tbilisi.bsz-bw.de

- Bibliotheksservice-Zentrum Baden-Wuerttemberg -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 20:c5:79:b0:ea:8e:0e:04:7d:eb:f2:59 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bibliotheksservice-Zentrum Baden-Wuerttemberg

Organization: Bibliotheksservice-Zentrum Baden-Wuerttemberg
Organization unit: Bibliothekssysteme
State / Province: Baden-Wuerttemberg
Locality: Konstanz
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 20:c5:79:b0:ea:8e:0e:04:7d:eb:f2:59
Serial Number (int): 10142253370619970210585375321
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 2e:2f:46:6d:b4:2a:3a:ca:24:f3:4d:cb:fb:22:9f:7b:f6:80:a2:00
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 93:51:fc:45:14:d1:bf:7e:0a:43:de:9b:78:fb:e0:51:9d:f3:c8:02
Fingerprint (sha256): 17:cb:a7:39:af:f1:3a:48:2f:97:37:e6:22:dc:60:92:61:6f:f8:ed:8f:23:30:07:59:f9:27:f3:65:e4:d0:f3

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate tbilisi.bsz-bw.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tbilisi.bsz-bw.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tbilisi.bsz-bw.de
tiflis.bibliothek.goethe.de

Other certificates including the domain name bsz-bw.de

(limited to 100 certificates)
fuji.bsz-bw.de
archiv.bsz-bw.de
ffb.bsz-bw.de
k3.bsz-bw.de
asterix.bsz-bw.de
toronto.bsz-bw.de
dl05test.bsz-bw.de
webpac7.bsz-bw.de
koha01.bsz-bw.de
opus4.bsz-bw.de
kopac.bsz-bw.de
caracas.bsz-bw.de
dbprod.bsz-bw.de
bvfg.bsz-bw.de
repos02.bsz-bw.de
webpac6.bsz-bw.de
mare01test.bsz-bw.de
opus4.bsz-bw.de
seminar-esslingen.bsz-bw.de
ffb.bsz-bw.de
london.bsz-bw.de
bosstest.bsz-bw.de
www.bsz-bw.de
mfo.bsz-bw.de
webpac1.bsz-bw.de
dl04.bsz-bw.de
matomo.bsz-bw.de
zfl.bsz-bw.de
gvi1.bsz-bw.de
idp.bsz-bw.de
iris.bsz-bw.de
zfl-test.bsz-bw.de
lachesis.bsz-bw.de
webpac9.bsz-bw.de
hsportal.bsz-bw.de
wikitest.bsz-bw.de
swbtestproxy.bsz-bw.de
gvi2.bsz-bw.de
hsg.bsz-bw.de
hs-lorsch.bsz-bw.de
sehn.bsz-bw.de
repos02.bsz-bw.de
ffb.bsz-bw.de
biberkopf.bsz-bw.de
bibsysteme.bsz-bw.de
wiki.bsz-bw.de
portal19.bsz-bw.de
repos.bsz-bw.de
eh-freiburgt.bsz-bw.de
bodensee.bsz-bw.de
opusdev.bsz-bw.de
swbplus.bsz-bw.de
windhoek.bsz-bw.de
gvi1.bsz-bw.de
karachi.bsz-bw.de
hfjs.bsz-bw.de
tbilisi.bsz-bw.de
koha02.bsz-bw.de
mailrelay.bsz-bw.de
repos.bsz-bw.de
skat.bsz-bw.de
zfl-test.bsz-bw.de
boss.bsz-bw.de
goethe.bsz-bw.de
silberhorn.bsz-bw.de
dlr-literatursuche.bsz-bw.de
paris.bsz-bw.de
karachi.bsz-bw.de
wiki.bsz-bw.de
dlre.bsz-bw.de
zfl-prod.bsz-bw.de
koha03.bsz-bw.de
dlr-literatursuche.bsz-bw.de
k10bouftest.bsz-bw.de
fltest.bsz-bw.de
mailrelay.bsz-bw.de
swbplus.bsz-bw.de
vpn.bsz-bw.de
vpn.bsz-bw.de
cairo.bsz-bw.de
zfl-dev.bsz-bw.de
bernina.bsz-bw.de
kix.bsz-bw.de
dhaka.bsz-bw.de
hsportal.bsz-bw.de
dl04test.bsz-bw.de
pizol.bsz-bw.de
kopac.bsz-bw.de
vzabbix.bsz-bw.de
bibsysteme.bsz-bw.de
swop.bsz-bw.de
hfjs.bsz-bw.de
mare01.bsz-bw.de
hshl.bsz-bw.de
bahia.bsz-bw.de
santiago.bsz-bw.de
repos.bsz-bw.de
asterope.bsz-bw.de
ebmtool.de
gvi.bsz-bw.de

Certificate

The complete raw certificate details for tbilisi.bsz-bw.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10142253370619970210585375321
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-04 12:44:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-06 12:44:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Konstanz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bibliotheksservice-Zentrum Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bibliothekssysteme'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'tbilisi.bsz-bw.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 662213183222941099299219662775477845509495963627664524450385646249855982009331664878412417925234742993890182339251193879543421799962079999830655926105716287415680030905813394382797686618184193124032533408345646392016234326645839502344418681577970952893617207699635849434456375228034510975061720501078129964800268694895678787928594160354036635126705611653925443360436023442829950928407959129186124341411153716150952541929516036050807383349998542564273091231222586984277959835384289514689332273577020286149821395622530989154808132768109967033251782786184200200371036786219835843692270711848300960628897720279889255580992067490189387352840737561675634259619607902180855350907677456660537987078408292539271366781164321367533658240605490201685498053951873703450438983662061733268876125654145690967679236805609652461775835767680433175832857807940483318486803036511111024961154289440586851833536471294600082509170516285699752568800518466369448878864228197218855770942985188427977512855244261712160519577180604291367480296193805028603274495892833257768833461249474956417015818824616074870196658987959573184657658044762997619600827661957454507118954060429684181313920857305418742205331185499797774084556736788327932695230718507618010184562319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.9
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e2f466db42a3aca24f34dcbfb229f7bf680a200
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbilisi.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiflis.bibliothek.goethe.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (844 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (840 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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