rbb-online.de

- Rundfunk Berlin-Brandenburg -

Issued by rbb CA

About this certificate

This digital certificate with serial number 1e:b7:8a:26:44:1f:e0:7a:be:1e:1b:e7 was issued on by Rundfunk Berlin-Brandenburg.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Rundfunk Berlin-Brandenburg

Organization: Rundfunk Berlin-Brandenburg
Organization unit: TPS Online
State / Province: Berlin
Locality: Berlin
Country: DE

Rundfunk Berlin-Brandenburg

Organization: Rundfunk Berlin-Brandenburg
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:b7:8a:26:44:1f:e0:7a:be:1e:1b:e7
Serial Number (int): 9506436112089628949354519527
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: f3:34:d6:05:1e:94:5b:bf:6f:63:44:71:c6:03:8a:2a:b9:9f:2b:13
AuthorityKeyId: 79:a5:12:8c:e7:ac:ae:c6:69:c9:04:e6:4b:07:da:72:cb:cb:5d:8d

Fingerprint (sha1): 74:2b:fc:ad:c8:d9:60:8d:bc:e4:94:20:ba:e0:94:9f:dc:70:1d:5b
Fingerprint (sha256): 17:ba:3b:54:c6:2e:81:86:fd:18:0b:9b:59:df:16:c9:e2:64:92:88:7c:77:e5:5f:26:ac:5e:d1:f5:e6:fe:d1

Issuing Certificate URL: http://cdp1.pca.dfn.de/rundfunk-berlin-brandenburg-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/rundfunk-berlin-brandenburg-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/rundfunk-berlin-brandenburg-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/rundfunk-berlin-brandenburg-ca/pub/crl/cacrl.crl

Check the revocation status for certificate rbb-online.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rbb-online.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rbb-online.de

Other certificates including the domain name rbb-online.de

(limited to 100 certificates)
evo-s0.rbb-online.de
mi-vsp02.rbb-online.de
distribution-status.rbb-online.de
sf-ad1.ad.rbb-online.de
ref.rbb-online.de
sp-flimgr03.rbb-online.de
rbb-online.de
sp-ad2.ad.rbb-online.de
sp-ttximport02.rbb-online.de
mi-s4-1.rbb-online.de
sp-vcrpad02.rbb-online.de
sp-view01.ad.rbb-online.de
presseservice.rbb-online.de
rbbot1ev1.rbb-online.de
ttool-extern.rbb-online.de
ref-s0.w3.rbb-online.de
sp-wsa01-p1.rbb-online.de
mediathek-origin.rbb-online.de
sp-jobsmgr01.rbb-online.de
intranet-s0.rbb-online.de
distribution-status.rbb-online.de
mimo.rbb-online.de
munki.rbb-online.de
ndr-news.rbb-online.de
rbb-online.de
sp-ad2.ad.rbb-online.de
sf-ad1.ad.rbb-online.de
sp-fmc01.rbb-online.de
rbb-online.de
pcp.rbb-online.de
distribution-status.rbb-online.de
distribution-status.rbb-online.de
i-doit-i.rbb-online.de
rbblog.rbb-online.de
distribution-status.rbb-online.de
sts.rbb-online.de
evo-p-awx.rbb-online.de
lodoas03.rbb-online.de
sp-im02.rbb-online.de
data.rbb-online.de
sp-ise01.rbb-online.de
sp-dsp-prod01.ad.rbb-online.de
webdoku.rbb-online.de
mi-5.rbb-online.de
webapplog.rbb-online.de
data-vis.rbb-online.de
sp-webdav01.ad.rbb-online.de
smr.rbb-online.de
m-relayb02i.rbb-online.de
rbb-online.de
rbb-online.de
m-relayp02i.rbb-online.de
sp-ttximport02.rbb-online.de
distribution-status.rbb-online.de
m-relayb02.rbb-online.de
distribution-status.rbb-online.de
ip-mgmt.rbb-online.de
ucmobile.rbb-online.de
sb-ad3.ad.rbb-online.de
distribution-status.rbb-online.de
distribution-status.rbb-online.de
sb-osuca01.rbb-online.de
entree-b.rbb-online.de
medienbroker.rbb-online.de
distribution-status.rbb-online.de
distribution-status.rbb-online.de
distribution-status.rbb-online.de
docs.rbb-online.de
evo-static.rbb-online.de
rbb-online.de
sc-ad1.ad.rbb-online.de
rbb-online.de
distribution-status.rbb-online.de
ptp-gm-b.rbb-online.de
rmsext.rbb-online.de
rbb-online.de
mi-s3-1.rbb-online.de
sp-ad4.ad.rbb-online.de
pcp.rbb-online.de
distribution-status.rbb-online.de
mond-mk.rbb-online.de
orbitdvb41.rbb-online.de
birddoghrstatus.paradox.ai
evo-s-awx.rbb-online.de
evo-t1.rbb-online.de
rbb-online.de
sb-aks-dpe00.ad.rbb-online.de
evo-p-fusion.rbb-online.de
evo-data.rbb-online.de
rbb-mon.rbb-online.de
webdoku.rbb-online.de
rbb-online.de
distribution-status.rbb-online.de
sb-ise01.rbb-online.de
sp-cpi02.rbb-online.de
entree-b.rbb-online.de
entree-p.rbb-online.de
sb-tipath01.rbb-online.de
sp-ise01.rbb-online.de
sp-mon-mk1.rbb-online.de

Certificate

The complete raw certificate details for rbb-online.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9506436112089628949354519527
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rundfunk Berlin-Brandenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rbb CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-01 14:22:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 23:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rundfunk Berlin-Brandenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TPS Online'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'rbb-online.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 878814242933905129548015214359012708527786932963298560633737821702434647483505294621756598265017019778779677293376131037979942561494037428098593552062568628840251191265592754167603008354422727400735314642172082798491308362097082274313259438931083996644070689032307423292202625006020683069886473047762199509458779729105864009740245433971237296867473231511430829732320037810158103219450725805010784309258885665050353055590530286760167834611889275923631533624453297928821426095733376915342938213265653896155721097429663222362778345458148345592527594398388470309295104262955931950116040185382715606541949194751721996792186872467264544745433311249142100418825570430355052077363973008664421120484366921606357738079288694811306749680061445029375405918887472434161326274922122634005811601930755641397233501801686621372022605177438136896286976663336596965225818133682424138992567334686204816899022869929745916758315522495753590125667472890059769598726677195473102995326201751837925724671228440170949448709504865595611153771652016975307787073872458553144324068066299945412808517429948773271931311216658819991304467550044208986345727701759221981659944235361555434141212036323874200830839235009020171958292519228432722707175442685496966846504773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f334d6051e945bbf6f634471c6038a2ab99f2b13
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 79a5128ce7acaec669c904e64b07da72cbcb5d8d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbb-online.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/rundfunk-berlin-brandenburg-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/rundfunk-berlin-brandenburg-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (234 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/rundfunk-berlin-brandenburg-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/rundfunk-berlin-brandenburg-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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