entw.strada.zoll.itzbund.net

- Informationstechnikzentrum Bund (ITZBund) -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 27:b5:e5:47:30:ff:80:18:5b:10:95:8b was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Informationstechnikzentrum Bund (ITZBund)

Organization: Informationstechnikzentrum Bund (ITZBund)
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 27:b5:e5:47:30:ff:80:18:5b:10:95:8b
Serial Number (int): 12289813691556793417997522315
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 63:b1:80:7f:a6:e0:c2:9a:ca:5c:71:c3:52:3a:bb:6c:88:43:fe:f4
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 85:34:2a:41:dd:f4:cd:36:45:41:92:e0:85:f1:40:a7:14:dc:7c:7c
Fingerprint (sha256): 0b:3e:15:60:e8:7a:bd:42:0f:12:19:ba:35:5d:a3:74:a5:45:00:18:48:20:3a:a5:c4:c4:5b:e0:41:be:7f:e1

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate entw.strada.zoll.itzbund.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for entw.strada.zoll.itzbund.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

entw.strada.zoll.itzbund.net

Other certificates including the domain name itzbund.net

(limited to 100 certificates)
pwservicedesk-test.itz.itzbund.net
swmvpn.md.itz.itzbund.net
prod.stdb.bmf.itzbund.net
f-bronze.monitoring.gslb.service.itzbund.net
vwp20418.zvd-p1.itzbund.net
redconf.itz.cloud.intranet.bund.de
int.bpm-extern.bzst.itzbund.net
git.gsb11.itz.itzbund.net
vle26374.entw.adler.zoll.itzbund.net
int.probenbuch.zoll.itzbund.net
vwp20295.zvd-p1.itzbund.net
web.zonec.prod.poseidon.service.itzbund.net
vwp20397.zvd-p1.itzbund.net
appladebaw2.front.test.adeba.wsv.itzbund.net
nida.itz.itzbund.net
test.zeus.anwendungen.zoll.itzbund.net
ivbb.citrix.brh.intranet.bund.de
gaucs-cloud-fi2.adm.cloud.itzbund.net
confzent.itz.cloud.intranet.bund.de
dwh-integration.goaml.fiu.in.bund.de
selfservice.wisit.itz.itzbund.net
vle30835.entw.dac6.bzst.itzbund.net
vlt62901.test.nizza.zoll.itzbund.net
vlt02781.dev.adm.cloud.itzbund.net
accessp.itz.cloud.intranet.bund.de
vwp20412.zvd-p1.itzbund.net
test2.mapz.zoll.itzbund.net
access.bpa.cloud.intranet.bund.de
symphony.test.aquanito.itz.itzbund.net
vle26846.entw.betrieb.bzst.itzbund.net
vlp21106.prod.evs.zoll.itzbund.net
proxy.access.bmvi.cloud.intranet.bund.de
fepool-b.zvd-v.itzbund.net
bn-gold.monitoring.service.itzbund.net
vwp26550.zvd-p2.itzbund.net
vlp00997.adm.cloud.itzbund.net
git.adm.cloud.itzbund.net
meldeportal-mindestlohn.zoll.itzbund.net
mitarbeiterportal.zoll.zivb.net
ntp6.ntp.service.itzbund.net
repbe100021.oob.cloud.itzbund.net
access.badv.cloud.intranet.bund.de
cmdb-ber.wisit.itz.itzbund.net
cloud-prod-cpp-fw01.adm.cloud.itzbund.net
mt2-fw.itsm-framework.service.itzbund.net
list1-mandant1.zvd-t.itzbund.net
vlt30749.test.bemis.bmf.itzbund.net
vli48382.int.reg-zensus.stba.itzbund.net
vlq27806.stu.sap.itz.itzbund.net
vlt36210.test.pvs.bmf.itzbund.net
repbn100026.oob.cloud.itzbund.net
not.riko-online.zoll.itzbund.net
smartit-zb.test.itsm-suite.service.itzbund.net
vwp20339.zvd-p1.itzbund.net
staging.service.itzbund.net
eantrag2.entw.zgr.zoll.itzbund.net
access.thw.cloud.intranet.bund.de
vlt00648.adm.cloud.itzbund.net
vlr36918.ref.egesetz.service.itzbund.net
vwt41227.zvd-t.itzbund.net
meldeportal-mindestlohn.zoll.itzbund.net
vle65935.entw.reb.zoll.itzbund.net
test.mapz.zoll.itzbund.net
portal.wisit.itz.itzbund.net
mgmt.netmon.service.itzbund.net
prod.paris.zka.itzbund.net
vwp64115.zvd-p1.itzbund.net
rlpfr113267.prod.ddi.mgmt.itzbund.net
vwp22798.zvd-p2.itzbund.net
vwp45372.zvd-t.itzbund.net
aspe1.aquanito.itz.itzbund.net
int.mapz.zoll.zivb.net
vlp20534.zvd-gw.service.itzbund.net
nida.itz.itzbund.net
soucs-cloud-fi4.adm.cloud.itzbund.net
wisit.itz.itzbund.net
vwp20411.zvd-p1.itzbund.net
vap03594.adm.cloud.itzbund.net
vpb-craas.prod.caas.bmi.itzbund.net
mt1-fw.schulung.itsm-framework.service.itzbund.net
entw.strada.zoll.itzbund.net
base-registry.bcsv.cloud.itzbund.net
vlp64629.prod.betrieb.service.itzbund.net
eakte-t.kvdb.cloud.intranet.bund.de
sib-ent.zd.intranet.bund.de
appladebaw1.front.entw.adeba.wsv.itzbund.net
vwp22611.zvd-p2.itzbund.net
access-b.v.bc.zd.intranet.bund.de
vwp20419.zvd-p1.itzbund.net
ozg-idp-tst.bzst.in.bund.de
itzbund.net
www.ausfuhrplus.internetzollanmeldung-intg.itz.itzbund.net
repbn100025.oob.cloud.itzbund.net
b1bc-fas1.adm.cloud.itzbund.net
vle31718.entw.ozean.bzst.itzbund.net
redaktion.prod.gsb.bund.zivb.net
test.live.gsb11.itz.itzbund.net
vlt68738.atu.biber.zoll.itzbund.net
lb-ar-back-zb.test.itsm-suite.service.itzbund.net
vlp21303.prod.pvs.bmf.itzbund.net

Certificate

The complete raw certificate details for entw.strada.zoll.itzbund.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04Ng/HdOz7pt4e4FBFE+
n8e3tOz2mnYAtKkYh5nAfNu+qsgp822zeKGoURQqHHsfPTDy6rnzMcdDPtuVpFJz
SmQTP4P9SS/5OfISeqF1nfxSwV/J7rsoB2AoQEqSXLNJOjpL22ZpnbhVS/ehm16r
OCYI4CP+CipLCesrzSRX6JpCAWDHii529UYBVT+4yTJ3mvUYOfcX9n0mvem0Kx+v
dhVJbb8ZFrwye8ffGoAYrqTE+leWSOwvXfdKTRXpoDMCCkXnbFvA6AHgiGhV1J+1
Ofxh4q2Bjrv03wjkKpLD9SxFLRwFj+KAOcL1ynL3wbvDyJyCdJq/SlIIydhioinj
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12289813691556793417997522315
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-11 23:28:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 23:28:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Informationstechnikzentrum Bund (ITZBund)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'entw.strada.zoll.itzbund.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26701067674502583453866291277617626424728713851450596161779527096400908480953593797976780653682943238623234648014630402820732206291683760626171936921594642181355160339831240903986876597131580517655519641493419450116825350871727421279715430538133493765139861609631153775289147753246114665957437339693449138754798408731977034844717914036358444447615142584061165257246040388181946957835230270262209575286916381679362614254053061666191965340422533404798346888980759398109947666339477147738153526580511486801441423219620158493305940886183304392710601917911792834392486814479071301703907012389307758243211736736824996520761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							63b1807fa6e0c29aca5c71c3523abb6c8843fef4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entw.strada.zoll.itzbund.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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