mszweb.mandant.dwd.de
- Deutscher Wetterdienst -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number fd:41:4c:90:cc:e7:1e:c3:0c:12:93:34:79:5f:20:ac was issued on by GEANT Vereniging.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Deutscher Wetterdienst
Organization:
Deutscher Wetterdienst
State / Province:
Hessen
Country: DE
Country: DE
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): fd:41:4c:90:cc:e7:1e:c3:0c:12:93:34:79:5f:20:acSerial Number (int): 336633735164788108358399375327304294572
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 91:9a:d2:7d:22:80:e0:53:70:19:b5:6a:e4:1b:91:8b:1c:7e:d9:4d
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): 6a:db:d1:1e:88:d3:68:e5:fc:60:52:14:2a:a6:65:69:c0:43:6e:08
Fingerprint (sha256): 14:f8:6a:c8:d4:30:72:85:45:02:01:46:80:75:7a:11:ef:ef:68:9b:da:7c:3f:fe:a8:58:e9:1e:73:03:a0:f7
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate mszweb.mandant.dwd.de
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mszweb.mandant.dwd.de
Public Key Algorithm
RSA
Key Size
3072
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mszweb.mandant.dwd.de
msz-cuxhaven.de
www.kuestenwache.de
www.msz-cuxhaven.com
www.msz-cuxhaven.de
www.msz-cuxhaven.info
www.msz-cuxhaven.org
www.xn--kstenwache-9db.de
msz-cuxhaven.de
www.kuestenwache.de
www.msz-cuxhaven.com
www.msz-cuxhaven.de
www.msz-cuxhaven.info
www.msz-cuxhaven.org
www.xn--kstenwache-9db.de
Other certificates including the domain name dwd.de
(limited to 100 certificates)
maps.dwd.de
ssi-intern.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
ssi.dwd.de
www.deutscher-wetterdienst.de
hosting.dwd.de
maps.dwd.de
kunden.dwd.de
dwdvd.dwd.de
hosting.dwd.de
nl-prox.dwd.de
www.flugwetter.de
expertennetzwerk.mandant.dwd.de
www.dwd.de
ssi.dwd.de
isedmz-p.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
wis-gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
www.dwd.de
kunden.dwd.de
oflsd46.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
ebc.mandant.dwd.de
ofvkexpc01.dwd.de
pappl.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
alephino.dwd.de
hosting.dwd.de
fralux.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
kassandra.dwd.de
maps.dwd.de
brzvpngw.dwd.de
listen-prox.dwd.de
dwdhosting.mandant.dwd.de
hosting.dwd.de
hk.mandant.dwd.de
virtadm-hosts.dwd.de
klimawandel.mandant.dwd.de
oflxd18.dwd.de
hosting.dwd.de
oflxsn10.dwd.de
hosting.dwd.de
xmdm.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
qs-ninjoservices.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
cdc.dwd.de
oflsd46.dwd.de
beobachtungen.dwd.de
ninjoservices-neu.dwd.de
oflxs616.dwd.de
prometheus.dwd.de
gdws.mandant.dwd.de
ofvkexpe01.dwd.de
hosting.dwd.de
opendata.dwd.de
hosting.dwd.de
sva.mandant.dwd.de
stbauf.mandant.dwd.de
kunden.dwd.de
beobachtungen.dwd.de
hosting.dwd.de
oflsd46.dwd.de
molrao.dwd.de
hosting.dwd.de
webwerdis-intra.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
listen-prox.dwd.de
ssi-intern.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
ssi.dwd.de
www.deutscher-wetterdienst.de
hosting.dwd.de
maps.dwd.de
kunden.dwd.de
dwdvd.dwd.de
hosting.dwd.de
nl-prox.dwd.de
www.flugwetter.de
expertennetzwerk.mandant.dwd.de
www.dwd.de
ssi.dwd.de
isedmz-p.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
wis-gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
www.dwd.de
kunden.dwd.de
oflsd46.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
ebc.mandant.dwd.de
ofvkexpc01.dwd.de
pappl.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
alephino.dwd.de
hosting.dwd.de
fralux.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
kassandra.dwd.de
maps.dwd.de
brzvpngw.dwd.de
listen-prox.dwd.de
dwdhosting.mandant.dwd.de
hosting.dwd.de
hk.mandant.dwd.de
virtadm-hosts.dwd.de
klimawandel.mandant.dwd.de
oflxd18.dwd.de
hosting.dwd.de
oflxsn10.dwd.de
hosting.dwd.de
xmdm.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
qs-ninjoservices.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
cdc.dwd.de
oflsd46.dwd.de
beobachtungen.dwd.de
ninjoservices-neu.dwd.de
oflxs616.dwd.de
prometheus.dwd.de
gdws.mandant.dwd.de
ofvkexpe01.dwd.de
hosting.dwd.de
opendata.dwd.de
hosting.dwd.de
sva.mandant.dwd.de
stbauf.mandant.dwd.de
kunden.dwd.de
beobachtungen.dwd.de
hosting.dwd.de
oflsd46.dwd.de
molrao.dwd.de
hosting.dwd.de
webwerdis-intra.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
listen-prox.dwd.de
Certificate
The complete raw certificate details for mszweb.mandant.dwd.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIdzCCBl+gAwIBAgIRAP1BTJDM5x7DDBKTNHlfIKwwDQYJKoZIhvcNAQEMBQAw RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIyMTEwMzAwMDAwMFoXDTIzMTEwMzIz NTk1OVowXzELMAkGA1UEBhMCREUxDzANBgNVBAgTBkhlc3NlbjEfMB0GA1UEChMW RGV1dHNjaGVyIFdldHRlcmRpZW5zdDEeMBwGA1UEAxMVbXN6d2ViLm1hbmRhbnQu ZHdkLmRlMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAuzw0/uNJLDza M98rOGmEnysmDiMZvQttwoREBT9paT9FxmHTmVeBVRoye40wnmtaSoNKZvCrAv4R 2jwcjHjB4WcyAGN3hsfkMKVBdwpj828WEmeZ+qN7zwFxs5CM8xT9lR7xWabEf0xn rhYafXW22DRrAC+1BP4ETGE0a48nxcjQGkMyWYB3AUEORvsPEbHh2Hm5HSe9Pyo7 43x+WR6Xc9bYCNyaPjv+KzetkxODB1u5lZWKeFgfyxw8Dbld783ESBBM4gJFtggy c6hTfQEQQNwQsSeLyZ/YeI9m6pcCgl/Sdp/STqmFs9ykr0YWHr6lDBQi/ZI1PelM udxoIHtFq0qVe47cDzY6PASNm4J8YLQd6qCpRufZUtK6k7oACKYU4f+IxPBr3YXU QnFnj2xMEHOeO7JpwD2ubKR9K/K3NQbp5kSmt9xPs7N197x/LYN3lA0LKn/3iroE j5dxtJSv6PiNEXU0dhetCfyHyvvyilFbuLoMThK6sYTH9cVG27HfAgMBAAGjggPH MIIDwzAfBgNVHSMEGDAWgBRvHTVJEGwy+lmgnryK6B+VvnF6DDAdBgNVHQ4EFgQU kZrSfSKA4FNwGbVq5BuRixx+2U0wDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQC MAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1UdIARCMEAwNAYL KwYBBAGyMQECAk8wJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9D UFMwCAYGZ4EMAQICMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9HRUFOVC5jcmwu c2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcmwwdQYIKwYBBQUHAQEEaTBnMDoG CCsGAQUFBzAChi5odHRwOi8vR0VBTlQuY3J0LnNlY3RpZ28uY29tL0dFQU5UT1ZS U0FDQTQuY3J0MCkGCCsGAQUFBzABhh1odHRwOi8vR0VBTlQub2NzcC5zZWN0aWdv LmNvbTCCAYEGCisGAQQB1nkCBAIEggFxBIIBbQFrAHcArfe++nz/EMiLnT2cHj4Y arRnKV3PsQwkyoWGNOvcgooAAAGEPR/eagAABAMASDBGAiEA5Kvh9eYOsFugunVV TA+Ae68O/3/pkSOf3Hwe1ZzWQlkCIQDZ0jVHDutqtiDVSv7pRcEiznO/KjuYaOn3 nUK2F3HlfgB3AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABhD0f 3jYAAAQDAEgwRgIhAIu6El+FzZcxgCXZjCNkrxM4ns2Hl+3Lhsy8vSOmcfWjAiEA 4VCOpRlrvuUIs8ENkWLWMgaPzpTu5ZPgwKkf/ydVLFQAdwDoPtDaPvUGNTLnVyi8 iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYQ9H94HAAAEAwBIMEYCIQDV9PzVIM+Lr2fn yPCUyhl+KFUFvyTKTNHxi5fAQzM4JQIhAJdIlupzFrcW1CYoZayjogTJCYpqe4mh XXkTn482EhLTMIG7BgNVHREEgbMwgbCCFW1zendlYi5tYW5kYW50LmR3ZC5kZYIP bXN6LWN1eGhhdmVuLmRlghN3d3cua3Vlc3RlbndhY2hlLmRlghR3d3cubXN6LWN1 eGhhdmVuLmNvbYITd3d3Lm1zei1jdXhoYXZlbi5kZYIVd3d3Lm1zei1jdXhoYXZl bi5pbmZvghR3d3cubXN6LWN1eGhhdmVuLm9yZ4IZd3d3LnhuLS1rc3RlbndhY2hl LTlkYi5kZTANBgkqhkiG9w0BAQwFAAOCAgEAoGf142EHAhfYX3rqoHcUIrG++j5o LT0yYrn6f2gx69ovOFV2iCw5NsoeyRsCyvGZQzFza3yExfOD3pOgbaiW/c9t7Z6X +kVx1QAqKvpAcOAqFkReH3ns+c/Uq/2cRHRDUn6RWLLchpVuNiowqJHAVNSQ6PJv 9+XgMMV7sxLuHPFCooP91hOuu5V4YWK9p2xTkB0MUiRSlwCVc46g5JrtBeaZmkpr fN7DuN8p/sgf/cNilpUV0YlrJSiqmQVRuqKrRgIOmJ8Ag4JjyQXmhmqjD1EJgKh2 xeCuCWIZ8fYKMxG33ajny4HZA2v+/RWFDUcLP7iHpoOHvZWQJLzKCTik371LriFB tJ1x/uDbg8G/ZNjoc61V/iG5201nhsCADGxHV/3f2/ecVC7Mlzp+yYjE9kOHhN8k j/OAb7iv9qKaP3FQn84nDd4AKQS/pqGQIZXnDamdY0UTrIBrJkLEQPR9yDHpXXOX E0g9BEFpj8Fsn0m2ffk/RebTKlgIFnjDtdAOviP8VCax3Zm+Z3ubvNO4DahfL/lF WrD9vvi7fjcev9rgt/+rOTxN/Ninuvz1UJhdZHDDJ4Jz4MpB7BpTsuNgr+LbWprN RL6u6gZk81JpIIzzzDFLb80qKw6wzQdxlilF6zD+9j8rr9W8Z8YjyXLvHw8K0aPS Ed36OMtpefVrA/U= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAuzw0/uNJLDzaM98rOGmE nysmDiMZvQttwoREBT9paT9FxmHTmVeBVRoye40wnmtaSoNKZvCrAv4R2jwcjHjB 4WcyAGN3hsfkMKVBdwpj828WEmeZ+qN7zwFxs5CM8xT9lR7xWabEf0xnrhYafXW2 2DRrAC+1BP4ETGE0a48nxcjQGkMyWYB3AUEORvsPEbHh2Hm5HSe9Pyo743x+WR6X c9bYCNyaPjv+KzetkxODB1u5lZWKeFgfyxw8Dbld783ESBBM4gJFtggyc6hTfQEQ QNwQsSeLyZ/YeI9m6pcCgl/Sdp/STqmFs9ykr0YWHr6lDBQi/ZI1PelMudxoIHtF q0qVe47cDzY6PASNm4J8YLQd6qCpRufZUtK6k7oACKYU4f+IxPBr3YXUQnFnj2xM EHOeO7JpwD2ubKR9K/K3NQbp5kSmt9xPs7N197x/LYN3lA0LKn/3iroEj5dxtJSv 6PiNEXU0dhetCfyHyvvyilFbuLoMThK6sYTH9cVG27HfAgMBAAE= -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 336633735164788108358399375327304294572 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutscher Wetterdienst' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mszweb.mandant.dwd.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4249072833884786656892048008149469662973219137856237366636571431683449731427649843019239315078247895696780669100388987761118571082994276793217313895993140373934754348011505916737467411373846127680381730555421954977464862557260899184387862074571847277828814778464052733481831277073244667108653841672054842511964934797959745247193127188197501434727364011498811828303350239777072747905269433203900191154191205690195436619194884763962469338186218423640971755529918432591105880216212189998008899144273565031480988600592876847699884053053340178103867441346665824219236702693550921209202981788583416079867192431034704195076119288592817669251015999622929800740773015079988781086082162477293713163149829821823607093865094840636063200272500312534681498666422755471242931289949750269263069001479730050284142903500523289919250035696855707549832840698027578675324504012483340505730334729992318980486490948026541212195225403573769305043423 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 919ad27d2280e0537019b56ae41b918b1c7ed94d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (179 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mszweb.mandant.dwd.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msz-cuxhaven.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuestenwache.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msz-cuxhaven.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msz-cuxhaven.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msz-cuxhaven.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msz-cuxhaven.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--kstenwache-9db.de' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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