sec21-dmz1b.gfz-potsdam.de

- GeoForschungsZentrum Potsdam -

Issued by GeoForschungsZentrum Potsdam CA - G01

About this certificate

This digital certificate with serial number 18:4a:2f:1f:06:2b:a9 was issued on by GeoForschungsZentrum Potsdam.

With 58 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • KeyUsage [DigitalSignature ContentCommitment KeyEncipherment DataEncipherment] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

GeoForschungsZentrum Potsdam

Organization: GeoForschungsZentrum Potsdam
Organization unit: Section 2.1, GEM Testing and Evaluation Group
State / Province: Brandenburg
Locality: Potsdam
Country: DE

GeoForschungsZentrum Potsdam

Organization: GeoForschungsZentrum Potsdam
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 18:4a:2f:1f:06:2b:a9
Serial Number (int): 6836965685472169
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: 35:c7:fe:7c:0b:3a:3c:4d:86:17:bc:4d:80:5e:8b:21:7f:3d:33:09
AuthorityKeyId: 9c:c8:a2:e5:9b:00:6c:cb:0e:a2:88:eb:a4:ba:6b:9f:b3:39:59:84

Fingerprint (sha1): af:39:27:96:0b:d6:d9:fa:5a:74:60:bd:6e:d6:3b:7f:c0:b1:6c:22
Fingerprint (sha256): 0e:2e:68:47:fc:c5:55:5e:17:d7:c6:24:88:a0:56:9f:b4:ab:cf:e7:3e:9b:0f:93:9c:23:db:78:d0:d1:1c:a7

Issuing Certificate URL: http://cdp1.pca.dfn.de/gfz-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/gfz-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/gfz-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/gfz-ca/pub/crl/cacrl.crl

Check the revocation status for certificate sec21-dmz1b.gfz-potsdam.de

58

DNS Names

1

Email Addresses

2

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sec21-dmz1b.gfz-potsdam.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

12oder3.gem.gfz-potsdam.de
12oder3.quake.gfz-potsdam.de
admin.completenessweb.gfz-potsdam.de
admin.quake.gfz-potsdam.de
bugs.completenessweb.gfz-potsdam.de
bugs.gem.gfz-potsdam.de
bugs.quake.gfz-potsdam.de
cdn.gem.gfz-potsdam.de
cdn.quake.gfz-potsdam.de
cdn.volcano.gfz-potsdam.de
cloud.gem.gfz-potsdam.de
cloud.quake.gfz-potsdam.de
cloud.volcano.gfz-potsdam.de
completenessweb.gfz-potsdam.de
data.completenessweb.gfz-potsdam.de
data.gem.gfz-potsdam.de
data.quake.gfz-potsdam.de
data.volcano.gfz-potsdam.de
devel.quake.gfz-potsdam.de
docs.quake.gfz-potsdam.de
docs.volcano.gfz-potsdam.de
eval.gem.gfz-potsdam.de
feed.gem.gfz-potsdam.de
feed.quake.gfz-potsdam.de
feed.volcano.gfz-potsdam.de
gem.gfz-potsdam.de
hewolog.quake.gfz-potsdam.de
hewolog.volcano.gfz-potsdam.de
html5.gem.gfz-potsdam.de
html5.quake.gfz-potsdam.de
html6.gem.gfz-potsdam.de
html6.quake.gfz-potsdam.de
ipe.gem.gfz-potsdam.de
ipe.quake.gfz-potsdam.de
nicky.volcano.gfz-potsdam.de
obmwiki.gem.gfz-potsdam.de
quake.gfz-potsdam.de
sec21-dmz1.gfz-potsdam.de
sec21-dmz1b.gfz-potsdam.de
statsei9.quake.gfz-potsdam.de
svn.completenessweb.gfz-potsdam.de
svn.quake.gfz-potsdam.de
tb.gem.gfz-potsdam.de
tb.quake.gfz-potsdam.de
tb.volcano.gfz-potsdam.de
test.quake.gfz-potsdam.de
tracker.completenessweb.gfz-potsdam.de
tracker.gem.gfz-potsdam.de
tracker.quake.gfz-potsdam.de
tracker.volcano.gfz-potsdam.de
volcano.gfz-potsdam.de
websvn.quake.gfz-potsdam.de
www.completenessweb.gfz-potsdam.de
xsamples.quake.gfz-potsdam.de
xsamples.volcano.gfz-potsdam.de
xsampls.gem.gfz-potsdam.de
xyz.gem.gfz-potsdam.de
xyz.volcano.gfz-potsdam.de
[email protected]
139.17.3.231
139.17.3.232

Other certificates including the domain name gfz-potsdam.de

(limited to 100 certificates)
geofon.gfz-potsdam.de
rz-vcs1.gfz-potsdam.de
d3m.gfz-potsdam.de
rz-vm140.gfz-potsdam.de
hydro.gfz-potsdam.de
gisasaprouter.gfz-potsdam.de
sec21-dmz1b.gfz-potsdam.de
hydro.gfz-potsdam.de
sec21-dmz1b.gfz-potsdam.de
wol.gfz-potsdam.de
webstats.gfz-potsdam.de
email.gwdg.de
mobilehub.gfz-potsdam.de
intranet.gfz-potsdam.de
dokuwiki.gfz-potsdam.de
sec21-dmz2b.gfz-potsdam.de
moses-dmp.gfz-potsdam.de
spaceweather.gfz-potsdam.de
events.gfz-potsdam.de
rbm9.gfz-potsdam.de
nera-ern.gfz-potsdam.de
api.itsm.gfz-potsdam.de
wlc.gfz-potsdam.de
ebissiq.gfz-potsdam.de
exportcontrol.gfz-potsdam.de
rz-support.gfz-potsdam.de
sec21-dmz1b.gfz-potsdam.de
email.gwdg.de
git.gfz-potsdam.de
rz-vm175.gfz-potsdam.de
hydro.gfz-potsdam.de
varve.gfz-potsdam.de
idp-dev.gfz-potsdam.de
webstats.gfz-potsdam.de
geomagia.gfz-potsdam.de
www.gfz-potsdam.de
fw-ext.gfz-potsdam.de
rz-vm213.gfz-potsdam.de
fw-ext.gfz-potsdam.de
geofon.gfz-potsdam.de
gfzpublic.gfz-potsdam.de
eismassendynamik.gfz-potsdam.de
rz-vm174.gfz-potsdam.de
rz-vm112.gfz-potsdam.de
simultan.gfz-potsdam.de
events.gfz-potsdam.de
rz-vm234.gfz-potsdam.de
gfzock.gfz-potsdam.de
collabora.gfz-potsdam.de
www-app5.gfz-potsdam.de
enhsp.gfz-potsdam.de
timeseries.gfz-potsdam.de
printer-core.gfz-potsdam.de
rz-vm457.gfz-potsdam.de
nextcloud.gfz-potsdam.de
geomagia.gfz-potsdam.de
escidoc.gfz-potsdam.de
idp-test.gfz-potsdam.de
sec21-bbb.gfz-potsdam.de
rz-vm62.gfz-potsdam.de
rz-vm119.gfz-potsdam.de
gfz-potsdam.de
ccmp-pompei.gfz-potsdam.de
moses-dmp.gfz-potsdam.de
wlantickets.gfz-potsdam.de
aschera.gfz-potsdam.de
dep1doc.gfz-potsdam.de
varve.gfz-potsdam.de
index-search-prod.gfz-potsdam.de
ebiss.gfz-potsdam.de
rz-vm89.gfz-potsdam.de
gisasaprouter.gfz-potsdam.de
www.gfz-potsdam.de
forms.gfz-potsdam.de
asip.gfz-potsdam.de
bscw.gfz-potsdam.de
nextcloud.gfz-potsdam.de
benno.gfz-potsdam.de
ad.gfz-potsdam.de
rz-vm278.gfz-potsdam.de
intranet-test.gfz-potsdam.de
rz-ftp1.gfz-potsdam.de
s3ceph.gfz-potsdam.de
ssl.gfz-potsdam.de
moses-data.gfz-potsdam.de
egsim.gfz-potsdam.de
systemerde.gfz-potsdam.de
itsm.gfz-potsdam.de
dataservices.gfz-potsdam.de
rz-monstor3.gfz-potsdam.de
geso122.gfz-potsdam.de
d3m.gfz-potsdam.de
v4-server3.gfz-potsdam.de
trideccloud.gfz-potsdam.de
rz-vm65-dev.gfz-potsdam.de
otms.gfz-potsdam.de
kg3-dmz.gfz-potsdam.de
benno.gfz-potsdam.de
ldapext.gfz-potsdam.de
rz-vm121.gfz-potsdam.de

Certificate

The complete raw certificate details for sec21-dmz1b.gfz-potsdam.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINbjCCDFagAwIBAgIHGEovHwYrqTANBgkqhkiG9w0BAQsFADCBhzELMAkGA1UE
BhMCREUxJTAjBgNVBAoTHEdlb0ZvcnNjaHVuZ3NaZW50cnVtIFBvdHNkYW0xLjAs
BgNVBAMTJUdlb0ZvcnNjaHVuZ3NaZW50cnVtIFBvdHNkYW0gQ0EgLSBHMDExITAf
BgkqhkiG9w0BCQEWEnBraUBnZnotcG90c2RhbS5kZTAeFw0xNDA5MzAxMzM1MTJa
Fw0xOTA3MDkyMzU5MDBaMIG5MQswCQYDVQQGEwJERTEUMBIGA1UECBMLQnJhbmRl
bmJ1cmcxEDAOBgNVBAcTB1BvdHNkYW0xJTAjBgNVBAoTHEdlb0ZvcnNjaHVuZ3Na
ZW50cnVtIFBvdHNkYW0xNjA0BgNVBAsTLVNlY3Rpb24gMi4xLCBHRU0gVGVzdGlu
ZyBhbmQgRXZhbHVhdGlvbiBHcm91cDEjMCEGA1UEAxMac2VjMjEtZG16MWIuZ2Z6
LXBvdHNkYW0uZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC3I0om
tWZJo+G/1zaEcriOKP1nX8Hzb5aCCLRSYsaZ4uy6HjTbkevscslUzAkSGpBarP4E
Q/Y6k53dwijlwVpAegYzdAnzsXvQuI/xcdEhjj8HHAi+R9hX8E6lnqEWxEhYZrWW
QmWts9mIFYrFtXQ+jEcvicbEthxcEAIpYXzy/P82e6KurAQdr+67j7bN/+c0LQyX
O2FoGGVr/E65lsGzsp04J7mU3a+cEvgo7plJmcmTZd2Zx5uE7Y/5mgu6ftp4X9z1
X/9SdLx9e9cPRTDSphwvwfswvT7zdfF2uUY1qwMs2eMtDwzWP42pW8N/4KyNl0O1
+qpyo3C+EFjnTVGoYHlvSnEGPcOU6bfFcLnsOgdSxq5VkcR+qQWrQQZLOORPTCEp
/NGxSloFjFfYiq0ZpxvmXW+29y7cj8ZexpcBwVdowf/neCiIqUBPR5J8dNewg20L
so8XP0n7DXHPJoEoZA6iBXlbbG0bSmXgjB9Un0zT5dqCDrEQwd+lSCq4D0W4P1gL
d2BmhQNhCiGnDeKgAcXNtgwBmt3R0QjVB2tidNqaj9kjfsTDZPs6rYJO+Fgho8hG
1nu9XUeAVotw5nqgQJO9A8A7H3ySAkqwNpxd2+/4iWVzKfLg3QApXnAfq+qLaudD
wq6KCaxSwmhwwAjeSQ+Owt/MindATN/xF90zFwIDAQABo4IIqTCCCKUwTwYDVR0g
BEgwRjARBg8rBgEEAYGtIYIsAQEEAwIwEQYPKwYBBAGBrSGCLAIBBAMBMA8GDSsG
AQQBga0hgiwBAQQwDQYLKwYBBAGBrSGCLB4wCQYDVR0TBAIwADALBgNVHQ8EBAMC
BPAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwHQYDVR0OBBYEFDXH/nwLOjxNhhe8TYBe
iyF/PTMJMB8GA1UdIwQYMBaAFJzIouWbAGzLDqKI66S6a5+zOVmEMIIGoAYDVR0R
BIIGlzCCBpOCGjEyb2RlcjMuZ2VtLmdmei1wb3RzZGFtLmRlghwxMm9kZXIzLnF1
YWtlLmdmei1wb3RzZGFtLmRlgiRhZG1pbi5jb21wbGV0ZW5lc3N3ZWIuZ2Z6LXBv
dHNkYW0uZGWCGmFkbWluLnF1YWtlLmdmei1wb3RzZGFtLmRlgiNidWdzLmNvbXBs
ZXRlbmVzc3dlYi5nZnotcG90c2RhbS5kZYIXYnVncy5nZW0uZ2Z6LXBvdHNkYW0u
ZGWCGWJ1Z3MucXVha2UuZ2Z6LXBvdHNkYW0uZGWCFmNkbi5nZW0uZ2Z6LXBvdHNk
YW0uZGWCGGNkbi5xdWFrZS5nZnotcG90c2RhbS5kZYIaY2RuLnZvbGNhbm8uZ2Z6
LXBvdHNkYW0uZGWCGGNsb3VkLmdlbS5nZnotcG90c2RhbS5kZYIaY2xvdWQucXVh
a2UuZ2Z6LXBvdHNkYW0uZGWCHGNsb3VkLnZvbGNhbm8uZ2Z6LXBvdHNkYW0uZGWC
HmNvbXBsZXRlbmVzc3dlYi5nZnotcG90c2RhbS5kZYIjZGF0YS5jb21wbGV0ZW5l
c3N3ZWIuZ2Z6LXBvdHNkYW0uZGWCF2RhdGEuZ2VtLmdmei1wb3RzZGFtLmRlghlk
YXRhLnF1YWtlLmdmei1wb3RzZGFtLmRlghtkYXRhLnZvbGNhbm8uZ2Z6LXBvdHNk
YW0uZGWCGmRldmVsLnF1YWtlLmdmei1wb3RzZGFtLmRlghlkb2NzLnF1YWtlLmdm
ei1wb3RzZGFtLmRlghtkb2NzLnZvbGNhbm8uZ2Z6LXBvdHNkYW0uZGWCF2V2YWwu
Z2VtLmdmei1wb3RzZGFtLmRlghdmZWVkLmdlbS5nZnotcG90c2RhbS5kZYIZZmVl
ZC5xdWFrZS5nZnotcG90c2RhbS5kZYIbZmVlZC52b2xjYW5vLmdmei1wb3RzZGFt
LmRlghJnZW0uZ2Z6LXBvdHNkYW0uZGWCHGhld29sb2cucXVha2UuZ2Z6LXBvdHNk
YW0uZGWCHmhld29sb2cudm9sY2Fuby5nZnotcG90c2RhbS5kZYIYaHRtbDUuZ2Vt
Lmdmei1wb3RzZGFtLmRlghpodG1sNS5xdWFrZS5nZnotcG90c2RhbS5kZYIYaHRt
bDYuZ2VtLmdmei1wb3RzZGFtLmRlghpodG1sNi5xdWFrZS5nZnotcG90c2RhbS5k
ZYIWaXBlLmdlbS5nZnotcG90c2RhbS5kZYIYaXBlLnF1YWtlLmdmei1wb3RzZGFt
LmRlghxuaWNreS52b2xjYW5vLmdmei1wb3RzZGFtLmRlghpvYm13aWtpLmdlbS5n
ZnotcG90c2RhbS5kZYIUcXVha2UuZ2Z6LXBvdHNkYW0uZGWCGXNlYzIxLWRtejEu
Z2Z6LXBvdHNkYW0uZGWCGnNlYzIxLWRtejFiLmdmei1wb3RzZGFtLmRlgh1zdGF0
c2VpOS5xdWFrZS5nZnotcG90c2RhbS5kZYIic3ZuLmNvbXBsZXRlbmVzc3dlYi5n
ZnotcG90c2RhbS5kZYIYc3ZuLnF1YWtlLmdmei1wb3RzZGFtLmRlghV0Yi5nZW0u
Z2Z6LXBvdHNkYW0uZGWCF3RiLnF1YWtlLmdmei1wb3RzZGFtLmRlghl0Yi52b2xj
YW5vLmdmei1wb3RzZGFtLmRlghl0ZXN0LnF1YWtlLmdmei1wb3RzZGFtLmRlgiZ0
cmFja2VyLmNvbXBsZXRlbmVzc3dlYi5nZnotcG90c2RhbS5kZYIadHJhY2tlci5n
ZW0uZ2Z6LXBvdHNkYW0uZGWCHHRyYWNrZXIucXVha2UuZ2Z6LXBvdHNkYW0uZGWC
HnRyYWNrZXIudm9sY2Fuby5nZnotcG90c2RhbS5kZYIWdm9sY2Fuby5nZnotcG90
c2RhbS5kZYIbd2Vic3ZuLnF1YWtlLmdmei1wb3RzZGFtLmRlgiJ3d3cuY29tcGxl
dGVuZXNzd2ViLmdmei1wb3RzZGFtLmRlgh14c2FtcGxlcy5xdWFrZS5nZnotcG90
c2RhbS5kZYIfeHNhbXBsZXMudm9sY2Fuby5nZnotcG90c2RhbS5kZYIaeHNhbXBs
cy5nZW0uZ2Z6LXBvdHNkYW0uZGWCFnh5ei5nZW0uZ2Z6LXBvdHNkYW0uZGWCGnh5
ei52b2xjYW5vLmdmei1wb3RzZGFtLmRlhwSLEQPnhwSLEQPogRViZXV0aW5AZ2Z6
LXBvdHNkYW0uZGUwdwYDVR0fBHAwbjA1oDOgMYYvaHR0cDovL2NkcDEucGNhLmRm
bi5kZS9nZnotY2EvcHViL2NybC9jYWNybC5jcmwwNaAzoDGGL2h0dHA6Ly9jZHAy
LnBjYS5kZm4uZGUvZ2Z6LWNhL3B1Yi9jcmwvY2FjcmwuY3JsMIHHBggrBgEFBQcB
AQSBujCBtzAzBggrBgEFBQcwAYYnaHR0cDovL29jc3AucGNhLmRmbi5kZS9PQ1NQ
LVNlcnZlci9PQ1NQMD8GCCsGAQUFBzAChjNodHRwOi8vY2RwMS5wY2EuZGZuLmRl
L2dmei1jYS9wdWIvY2FjZXJ0L2NhY2VydC5jcnQwPwYIKwYBBQUHMAKGM2h0dHA6
Ly9jZHAyLnBjYS5kZm4uZGUvZ2Z6LWNhL3B1Yi9jYWNlcnQvY2FjZXJ0LmNydDAN
BgkqhkiG9w0BAQsFAAOCAQEADT3pyiW6WMZv9YcoH3X8JSbApTY3TdG5TEE8Z8kr
GX2GBjmjCekrfropxNXOYfYoRFvRUCa6My/VDjNqdPosCZGvZ1srAaMZKbkTQfnK
LS8Q0I5TUlalBzPe7Y4xwE6ZDqHcWaxI66qYwXlMP61m4PDKNLD/zFnZWr4LC7I1
MqfTtQDHRm+RaFIM09P31K+7G1APn3oq64Q4ncD1rpcs1MayF3tf+Jwjvz5h5BG9
Cu7a0DlLP4aQdBRNQuVzfkhhACKUn4BH5lkrYu5TPGX+HqCfM2wMm3FkBIfTBosg
b6RWrOKfR8StQSYmTwsr5WAYFLD5TxqvMTTf3Kjdj0+62A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtyNKJrVmSaPhv9c2hHK4
jij9Z1/B82+Wggi0UmLGmeLsuh4025Hr7HLJVMwJEhqQWqz+BEP2OpOd3cIo5cFa
QHoGM3QJ87F70LiP8XHRIY4/BxwIvkfYV/BOpZ6hFsRIWGa1lkJlrbPZiBWKxbV0
PoxHL4nGxLYcXBACKWF88vz/NnuirqwEHa/uu4+2zf/nNC0MlzthaBhla/xOuZbB
s7KdOCe5lN2vnBL4KO6ZSZnJk2XdmcebhO2P+ZoLun7aeF/c9V//UnS8fXvXD0Uw
0qYcL8H7ML0+83XxdrlGNasDLNnjLQ8M1j+NqVvDf+CsjZdDtfqqcqNwvhBY501R
qGB5b0pxBj3DlOm3xXC57DoHUsauVZHEfqkFq0EGSzjkT0whKfzRsUpaBYxX2Iqt
Gacb5l1vtvcu3I/GXsaXAcFXaMH/53goiKlAT0eSfHTXsINtC7KPFz9J+w1xzyaB
KGQOogV5W2xtG0pl4IwfVJ9M0+Xagg6xEMHfpUgquA9FuD9YC3dgZoUDYQohpw3i
oAHFzbYMAZrd0dEI1QdrYnTamo/ZI37Ew2T7Oq2CTvhYIaPIRtZ7vV1HgFaLcOZ6
oECTvQPAOx98kgJKsDacXdvv+Illcyny4N0AKV5wH6vqi2rnQ8KuigmsUsJocMAI
3kkPjsLfzIp3QEzf8RfdMxcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6836965685472169
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoForschungsZentrum Potsdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoForschungsZentrum Potsdam CA - G01'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-09-30 13:35:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 23:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brandenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Potsdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoForschungsZentrum Potsdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Section 2.1, GEM Testing and Evaluation Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sec21-dmz1b.gfz-potsdam.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 747137244229404131776206385672593830223350724006077891632029931359819248999989780085789700933463725858108280373125928233137305282435508088678242974408853721218206290028700316355320565768870371096215435148609477354183554780110911603599307222673525374491408722541406054065737957139958708578778941410098786206349931337672000393069991303242913507964863859252972053171951300753192958242126136608752410391909878881772931241921409214744699864253148263534011657519095799289144199024770285993940495180490860607623920684113212924036964879913101114296297501673448656706102636650653457567786769133982929288725385899720154166036698017487647230862264687730046902774524113213156412689673503429686171283291292083961674748772221573544404344466809278825277333558828369426528841152392517467821183061945542872671158272272348112185095057638324637357545750738109256886176321691172118761983945457592264504774198964752001460110831211085321662850288320261927203061178520839722010126579083559889434859516669637326251687856805960371942189123351120201415960210329209112234650991200445425061685640664174306434746872747755552769234583789406284998711742291451102425196132166488319609587532465205459428880406383094264129312934543594366088427650458408992802986603287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							35c7fe7c0b3a3c4d8617bc4d805e8b217f3d3309
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9cc8a2e59b006ccb0ea288eba4ba6b9fb3395984
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1687 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12oder3.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12oder3.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.completenessweb.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugs.completenessweb.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugs.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugs.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'completenessweb.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.completenessweb.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devel.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eval.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feed.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feed.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feed.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hewolog.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hewolog.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'html5.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'html5.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'html6.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'html6.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipe.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipe.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicky.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obmwiki.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec21-dmz1.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec21-dmz1b.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statsei9.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svn.completenessweb.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svn.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tb.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tb.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tb.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracker.completenessweb.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracker.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracker.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracker.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websvn.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.completenessweb.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xsamples.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xsamples.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xsampls.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xyz.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xyz.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:7|false] OCTET STRING '139.17.3.231'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:7|false] OCTET STRING '139.17.3.232'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/gfz-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/gfz-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/gfz-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/gfz-ca/pub/cacert/cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000d3de9ca25ba58c66ff587281f75fc2526c0a536374dd1b94c413c67c92b197d860639a309e92b7eba29c4d5ce61f628445bd15026ba332fd50e336a74fa2c0991af675b2b01a31929b91341f9ca2d2f10d08e535256a50733deed8e31c04e990ea1dc59ac48ebaa98c1794c3fad66e0f0ca34b0ffcc59d95abe0b0bb23532a7d3b500c7466f9168520cd3d3f7d4afbb1b500f9f7a2aeb84389dc0f5ae972cd4c6b2177b5ff89c23bf3e61e411bd0aeedad0394b3f869074144d42e5737e48610022949f8047e6592b62ee533c65fe1ea09f336c0c9b71640487d3068b206fa456ace29f47c4ad4126264f0b2be5601814b0f94f1aaf3134dfdca8dd8f4fbad8