medienonline.ukaachen.de

- RWTH Aachen -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 21:20:41:18:4b:e2:77:e0:20:09:1e:6e was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

RWTH Aachen

Organization: RWTH Aachen
Organization unit: Audiovisuelles Medienzentrum (AVMZ)
State / Province: Nordrhein-Westfalen
Locality: Aachen
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 21:20:41:18:4b:e2:77:e0:20:09:1e:6e
Serial Number (int): 10251998352343364399551553134
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: a2:ae:b1:58:87:db:47:11:ef:81:de:07:cf:72:4c:6d:5b:53:fd:73
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 2a:85:57:cd:6b:95:7c:7b:f6:6d:af:7b:c4:d0:36:79:e3:08:cd:84
Fingerprint (sha256): 0c:1a:e3:db:71:0f:82:bb:d0:f1:85:5d:b1:b3:e1:c5:93:7b:ab:a0:f8:6e:2b:6f:5a:24:44:fd:76:5e:40:18

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate medienonline.ukaachen.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for medienonline.ukaachen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

medienonline.ukaachen.de

Other certificates including the domain name ukaachen.de

(limited to 100 certificates)
jobs.ukaachen.de
for2591.ukaachen.de
proans.ukaachen.de
db-ucr-ods-d1.ukaachen.de
sbc2-n5-trk2a.tk.ukaachen.de
vhukaprdai01.hec.klinikum.rwth-aachen.de
balu-api.ukaachen.de
balu-api.ukaachen.de
db-iris-ths-d.ukaachen.de
elab-oos.cloud.ukaachen.de
medienonline.ukaachen.de
sbc2-n5-trk2a.tk.ukaachen.de
webmail.ukaachen.de
isp-notfall.pacs.ukaachen.de
db-ucr-ods-p1.ukaachen.de
vhukasnqci.hec.klinikum.rwth-aachen.de
as-medwik-imi.klinikum.rwth-aachen.de
aed-logs.ukaachen.de
webmail.ukaachen.de
db-trans-p2.ukaachen.de
as-prime02.klinikum.rwth-aachen.de
medical.ukaachen.de
vhukasnqci.hec.klinikum.rwth-aachen.de
vhukasnpci.hec.klinikum.rwth-aachen.de
as-nicofa.klinikum.rwth-aachen.de
www.cbmb.ukaachen.de
www.ukaachen.de
balu-api.ukaachen.de
vhukaepqci.hec.klinikum.rwth-aachen.de
mediaface.ukaachen.de
ndp.ukaachen.de
sts.ukaachen.de
balu-api.ukaachen.de
as-covas01.klinikum.rwth-aachen.de
www.vm.ukaachen.de
aed-dashboard.ukaachen.de
elab.cloud.ukaachen.de
as-prime03.klinikum.rwth-aachen.de
db-ucr-p1.ukaachen.de
as-iris-ws-p1.ukaachen.de
webmail.ukaachen.de
ctca-edc.ukaachen.de
izkf.ukaachen.de
vhukabp1sbo01.hec.klinikum.rwth-aachen.de
db-hi-p1.ukaachen.de
startportal.ukaachen.de
gast01.klinikum.rwth-aachen.de
db-ucr-t1.ukaachen.de
as-ucr-ws-p1.ukaachen.de
mdmrelay.ukaachen.de
service-portal.ukaachen.de
test-support.ukaachen.de
jobs.ukaachen.de
intranet.ukaachen.de
intranet.ukaachen.de
as-ucr-ws-t1.ukaachen.de
labooratory-eslide.ukaachen.de
redcap-weber.klinikum.rwth-aachen.de
ldaps-int.ukaachen.de
jobs.ukaachen.de
www.e-learning.ukaachen.de
momo.ukaachen.de
test-support.ukaachen.de
apps.ukaachen.de
imioc.ukaachen.de
db-ucr-ods-d2.ukaachen.de
ums-relay01.ukaachen.de
jira-imi.ukaachen.de
intranet.ukaachen.de
forschungsportal.ukaachen.de
rechtskataster.ukaachen.de
as-simlab.klinikum.rwth-aachen.de
jobs.ukaachen.de
vhukasndci.hec.klinikum.rwth-aachen.de
vhukaqssci.hec.klinikum.rwth-aachen.de
mdmrelay.ukaachen.de
as-cobra01.klinikum.rwth-aachen.de
cmdb.ukaachen.de
forschungsportal.ukaachen.de
elab-oos.cloud.ukaachen.de
coupons.ukaachen.de
as-jira-imi.klinikum.rwth-aachen.de
webmail.ukaachen.de
openproject-gbma.ukaachen.de
labooratory-eslide.ukaachen.de
medical.ukaachen.de
cipher2.ukaachen.de
vhukaepdci.hec.klinikum.rwth-aachen.de
db-trans-p2.ukaachen.de
cipher2.ukaachen.de
db-hi-t1.ukaachen.de
jobs.ukaachen.de
support.ukaachen.de
www.cbmb.ukaachen.de
ukaachen.de
pwreset.ukaachen.de
forschungsportal.ukaachen.de
isp-pacs.pacs.ukaachen.de
vhukaeppci.hec.klinikum.rwth-aachen.de
sbc1-n5-trk2b.tk.ukaachen.de

Certificate

The complete raw certificate details for medienonline.ukaachen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10251998352343364399551553134
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-12 09:19:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-13 09:19:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Aachen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'RWTH Aachen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Audiovisuelles Medienzentrum (AVMZ)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'medienonline.ukaachen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814990453475451657187958312904668005608071863835392760416240863653901214435894696594660845040259661332658496371255821688299604345097130399115617932413694479228436656908677846949614950267354908041238794947956156321491801139263466410772235439173557082890816322576255528170069962729602221829620831085768684275348568494539007799591723348912559357932693774587725268966627984607594192226300378891200151626228349231986960179196312807402966436964275762146378485817799508898767101623143813847911317251479186554302662808899032384390376845682817919912062600479707516690748816624221043942530310096811569804281666288958479700069488622749977586734403426322856484783610713735779654383793940311572459044574156530615363263104268594139805335896710373373564343661585015104173838718147736560744731249224409835589288845902670488258171277727793805087328426940665359011811941599329324900767485027221329408430756175248211425147003800320056055194605135202628546746901384573125488557966705891280185673221463742694312919188128170880462481254938857427196787638822876887378375138650969684112802383487562140018664556067026191748218352513847396454854010726691417997746343428140707599972480729857153179488285611896497785753473908273694618448331307897335795821080397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2aeb15887db4711ef81de07cf724c6d5b53fd73
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medienonline.ukaachen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (847 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (843 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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