ldap01.iis.fhg.de

- Fraunhofer -

Issued by Fraunhofer Service CA - G02

About this certificate

This digital certificate with serial number 1e:c7:01:39:2f:9c:53:69:25:8c:bf:f7 was issued on by Fraunhofer.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fraunhofer

Organization: Fraunhofer
Organization unit: IIS
Organization unit: Services
State / Province: Bayern
Locality: Muenchen
Country: DE

Fraunhofer

Organization: Fraunhofer
Organization unit: Fraunhofer Corporate PKI
State / Province: Bayern
Locality: Muenchen
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:c7:01:39:2f:9c:53:69:25:8c:bf:f7
Serial Number (int): 9525132310005267065815744503
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 67:a5:33:82:3f:58:a4:8e:41:f2:48:23:44:8d:af:6c:1f:63:76:60
AuthorityKeyId: 00:44:34:97:1c:1f:2b:99:26:8d:16:a7:1d:60:68:95:ed:9a:97:ae

Fingerprint (sha1): 88:47:38:cf:39:37:81:e5:99:47:df:e7:5b:2f:9b:d2:c2:d2:fc:ea
Fingerprint (sha256): 0a:4b:ed:a4:c1:4f:66:f7:99:d9:6b:24:f6:07:87:d3:d8:35:10:33:36:c5:c9:82:07:9d:1c:3b:77:7e:98:a1

Issuing Certificate URL: http://cdp1.pca.dfn.de/fraunhofer-service-g2-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/fraunhofer-service-g2-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/fraunhofer-service-g2-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/fraunhofer-service-g2-ca/pub/crl/cacrl.crl

Check the revocation status for certificate ldap01.iis.fhg.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ldap01.iis.fhg.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ldap01.iis.fhg.de
ldap01.iis.fraunhofer.de
ldap.iis.fhg.de
ldap.iis.fraunhofer.de

Other certificates including the domain name fhg.de

(limited to 100 certificates)
netsight.ise.fraunhofer.de
vergabe-mks180.iese.fraunhofer.de
www.vision.fraunhofer.de
tls1.ws.fraunhofer.de
blockchain-europe.iml.fraunhofer.de
pwsafe01.iis.fhg.de
vdi.izfp.fraunhofer.de
aem-www.iese.fraunhofer.de
mailn2.iis.fhg.de
vgw.iis.fraunhofer.de
www.isc.fraunhofer.de
www.aachen.fraunhofer.de
ildmz55.idmt.fhg.de
talentix.iml.fraunhofer.de
www.subi2ma.fraunhofer.de
foreman.iis.fhg.de
fener-webport.ise.fraunhofer.de
h2t.intern.ise.fraunhofer.de
data-h2t-el.ise.fraunhofer.de
www.enas.fraunhofer.de
rds-apps01.ise.fraunhofer.de
vpnf.iml.fraunhofer.de
mail.iaf.fraunhofer.de
www.iosb-ina.fraunhofer.de
www.eitrawmaterials.fraunhofer.de
izmmes100.berlin.izm.fhg.de
iseadmin11.iis.fhg.de
*.vlog-services.iml.fraunhofer.de
webserv01.iis.fraunhofer.de
www.mes-logistics.de
lsc.ise.fraunhofer.de
webserv01.iis.fraunhofer.de
d-xc.iml.fraunhofer.de
aem-info.ws.fraunhofer.de
henkesblog.iml.fraunhofer.de
stats.ise.fraunhofer.de
www.enabling-innovation.fraunhofer.de
solcooldry.ise.fraunhofer.de
svn.itwm.fhg.de
otrs-ng.iml.fraunhofer.de
www2.iis.fraunhofer.de
pv2go.org
ildmz18.idmt.fraunhofer.de
smc.emi.fhg.de
traveler01.ise.fraunhofer.de
www.dresden.fraunhofer.de
www.ki.fraunhofer.de
ftp.fraunhofer.de
vvp.itwm.fhg.de
eda-sync.iis.fraunhofer.de
magnopay.iis.fraunhofer.de
faq.ise.fraunhofer.de
www.pyco.fraunhofer.de
www.ipms.fraunhofer.de
matter320.iml.fraunhofer.de
mobile.zentrale.zv.fhg.de
mattermost.itwm.fraunhofer.de
forms.ise.fraunhofer.de
www.ibp.fraunhofer.de
helpdesk.iis.fhg.de
www.muse.iao.fraunhofer.de
www.lbf.fraunhofer.de
ildmz61.idmt.fraunhofer.de
www.aal.fraunhofer.de
redmine.ise.fraunhofer.de
www.resiloc.org
www.emb.fraunhofer.de
listserv.itwm.fraunhofer.de
www.kodis.iao.fraunhofer.de
www.ivv.fraunhofer.de
ies02.ise.fraunhofer.de
www.forschungsfertigung-batteriezelle.fraunhofer.de
www.wasserstoff.fraunhofer.de
seafile.idmt.de
dms-bpmstage.zentrale.zv.fhg.de
wp-monitoring.ise.fraunhofer.de
foren.int.fraunhofer.de
www.light-and-surfaces.fraunhofer.de
mailgw2.iis.fraunhofer.de
vwww01.ws.fraunhofer.de
www.testlogistik.fraunhofer.de
www.iosb.fraunhofer.de
ldap01.iis.fhg.de
heat4u.ise.fraunhofer.de
probatio.fep.fhg.de
www.manitu.fraunhofer.de
resourcespace.intern.ise.fraunhofer.de
ccpe.iml.fraunhofer.de
nc.ise.fraunhofer.de
www.imk.fraunhofer.de
bib.iese.fraunhofer.de
mail7.isi.fraunhofer.de
www.hyperspektral.fraunhofer.de
ildmz51.idmt.fraunhofer.de
ddr-run.ise.fhg.de
owa.emi.fhg.de
mgmtmatrix42.isi.fraunhofer.de
innoradar.iml.fraunhofer.de
freiburg.fraunhofer.de
vms39.intern.int.fhg.de

Certificate

The complete raw certificate details for ldap01.iis.fhg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnfgM+8ykGPwpVuhLyHw
Rr4ZALQ6gk/GXH2hyOLWT7ql2Foey7eOV+CRDjRByWocNNx9685mheHTV+zBfN2r
7xl+z+Xbl7/weMNoA0BTIFgEcq6tq/ZnICFX+/NXaE4gco8EwcEc3CgHTmlB3fJa
TbKkSzWudaWOS/+aLTHoK1u1aMDg1M7PyFxRVI2pOq8LueEg0XoCOmzsInFXAPJQ
5Gtsc3hMl6a9NCavZgxc/stbYqNCkfS71I7ftJ8b7zTK8iCqqmL6im5dFOGOx82u
mYmDlOSqi9Bi5NeF3/KT4w6RtFGBNZbF4oswwlBw2s13fIJqqGezKMN3mhcRkEp2
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9525132310005267065815744503
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fraunhofer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fraunhofer Corporate PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fraunhofer Service CA - G02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-13 07:54:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-10 08:53:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fraunhofer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ldap01.iis.fhg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22529531240388311843551802201457443565419308961084553989310809011355207283962180280452252456075427311780699985809745728635157365794925976621347086400910300396653650704243861212583793746594374585995127443348507393278166616928813040449274127435414475340849189137121273773480720854091369384247936071281842121530673401947653402591135739089692761563064987740843991189611130201090939886492433498823937347866936477039196120158179302547359712792419004707380491491286806592488899942325560702342860595937881863670239756494938739549178244638564389824200195478146811135677022184382628704428342340816348277143357290846952662660617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							67a533823f58a48e41f24823448daf6c1f637660
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 004434971c1f2b99268d16a71d606895ed9a97ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldap01.iis.fhg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldap01.iis.fraunhofer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldap.iis.fhg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldap.iis.fraunhofer.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/fraunhofer-service-g2-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/fraunhofer-service-g2-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (222 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/fraunhofer-service-g2-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/fraunhofer-service-g2-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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