmu.de
skk2016.komparatistik.lmu.de
boxmodeling.meteo.physik.uni-muenchen.de
owncloud.physik.lmu.de
devuan.biologie.uni-muenchen.de
efvbachelor.ifi.lmu.de
lmussl19.verwaltung.uni-muenchen.de
zammad.fs.lmu.de
wwwv1.lrz.uni-muenchen.de
monitoring.fs.lmu.de
raspbian.bio.lmu.de
en.alumni.bio.lmu.de
wwwv1.lrz.uni-muenchen.de
www.graduiertenkolleg.physik.uni-muenchen.de
pwp.um.ifi.lmu.de
backstage.pms.ifi.lmu.de
ldap4.pms.ifi.lmu.de
imap.cip.ifi.lmu.de
www.exgal.physik.lmu.de
racktables.rz.ifi.lmu.de
hosting.itz.fak13.lmu.de
anthropologie.bio.lmu.de
mi.fs.lmu.de
chemie.fs.lmu.de
www.lehrevaluation.uni-muenchen.de
svn.medien.ifi.lmu.de
tr175.bio.lmu.de
ssh.ifi.lmu.de
pviad2.ifi.lmu.de
psy.fs.lmu.de
www.dwl.aegyptologie.lmu.de
www.en.pms.ifi.lmu.de
wwwv1.lrz.uni-muenchen.de
buildbot.sosy.ifi.lmu.de
lmussl17.verwaltung.uni-muenchen.de
hub.bwl.uni-muenchen.de
vfp-archaeologie.fs.lmu.de
efvbachelor.ifi.lmu.de
mi.fs.lmu.de
stila2.pms.ifi.lmu.de
turing64.bio.ifi.lmu.de
behavioural-ecology.bio.lmu.de
collab.lmu.de
www.en.uni-muenchen.de
homepages.physik.uni-muenchen.de
www-comp.sosy.ifi.lmu.de
webmail-gst.physik.uni-muenchen.de
www.tcs.ifi.lmu.de
anthropologie.bio.lmu.de
biologie.uni-muenchen.de
ic2.cip.ifi.lmu.de
mmi1.um.ifi.lmu.de
lmussl11.verwaltung.uni-muenchen.de
www.medien.ifi.lmu.de
wwwv1.mwn.de
wwwv1.mwn.de
ojs.ub.uni-muenchen.de
smtpin.ifi.lmu.de
germanistik.fs.lmu.de
efvbachelor.ifi.lmu.de
www.nanosys.physik.lmu.de
www.exgal.physik.lmu.de
mail.genzentrum.lmu.de
www.erdbeben-in-bayern.de
www.oc.med.lmu.de

Certificate

The complete raw certificate details for www.nanosys.physik.lmu.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4yDeBgSypCrHhF6AeY5
8KHksB61C8HgnRBHjGe95N88ljtwxPn5T6/vu83NO9qieSvhy5UqVoDdmNO0dQ16
0il1z6MGmCKUm4FG9qKCGWkFJECr4OYTEcmBDsqZ+bOp/4QhHQ+wrTWj3vglYkB7
pD4YYcfd8xjGEE3DL6/NsiQ0pPvV2Y9t5KhsCXbx+89tia+KfVVTdw+Wy5dT4dGL
TDhU7fOhP2TjJCpqBCoVrn0B8MOeAi9HhzKWWgo7YsydN4MaWeBcGyjcstclihNG
QzpPsG+nChVmDmI3aXoNtZoF9UqXiooYwSSqtH0TNEoVBhGUUwv7DSjjqz2Mg6Ox
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9881071289566899506289038443
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-22 15:45:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-23 15:45:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ludwig-Maximilians-Universitaet Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fakultaet fuer Physik'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.nanosys.physik.lmu.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23170899623371717199808315010701244587432947909507441897389093758356588390320198141113575646238404272331000997253466825166384910545346767739503695355308617409082162651337120991031468933887352852057534390982272660275780935234300011959173248510467982147578311982588602774392201565164677827362374777640420889542444159647746125540927156686968299092179930944851359194538861463093663859105453796927474665650305694252211990328096667979805145546266026015285737921830364328288748331421388092859105327124695178147568450431030253553836725875971877458192949006573984216304355334879985065891145607494530730978276414304694267261389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4686c794d90849e6231dfa8e1fb26b50a8f1e733
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nanosys.physik.lmu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nanosys.physik.uni-muenchen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (846 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (842 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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