cti-proxy.fh-erfurt.de

- Fachhochschule Erfurt -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 25:30:74:5f:67:b5:5d:a6:54:28:59:c7 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fachhochschule Erfurt

Organization: Fachhochschule Erfurt
State / Province: Thueringen
Locality: Erfurt
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 25:30:74:5f:67:b5:5d:a6:54:28:59:c7
Serial Number (int): 11509523357156951750104078791
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 4a:84:5b:38:37:ac:a7:35:a1:02:66:80:e0:65:79:e2:6c:47:ef:c8
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 3b:40:ac:a3:0a:ed:b6:c6:3e:c1:fe:80:59:79:ae:b0:ae:c8:73:15
Fingerprint (sha256): 0f:2d:9f:0a:4b:b0:d0:43:f3:73:9d:d7:a1:99:f7:51:be:8d:a0:3f:eb:1f:4d:4c:7b:78:97:a6:30:22:a2:55

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate cti-proxy.fh-erfurt.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cti-proxy.fh-erfurt.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cti-proxy.fh-erfurt.de

Other certificates including the domain name fh-erfurt.de

(limited to 100 certificates)
tkm.fh-erfurt.de
fgk-nas-1.fh-erfurt.de
evasys.fh-erfurt.de
webmail.fh-erfurt.de
sbc-01.fh-erfurt.de
wwws-analyse.fh-erfurt.de
fhe-mailbox.fh-erfurt.de
fwng.fh-erfurt.de
vpl.fh-erfurt.de
fhemail.fh-erfurt.de
fhewebmail.fh-erfurt.de
stud-vpn.fh-erfurt.de
morpheus.fh-erfurt.de
hye.ai.fh-erfurt.de
www.ai.fh-erfurt.de
cti-proxy.fh-erfurt.de
fhe-pecunia.fh-erfurt.de
cti-proxy.fh-erfurt.de
netstorage.fh-erfurt.de
exa-cust.fh-erfurt.de
radius1.fh-erfurt.de
vpl.fh-erfurt.de
webmail.fh-erfurt.de
h1-test.fh-erfurt.de
fhe-tsbroker-2.fhe-ad.fh-erfurt.de
nc.fh-erfurt.de
sbc-02.fh-erfurt.de
netstorage.fh-erfurt.de
test-moodle.fh-erfurt.de
bewerben.fh-erfurt.de
emedia.fh-erfurt.de
www.fh-erfurt.de
test-moodle.fh-erfurt.de
cloud.fh-erfurt.de
idp.fh-erfurt.de
fhe-mail-relay2.fh-erfurt.de
exa-test.fh-erfurt.de
migration.fh-erfurt.de
stundenplan.fh-erfurt.de
get.fh-erfurt.de
exa-test2.fh-erfurt.de
email.fh-erfurt.de
wstud.fh-erfurt.de
qis.fh-erfurt.de
katalog.fh-erfurt.de
pruefung.fh-erfurt.de
fh-erfurt.de
www.fh-erfurt.de
test-a1.fh-erfurt.de
webmail.fh-erfurt.de
pad.fh-erfurt.de
wwws.fh-erfurt.de
group.fh-erfurt.de
wwwp1.fh-erfurt.de
haushalt.fh-erfurt.de
adfs.fh-erfurt.de
nctest.fh-erfurt.de
gwweb.fh-erfurt.de
moodle.fh-erfurt.de
oas.fh-erfurt.de
morpheus.fhe-ad.fh-erfurt.de
www.fh-erfurt.de
www.fh-erfurt.de
moodle.fh-erfurt.de
pruefung.fh-erfurt.de
terpsichore.fh-erfurt.de
evasys.fh-erfurt.de
gwweb.fh-erfurt.de
www.ai.fh-erfurt.de
source.ai.fh-erfurt.de
elms.fh-erfurt.de
evasys.fh-erfurt.de
fhe-mail-smtp2.fh-erfurt.de
iscommerce.fh-erfurt.de
studienkonto.fh-erfurt.de
fhe-mailbox.fh-erfurt.de
netstorage.fh-erfurt.de
fhe-zentral-1.fh-erfurt.de
support.fh-erfurt.de
test-moodle.fh-erfurt.de
nc-eval.fh-erfurt.de
studienkonto.fh-erfurt.de
bewerbung.fh-erfurt.de
notrust.fh-erfurt.de
netstorage.fh-erfurt.de
radius.fh-erfurt.de
studienkonto.fh-erfurt.de
oas.fh-erfurt.de
radius1.fh-erfurt.de
metacoon.fh-erfurt.de
fhe-test-sam.fh-erfurt.de
webmail.fh-erfurt.de
fhe-vw-7.fh-erfurt.de
www.fh-erfurt.de
itkom.ai.fh-erfurt.de
a1.fh-erfurt.de
elearning.ars.fh-erfurt.de
svn.ai.fh-erfurt.de
www.ai.fh-erfurt.de
netstorage.fh-erfurt.de

Certificate

The complete raw certificate details for cti-proxy.fh-erfurt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6YSnVC6OI2HawSF0gL6
6IjQTj7CJ2DV1vYXwlYP4ll0PSrXw/7Ro7CMmZoAl+jAk28Yf8a38DtL6sv7IseS
6/VUIvmFrRO47HHSPpix+x17X8rNQH2BJAOQhQaz4kGSGWhIi0hB6YupwzvEPfQZ
YlXy+xSNTQJAbZB8lgbmZ+oq8DdVbxNhMYQMMWXLAfFL0KZgYzbnTN1ex5dfJgMS
SN+hnYXHRikdjMwmcIcgHIchtEvgZYFI8ttnrab0bvLikx14oWjIGyozjUWHplCA
wr7bLoOfsTL4zsOaHXPvMhIWwih90t5vrf3edyB5OWyMl191xceZnmJS4x+oCwZD
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11509523357156951750104078791
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-09 09:35:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-09 09:35:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Thueringen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Erfurt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fachhochschule Erfurt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'cti-proxy.fh-erfurt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25708269415074212694198419162617581722016324713954029843947287296679093206135767370377609430424180554727621726388779506004035352846878261724857233115406836793902953324764104936522848938551200907174519169926960336644385638688313878031359255486435157001237033592765692720636920278310610126021323182348577038987828656951931094846410002912942763079235266806645987376445590213500036311935338314504518456687935307166929166996097530031824899659382119374031812640830845475335457816152947024681939847315551527697037155492033251346686760413013325421968897645945990559345629091330327385465690716108904933635493395030705615291157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.9
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a845b3837aca735a1026680e06579e26c47efc8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cti-proxy.fh-erfurt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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