enhsp.gfz-potsdam.de

- Helmholtz-Zentrum Potsdam - Deutsches GeoForschungsZentrum GFZ -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 1f:0a:8e:94:5f:ab:fc:67:dd:27:b3:90 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Helmholtz-Zentrum Potsdam - Deutsches GeoForschungsZentrum GFZ

Organization: Helmholtz-Zentrum Potsdam - Deutsches GeoForschungsZentrum GFZ
Organization unit: eScience Centre
State / Province: Brandenburg
Locality: Potsdam
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:0a:8e:94:5f:ab:fc:67:dd:27:b3:90
Serial Number (int): 9606797875710414998492132240
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: fa:ca:37:96:dc:b5:6a:ba:9e:7e:73:a3:53:ef:5a:51:16:9f:14:57
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 94:5d:e4:25:65:4b:dd:14:3d:c7:40:e6:71:ca:84:f0:4d:e3:3a:16
Fingerprint (sha256): 18:93:c2:0e:ea:eb:f7:9f:ed:7b:22:95:37:e4:b5:43:37:1e:20:98:3e:b7:cd:51:61:57:f6:9d:27:ac:d1:26

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate enhsp.gfz-potsdam.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for enhsp.gfz-potsdam.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

enhsp.gfz-potsdam.de

Other certificates including the domain name gfz-potsdam.de

(limited to 100 certificates)
geofon.gfz-potsdam.de
rz-vcs1.gfz-potsdam.de
d3m.gfz-potsdam.de
rz-vm140.gfz-potsdam.de
hydro.gfz-potsdam.de
gisasaprouter.gfz-potsdam.de
sec21-dmz1b.gfz-potsdam.de
hydro.gfz-potsdam.de
sec21-dmz1b.gfz-potsdam.de
wol.gfz-potsdam.de
webstats.gfz-potsdam.de
email.gwdg.de
mobilehub.gfz-potsdam.de
intranet.gfz-potsdam.de
dokuwiki.gfz-potsdam.de
sec21-dmz2b.gfz-potsdam.de
moses-dmp.gfz-potsdam.de
spaceweather.gfz-potsdam.de
events.gfz-potsdam.de
rbm9.gfz-potsdam.de
nera-ern.gfz-potsdam.de
api.itsm.gfz-potsdam.de
wlc.gfz-potsdam.de
ebissiq.gfz-potsdam.de
exportcontrol.gfz-potsdam.de
rz-support.gfz-potsdam.de
sec21-dmz1b.gfz-potsdam.de
email.gwdg.de
git.gfz-potsdam.de
rz-vm175.gfz-potsdam.de
hydro.gfz-potsdam.de
varve.gfz-potsdam.de
idp-dev.gfz-potsdam.de
webstats.gfz-potsdam.de
geomagia.gfz-potsdam.de
www.gfz-potsdam.de
fw-ext.gfz-potsdam.de
rz-vm213.gfz-potsdam.de
fw-ext.gfz-potsdam.de
geofon.gfz-potsdam.de
gfzpublic.gfz-potsdam.de
eismassendynamik.gfz-potsdam.de
rz-vm174.gfz-potsdam.de
rz-vm112.gfz-potsdam.de
simultan.gfz-potsdam.de
events.gfz-potsdam.de
rz-vm234.gfz-potsdam.de
gfzock.gfz-potsdam.de
collabora.gfz-potsdam.de
www-app5.gfz-potsdam.de
enhsp.gfz-potsdam.de
timeseries.gfz-potsdam.de
printer-core.gfz-potsdam.de
rz-vm457.gfz-potsdam.de
nextcloud.gfz-potsdam.de
geomagia.gfz-potsdam.de
escidoc.gfz-potsdam.de
idp-test.gfz-potsdam.de
sec21-bbb.gfz-potsdam.de
rz-vm62.gfz-potsdam.de
rz-vm119.gfz-potsdam.de
gfz-potsdam.de
ccmp-pompei.gfz-potsdam.de
moses-dmp.gfz-potsdam.de
wlantickets.gfz-potsdam.de
aschera.gfz-potsdam.de
dep1doc.gfz-potsdam.de
varve.gfz-potsdam.de
index-search-prod.gfz-potsdam.de
ebiss.gfz-potsdam.de
rz-vm89.gfz-potsdam.de
gisasaprouter.gfz-potsdam.de
www.gfz-potsdam.de
forms.gfz-potsdam.de
asip.gfz-potsdam.de
bscw.gfz-potsdam.de
nextcloud.gfz-potsdam.de
benno.gfz-potsdam.de
ad.gfz-potsdam.de
rz-vm278.gfz-potsdam.de
intranet-test.gfz-potsdam.de
rz-ftp1.gfz-potsdam.de
s3ceph.gfz-potsdam.de
ssl.gfz-potsdam.de
moses-data.gfz-potsdam.de
egsim.gfz-potsdam.de
systemerde.gfz-potsdam.de
itsm.gfz-potsdam.de
dataservices.gfz-potsdam.de
rz-monstor3.gfz-potsdam.de
geso122.gfz-potsdam.de
d3m.gfz-potsdam.de
v4-server3.gfz-potsdam.de
trideccloud.gfz-potsdam.de
rz-vm65-dev.gfz-potsdam.de
otms.gfz-potsdam.de
kg3-dmz.gfz-potsdam.de
benno.gfz-potsdam.de
ldapext.gfz-potsdam.de
rz-vm121.gfz-potsdam.de

Certificate

The complete raw certificate details for enhsp.gfz-potsdam.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9606797875710414998492132240
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-03 13:39:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-05 13:39:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Brandenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Potsdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helmholtz-Zentrum Potsdam - Deutsches GeoForschungsZentrum GFZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'eScience Centre'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'enhsp.gfz-potsdam.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 776300536138852484445289988891046122590218539021585261617450434360553531907393066378832487989508911087540007357531279214404896398094764028280890261938629149042470436432306917034085564396694367086826326651918423262448653490320836131610338070536478693152715124906120966041494884687985317637212589617487170616106412976661064051741826426311327451913757569290170844142325094400338042729760860782932928479345468249652703600375960284059510451904611610343701736218145873337667247081802377196459841476557851091696715660230874509141046210990255577130836987492933907066326977065892483115906355401799817468866807025162501829716340109467742463566377377246630889530307875405033674592522611372060484390401937022675684286488938304686717644911823111821270834268366464460163946672656440504717316003882545690676716616100930891784022176334712256779250075168113772888752234055570677533634716189923561250911583506247082267303907026063640224800400034390362357483823161303085876060699257627343506663439786723678372246234588926006619936707616591720157872431454234150518738198983898343863866534532402420994478260770943829497007127643530505016912766865152822515188334106755569366828841991398310706963191623137552752940576251782278643292137124378975540672527751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							faca3796dcb56aba9e7e73a353ef5a51169f1457
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enhsp.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (967 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (963 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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