hosting.dwd.de

- Deutscher Wetterdienst -

Issued by Deutscher Wetterdienst CA - G01

About this certificate

This digital certificate with serial number 14:a7:25:1a:13:32:6e was issued on by Deutscher Wetterdienst.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [ContentCommitment DataEncipherment DigitalSignature KeyEncipherment] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Deutscher Wetterdienst

Organization: Deutscher Wetterdienst
Organization unit: Web-CC
State / Province: Hessen
Locality: Offenbach
Country: DE

Deutscher Wetterdienst

Organization: Deutscher Wetterdienst
Organization unit: GB TI Ref. TI 16
Locality: Offenbach am Main
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 14:a7:25:1a:13:32:6e
Serial Number (int): 5813277327307374
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: cd:6c:27:f5:96:63:09:46:81:f2:ed:5b:7f:6e:9e:4e:5b:ec:a3:3d
AuthorityKeyId: ab:7b:06:57:d9:1c:ee:f9:22:1a:56:9e:60:28:85:c0:ea:a7:fd:47

Fingerprint (sha1): 3a:2a:1a:93:43:ea:7e:44:51:d5:3e:63:1d:7b:96:6c:49:5c:74:68
Fingerprint (sha256): 0a:0f:67:b5:01:86:fb:a6:5b:d1:6a:c3:22:f6:3c:76:fd:77:6d:64:a8:ed:a3:9b:40:c7:48:f1:f9:0f:d8:e7

Issuing Certificate URL: http://cdp1.pca.dfn.de/deutscher-wetterdienst-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/deutscher-wetterdienst-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/deutscher-wetterdienst-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/deutscher-wetterdienst-ca/pub/crl/cacrl.crl

Check the revocation status for certificate hosting.dwd.de

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hosting.dwd.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hosting.dwd.de
www.baf.bund.de
www.bag.bund.de
www.bsh-cert.de
www.d-klip.de
www.deutsches-klimaportal.de
www.deutschesklimaportal.de
www.dklip.de
www.dlz-it.de
www.lba.de

Other certificates including the domain name dwd.de

(limited to 100 certificates)
maps.dwd.de
ssi-intern.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
ssi.dwd.de
www.deutscher-wetterdienst.de
hosting.dwd.de
maps.dwd.de
kunden.dwd.de
dwdvd.dwd.de
hosting.dwd.de
nl-prox.dwd.de
www.flugwetter.de
expertennetzwerk.mandant.dwd.de
www.dwd.de
ssi.dwd.de
isedmz-p.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
wis-gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
www.dwd.de
kunden.dwd.de
oflsd46.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
ebc.mandant.dwd.de
ofvkexpc01.dwd.de
pappl.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
alephino.dwd.de
hosting.dwd.de
fralux.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
kassandra.dwd.de
maps.dwd.de
brzvpngw.dwd.de
listen-prox.dwd.de
dwdhosting.mandant.dwd.de
hosting.dwd.de
hk.mandant.dwd.de
virtadm-hosts.dwd.de
klimawandel.mandant.dwd.de
oflxd18.dwd.de
hosting.dwd.de
oflxsn10.dwd.de
hosting.dwd.de
xmdm.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
qs-ninjoservices.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
cdc.dwd.de
oflsd46.dwd.de
beobachtungen.dwd.de
ninjoservices-neu.dwd.de
oflxs616.dwd.de
prometheus.dwd.de
gdws.mandant.dwd.de
ofvkexpe01.dwd.de
hosting.dwd.de
opendata.dwd.de
hosting.dwd.de
sva.mandant.dwd.de
stbauf.mandant.dwd.de
kunden.dwd.de
beobachtungen.dwd.de
hosting.dwd.de
oflsd46.dwd.de
molrao.dwd.de
hosting.dwd.de
webwerdis-intra.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
listen-prox.dwd.de

Certificate

The complete raw certificate details for hosting.dwd.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspFpIZQd+t7vDKWuG5Eq
lDQwcAZrsuMm2WhXGiYHP0fS5fTeV9bRYJ//upvrHeA+gXRx2vtFADOT5jYGXE8z
VWYtzuuW+cnWi/OqpLbVDflVe9c0bT+PHcGiutrc2+KN43LDqyxm6MUm0PY6EDnG
wkoHN69P11ihy1oFSe4rmBxtgzqm86IAB4BHSuQfWrXH7PEGjEppwMGhuVD/5sE/
CK51NVVnJFnxDboUNGLzitYvu7g9PA+RpgENAysSew+XTuiedAsDlrsa5WxVJQw9
KjnfAsrT7DxiwYRyWACGD7BsZgS/Gyq8LrITKIaFpX38hIQaT8BdyTybVlEhQoWT
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5813277327307374
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Offenbach am Main'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutscher Wetterdienst'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB TI Ref. TI 16'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutscher Wetterdienst CA - G01'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-10-24 08:32:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-23 08:32:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Offenbach'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutscher Wetterdienst'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Web-CC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hosting.dwd.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22542122957123987672043023720337263926936956750418360550615110979341889966349121053398449368262672498815050077941672566282171115822208622332791139348440976492474573805077495838012560719179819227969263009838534492650773432133836062359859960845446151997174772411754278443020213065602960006652744812290967022868053878431380719534710537501676766021511181348620318932974345842609260900321258639082999164532591088098366902302345673064357372252710469514298128562797142062879130802347225544843195001282493460181805500267412983975445055619704518035216790809404288959184142278243379863723376742501933774225737688423102824158019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.2.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.2.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd6c27f59663094681f2ed5b7f6e9e4e5beca33d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ab7b0657d91ceef9221a569e602885c0eaa7fd47
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosting.dwd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baf.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bag.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bsh-cert.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.d-klip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutsches-klimaportal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutschesklimaportal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dklip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dlz-it.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lba.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/deutscher-wetterdienst-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/deutscher-wetterdienst-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (224 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/deutscher-wetterdienst-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/deutscher-wetterdienst-ca/pub/cacert/cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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