zfl-test.bsz-bw.de

- Bibliotheksservice-Zentrum Baden-Wuerttemberg -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 1f:52:be:9d:04:e5:28:ac:d0:7e:c7:60 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bibliotheksservice-Zentrum Baden-Wuerttemberg

Organization: Bibliotheksservice-Zentrum Baden-Wuerttemberg
Organization unit: Verbund
Organization unit: Fernleihe
State / Province: Baden-Wuerttemberg
Locality: Konstanz
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:52:be:9d:04:e5:28:ac:d0:7e:c7:60
Serial Number (int): 9694067367793394396300232544
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: ac:90:b9:01:41:ab:3f:84:e7:cd:2d:eb:26:06:14:76:75:16:16:47
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): e3:5b:e5:35:84:dc:4f:7e:d9:97:22:a0:0c:6a:81:f6:ea:4b:9e:25
Fingerprint (sha256): 19:d1:50:71:f5:b5:a0:e6:42:8a:33:d7:41:b3:ac:a2:c3:dc:ac:51:e4:3b:2b:ad:47:61:18:f0:c3:29:9c:91

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate zfl-test.bsz-bw.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zfl-test.bsz-bw.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fltest.bsz-bw.de
zfl-test.bsz-bw.de
zfls-test.bsz-bw.de

Other certificates including the domain name bsz-bw.de

(limited to 100 certificates)
fuji.bsz-bw.de
archiv.bsz-bw.de
ffb.bsz-bw.de
k3.bsz-bw.de
asterix.bsz-bw.de
toronto.bsz-bw.de
dl05test.bsz-bw.de
webpac7.bsz-bw.de
koha01.bsz-bw.de
opus4.bsz-bw.de
kopac.bsz-bw.de
caracas.bsz-bw.de
dbprod.bsz-bw.de
bvfg.bsz-bw.de
repos02.bsz-bw.de
webpac6.bsz-bw.de
mare01test.bsz-bw.de
opus4.bsz-bw.de
seminar-esslingen.bsz-bw.de
ffb.bsz-bw.de
london.bsz-bw.de
bosstest.bsz-bw.de
www.bsz-bw.de
mfo.bsz-bw.de
webpac1.bsz-bw.de
dl04.bsz-bw.de
matomo.bsz-bw.de
zfl.bsz-bw.de
gvi1.bsz-bw.de
idp.bsz-bw.de
iris.bsz-bw.de
zfl-test.bsz-bw.de
lachesis.bsz-bw.de
webpac9.bsz-bw.de
hsportal.bsz-bw.de
wikitest.bsz-bw.de
swbtestproxy.bsz-bw.de
gvi2.bsz-bw.de
hsg.bsz-bw.de
hs-lorsch.bsz-bw.de
sehn.bsz-bw.de
repos02.bsz-bw.de
ffb.bsz-bw.de
biberkopf.bsz-bw.de
bibsysteme.bsz-bw.de
wiki.bsz-bw.de
portal19.bsz-bw.de
repos.bsz-bw.de
eh-freiburgt.bsz-bw.de
bodensee.bsz-bw.de
opusdev.bsz-bw.de
swbplus.bsz-bw.de
windhoek.bsz-bw.de
gvi1.bsz-bw.de
karachi.bsz-bw.de
hfjs.bsz-bw.de
tbilisi.bsz-bw.de
koha02.bsz-bw.de
mailrelay.bsz-bw.de
repos.bsz-bw.de
skat.bsz-bw.de
zfl-test.bsz-bw.de
boss.bsz-bw.de
goethe.bsz-bw.de
silberhorn.bsz-bw.de
dlr-literatursuche.bsz-bw.de
paris.bsz-bw.de
karachi.bsz-bw.de
wiki.bsz-bw.de
dlre.bsz-bw.de
zfl-prod.bsz-bw.de
koha03.bsz-bw.de
dlr-literatursuche.bsz-bw.de
k10bouftest.bsz-bw.de
fltest.bsz-bw.de
mailrelay.bsz-bw.de
swbplus.bsz-bw.de
vpn.bsz-bw.de
vpn.bsz-bw.de
cairo.bsz-bw.de
zfl-dev.bsz-bw.de
bernina.bsz-bw.de
kix.bsz-bw.de
dhaka.bsz-bw.de
hsportal.bsz-bw.de
dl04test.bsz-bw.de
pizol.bsz-bw.de
kopac.bsz-bw.de
vzabbix.bsz-bw.de
bibsysteme.bsz-bw.de
swop.bsz-bw.de
hfjs.bsz-bw.de
mare01.bsz-bw.de
hshl.bsz-bw.de
bahia.bsz-bw.de
santiago.bsz-bw.de
repos.bsz-bw.de
asterope.bsz-bw.de
ebmtool.de
gvi.bsz-bw.de

Certificate

The complete raw certificate details for zfl-test.bsz-bw.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9694067367793394396300232544
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-27 07:47:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-29 07:47:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Konstanz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bibliotheksservice-Zentrum Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verbund'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fernleihe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'zfl-test.bsz-bw.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 916850355168308829245523716697251689168015488399395261164739290526696525257124094493402098733804489429931579655201118516746895418422947644323167404821980742617415764487858908473286900172210960046557506351260978274693542313174387186107495146756313510139587763024083166597343122904077120625425899512151002700737997683039339860179391310968538166271517252313930769465761570532973745973125003835822695282961765367176082195945730834707751149262106758938561660142315812862857536026843061490184952156261636488513461623266520121547723152863682198990141585854253536982534703361277598451701921148668985211632290503334127937029995922469546801651287147985783562502542101074041813553854174929045856436313483541420170406781673398481303630476300916551466955892529553661894463191913637410858900483062149907568340440268089146365043993370077625119674637371311711971337357271077268649402742752809756694421075348180191192730962144523143593105722658444290340821903178957785706293948803994476610143547712189393093093363672018881517434327885875737338014147181441706683862512238754101744734070978799499636495209829628570245368991081146638264290445505437820204766353111421153381041480952842379108267966070680300879083505203917855703465113311393407250654406293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac90b90141ab3f84e7cd2deb2606147675161647
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fltest.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zfl-test.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zfls-test.bsz-bw.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (970 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (966 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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