ebc.mandant.dwd.de
- Deutscher Wetterdienst -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number d6:f3:66:df:6c:3d:32:73:ff:1f:89:fd:c2:bd:9c:64 was issued on by GEANT Vereniging.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Deutscher Wetterdienst
Organization:
Deutscher Wetterdienst
State / Province:
Hessen
Country: DE
Country: DE
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate will expire on
Certificate Details
Serial Number (hex): d6:f3:66:df:6c:3d:32:73:ff:1f:89:fd:c2:bd:9c:64Serial Number (int): 285718605741754136860263183175655464036
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 45:b1:ce:06:77:cb:97:17:ef:bd:5e:5a:a3:d9:85:e0:99:32:e0:00
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): 30:45:aa:8f:16:29:23:20:ef:38:e2:27:0f:7b:6a:b6:27:20:9c:46
Fingerprint (sha256): 14:29:2b:88:64:4c:53:6c:b6:85:1a:2c:08:a7:70:aa:61:e6:ab:4d:b3:7a:e9:2a:6c:be:5f:9f:31:53:3c:7e
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate ebc.mandant.dwd.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ebc.mandant.dwd.de
Public Key Algorithm
RSA
Key Size
3072
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ebc.mandant.dwd.de
www.eisenbahn-cert.de
www.eisenbahn-cert.de
Other certificates including the domain name dwd.de
(limited to 100 certificates)
maps.dwd.de
ssi-intern.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
ssi.dwd.de
www.deutscher-wetterdienst.de
hosting.dwd.de
maps.dwd.de
kunden.dwd.de
dwdvd.dwd.de
hosting.dwd.de
nl-prox.dwd.de
www.flugwetter.de
expertennetzwerk.mandant.dwd.de
www.dwd.de
ssi.dwd.de
isedmz-p.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
wis-gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
www.dwd.de
kunden.dwd.de
oflsd46.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
ebc.mandant.dwd.de
ofvkexpc01.dwd.de
pappl.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
alephino.dwd.de
hosting.dwd.de
fralux.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
kassandra.dwd.de
maps.dwd.de
brzvpngw.dwd.de
listen-prox.dwd.de
dwdhosting.mandant.dwd.de
hosting.dwd.de
hk.mandant.dwd.de
virtadm-hosts.dwd.de
klimawandel.mandant.dwd.de
oflxd18.dwd.de
hosting.dwd.de
oflxsn10.dwd.de
hosting.dwd.de
xmdm.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
qs-ninjoservices.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
cdc.dwd.de
oflsd46.dwd.de
beobachtungen.dwd.de
ninjoservices-neu.dwd.de
oflxs616.dwd.de
prometheus.dwd.de
gdws.mandant.dwd.de
ofvkexpe01.dwd.de
hosting.dwd.de
opendata.dwd.de
hosting.dwd.de
sva.mandant.dwd.de
stbauf.mandant.dwd.de
kunden.dwd.de
beobachtungen.dwd.de
hosting.dwd.de
oflsd46.dwd.de
molrao.dwd.de
hosting.dwd.de
webwerdis-intra.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
listen-prox.dwd.de
ssi-intern.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
ssi.dwd.de
www.deutscher-wetterdienst.de
hosting.dwd.de
maps.dwd.de
kunden.dwd.de
dwdvd.dwd.de
hosting.dwd.de
nl-prox.dwd.de
www.flugwetter.de
expertennetzwerk.mandant.dwd.de
www.dwd.de
ssi.dwd.de
isedmz-p.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
wis-gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
www.dwd.de
kunden.dwd.de
oflsd46.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
ebc.mandant.dwd.de
ofvkexpc01.dwd.de
pappl.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
alephino.dwd.de
hosting.dwd.de
fralux.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
kassandra.dwd.de
maps.dwd.de
brzvpngw.dwd.de
listen-prox.dwd.de
dwdhosting.mandant.dwd.de
hosting.dwd.de
hk.mandant.dwd.de
virtadm-hosts.dwd.de
klimawandel.mandant.dwd.de
oflxd18.dwd.de
hosting.dwd.de
oflxsn10.dwd.de
hosting.dwd.de
xmdm.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
qs-ninjoservices.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
cdc.dwd.de
oflsd46.dwd.de
beobachtungen.dwd.de
ninjoservices-neu.dwd.de
oflxs616.dwd.de
prometheus.dwd.de
gdws.mandant.dwd.de
ofvkexpe01.dwd.de
hosting.dwd.de
opendata.dwd.de
hosting.dwd.de
sva.mandant.dwd.de
stbauf.mandant.dwd.de
kunden.dwd.de
beobachtungen.dwd.de
hosting.dwd.de
oflsd46.dwd.de
molrao.dwd.de
hosting.dwd.de
webwerdis-intra.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
listen-prox.dwd.de
Certificate
The complete raw certificate details for ebc.mandant.dwd.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIH6jCCBdKgAwIBAgIRANbzZt9sPTJz/x+J/cK9nGQwDQYJKoZIhvcNAQEMBQAw RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIzMDgyODAwMDAwMFoXDTI0MDgyNzIz NTk1OVowXDELMAkGA1UEBhMCREUxDzANBgNVBAgTBkhlc3NlbjEfMB0GA1UEChMW RGV1dHNjaGVyIFdldHRlcmRpZW5zdDEbMBkGA1UEAxMSZWJjLm1hbmRhbnQuZHdk LmRlMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEA2vIMchJTkPEAwOeJ d8G96ajs3rWeMKZTSTVQlh6Y1iGyzVdHSGTXYEl6utJrfc4kOE6/wLFW6HwQYhoZ s3OYNzsvb67XsZb2cwR888JW2jzN8p1PfD/IBhCVQtuG4bMbbWsA4PcxFcavNdDi +SCqqnd2h7v233djuQ3ugbYtuaBlIasvp4+icQQ5OuUFXWSrJZFToij7T9Fm2XVt 1sbW+0EJLCj48eUrdZ0N6hhtdX39LRq+Jh4kpXqZ947tRr9n9MGGUKoW11Xe0l+0 dBW1HqVrUqvtmpq0LtO4xJyVaC8bsEbN9UUkbhEb50pKGZ0ZBJ0Huu7hrIqa6/LW l8ey0lWOG3rx3viqMcvNVMqWYZiReLKzaxui+sqhtaBPShqaaYNjqs868Dq21Hjj ZP4XiWu5/A6bP4sRwvguSDh+rlPyYm7E4Md+jHMSZbQ9xGkOfNdTgKtFIuRKk8Fq 7MkaGZJQjaPtOEJDoTTqmMXn1qRsW0uIm+jXbIy+uj8ze8ZtAgMBAAGjggM9MIID OTAfBgNVHSMEGDAWgBRvHTVJEGwy+lmgnryK6B+VvnF6DDAdBgNVHQ4EFgQURbHO BnfLlxfvvV5ao9mF4Jky4AAwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1UdIARCMEAwNAYLKwYB BAGyMQECAk8wJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMw CAYGZ4EMAQICMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9HRUFOVC5jcmwuc2Vj dGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcmwwdQYIKwYBBQUHAQEEaTBnMDoGCCsG AQUFBzAChi5odHRwOi8vR0VBTlQuY3J0LnNlY3RpZ28uY29tL0dFQU5UT1ZSU0FD QTQuY3J0MCkGCCsGAQUFBzABhh1odHRwOi8vR0VBTlQub2NzcC5zZWN0aWdvLmNv bTCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHYAdv+IPwq2+5VRwmHM9Ye6NLSk zbsp3GhCCp/mZ0xaOnQAAAGKOm3yigAABAMARzBFAiEAiEFoGzxRKdmtlDiwoHx4 aPbx+HH/z4kTjmzpfmr7+zICIB4vYVRmZ5HgzTjBSM3pa/N8JGDMeb/tsQHpSj6Q yM0OAHYA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGKOm3y2wAA BAMARzBFAiEA0Wb1uiho/jixZliu639Mww8H1zAIx0/YfnmkWIViCOICIGFJ84l7 c0vULoCvwmTL+hMnfQkbCqf446dpAXLMqb37AHcA7s3QZNXbGs7FXLedtM0TojKH Rny87N7DUUhZRnEftZsAAAGKOm3yswAABAMASDBGAiEApCI8hEV32rMeCe3F+lvY dyJqY/WJoMkKnRmmW55OZusCIQCjvhm7HON8XcjndmQMCsK2aNvS1GKiLZBPD9ol tJrkmTA0BgNVHREELTArghJlYmMubWFuZGFudC5kd2QuZGWCFXd3dy5laXNlbmJh aG4tY2VydC5kZTANBgkqhkiG9w0BAQwFAAOCAgEANmFkhhiOFNwrc7bBUlKhx9tq /MUPIrVi5mDEwNFwxiHQuVgW+AoXhItsmDcRBUkxkwPNcdi7Jkrp0u9Qyrpzs2AO KDpT/F62RYR1040LR+UFgDak3GohX7n4N/RIQgOf2ojP7Zx+ykJCgb3yyHJOTvYa 6o1/Ly8Oo4axL1ymn1CPZ9RCKNO01WVKm7tG7gCNdQwjd3BtTLfX34cgefsRbFlr z2PZNbaYH4/0Q+RDq2HQv8QyUk990hO+P7J//aKZtVbbWWYAmcxFcOfEFLRk+Kfy Zbf4EDpH6VtUGDHBa7MO4aoCTdyYfQwpeSMyCVydebf3KVJQytfeoFDoHe8+fKEf o21YzoWeR7RZpxerrOihwXkffDh5FkZyZ+Qyq0axycRaRNH1/yAbfyiSEid2gQqM 35xq4LG7JLhxL+a0Qhm0WHbqEAMsrgGqz5QOYnD8WpHIhtE9kNRynfkFZfCKRs4s h2+5mj+89ZLzA41dAEi0AFBHO+5MdXVG8hgj8nlh1de6ldF7LT1ia9G+a9VggnLC Ykpty3k9R/EyLW3mxOw+RDstgsgt2+1OpKDSReCODI0wM2r8zUAoMHLzUJlGncp7 lS9xDW6k3jGWtZ0ZyZbFn78pBY6gVO3YfauddlRjaLDrdRTD5KF7h0epDg123xNE C/jmsutM1L7JiAbHaas= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEA2vIMchJTkPEAwOeJd8G9 6ajs3rWeMKZTSTVQlh6Y1iGyzVdHSGTXYEl6utJrfc4kOE6/wLFW6HwQYhoZs3OY Nzsvb67XsZb2cwR888JW2jzN8p1PfD/IBhCVQtuG4bMbbWsA4PcxFcavNdDi+SCq qnd2h7v233djuQ3ugbYtuaBlIasvp4+icQQ5OuUFXWSrJZFToij7T9Fm2XVt1sbW +0EJLCj48eUrdZ0N6hhtdX39LRq+Jh4kpXqZ947tRr9n9MGGUKoW11Xe0l+0dBW1 HqVrUqvtmpq0LtO4xJyVaC8bsEbN9UUkbhEb50pKGZ0ZBJ0Huu7hrIqa6/LWl8ey 0lWOG3rx3viqMcvNVMqWYZiReLKzaxui+sqhtaBPShqaaYNjqs868Dq21HjjZP4X iWu5/A6bP4sRwvguSDh+rlPyYm7E4Md+jHMSZbQ9xGkOfNdTgKtFIuRKk8Fq7Mka GZJQjaPtOEJDoTTqmMXn1qRsW0uIm+jXbIy+uj8ze8ZtAgMBAAE= -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 285718605741754136860263183175655464036 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-27 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutscher Wetterdienst' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ebc.mandant.dwd.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4968699622771213156155386646852962625783386602898528812058371770149830487309018671713639335680024460946001358465356787076576039752423418095797549315034548350063967967318229126492005090132352892996487499208025276281948039382866396261058000099896705792766759197840883862734054800203908343920308102291687926609145222890014956363171224281578182870541180422624390215572502447650753307206702434419688799908530254633179273469528237838621143784732293354016457581592528885216262225154637953278713671899433294823261304429426070047032569743809750216562821471160574678671223145151840775655393529550327998239959679631846515507228774627891762864717997946259357333510771123114434993871846917978846067886302361870819134207412759366959448384034233213289287683012053680719740633211663142004582716092445472413672885046111559262023837101100137202223572306936934914876250349869809092420522368865075349413308034792925502775749122889440493043435117 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 45b1ce0677cb9717efbd5e5aa3d985e09932e000 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 016900760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018a3a6df28a00000403004730450221008841681b3c5129d9ad9438b0a07c7868f6f1f871ffcf89138e6ce97e6afbfb3202201e2f6154666791e0cd38c148cde96bf37c2460cc79bfedb101e94a3e90c8cd0e007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018a3a6df2db0000040300473045022100d166f5ba2868fe38b16658aeeb7f4cc30f07d73008c74fd87e79a458856208e202206149f3897b734bd42e80afc264cbfa13277d091b0aa7f8e3a7690172cca9bdfb007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018a3a6df2b30000040300483046022100a4223c844577dab31e09edc5fa5bd877226a63f589a0c90a9d19a65b9e4e66eb022100a3be19bb1ce37c5dc8e776640c0ac2b668dbd2d462a22d904f0fda25b49ae499 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebc.mandant.dwd.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eisenbahn-cert.de' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 0036616486188e14dc2b73b6c15252a1c7db6afcc50f22b562e660c4c0d170c621d0b95816f80a17848b6c9837110549319303cd71d8bb264ae9d2ef50caba73b3600e283a53fc5eb6458475d38d0b47e5058036a4dc6a215fb9f837f44842039fda88cfed9c7eca424281bdf2c8724e4ef61aea8d7f2f2f0ea386b12f5ca69f508f67d44228d3b4d5654a9bbb46ee008d750c2377706d4cb7d7df872079fb116c596bcf63d935b6981f8ff443e443ab61d0bfc432524f7dd213be3fb27ffda299b556db59660099cc4570e7c414b464f8a7f265b7f8103a47e95b541831c16bb30ee1aa024ddc987d0c29792332095c9d79b7f7295250cad7dea050e81def3e7ca11fa36d58ce859e47b459a717abace8a1c1791f7c387916467267e432ab46b1c9c45a44d1f5ff201b7f2892122776810a8cdf9c6ae0b1bb24b8712fe6b44219b45876ea10032cae01aacf940e6270fc5a91c886d13d90d4729df90565f08a46ce2c876fb99a3fbcf592f3038d5d0048b40050473bee4c757546f21823f27961d5d7ba95d17b2d3d626bd1be6bd5608272c2624a6dcb793d47f1322d6de6c4ec3e443b2d82c82ddbed4ea4a0d245e08e0c8d30336afccd40283072f35099469dca7b952f710d6ea4de3196b59d19c996c59fbf29058ea054edd87dab9d76546368b0eb7514c3e4a17b8747a90e0d76df13440bf8e6b2eb4cd4bec98806c769ab