ivbb.citrix.zivit.zivb.net

- Informationstechnikzentrum Bund (ITZBund) -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 1f:ef:c9:2a:7d:7c:08:63:6a:1f:af:aa was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Informationstechnikzentrum Bund (ITZBund)

Organization: Informationstechnikzentrum Bund (ITZBund)
Organization unit: Betrieb
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:ef:c9:2a:7d:7c:08:63:6a:1f:af:aa
Serial Number (int): 9883918554818012772640468906
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 8a:ba:01:2c:b5:7f:53:57:a5:0e:32:5c:67:47:89:0c:4b:2f:2b:5a
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 61:57:8a:a9:0d:c9:c6:85:6f:5d:a1:58:75:03:77:28:a0:8d:7f:ba
Fingerprint (sha256): 12:39:7f:ca:ec:2a:08:72:9c:59:71:41:94:0c:53:8a:f8:3e:dc:46:24:c3:15:00:f5:61:3e:9f:c1:70:5d:41

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate ivbb.citrix.zivit.zivb.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ivbb.citrix.zivit.zivb.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ivbb.citrix.service.zivb.net
ivbb.citrix.zivit.zivb.net
ivbv.citrix.service.iv.bfinv.de
ivbv.citrix.zivit.iv.bfinv.de

Other certificates including the domain name zivb.net

(limited to 100 certificates)
www.internetantrag-abin-intg.zivit.zivb.net
nida.itz.itzbund.net
sp-test.vzd-ent.zivb.net
sp.vzd.zivb.net
dwh-integration.goaml.fiu.in.bund.de
vlt62901.test.nizza.zoll.itzbund.net
vwe12977.zivit.vzd.zivb.net
behoerdennetz.fms.zivb.net
piwik.prod.gsb.service.zivb.net
mitarbeiterportal.zoll.zivb.net
mt2-fw.itsm-framework.service.itzbund.net
redaktion.prod.gsb.bka.zivb.net
bbbund.bmf.zivb.net
redaktion.prod.gsb.bka.zivb.net
www.internetantrag-abin-intg.zivit.zivb.net
int.mapz.zoll.zivb.net
vwp28739.vzd.zivb.net
egvp.bamf.zivb.net
formulare.zd.intranet.bund.de
bbbund.bmf.zivb.net
vwp12982.zivit.vzd.zivb.net
ref.gzd.sharepoint.vzd.zivb.net
vlp62219.prod.lims.zoll.zivb.net
permalink.evsf.zivb.net
vwe24254.vzd-ent.zivb.net
vle61186.entw.evs.zoll.zivb.net
redaktion.prod.gsb.bund.zivb.net
wpb.badv2.vzd.zivb.net
formulare.zd.intranet.bund.de
bidida.zoll.zivb.net
vwe12976.zivit.vzd.zivb.net
wiki.ddi.zd.in.bund.de
ivbb.citrix.zivit.zivb.net
vm3068.zoll.adm.zivb.net
enablenow-zolleweb.entw.sap.zoll.itzbund.net
vlt22900.test.osci.service.itzbund.net
test2.mapz.zoll.itzbund.net
vwi12980.zivit.vzd.zivb.net
vwp24520.zoll.vzd.zivb.net
appstore.vzd.zivb.net
test2.mapz.zoll.itzbund.net
test2.mapz.zoll.itzbund.net
mail.vzd.zivb.net
mt3-fw.itsm-framework.service.itzbund.net
office-test.vzd-ent.zivb.net
entw.poseidon.zivb.net
enablenow-bmfeweb.entw.sap.bmf.itzbund.net
vwp24813.vzd.zivb.net
gsbintranetadmin.prod.gsb.bmf.zivb.net
redaktion.prod.gsb.bka.zivb.net
test.zeus.zivb.net
ref.gzd.sharepoint.vzd.zivb.net
mail.vzd.zivb.net
redaktion.prod.gsb.bund.zivb.net
vlp62218.prod.lims.zoll.zivb.net
vwe24085.vzd-ent.zivb.net
mail.vzd.zivb.net
enablenow-zolleweb.entw.sap.zoll.itzbund.net
luzina.zd.in.bund.de
bfdwtest.zoll.in.bund.de
enablenow-fkspweb.prod.sap.zoll.itzbund.net
zolldesk.gzd.sharepoint.vzd.zivb.net
mt1-fw.itsm-framework.service.itzbund.net
vwp64323.profis.zivit-f.zivb.net
sp-ref.vzd.zivb.net
report.sp.vzd.zivb.net
vwp83491.vzd.zivb.net
fms.preview.prod.gsb.bund.zivb.net
vli62214.test.lims.zoll.zivb.net
mitarbeiterportal.zoll.zivb.net
vm3118.zivit-f.zivb.net
ca.sp-test.vzd-ent.zivb.net
vlp62215.prod.lims.zoll.zivb.net
vwi12980.zivit.vzd.zivb.net
vwp68137.vzd.zivb.net
kraftst-atu1.zoll.zivb.net
egvp.bamf.zivb.net
test.spexpert.bzst.in.bund.de
bidida.zoll.zivb.net
vwp50467.zivit.vzd.zivb.net
office.gzd.sharepoint.vzd.zivb.net
redaktion.prod.gsb.bka.zivb.net
cas.prod.gsb.bund.zivb.net
gw-citrix.service.itzbund.net
gsbintranetadmin.prod.gsb.bmf.zivb.net
wiki.service.itzbund.net
spexpert.bzst.in.bund.de
vle61186.entw.evs.zoll.zivb.net
vwp27494.vzd.zivb.net
vwp24520.zoll.vzd.zivb.net
afo-prozesse.itz.intranet.bund.de
mt3-fw.itsm-framework.service.itzbund.net
vwi12979.zivit.vzd.zivb.net
dwh-fachtest.goaml.fiu.in.bund.de
enablenow-fkspweb.prod.sap.zoll.itzbund.net
vwe12976.zivit.vzd.zivb.net
vlp62216.prod.lims.zoll.zivb.net
appstore.vzd.zivb.net
gsb.paris.zka.zivb.net
redaktion.prod.gsb.bmf.intranet.bund.de

Certificate

The complete raw certificate details for ivbb.citrix.zivit.zivb.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq79PM74KrSUOwEHfKwqO
4XiMqn77YEQmUWgua6+46cCaY1I6f6abAeu1YpJMiWpatrhZfZlGkk2qPmCxXMzC
VtWpG1HahUSpZGqFRxJr9gI45Dl0L23tSmJf9z00REtcc7ZWdgSPRwVQENiwwdcj
9am+/rNz2nGUZQuTl6H1p0vzL1Ct4Q9A3lHWBUa8mlSJgqlZxAHvapYbpC84eZUW
KCDaJoVfanINSvsvuj3B2EJJk52EtMtqft4kopH6ViyjTr2JStoeoMLdYYv+/fez
qApFf2VlNv23lMk/V7Z+vP5oNTx3qW7sBaOZewHj0thAhriAJP8e9cyPjzURDT+W
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9883918554818012772640468906
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-24 10:38:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-25 10:38:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Informationstechnikzentrum Bund (ITZBund)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Betrieb'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ivbb.citrix.zivit.zivb.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21681088322121083432219389304434821784992349241910842599341799136164543571497272748202211069501968094068534748594227445916680362015899642697928284069371873047538762344627413082670471817610162947720480894139853525187996547649571867467220453231929532910853645354287608696618072160215805325553617506954645568192903216890887801502242559451272480982483063821289883001654301876519688545276424728417041437639357777801175642196309765487698401725892291814433074321860705686664025142530220196764664553896710235782125153990795977451094654319761570977431410661768840893406241277496954108407417545096303406535833733715461660448471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8aba012cb57f5357a50e325c6747890c4b2f2b5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivbb.citrix.service.zivb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivbb.citrix.zivit.zivb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivbv.citrix.service.iv.bfinv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivbv.citrix.zivit.iv.bfinv.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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