idp.uni-duisburg-essen.de

- Universitaet Duisburg-Essen -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 1f:f2:7e:3c:4b:fd:71:8f:d1:94:83:1d was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universitaet Duisburg-Essen

Organization: Universitaet Duisburg-Essen
Organization unit: Zentrum fuer Informations- und Mediendienste (UDE)
State / Province: Nordrhein-Westfalen
Locality: Essen
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:f2:7e:3c:4b:fd:71:8f:d1:94:83:1d
Serial Number (int): 9887191483265580973079954205
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 14:c7:cf:2a:ad:be:f9:2e:f2:6f:7b:0d:bd:c6:d5:91:c2:c4:8d:33
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): d9:3c:74:9a:98:49:54:c9:b3:70:54:5e:3f:de:d0:8a:5e:55:c3:e4
Fingerprint (sha256): 12:b0:99:72:ed:c8:41:55:c5:32:9b:eb:df:30:ac:64:e2:e8:53:c5:90:78:a1:ee:18:58:5e:9c:71:48:19:b6

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate idp.uni-duisburg-essen.de

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for idp.uni-duisburg-essen.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

idp-test.uni-due.de
idp-test.uni-duisburg-essen.de
idp-test2.uni-due.de
idp-test2.uni-duisburg-essen.de
idp.uni-due.de
idp.uni-duisburg-essen.de

Other certificates including the domain name uni-duisburg-essen.de

(limited to 100 certificates)
nxcl.fwc-cim.uni-due.de
korpora-exp.zim.uni-duisburg-essen.de
www.elfe.wiwi.uni-due.de
idp.uni-duisburg-essen.de
kilives.vs.uni-due.de
moodle.uni-due.de
ns2.netz.uni-duisburg-essen.de
www.syssec.wiwi.uni-due.de
www.elokov.wiwi.uni-due.de
web01.mhci.uni-due.de
otrs.uni-duisburg-essen.de
www.ebus.wiwi.uni-due.de
www.pim.wiwi.uni-due.de
etherpad.uni-due.de
commodiswiki.s3.uni-duisburg-essen.de
www.oek.wiwi.uni-due.de
se186103.zim.uni-duisburg-essen.de
www.iis.wiwi.uni-due.de
labbook-med.escience.uni-due.de
vpn.uni-due.de
time2-3.uni-duisburg-essen.de
www.op-us.wiwi.uni-due.de
etherpad.uni-due.de
www.mas.wiwi.uni-due.de
prozessportal.uni-due.de
www.bielschowsky.de
zim.web.uni-due.de
www.vs.uni-due.de
radius1.uni-duisburg-essen.de
campus.uni-due.de
www.wida.wiwi.uni-due.de
blogs.uni-due.de
www.umo.wiwi.uni-due.de
www.testude2018.wiwi.uni-due.de
www-stud.uni-due.de
mx-serv3.uni-due.de
openproject.fwc-cim.uni-due.de
korpora-exp.zim.uni-duisburg-essen.de
s3-d1.zim.uni-due.de
www.mentoring.wiwi.uni-due.de
mailbox.uni-due.de
moodle.uni-due.de
zim.web.uni-due.de
dataverse-test.ub.uni-due.de
www.logfor.wiwi.uni-due.de
www.spielwiese.wiwi.uni-due.de
www.wipo.wiwi.uni-due.de
radsec1.uni-duisburg-essen.de
ifip-tc2.paluno.uni-due.de
www.personal.wiwi.uni-due.de
etherpad.uni-due.de
zim.web.uni-due.de
www.iwb-vfs.wiwi.uni-due.de
pingo.uni-due.de
www.elfe.wiwi.uni-due.de
www.relaxation.chemie.uni-due.de
hotline.zim.uni-due.de
www.itl.wiwi.uni-due.de
www.vm-net.wiwi.uni-due.de
korpora-exp.zim.uni-duisburg-essen.de
korpora.zim.uni-duisburg-essen.de
korpora.zim.uni-duisburg-essen.de
eln-deploytest.escience.uni-due.de
korpora.zim.uni-duisburg-essen.de
korpora-exp.zim.uni-duisburg-essen.de
jack-server12.s3.uni-due.de
www.ate.uni-due.de
idp.uni-duisburg-essen.de
debian-deploytest.escience.uni-due.de
www.hci.wiwi.uni-due.de
tmt.tdr.uni-due.de
bbb.wiwinf.uni-due.de
jack-server27.s3.uni-due.de
oer.moodle.uni-due.de
www.inrec2009.wiwi.uni-due.de
iseb.uni-duisburg-essen.de
www.fmoek.wiwi.uni-due.de
dnssec.vs.uni-due.de
www.wpar.wiwi.uni-due.de
radius1.uni-duisburg-essen.de
time1-1.uni-duisburg-essen.de
benutzerverwaltung.uni-duisburg-essen.de
www.stat.wiwi.uni-due.de
alfresco.uni-due.de
www.makro.wiwi.uni-due.de
lists.uni-duisburg-essen.de
www.pubecon.wiwi.uni-due.de
www.ibes.wiwi.uni-due.de
www.elokov.wiwi.uni-due.de
www.zkse.de
jack-server14.s3.uni-due.de
mediapool.zim.uni-due.de
pingo.uni-due.de
applyonline.uni-due.de
skala.uni-due.de
www.fmoek.wiwi.uni-due.de
www.icb.wiwi.uni-due.de
www.mathevorkurs.wiwi.uni-due.de
dms.uni-due.de
vpnportal.uni-due.de

Certificate

The complete raw certificate details for idp.uni-duisburg-essen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P1v8QgIB1jQqig1Fff6
ClR/osNZbJBwFn+EAYTp0S0oR9NgIz3kFl9MpLLZqjLmfQNr7oGL4JtsapznlGhQ
UZ8Old9qjdhr02Ib+9WrN6ENd+wLNQ6FUt5VT3aYZ+BAltvr/0KUmtO6U4j3lKrQ
HS6UvJnTApkeaZOX91Ae7STtKTLKQwSWpI3B7xyXFfoBSQkMaJN59hUMdXiDB9Ly
jPnPqgiloAG5iYxXLJG7BkZkIupD+NKnCQotfNpG7CcSJh5i6a7vTNegcT0GwlBM
HL+PxUXGzpbttmEFJOfJ8mPtcnYBm2J30Y7ybm1SVkb99ow+XohqUg73i53EoUNv
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9887191483265580973079954205
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-26 11:55:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-27 11:55:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Universitaet Duisburg-Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zentrum fuer Informations- und Mediendienste (UDE)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'idp.uni-duisburg-essen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26382542009430863631434191662956308497492323441837979450674131539261240534506809765364577680542108741186788603518113521637212305287287294109321756798410729649611787209147480416473096813999985722252817850470705505555847535659594052621187056849784816315334437430745158834778169668415284563346997456779157215721889202547550816912976478570278880141247661507066452754310111254788798584421946526517551676997608418562751410514360633819401929722196501870912266774890992704416318544495094062177728932916982207344856996637032568201837546412139235136369488694414241706641278520719980559531138734208900246885496376410166538760093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14c7cf2aadbef92ef26f7b0dbdc6d591c2c48d33
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (154 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp-test.uni-due.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp-test.uni-duisburg-essen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp-test2.uni-due.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp-test2.uni-duisburg-essen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp.uni-due.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp.uni-duisburg-essen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (847 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (843 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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