access-b.v.bc.zd.intranet.bund.de

- Informationstechnikzentrum Bund (ITZBund) -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 25:18:f4:30:ca:39:d0:79:af:32:66:56 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Informationstechnikzentrum Bund (ITZBund)

Organization: Informationstechnikzentrum Bund (ITZBund)
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 25:18:f4:30:ca:39:d0:79:af:32:66:56
Serial Number (int): 11481112740497961664883353174
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: cd:dd:4d:c2:8e:5a:99:02:6b:64:cb:29:2d:4d:24:59:8d:46:dd:cd
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 44:75:1d:dc:31:eb:b7:24:b3:a8:eb:b0:4d:91:b9:ea:87:ac:be:2a
Fingerprint (sha256): 0c:11:a7:e4:89:88:a9:a6:b1:83:c9:4b:4c:cb:fd:b4:cc:19:b8:f8:d8:f9:37:f0:8a:c0:29:00:66:89:7b:58

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate access-b.v.bc.zd.intranet.bund.de

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for access-b.v.bc.zd.intranet.bund.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

access-b.v.bc.zd.intranet.bund.de
access-f.v.bc.zd.intranet.bund.de
lyncdiscover.zvd-v.bwz.bund.de
lyncdiscover.zvd-v.itzbund.de
lyncdiscover.zvd-v.itzbund.net
lyncdiscover.zvd-v.zoll.bund.de
sfboos.v.bc.zd.intranet.bund.de
sfboos2.v.bc.zd.intranet.bund.de
surl.v.bc.zd.intranet.bund.de
webcon-b.v.bc.zd.intranet.bund.de
webcon-f.v.bc.zd.intranet.bund.de
webext-b.v.bc.zd.intranet.bund.de
webext-f.v.bc.zd.intranet.bund.de

Other certificates including the domain name bund.de

(limited to 100 certificates)
eakte-i.cloud.bmel.in.bund.de
bundes.cloud.bmfsfj.in.bund.de
zib21.cloud.bescha.in.bund.de
schulung5.eakte.zoll.in.bund.de
bamf.bund.de
vwpp4op86nna.jrvaas5.cloud.itz.in.bund.de
vleaoq0wu5b9.git.cloud.bc-mgmt82.itz.in.bund.de
ctx02.bmwi.bund.de
20220922.cloud.bcsv.in.bund.de
oo-83b.cloud.bc-mgmt83.itz.in.bund.de
stu-extc.dvdv.bund.de
vlps7w4zstxe.petclin.cloud.itz.in.bund.de
cafm-tn1.cloud.bcsv.in.bund.de
vlphxc094986.login07.cloud.base.in.bund.de
amt3a.cloud.zoll.in.bund.de
promadmz.jki.bund.de
vapvrlcm1jon.cloud.bc-mgmt01.itz.in.bund.de
upload.prod.gsb.bmel.in.bund.de
schulung17.eakte.zoll.in.bund.de
vwpcotx909j0.testcz1.cloud.bva.in.bund.de
access.bmjv.cloud.intranet.bund.de
bclogin3.bkamt.cloud.intranet.bund.de
artifactory.zssi.bva.in.bund.de
vlpvws2uyvwh.pvsplus1.cloud.zoll.in.bund.de
hosting.dwd.de
hosting.dwd.de
lernplattform.bund.de
vlpkrogq32qr.adminedge1c.cloud.bc-mgmt01.itz.in.bund.de
www.normenkontrollrat.bund.de
vlpzrtfbavdp.bmigate1.cloud.bmi.in.bund.de
access.itz.cloud.intranet.bund.de
editor.egesetz.zd.in.bund.de
vlpu6xc8ixat.my1stsalone60.cloud.bcsv.in.bund.de
vlpxub43mocj.testentw.cloud.stba.in.bund.de
redconf.itz.cloud.intranet.bund.de
hashdb.mwscan.bund.de
int.bpm-extern.bzst.itzbund.net
forum.bfdi.bund.de
personalhaushalt.prod.bmf.in.bund.de
schulung.eakte.bsh.itz.res.bund.de
api.mwscan.bund.de
formularcenter.bvl.bund.de
vlpgqfx8e9q8.craas-07.cloud.itz.in.bund.de
bmfbox6.cloud.bmf.in.bund.de
gittest.bc-mgmt01.cloud.intranet.bund.de
vlpmwvu2fhzh.eibos105.cloud.bcsv.in.bund.de
travis.baw.res.bund.de
cafm-ti1.cloud.bcsv.in.bund.de
sicherheit.bund.de
vlpgwu8436ks.bfgprodok.cloud.bfg.in.bund.de
formularcenter.bvl.bund.de
vlppm5gze5at.pvs0416l.cloud.bcsv.in.bund.de
dzmgit05.bc-mgmt05.cloud.intranet.bund.de
redaktion.atu.gsb.bmi.in.bund.de
ref.xrechnung.bund.de
mob.bmz.bund.de
vlpv0rho8r42.pvsplus1.cloud.bmz.in.bund.de
eakte-t.cloud.base.in.bund.de
vlpc092q2btk.btsapqp.cloud.zitis.in.bund.de
dec230b.cloud.itz.in.bund.de
redaktion.atu.gsb.bmjv.in.bund.de
vlpjeue6bavk.cpmhhoch.cloud.itz.in.bund.de
ivva-ref2.id-ref-bug.it.bund.de
list.sozialwerk.bund.de
oo-06c.cloud.bc-mgmt06.itz.in.bund.de
accesst.cloud.itz.in.bund.de
gigis-s.bkg.bund.de
fis-vl.bvl.bund.de
vlepcwwjpbhu.ntp753.cloud.bpbdev05.itz.in.bund.de
amp1.cloud.zitis.in.bund.de
appladebaw2.front.test.adeba.wsv.itzbund.net
www.bamf.de
vlpmpsrojfsq.gwdpma2a.cloud.dpma.in.bund.de
vlppaksi2niz.mr15pp10.cloud.bcsv.in.bund.de
www.kvb.bund.de
amd3a.cloud.zoll.in.bund.de
sso.bvl.bund.de
eservice2022.itz.res.bund.de
oo-81c.cloud.bc-mgmt81.itz.in.bund.de
warnung.bund.de
vlpjaw7bbs1m.prodok-badv.cloud.badv.in.bund.de
vlph1rngvgyh.gwwsv2a.cloud.wsv.in.bund.de
webapp.staging.wire.zd.in.bund.de
vlpjbptohe77.gate745.cloud.eba.in.bund.de
cafm0322.cloud.bcsv.in.bund.de
amp3a.cloud.bpbdev01.itz.in.bund.de
vlpzw166d320.emakorv-cloud.cloud.itz.in.bund.de
vwpsl8qtdinb.bcwsus-05a.cloud.bcsv.in.bund.de
ilp03812.iamservice.iaas.itz.cloud.intranet.bund.de
sportal.bmi.in.bund.de
hosting.dwd.de
eakte-i.cloud.bkm.in.bund.de
bcadminjumphost.bc-mgmt05.cloud.intranet.bund.de
cafm1028.cloud.bcsv.in.bund.de
sibboxaa.cloud.bcsv.in.bund.de
cafm-tn2.cloud.bcsv.in.bund.de
ampvsp.cloud.bmf.in.bund.de
test.zbp.bund.de
vapil484joni.cloud.bc-mgmt01.itz.in.bund.de
ivbb.citrix.brh.intranet.bund.de

Certificate

The complete raw certificate details for access-b.v.bc.zd.intranet.bund.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwtIhh5qeZqTzyP6+AbD
4T611jegDncASnSwfXEEnOIJ/WgPj/g9hMwESsrM/fl74MMg3yJsjooDMrFcbz4h
LsRvcXd/yLtA6sP2TMG9b8k4CKsDStB9XfAMekOFPoi1jYqSiq3A2fmjYxrOiqLF
PkQ3v0qUURZeD9ldL4IKVpO4INpEcjgH402vGLTNEc3VCnlExqb5mBTpdbuR1Ua9
qDwy/b3ULXLApapL8pijtQ0JyiM1irjIAOhTf2kAnWy7Z24RhkF0dVGbD2hAkg9x
/iEtx3ch4m4u5vAGm1QSf5VEP99WvfsHr2yS6yn5JdOstLiIs6N+78mgFYZoCnk8
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11481112740497961664883353174
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-22 13:46:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-22 13:46:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Informationstechnikzentrum Bund (ITZBund)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'access-b.v.bc.zd.intranet.bund.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19572501270611785463605864889100323481446806091556680071926894151798556218472834347946668303720935036747637473604357094483681994034750340736543095323154882542957035964175808790248314018316858128073274615290745595490448681758489310643462819864106540849442768458744174783018857270965472728473810297672897859048872787224208572307135914220853689435348609751677421480841792854480669509903915091680059221128452235041103517283685615332969361604390232166002552933666841516560854372472030243416911221538810131209976014790775003236913642408281865089141157486500103070493812252797291360316288059610168224902154696865828176477201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.9
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cddd4dc28e5a99026b64cb292d4d24598d46ddcd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (440 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access-b.v.bc.zd.intranet.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access-f.v.bc.zd.intranet.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.zvd-v.bwz.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.zvd-v.itzbund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.zvd-v.itzbund.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.zvd-v.zoll.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfboos.v.bc.zd.intranet.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfboos2.v.bc.zd.intranet.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surl.v.bc.zd.intranet.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcon-b.v.bc.zd.intranet.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcon-f.v.bc.zd.intranet.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webext-b.v.bc.zd.intranet.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webext-f.v.bc.zd.intranet.bund.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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