host01.accounting.gwdg.de

- Gesellschaft fuer wissenschaftliche Datenverarbeitung -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 1f:dd:76:3b:86:f0:f1:0b:1b:7a:6b:8c was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Gesellschaft fuer wissenschaftliche Datenverarbeitung

Organization: Gesellschaft fuer wissenschaftliche Datenverarbeitung
State / Province: NIEDERSACHSEN
Locality: GOETTINGEN
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:dd:76:3b:86:f0:f1:0b:1b:7a:6b:8c
Serial Number (int): 9861766247922945770577881996
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 3c:15:2c:55:c7:6d:f7:06:01:5f:17:5f:1a:10:6a:52:a1:10:21:fe
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 27:5d:18:fa:6c:fc:e6:24:e4:7c:be:c8:13:76:e6:e6:af:0f:23:0c
Fingerprint (sha256): 0b:97:99:0c:66:a3:8f:53:8c:a6:e3:71:f1:09:61:92:c1:b2:09:2a:a0:5f:7a:35:8d:91:4a:47:a0:5a:49:db

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate host01.accounting.gwdg.de

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for host01.accounting.gwdg.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

accounting01.gwdg.de
app.accounting.gwdg.de
consul.accounting.gwdg.de
haproxy.accounting.gwdg.de
host01.accounting.gwdg.de
jenkins.accounting.gwdg.de
newapp.accounting.gwdg.de
registry.accounting.gwdg.de
servicecatalog.accounting.gwdg.de
stage.accounting.gwdg.de
test.accounting.gwdg.de
www.app.accounting.gwdg.de
www.consul.accounting.gwdg.de
www.haproxy.accounting.gwdg.de
www.host01.accounting.gwdg.de
www.jenkins.accounting.gwdg.de
www.registry.accounting.gwdg.de
www.servicecatalog.accounting.gwdg.de
www.stage.accounting.gwdg.de
www.test.accounting.gwdg.de

Other certificates including the domain name gwdg.de

(limited to 100 certificates)
rop-server.ph4.physik.uni-goettingen.de
vweb14.gwdg.de
c105-187.cloud.gwdg.de
c098-221.cloud.gwdg.de
c104-131.cloud.gwdg.de
highmed.gwdg.de
dariah-cdstar.gwdg.de
vweb14.gwdg.de
cdstar-prod01.gwdg.de
koala-jenkins.gwdg.de
vweb14.gwdg.de
wsus.gwdg.de
statoek.wiwi.uni-goettingen.de
sso.gwdg.de
c106-211.cloud.gwdg.de
radardb.gwdg.de
voucher.gwdg.de
atto.mpch-mainz.gwdg.de
x-shib-idp.gwdg.de
vweb14.gwdg.de
mailer.gwdg.de
MX-2800-1.gwdg.de
sharepoint4.top.gwdg.de
vweb14.gwdg.de
b2share.gwdg.de
email.gwdg.de
statoek.wiwi.uni-goettingen.de
vweb14.gwdg.de
idm-logstash.gwdg.de
vweb14.gwdg.de
captive-portal.gwdg.de
vm24120.virt.gwdg.de
*.wiki.gwdg.de
listserv.gwdg.de
georoc.eu
svago92.gwdg.de
emm.top.gwdg.de
c104-131.cloud.gwdg.de
gwd-cert-uddi64.top.gwdg.de
gwd-wsus-manage.top.gwdg.de
npsw-www.mpg.de
buffet.gwdg.de
vweb14.gwdg.de
mpg-fm-s1.top.gwdg.de
email.gwdg.de
vweb14.gwdg.de
lotus1.gwdg.de
becotesust.gwdg.de
vojel.kellnerweg.de
vm19105.virt.gwdg.de
foodle.mpg.de
c104-131.cloud.gwdg.de
vweb14.gwdg.de
vpn.gwdg.de
vweb14.gwdg.de
dcups.uni-math.gwdg.de
vojel.kellnerweg.de
voucher.gwdg.de
benutzer-portal.gwdg.de
vm19002.virt.gwdg.de
sfr.sofi.gwdg.de
c105-187.cloud.gwdg.de
email.gwdg.de
host01.accounting.gwdg.de
gwd-rds-azure.top.gwdg.de
observium.gwdg.de
mx1.gwdg.de
umgpid.gwdg.de
vweb14.gwdg.de
c104-131.cloud.gwdg.de
harbor.gwdg.de
vweb14.gwdg.de
efforts-is.uni-goettingen.de
*.sharepointstore.gwdg.de
jupyter-cloud.gwdg.de
studip-dev-fe.gwdg.de
faq.gwdg.de
vweb14.gwdg.de
status.gwdg.de
oraw0.gwdg.de
rstudio.gwdg.de
c103-171.cloud.gwdg.de
voucher.gwdg.de
c103-171.cloud.gwdg.de
email.gwdg.de
npsw-www.mpg.de
npsw-www.mpg.de
swww3.gwdg.de
test.gwdg.de
vm18011.virt.gwdg.de
office.owncloud.gwdg.de
studip.uni-goettingen.de
gwdu111.gwdg.de
vweb14.gwdg.de
www.gwdg.de
c104-131.cloud.gwdg.de
vweb14.gwdg.de
vweb14.gwdg.de
vweb14.gwdg.de
timbuktu.physik3.gwdg.de

Certificate

The complete raw certificate details for host01.accounting.gwdg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9861766247922945770577881996
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-10 13:03:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-11 13:03:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NIEDERSACHSEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'GOETTINGEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gesellschaft fuer wissenschaftliche Datenverarbeitung'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'host01.accounting.gwdg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 805431887603051460545333699783873334701726710488933013722976776643249239313985027628776066632248530668586988145538060653560374241519606113958340711732669655529235277421049997330149960961926142307893880631970409612762815979976876949781005922664462806527959221305745779156142988252465154693214584518646095509007427549282872813844379523760425384389261175130209785719555819377385513745796824550231084910550676949928510223921934551598738233585461686794819909009122759890224666046052667299073478983004779823746160454163177301864878037167089700050691638862943255969187623502858514255040534289909579355388228131114334050193372927895700450399161848191018007258850590374998097122858677598890285814906501913576856900050635999815099481853797824092313420671032736783229050926074703313498537223559682515173830732492775371112574324469516902025434433730845950975396590745540351756186685521013982776475910274167045086258193776370715677221803943122476547014427120483282697440262321396847120466260395565151028671256906625516738868274681770640024051048807509998531089651420021458719981506569745584819391384147242323515027994978259356515450844295638352134987331838457961929369621296218029059028686991014957786541922407726309271581075116201532784427784031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c152c55c76df706015f175f1a106a52a11021fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (587 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounting01.gwdg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.accounting.gwdg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consul.accounting.gwdg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haproxy.accounting.gwdg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host01.accounting.gwdg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenkins.accounting.gwdg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newapp.accounting.gwdg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry.accounting.gwdg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicecatalog.accounting.gwdg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.accounting.gwdg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.accounting.gwdg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.app.accounting.gwdg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consul.accounting.gwdg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haproxy.accounting.gwdg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.host01.accounting.gwdg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jenkins.accounting.gwdg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.registry.accounting.gwdg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicecatalog.accounting.gwdg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage.accounting.gwdg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.accounting.gwdg.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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