gitlab.lrz.de
- Leibniz-Rechenzentrum der Bayerischen Akademie d.Wissenschaften -
Issued by Sectigo RSA Organization Validation Secure Server CA
About this certificate
This digital certificate with serial number 9a:89:ad:4a:9f:c7:dc:c7:2a:71:3d:d3:c5:70:4e:3e was issued on by Sectigo Limited.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Leibniz-Rechenzentrum der Bayerischen Akademie d.Wissenschaften
Organization:
Leibniz-Rechenzentrum der Bayerischen Akademie d.Wissenschaften
State / Province:
Bayern
Country: DE
Country: DE
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate will expire on
Certificate Details
Serial Number (hex): 9a:89:ad:4a:9f:c7:dc:c7:2a:71:3d:d3:c5:70:4e:3eSerial Number (int): 205415970789691509001123062801876667966
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: bf:0a:40:cd:57:e1:31:32:d5:35:8a:5b:8e:46:af:33:0a:c2:eb:ca
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb
Fingerprint (sha1): b5:11:2e:16:30:54:5b:97:fb:c7:35:37:23:ca:08:ce:d0:75:1e:8a
Fingerprint (sha256): 0c:96:13:a5:5c:e3:c2:23:ca:0d:78:c9:f5:83:37:ea:63:c3:49:26:9b:43:51:d4:bd:33:81:2f:62:0d:0b:c5
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
Check the revocation status for certificate gitlab.lrz.de
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gitlab.lrz.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gitlab.lrz.de
gitlab-app1.web.lrz.de
gitlab-app2.web.lrz.de
gitlab-app3.web.lrz.de
gitlab-mon.web.lrz.de
gitlab-pr.web.lrz.de
pages.gitlab.lrz.de
gitlab-app1.web.lrz.de
gitlab-app2.web.lrz.de
gitlab-app3.web.lrz.de
gitlab-mon.web.lrz.de
gitlab-pr.web.lrz.de
pages.gitlab.lrz.de
Other certificates including the domain name lrz.de
(limited to 100 certificates)
wwwv1.mwn.de
itsm.srv.lrz.de
wwwv1.mwn.de
wanda.test.lrz.de
publikationen.badw.de
wwwv1.mwn.de
tumidp.lrz.de
simsrv02.sim.lrz.de
v2cweb.srv.lrz.de
lists.lrz.de
ext-fw4-a.fw.lrz.de
publikationen.badw.de
asa01.lrz.de
syshlb.nas.lrz.de
dss05r01s40srv.dss.lrz.de
asa5k08.netz.lrz.de
lxmhs84.srv.lrz.de
wwwv1.mwn.de
debdev-anja1.dev.lrz.de
ts.lrz.de
pbx.voip.lrz.de
lrzidp.lrz.de
rv.lrz.de
badwlrz-swmbx09.lom.lrz.de
xin.srv.lrz.de
asa11.lrz.de
dss01xcat1.dss.lrz.de
publikationen.badw.de
asa-beta.lrz.de
debrtc.srv.lrz.de
node3.rv.lrz.de
wwwv1.mwn.de
badwlrz-slomd.srv.lrz.de
wwwv1.mwn.de
wanda-meet.test.lrz.de
c2papcosmosim.uc.lrz.de
badwlrz-swiet6.ads.mwn.de
simzbvw1.sim.lrz.de
cmdb.srv.lrz.de
earth.terrabyte.lrz.de
idmportal.lrz.de
badwlrz-slfism.srv.lrz.de
badwlrz-swccsv1.ads.mwn.de
pfp-doc02ext.nas.lrz.de
simsrv16.sim.lrz.de
video.lrz.de
datdssnsd05.dss.lrz.de
wwwv1.mwn.de
badwlrz-cw36408.lrz.de
gitlab.lrz.de
wwwv1.mwn.de
jabber-test.srv.lrz.de
idsrv.sim.lrz.de
simws.sim.lrz.de
web.nas.lrz.de
asa03.lrz.de
wwwv1.mwn.de
wwwv1.mwn.de
liesl-backend.srv.lrz.de
wwwv1.mwn.de
wwwv1.mwn.de
wwwv1.mwn.de
www.dss.lrz.de
dss01r02s28srv.dss.lrz.de
c2papcosmosim.uc.lrz.de
splunk.srv.lrz.de
pfp-lb01.nas.lrz.de
datdssnsd05.dss.lrz.de
dsa02r01s01hsm.dss.lrz.de
c2papcosmosim.uc.lrz.de
wwwv1.mwn.de
dsa01r10s01hsm.dss.lrz.de
dns-mgmt.srv.lrz.de
v2cweb.srv.lrz.de
wwwv1.mwn.de
lmuidp.lrz.de
wwwv1.mwn.de
wwwv1.mwn.de
hpbe15oa1.lom.lrz.de
dsa02r01s01hsm.dss.lrz.de
wwwv1.mwn.de
publikationen.badw.de
wwwv1.mwn.de
dss01r03s28srv.dss.lrz.de
studlmu.lrz.de
wwwv1.mwn.de
sl.supermuc.bayern
lrz-gcsjards.srv.lrz.de
badwlrz-twiet53.ads.mwn.de
mailrelay1.lrz.de
wwwv18.lrz.de
dss05xcat1.dss.lrz.de
netapp-harvest03.nas.lrz.de
xmail.mwn.de
hummel.web.lrz.de
se-dev-demo1.srv.lrz.de
pfed-lb01.nas.lrz.de
pfp-lb04.nas.lrz.de
roundcube.lrz.de
nomad.srv.lrz.de
itsm.srv.lrz.de
wwwv1.mwn.de
wanda.test.lrz.de
publikationen.badw.de
wwwv1.mwn.de
tumidp.lrz.de
simsrv02.sim.lrz.de
v2cweb.srv.lrz.de
lists.lrz.de
ext-fw4-a.fw.lrz.de
publikationen.badw.de
asa01.lrz.de
syshlb.nas.lrz.de
dss05r01s40srv.dss.lrz.de
asa5k08.netz.lrz.de
lxmhs84.srv.lrz.de
wwwv1.mwn.de
debdev-anja1.dev.lrz.de
ts.lrz.de
pbx.voip.lrz.de
lrzidp.lrz.de
rv.lrz.de
badwlrz-swmbx09.lom.lrz.de
xin.srv.lrz.de
asa11.lrz.de
dss01xcat1.dss.lrz.de
publikationen.badw.de
asa-beta.lrz.de
debrtc.srv.lrz.de
node3.rv.lrz.de
wwwv1.mwn.de
badwlrz-slomd.srv.lrz.de
wwwv1.mwn.de
wanda-meet.test.lrz.de
c2papcosmosim.uc.lrz.de
badwlrz-swiet6.ads.mwn.de
simzbvw1.sim.lrz.de
cmdb.srv.lrz.de
earth.terrabyte.lrz.de
idmportal.lrz.de
badwlrz-slfism.srv.lrz.de
badwlrz-swccsv1.ads.mwn.de
pfp-doc02ext.nas.lrz.de
simsrv16.sim.lrz.de
video.lrz.de
datdssnsd05.dss.lrz.de
wwwv1.mwn.de
badwlrz-cw36408.lrz.de
gitlab.lrz.de
wwwv1.mwn.de
jabber-test.srv.lrz.de
idsrv.sim.lrz.de
simws.sim.lrz.de
web.nas.lrz.de
asa03.lrz.de
wwwv1.mwn.de
wwwv1.mwn.de
liesl-backend.srv.lrz.de
wwwv1.mwn.de
wwwv1.mwn.de
wwwv1.mwn.de
www.dss.lrz.de
dss01r02s28srv.dss.lrz.de
c2papcosmosim.uc.lrz.de
splunk.srv.lrz.de
pfp-lb01.nas.lrz.de
datdssnsd05.dss.lrz.de
dsa02r01s01hsm.dss.lrz.de
c2papcosmosim.uc.lrz.de
wwwv1.mwn.de
dsa01r10s01hsm.dss.lrz.de
dns-mgmt.srv.lrz.de
v2cweb.srv.lrz.de
wwwv1.mwn.de
lmuidp.lrz.de
wwwv1.mwn.de
wwwv1.mwn.de
hpbe15oa1.lom.lrz.de
dsa02r01s01hsm.dss.lrz.de
wwwv1.mwn.de
publikationen.badw.de
wwwv1.mwn.de
dss01r03s28srv.dss.lrz.de
studlmu.lrz.de
wwwv1.mwn.de
sl.supermuc.bayern
lrz-gcsjards.srv.lrz.de
badwlrz-twiet53.ads.mwn.de
mailrelay1.lrz.de
wwwv18.lrz.de
dss05xcat1.dss.lrz.de
netapp-harvest03.nas.lrz.de
xmail.mwn.de
hummel.web.lrz.de
se-dev-demo1.srv.lrz.de
pfed-lb01.nas.lrz.de
pfp-lb04.nas.lrz.de
roundcube.lrz.de
nomad.srv.lrz.de
Certificate
The complete raw certificate details for gitlab.lrz.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHhDCCBmygAwIBAgIRAJqJrUqfx9zHKnE908VwTj4wDQYJKoZIhvcNAQELBQAw gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl cnZlciBDQTAeFw0yMzA4MDgwMDAwMDBaFw0yNDA4MDcyMzU5NTlaMIGAMQswCQYD VQQGEwJERTEPMA0GA1UECBMGQmF5ZXJuMUgwRgYDVQQKEz9MZWlibml6LVJlY2hl bnplbnRydW0gZGVyIEJheWVyaXNjaGVuIEFrYWRlbWllIGQuV2lzc2Vuc2NoYWZ0 ZW4xFjAUBgNVBAMTDWdpdGxhYi5scnouZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTZNLZbIp6qCLVIS9AFrADasMvymU5Qb05QRUJYf0OrTdHkye5 36DvQ9KwqdBSjMVCGk/D2ojfi5mO7nQRbSqI9QyFFduDqPekUJUGys06Pd7ltozJ h45DxlvFjg78DeoNuqslzcGrkU8zEf8CjpCHH6AOSm/1aS6pmNTYTFDBuPzQipjU zT7rs6qbHbC7BnZ4X1ow1ERU33eB+zi6ne1gYEJyKlLRa2+r7VuR4cPel+YNCEeL IUmijPYwfnMAVVGjSpKv9gIdhnAtcQKLTRGMf8dzJnX1M7C9Un0JYlbxDxQpiBio uzifsNOKAJKIdVGqBL+hIEPEGgVITB1SjfFZAgMBAAGjggPgMIID3DAfBgNVHSME GDAWgBQX2dYlJ2f5McJJQ9kwNkSMbKlP6zAdBgNVHQ4EFgQUvwpAzVfhMTLVNYpb jkavMwrC68owDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMEoGA1UdIARDMEEwNQYMKwYBBAGyMQECAQME MCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAEC AjBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLnNlY3RpZ28uY29tL1NlY3Rp Z29SU0FPcmdhbml6YXRpb25WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3JsMIGK BggrBgEFBQcBAQR+MHwwVQYIKwYBBQUHMAKGSWh0dHA6Ly9jcnQuc2VjdGlnby5j b20vU2VjdGlnb1JTQU9yZ2FuaXphdGlvblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJD QS5jcnQwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMIIBfwYK KwYBBAHWeQIEAgSCAW8EggFrAWkAdgB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIK n+ZnTFo6dAAAAYnV7MaoAAAEAwBHMEUCIAwANosupMCkeSn7ihbHYFy+pKfCcoCe SWivWttnIZ8cAiEAxjYgxWCP7mb8ceAgmjwSetCSHSO4AUK3f3DvPwDh1tYAdwDa tr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYnV7McXAAAEAwBIMEYC IQCrfkjH0h9UswAbja7I2Ix8nENmqdsIWwADAdpuNkdKNwIhALPUlhNqrpyzb83n 4vmo+bDkNj3zuV3ta+TA0DknXHrEAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7D UUhZRnEftZsAAAGJ1ezHIwAABAMARzBFAiB82BcxFMQ9O029SGsmP6CQTt5QvK+a ZjsHin0SwMv/BwIhAIh8nwgPxTPnKiOhSsZwXbK0z5qEF8bbkrrdpM7eShTgMIGk BgNVHREEgZwwgZmCDWdpdGxhYi5scnouZGWCFmdpdGxhYi1hcHAxLndlYi5scnou ZGWCFmdpdGxhYi1hcHAyLndlYi5scnouZGWCFmdpdGxhYi1hcHAzLndlYi5scnou ZGWCFWdpdGxhYi1tb24ud2ViLmxyei5kZYIUZ2l0bGFiLXByLndlYi5scnouZGWC E3BhZ2VzLmdpdGxhYi5scnouZGUwDQYJKoZIhvcNAQELBQADggEBADPboZ/SqWzS OsUxuR547RzENih/fyD6dYk1CfRrJeKGgM5nhL2ynTFvFPxdyrnd+hs4n15O24rO uStD6gOXltGYyH52CX0uVsL0i2QXnEAtftyo5aRVXIeGHCruOmCdz1bRJZEm8LCF HKDW3XiVvbB7sxbw6P0iGwn5KLy6U6IS3eLRzSar3ajJUjVfkVu5QAls+nXZLI90 p2/KPMUpID/SYY90YCjL3wq/NpsTapLBvZaw/c0j2gS1h88pFGD1XCo2iHITEuxy Uj0EwJ5TRh1CQ07/tNirGCaTAOtzr2LrQYHA+T51XdbgINngu8vHHRg7tYLzR7id 6PXYHjz5+c4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02TS2WyKeqgi1SEvQBaw A2rDL8plOUG9OUEVCWH9Dq03R5Mnud+g70PSsKnQUozFQhpPw9qI34uZju50EW0q iPUMhRXbg6j3pFCVBsrNOj3e5baMyYeOQ8ZbxY4O/A3qDbqrJc3Bq5FPMxH/Ao6Q hx+gDkpv9WkuqZjU2ExQwbj80IqY1M0+67Oqmx2wuwZ2eF9aMNREVN93gfs4up3t YGBCcipS0Wtvq+1bkeHD3pfmDQhHiyFJooz2MH5zAFVRo0qSr/YCHYZwLXECi00R jH/HcyZ19TOwvVJ9CWJW8Q8UKYgYqLs4n7DTigCSiHVRqgS/oSBDxBoFSEwdUo3x WQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 205415970789691509001123062801876667966 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-07 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leibniz-Rechenzentrum der Bayerischen Akademie d.Wissenschaften' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gitlab.lrz.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26686000332868558108516314469295308958597053473923665991377450550325201550646478067274828844819730053047227895023039294627830640962288345949082849681449318169880624177025314433028826060139762798115784113758411110205773093935967173281374405009458788953371389867999925185214216877501190040963568530135078652451612704012236421565462258762038734666744717800897074034767831102091302681237168026117503934650120362826823043187156982916637779860320977895640048590311806814806386504498887585693538481445690020596525584692842213218875338529227780373403513874691438863258818543037753914022366814567053766148574468242161177325913 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bf0a40cd57e13132d5358a5b8e46af330ac2ebca . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (156 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.lrz.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab-app1.web.lrz.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab-app2.web.lrz.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab-app3.web.lrz.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab-mon.web.lrz.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab-pr.web.lrz.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.gitlab.lrz.de' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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