www.ais.uni-kassel.de

- Universitaet Kassel -

Issued by Uni Kassel Certification Authority (UniKassel-CA) - G02

About this certificate

This digital certificate with serial number 15:85:ea:76:40:4e:44 was issued on by Universitaet Kassel.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • KeyUsage [ContentCommitment DigitalSignature KeyEncipherment DataEncipherment] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Universitaet Kassel

Organization: Universitaet Kassel
Organization unit: FG Angewandte Informationssicherheit
State / Province: Hessen
Locality: Kassel
Country: DE

Universitaet Kassel

Organization: Universitaet Kassel
Organization unit: Hochschulrechenzentrum
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 15:85:ea:76:40:4e:44
Serial Number (int): 6058216563691076
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: b4:e2:c8:d9:3f:6d:af:52:aa:d3:15:2c:2d:f5:9c:6e:52:dc:e0:61
AuthorityKeyId: 17:3d:f2:ae:83:dc:61:80:a4:e8:90:cc:80:97:79:35:0d:7d:02:4c

Fingerprint (sha1): cb:96:ed:39:4a:f9:c1:2d:46:c9:6a:b2:d8:54:51:d7:52:93:30:b9
Fingerprint (sha256): 0e:70:4d:8f:f6:e9:1b:f7:15:c1:0b:1c:39:4c:22:c3:82:1a:d4:d5:ea:59:aa:9a:69:a6:57:00:95:89:75:48

Issuing Certificate URL: http://cdp1.pca.dfn.de/uni-kassel-ca/pub/cacert/g_cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/uni-kassel-ca/pub/cacert/g_cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/uni-kassel-ca/pub/crl/g_cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/uni-kassel-ca/pub/crl/g_cacrl.crl

Check the revocation status for certificate www.ais.uni-kassel.de

2

DNS Names

1

Email Addresses

1

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ais.uni-kassel.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ais.uni-kassel.de
www.sis.uni-kassel.de
[email protected]
141.51.125.10

Other certificates including the domain name uni-kassel.de

(limited to 100 certificates)
itsm.its.uni-kassel.de
www.ais.uni-kassel.de
cdn.ub.uni-kassel.de
ecampus-q1.uni-kassel.de
vpn-hrz05-2.hrz.uni-kassel.de
seblog.cs.uni-kassel.de
idmcore.its.uni-kassel.de
seblog.cs.uni-kassel.de
userapp.its.uni-kassel.de
irmo.idrac.ies.uni-kassel.de
www2.bibliothek.uni-kassel.de
rdmo.uni-kassel.de
webapps-online.uni-kassel.de
*.bibliothek.uni-kassel.de
portal-entwicklung.uni-kassel.de
bib-82-215.bibliothek.uni-kassel.de
www.plm.eecs.uni-kassel.de
opactest.bibliothek.uni-kassel.de
www.plm.eecs.uni-kassel.de
ecampus-schulung.uni-kassel.de
cmk.its.uni-kassel.de
its-vm509.its.uni-kassel.de
vttl-server1.uni-kassel.de
chat.ies.uni-kassel.de
ironport2-int.its.uni-kassel.de
service.ies.uni-kassel.de
vpn.uni-kassel.de
claks.uni-kassel.de
www.hochschulsport.uni-kassel.de
va31-42.ad.its.uni-kassel.de
its-vm532.its.uni-kassel.de
pm8-42.its.uni-kassel.de
petit.eecs.uni-kassel.de
sap-wdp.uni-kassel.de
forschung.uni-kassel.de
kobra.uni-kassel.de
being-a-scientist.uni-kassel.de
dms-dev.uni-kassel.de
www.evaluation.uni-kassel.de
ddc.bibliothek.uni-kassel.de
workshopdb.uni-kassel.de
ecampus-q8.uni-kassel.de
gundel.cs.uni-kassel.de
wiki.ies.uni-kassel.de
callcenter.uni-kassel.de
seblog.cs.uni-kassel.de
va31-91.ad.its.uni-kassel.de
redges.uni-kassel.de
www.ies.uni-kassel.de
lehrportal.uni-kassel.de
ibb-pc7.wirtschaft.uni-kassel.de
www.uni-kassel.de
tls.automattic.com
redmine.cs.uni-kassel.de
ext-fw.ze.eecs.uni-kassel.de
vm171-115.its.uni-kassel.de
callcenter.uni-kassel.de
moodle.uni-kassel.de
seblog.cs.uni-kassel.de
ecampus-q1.uni-kassel.de
conf.uni-kassel.de
vm171-148.its.uni-kassel.de
wikis.uni-kassel.de
*.bibliothek.uni-kassel.de
hrz-vm222.hrz.uni-kassel.de
his-ver.uni-kassel.de
www.fallarchiv.uni-kassel.de
ecampus-q.uni-kassel.de
ts13.bibliothek.uni-kassel.de
e-exam.uni-kassel.de
hrz-vm252.hrz.uni-kassel.de
webapps.uni-kassel.de
daia.bibliothek.uni-kassel.de
vm170-79.its.uni-kassel.de
remote.uni-kassel.de
chat.ies.uni-kassel.de
awx.its.uni-kassel.de
idp.hrz.uni-kassel.de
mrt-pc2.mrt.maschinenbau.uni-kassel.de
portal3.uni-kassel.de
todoapp-presse.uni-kassel.de
idp2.hrz.uni-kassel.de
www.ais.uni-kassel.de
remote.uni-kassel.de
*.bibliothek.uni-kassel.de
bib-ws30.bibliothek.uni-kassel.de
mx1.its.uni-kassel.de
lve.uni-kassel.de
owc.bibliothek.uni-kassel.de
ukaccess.its.uni-kassel.de
dsb.uni-kassel.de
srv9.comtec.eecs.uni-kassel.de
vm14-79.ad.its.uni-kassel.de
its-vm714.ad.its.uni-kassel.de
wiki.eecs.uni-kassel.de
dms-qs.uni-kassel.de
*.han.ub.uni-kassel.de
vm24-249.ad.its.uni-kassel.de
conf.uni-kassel.de
animation.uni-kassel.de

Certificate

The complete raw certificate details for www.ais.uni-kassel.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6058216563691076
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universitaet Kassel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hochschulrechenzentrum'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Uni Kassel Certification Authority (UniKassel-CA) - G02'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-11 07:57:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-10 07:57:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kassel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universitaet Kassel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FG Angewandte Informationssicherheit'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ais.uni-kassel.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 674644704319930899668438820824586570430111180038167095424882462138387321944846339133314438717459153103931574872230502425432833344683779527445223978380900877815680913668558161084321377061206050374248611220808986776784685175984074486845265777645801158352368342439623611104515885281332294784403388610302920750127162432935868292365397425809844475809484630270892399836463263796968131490778043591408538946486843964667868876781225583136276133880923924921060752946462733537426154663637365194234032197247342108597100828149628982966310144731340841260913568400338758733032736339130346012169693811922810066606316486128920344866314914521977649507305311830073606250971941957519473764370126084590014976533292224246846001776107265723884205633745773647266217585523814290255682055336557135925903913974993626550296311091227090436241570132375722130843036043488574487581573951516721232242625557397198894557990302495518118033434520170060615327545576443145904275571072411837057689881167846853023623309044631490640719444652813628920539660109095260993226219284350341132908806148351935819625712940243587006659180430193760850379421793818626056862149617960842408905497673981285662042539264525145429463525233729145124604605641573580079921577955483901006562709817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b4e2c8d93f6daf52aad3152c2df59c6e52dce061
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 173df2ae83dc6180a4e890cc809779350d7d024c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ais.uni-kassel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sis.uni-kassel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:7|false] OCTET STRING '141.51.125.10'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/uni-kassel-ca/pub/crl/g_cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/uni-kassel-ca/pub/crl/g_cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (204 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/uni-kassel-ca/pub/cacert/g_cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/uni-kassel-ca/pub/cacert/g_cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0049304ba9d3b3cda2295585e6ecb22124670e0fd3cb3f96f67cd432f419a7ed25f4d8761797a830a29771e1634ce0b6549845d0b29b0fdf3e6f6df12510619ce944ad7219adaa411bea981c134291544d1059650ed9f39328e6801c714a1dee0bf6ad987cf5f01dc4d6c04ab65666417d3ff2be7ff08341ef09e1483cacfaa72474c88d8c69befb5c1f5ee811b97fe6a74eff69cf1ec21632005b29c62084bb4632317e4c44993f81da897e71fe2ab368b2db75b3f9034afdd7ffe4b8c57dbcdf5d6f55d3e9c4e1fac165f3b6768df4eb66fced48d7f633cec2b50da00f01e27ce7efdea73010ba01affd92c4dde881674358001ef180045be6fd988e775d3c03