www.governikus.de

Issued by TeleSec ServerPass CA 2

About this certificate


This digital certificate with serial number d8:6b:97:0d:1f:61:3f:e7 was issued on by T-Systems International GmbH .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • WARNING: Certificate contains a Authority Info Access Issuer with an non-preferred scheme ([ldap])
  • ERROR: Certificate contains a CRL with an non-preferred scheme ([ldap])

Governikus GmbH & Co. KG

Organization: Governikus GmbH & Co. KG
Organization unit: SE
State / Province: Bremen
Locality: Bremen
Country: DE

T-Systems International GmbH

Organization: T-Systems International GmbH
Organization unit: Trust Center Services
Address: Untere Industriestr. 20
State / Province: Bremen
Locality: Bremen
Country: DE

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): d8:6b:97:0d:1f:61:3f:e7
Serial Number (int): 15594724217317310439
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 9d:ca:2a:8b:bc:41:b6:d6:85:ea:a0:52:a7:50:4e:31:85:32:75:80
AuthorityKeyId: 15:bb:de:d6:25:6f:bd:f2:31:9f:62:13:dc:5c:a6:f4:65:b4:6d:f2

Fingerprint (sha1): ca:58:3b:66:da:ff:05:55:9f:9a:a2:0c:e9:e3:ca:82:18:97:a9:0e
Fingerprint (sha256): 02:77:3c:1c:ab:9d:c4:37:98:d1:26:0c:d4:ef:e1:5d:f4:27:1a:b4:b8:72:64:dc:b2:18:d5:dc:a5:21:6c:d8

Issuing Certificate URL: http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_CA_2.cer
Issuing Certificate URL: ldap://ldap.serverpass.telesec.de/cn=TeleSec%20ServerPass%20CA%202,ou=Trust%20Center%20Services,o=T-Systems%20International%20GmbH,c=de?cACertificate

Revocation information

OCSP Server: http://ocsp.serverpass.telesec.de/ocspr
CRL Distribution Point: http://crl.serverpass.telesec.de/rl/TeleSec_ServerPass_CA_2.crl
CRL Distribution Point: ldap://ldap.serverpass.telesec.de/cn=TeleSec%20ServerPass%20CA%202,ou=Trust%20Center%20Services,o=T-Systems%20International%20GmbH,c=de?certificateRevocationlist?base?certificateRevocationlist=*

Check the revocation status for the current certificate on www.governikus.de
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: www.governikus.de

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIIYDCCB0igAwIBAgIJANhrlw0fYT/nMA0GCSqGSIb3DQEBCwUAMIHYMQswCQYD VQQGEwJERTElMCMGA1UEChMcVC1TeXN0ZW1zIEludGVybmF0aW9uYWwgR21iSDEe MBwGA1UECxMVVHJ1c3QgQ2VudGVyIFNlcnZpY2VzMSAwHgYDVQQDExdUZWxlU2Vj IFNlcnZlclBhc3MgQ0EgMjEcMBoGA1UECBMTTm9yZHJoZWluIFdlc3RmYWxlbjEO MAwGA1UEERMFNTcyNTAxEDAOBgNVBAcTB05ldHBoZW4xIDAeBgNVBAkTF1VudGVy ZSBJbmR1c3RyaWVzdHIuIDIwMB4XDTE1MTAyMDEzMzE0NFoXDTE3MDYyNTIzNTk1 OVowgaMxCzAJBgNVBAYTAkRFMSEwHwYDVQQKDBhHb3Zlcm5pa3VzIEdtYkggJiBD by4gS0cxCzAJBgNVBAsTAlNFMQ8wDQYDVQQIEwZCcmVtZW4xDzANBgNVBAcTBkJy ZW1lbjEmMCQGCSqGSIb3DQEJARYXd2VibWFzdGVyQGdvdmVybmlrdXMuZGUxGjAY BgNVBAMTEXd3dy5nb3Zlcm5pa3VzLmRlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A MIICCgKCAgEAvVuZgjf4d7lQr7n0R5CBEL9RkJR9vQLoE+Zv6gRgH33W/x5wZkjq zogP75hyJS9BONnX/eKy2lhO2tG/4sV0o3dN01vKMymOp3jOhok+Uri+j/Znfndv NgXViqzoKzHUzq0t6F0yDfovqu74sltrEGYPHYZRzxnyR3Ivn8Jp9m6irPcVg3l2 iK+EmW8WBytI3UBs8vSMSxNt3yhssd5qmNTWcPza/DF3fhK8OHozDCCQgRTUj63+ ExofDADy075SRo/8DAhed2J9tGMsM7daY5i3GxUk0NZg+mFuu/lAWxGfEbPHbmCR LoBjWyMkluQqhQk1D5cF1erTScjPo6VRlDvvM5jno0G+IEenKC8+lsVU3pa4xjqj YDzMFwgJmkWit4mkeKIdKMEGT7xDx2NepK2IGatYya1MhTuB6/YT01HQG5Cpe2FB tXen5HaQM0kstlrv0E5w4Qq932R6dfqWo/8+zGrFZ6PV8dtz3J/8iGQLOzVGB4MX KzJ4fdC+r101UNIxLF2OW9y4tfHs2udMeSzPQYDzNPvFy4TVFf7zelq5kFNdBinp rqcVYBiZXrRglnZrCIPwpzwLLtoTPQ+B3NePPzv8ANklesoo5vGGPAwnB7L3wqHI +lgakX/bcifDVuwZNEiBRg3ZSJ5HZ3FPup4sAflchdZL07dP/8+uPHMCAwEAAaOC A14wggNaMB8GA1UdIwQYMBaAFBW73tYlb73yMZ9iE9xcpvRltG3yMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwHQYDVR0OBBYE FJ3KKou8QbbWheqgUqdQTjGFMnWAMFkGA1UdIARSMFAwRAYJKwYBBAG9Rw0CMDcw NQYIKwYBBQUHAgEWKWh0dHA6Ly93d3cudGVsZXNlYy5kZS9zZXJ2ZXJwYXNzL2Nw cy5odG1sMAgGBmeBDAECAjCCASIGA1UdHwSCARkwggEVMEWgQ6BBhj9odHRwOi8v Y3JsLnNlcnZlcnBhc3MudGVsZXNlYy5kZS9ybC9UZWxlU2VjX1NlcnZlclBhc3Nf Q0FfMi5jcmwwgcuggciggcWGgcJsZGFwOi8vbGRhcC5zZXJ2ZXJwYXNzLnRlbGVz ZWMuZGUvY249VGVsZVNlYyUyMFNlcnZlclBhc3MlMjBDQSUyMDIsb3U9VHJ1c3Ql MjBDZW50ZXIlMjBTZXJ2aWNlcyxvPVQtU3lzdGVtcyUyMEludGVybmF0aW9uYWwl MjBHbWJILGM9ZGU/Y2VydGlmaWNhdGVSZXZvY2F0aW9ubGlzdD9iYXNlP2NlcnRp ZmljYXRlUmV2b2NhdGlvbmxpc3Q9KjCCAToGCCsGAQUFBwEBBIIBLDCCASgwMwYI KwYBBQUHMAGGJ2h0dHA6Ly9vY3NwLnNlcnZlcnBhc3MudGVsZXNlYy5kZS9vY3Nw cjBMBggrBgEFBQcwAoZAaHR0cDovL2NybC5zZXJ2ZXJwYXNzLnRlbGVzZWMuZGUv Y3J0L1RlbGVTZWNfU2VydmVyUGFzc19DQV8yLmNlcjCBogYIKwYBBQUHMAKGgZVs ZGFwOi8vbGRhcC5zZXJ2ZXJwYXNzLnRlbGVzZWMuZGUvY249VGVsZVNlYyUyMFNl cnZlclBhc3MlMjBDQSUyMDIsb3U9VHJ1c3QlMjBDZW50ZXIlMjBTZXJ2aWNlcyxv PVQtU3lzdGVtcyUyMEludGVybmF0aW9uYWwlMjBHbWJILGM9ZGU/Y0FDZXJ0aWZp Y2F0ZTAMBgNVHRMBAf8EAjAAMBwGA1UdEQQVMBOCEXd3dy5nb3Zlcm5pa3VzLmRl MA0GCSqGSIb3DQEBCwUAA4IBAQC70pnaKdgWohbQMz5NKwGdiGSAt1zAqbMVsClK /t3A2JmdObo3jhkA65OlAaiJu5slR3gD/PYIs5Aujj9VV2qSlqcJKUKYg5pab5ZG TyrD8NpgPg2YuFD9cDyWU4d3n8XEWq/RfXrS2V9V2aLQlNbeoc+uP6HpTCiK/YDX izWzdyXf+GWdBbDw5QaI1TeRMWDtcpWadrbb5Qi+3tbzIdzLy7v6KxSAlS8vFALQ DygLljdQL1ohvP2JUF9zVP4TDrs1urkdpjmvX+mPg+0XYH4OTQDJXFRxPROBxWM1 obB+6lwUe4muXbNdEyyuD0tNClPmo7858GYf8SF1ZfCYlKEx -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvVuZgjf4d7lQr7n0R5CB EL9RkJR9vQLoE+Zv6gRgH33W/x5wZkjqzogP75hyJS9BONnX/eKy2lhO2tG/4sV0 o3dN01vKMymOp3jOhok+Uri+j/ZnfndvNgXViqzoKzHUzq0t6F0yDfovqu74sltr EGYPHYZRzxnyR3Ivn8Jp9m6irPcVg3l2iK+EmW8WBytI3UBs8vSMSxNt3yhssd5q mNTWcPza/DF3fhK8OHozDCCQgRTUj63+ExofDADy075SRo/8DAhed2J9tGMsM7da Y5i3GxUk0NZg+mFuu/lAWxGfEbPHbmCRLoBjWyMkluQqhQk1D5cF1erTScjPo6VR lDvvM5jno0G+IEenKC8+lsVU3pa4xjqjYDzMFwgJmkWit4mkeKIdKMEGT7xDx2Ne pK2IGatYya1MhTuB6/YT01HQG5Cpe2FBtXen5HaQM0kstlrv0E5w4Qq932R6dfqW o/8+zGrFZ6PV8dtz3J/8iGQLOzVGB4MXKzJ4fdC+r101UNIxLF2OW9y4tfHs2udM eSzPQYDzNPvFy4TVFf7zelq5kFNdBinprqcVYBiZXrRglnZrCIPwpzwLLtoTPQ+B 3NePPzv8ANklesoo5vGGPAwnB7L3wqHI+lgakX/bcifDVuwZNEiBRg3ZSJ5HZ3FP up4sAflchdZL07dP/8+uPHMCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15594724217317310439 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'T-Systems International GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Center Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TeleSec ServerPass CA 2' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein Westfalen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '57250' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Netphen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Untere Industriestr. 20' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-20 13:31:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-25 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Governikus GmbH & Co. KG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.governikus.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 772512470813345649909512857266564839190775545914786726522506405699194396129040734916100953607356407703318568164045481578165266203781164107625012050133880223205945720770923658291307911680885875576811498449940858212387067792850573757804559993755796860888903184936722154742161104745786519116514797609790109840423519488666546188212023097056042667557781782617726348856987052099043875908439097548487717906020496778361469907108922437688722742449176965413043467586546150414025312369501058357137770826200255412853608813522833978632206433107304277535638006035408702158302710851078446107989201079231195280586553360149306419421040837866576347315388490489282049939219875147839638536666345132388855992021449389592106201371801619065729832049284641924167155962818852323040234307826731737607494118403582892867507546151507343650958462814077756194934269914394761551346416229327426394420868916149235845297911986009389220549439590330000810440653247854290674436946390963244019643401404562393165443423205664889830869676529711521348778800445015152877308759805464713777271380480078269387486189307707043863710298722367440008723071995183283836608959135598227624936223497299060529166136989433650461880400530967069012640198106823399959491207662618725572540251251 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 15bbded6256fbdf2319f6213dc5ca6f465b46df2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9dca2a8bbc41b6d685eaa052a7504e3185327580 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.7879.13.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.telesec.de/serverpass/cps.html' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (281 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/rl/TeleSec_ServerPass_CA_2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.serverpass.telesec.de/cn=TeleSec%20ServerPass%20CA%202,ou=Trust%20Center%20Services,o=T-Systems%20International%20GmbH,c=de?certificateRevocationlist?base?certificateRevocationlist=*' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (300 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.serverpass.telesec.de/ocspr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_CA_2.cer' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.serverpass.telesec.de/cn=TeleSec%20ServerPass%20CA%202,ou=Trust%20Center%20Services,o=T-Systems%20International%20GmbH,c=de?cACertificate' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.governikus.de' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00bbd299da29d816a216d0333e4d2b019d886480b75cc0a9b315b0294afeddc0d8999d39ba378e1900eb93a501a889bb9b25477803fcf608b3902e8e3f55576a9296a709294298839a5a6f96464f2ac3f0da603e0d98b850fd703c965387779fc5c45aafd17d7ad2d95f55d9a2d094d6dea1cfae3fa1e94c288afd80d78b35b37725dff8659d05b0f0e50688d537913160ed72959a76b6dbe508beded6f321dccbcbbbfa2b1480952f2f1402d00f280b9637502f5a21bcfd89505f7354fe130ebb35bab91da639af5fe98f83ed17607e0e4d00c95c54713d1381c56335a1b07eea5c147b89ae5db35d132cae0f4b4d0a53e6a3bf39f0661ff1217565f09894a131