events.gfz-potsdam.de

- Helmholtz-Zentrum Potsdam - Deutsches GeoForschungsZentrum GFZ -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 20:9c:b6:26:47:e6:c3:5c:85:ae:f9:b4 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Helmholtz-Zentrum Potsdam - Deutsches GeoForschungsZentrum GFZ

Organization: Helmholtz-Zentrum Potsdam - Deutsches GeoForschungsZentrum GFZ
State / Province: Brandenburg
Locality: Potsdam
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 20:9c:b6:26:47:e6:c3:5c:85:ae:f9:b4
Serial Number (int): 10092972919000124650322590132
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 47:89:e0:3c:bd:59:ba:fb:b2:ae:f7:69:af:2c:ec:8a:eb:d2:cf:4a
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): bc:f0:a8:0f:4d:bb:53:ca:6f:9c:46:62:4d:5d:a2:17:1e:6d:4d:52
Fingerprint (sha256): 17:f6:9e:3b:06:d5:fa:2c:3d:7a:1b:90:f4:44:59:f5:5f:d8:5d:5e:eb:d3:c0:1d:32:6a:95:ec:ed:ec:21:39

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate events.gfz-potsdam.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for events.gfz-potsdam.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

events.gfz-potsdam.de

Other certificates including the domain name gfz-potsdam.de

(limited to 100 certificates)
geofon.gfz-potsdam.de
rz-vcs1.gfz-potsdam.de
d3m.gfz-potsdam.de
rz-vm140.gfz-potsdam.de
hydro.gfz-potsdam.de
gisasaprouter.gfz-potsdam.de
sec21-dmz1b.gfz-potsdam.de
hydro.gfz-potsdam.de
sec21-dmz1b.gfz-potsdam.de
wol.gfz-potsdam.de
webstats.gfz-potsdam.de
email.gwdg.de
mobilehub.gfz-potsdam.de
intranet.gfz-potsdam.de
dokuwiki.gfz-potsdam.de
sec21-dmz2b.gfz-potsdam.de
moses-dmp.gfz-potsdam.de
spaceweather.gfz-potsdam.de
events.gfz-potsdam.de
rbm9.gfz-potsdam.de
nera-ern.gfz-potsdam.de
api.itsm.gfz-potsdam.de
wlc.gfz-potsdam.de
ebissiq.gfz-potsdam.de
exportcontrol.gfz-potsdam.de
rz-support.gfz-potsdam.de
sec21-dmz1b.gfz-potsdam.de
email.gwdg.de
git.gfz-potsdam.de
rz-vm175.gfz-potsdam.de
hydro.gfz-potsdam.de
varve.gfz-potsdam.de
idp-dev.gfz-potsdam.de
webstats.gfz-potsdam.de
geomagia.gfz-potsdam.de
www.gfz-potsdam.de
fw-ext.gfz-potsdam.de
rz-vm213.gfz-potsdam.de
fw-ext.gfz-potsdam.de
geofon.gfz-potsdam.de
gfzpublic.gfz-potsdam.de
eismassendynamik.gfz-potsdam.de
rz-vm174.gfz-potsdam.de
rz-vm112.gfz-potsdam.de
simultan.gfz-potsdam.de
events.gfz-potsdam.de
rz-vm234.gfz-potsdam.de
gfzock.gfz-potsdam.de
collabora.gfz-potsdam.de
www-app5.gfz-potsdam.de
enhsp.gfz-potsdam.de
timeseries.gfz-potsdam.de
printer-core.gfz-potsdam.de
rz-vm457.gfz-potsdam.de
nextcloud.gfz-potsdam.de
geomagia.gfz-potsdam.de
escidoc.gfz-potsdam.de
idp-test.gfz-potsdam.de
sec21-bbb.gfz-potsdam.de
rz-vm62.gfz-potsdam.de
rz-vm119.gfz-potsdam.de
gfz-potsdam.de
ccmp-pompei.gfz-potsdam.de
moses-dmp.gfz-potsdam.de
wlantickets.gfz-potsdam.de
aschera.gfz-potsdam.de
dep1doc.gfz-potsdam.de
varve.gfz-potsdam.de
index-search-prod.gfz-potsdam.de
ebiss.gfz-potsdam.de
rz-vm89.gfz-potsdam.de
gisasaprouter.gfz-potsdam.de
www.gfz-potsdam.de
forms.gfz-potsdam.de
asip.gfz-potsdam.de
bscw.gfz-potsdam.de
nextcloud.gfz-potsdam.de
benno.gfz-potsdam.de
ad.gfz-potsdam.de
rz-vm278.gfz-potsdam.de
intranet-test.gfz-potsdam.de
rz-ftp1.gfz-potsdam.de
s3ceph.gfz-potsdam.de
ssl.gfz-potsdam.de
moses-data.gfz-potsdam.de
egsim.gfz-potsdam.de
systemerde.gfz-potsdam.de
itsm.gfz-potsdam.de
dataservices.gfz-potsdam.de
rz-monstor3.gfz-potsdam.de
geso122.gfz-potsdam.de
d3m.gfz-potsdam.de
v4-server3.gfz-potsdam.de
trideccloud.gfz-potsdam.de
rz-vm65-dev.gfz-potsdam.de
otms.gfz-potsdam.de
kg3-dmz.gfz-potsdam.de
benno.gfz-potsdam.de
ldapext.gfz-potsdam.de
rz-vm121.gfz-potsdam.de

Certificate

The complete raw certificate details for events.gfz-potsdam.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10092972919000124650322590132
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-04 14:39:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-05 14:39:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Brandenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Potsdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helmholtz-Zentrum Potsdam - Deutsches GeoForschungsZentrum GFZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'events.gfz-potsdam.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 658584466138060021609626633661034826105879002263558042801905799029074508619722185886191213326555413934010429423183283289612362250686767512307149506341939690121976192412486708403280911741586489191662700119432711341342718124533771351468621482609595450250703982008525553378224509732432410367560666192747202338164659486729468654832930934696283182608957281044191266673572134324332967027282109355898884248908325860624652080817480863030367338120060279595772870310555479140261215753865554821621190868368055191809697659742769616505341383438038279740329819589633768594783847584092851902019531398761931769421881113478150551920962558640510676898581364363280314966457454791526511745446940356826012738901553140090086879549894365728721439108424711758068562611907697387893954642522158473451673062613804536233394546058542503388695996116032316983797173545180659151096253832798785525830629560246045015582505419778957883269539215304304470959269881238615991064501200344944647457048350264873445333653930918832672212653765561993921402161221531729546544434346818197880438355930689218562784865675999118093287665817719941345474822570940933484891361782613246099852366321843003228631887276087173603092939079801178653779503745615891901373613904879930218675256741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.9
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4789e03cbd59bafbb2aef769af2cec8aebd2cf4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (847 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (843 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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