goethe.bsz-bw.de

- Bibliotheksservice-Zentrum Baden-Wuerttemberg -

Issued by BSZ-BW CA - G02

About this certificate

This digital certificate with serial number 15:d9:38:2b:c1:7a:c1 was issued on by Bibliotheksservice-Zentrum Baden-Wuerttemberg.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment ContentCommitment] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Bibliotheksservice-Zentrum Baden-Wuerttemberg

Organization: Bibliotheksservice-Zentrum Baden-Wuerttemberg
State / Province: Baden-Wuerttemberg
Locality: Konstanz
Country: DE

Bibliotheksservice-Zentrum Baden-Wuerttemberg

Organization: Bibliotheksservice-Zentrum Baden-Wuerttemberg
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 15:d9:38:2b:c1:7a:c1
Serial Number (int): 6149809786419905
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: f8:f3:e5:a6:c5:7c:b9:10:8b:f2:b4:43:2c:7e:64:89:32:de:37:3d
AuthorityKeyId: 29:ad:00:de:cb:66:e5:1f:de:aa:8d:6d:ec:9c:b4:42:fe:fb:9b:21

Fingerprint (sha1): 18:8d:e2:bb:81:a8:bf:bd:19:ff:73:ba:e0:1f:09:11:2f:18:50:fa
Fingerprint (sha256): 1b:4f:0e:62:6f:a6:ad:f9:56:bb:31:3e:41:a1:73:48:a0:81:21:de:d7:84:63:52:0d:80:61:86:8e:a7:89:90

Issuing Certificate URL: http://cdp1.pca.dfn.de/bsz-bw-ca/pub/cacert/g_cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/bsz-bw-ca/pub/cacert/g_cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/bsz-bw-ca/pub/crl/g_cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/bsz-bw-ca/pub/crl/g_cacrl.crl

Check the revocation status for certificate goethe.bsz-bw.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for goethe.bsz-bw.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

goethe.bsz-bw.de
goethe-lyon.bsz-bw.de
goethe-caracas.bsz-bw.de

Other certificates including the domain name bsz-bw.de

(limited to 100 certificates)
fuji.bsz-bw.de
archiv.bsz-bw.de
ffb.bsz-bw.de
k3.bsz-bw.de
asterix.bsz-bw.de
toronto.bsz-bw.de
dl05test.bsz-bw.de
webpac7.bsz-bw.de
koha01.bsz-bw.de
opus4.bsz-bw.de
kopac.bsz-bw.de
caracas.bsz-bw.de
dbprod.bsz-bw.de
bvfg.bsz-bw.de
repos02.bsz-bw.de
webpac6.bsz-bw.de
mare01test.bsz-bw.de
opus4.bsz-bw.de
seminar-esslingen.bsz-bw.de
ffb.bsz-bw.de
london.bsz-bw.de
bosstest.bsz-bw.de
www.bsz-bw.de
mfo.bsz-bw.de
webpac1.bsz-bw.de
dl04.bsz-bw.de
matomo.bsz-bw.de
zfl.bsz-bw.de
gvi1.bsz-bw.de
idp.bsz-bw.de
iris.bsz-bw.de
zfl-test.bsz-bw.de
lachesis.bsz-bw.de
webpac9.bsz-bw.de
hsportal.bsz-bw.de
wikitest.bsz-bw.de
swbtestproxy.bsz-bw.de
gvi2.bsz-bw.de
hsg.bsz-bw.de
hs-lorsch.bsz-bw.de
sehn.bsz-bw.de
repos02.bsz-bw.de
ffb.bsz-bw.de
biberkopf.bsz-bw.de
bibsysteme.bsz-bw.de
wiki.bsz-bw.de
portal19.bsz-bw.de
repos.bsz-bw.de
eh-freiburgt.bsz-bw.de
bodensee.bsz-bw.de
opusdev.bsz-bw.de
swbplus.bsz-bw.de
windhoek.bsz-bw.de
gvi1.bsz-bw.de
karachi.bsz-bw.de
hfjs.bsz-bw.de
tbilisi.bsz-bw.de
koha02.bsz-bw.de
mailrelay.bsz-bw.de
repos.bsz-bw.de
skat.bsz-bw.de
zfl-test.bsz-bw.de
boss.bsz-bw.de
goethe.bsz-bw.de
silberhorn.bsz-bw.de
dlr-literatursuche.bsz-bw.de
paris.bsz-bw.de
karachi.bsz-bw.de
wiki.bsz-bw.de
dlre.bsz-bw.de
zfl-prod.bsz-bw.de
koha03.bsz-bw.de
dlr-literatursuche.bsz-bw.de
k10bouftest.bsz-bw.de
fltest.bsz-bw.de
mailrelay.bsz-bw.de
swbplus.bsz-bw.de
vpn.bsz-bw.de
vpn.bsz-bw.de
cairo.bsz-bw.de
zfl-dev.bsz-bw.de
bernina.bsz-bw.de
kix.bsz-bw.de
dhaka.bsz-bw.de
hsportal.bsz-bw.de
dl04test.bsz-bw.de
pizol.bsz-bw.de
kopac.bsz-bw.de
vzabbix.bsz-bw.de
bibsysteme.bsz-bw.de
swop.bsz-bw.de
hfjs.bsz-bw.de
mare01.bsz-bw.de
hshl.bsz-bw.de
bahia.bsz-bw.de
santiago.bsz-bw.de
repos.bsz-bw.de
asterope.bsz-bw.de
ebmtool.de
gvi.bsz-bw.de

Certificate

The complete raw certificate details for goethe.bsz-bw.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDWySHWvNJWPYmGnBaBT
55wh1PFbMHqdzf8vCbJC1ZfxoPodJRACPc54TvQcLoTKrQWgRLzQ553ZVkEy5TXz
ETpl/c3cZQ6ups98h6llTwNb8QpDSWf1KfZTCvTh4+x54NmNeqW72d+r2ZYVWuzy
Gt+MDOd0TRHiGq+oLboyPzmeJaHS6uC31Ygr/djv4d7KshpQsBhqSlwtYhw7J0qj
UMmwXauKo3JaJ135F0DZIP/4EHxm4eZBJVYcjGKz3+uFq2IhcYMEn+rQz1ioOkPW
nggcvTQ1G07wpfUc54PZQ1TfkJTedMg2JO6CnitqUfpOlT3aHZDBec3ob7HzZvO3
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6149809786419905
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bibliotheksservice-Zentrum Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BSZ-BW CA - G02'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-06-13 12:27:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-12 12:27:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Konstanz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bibliotheksservice-Zentrum Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'goethe.bsz-bw.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18709747825639449781477477360440450765410999666066268204111996291440981223350747954415099947726353839363909720962350684857133894446559616700253938238061385038141799599089734552977197422344964448922977549442154326535992309625395653319566308091007408454367021938398512989487569960495900131356114897352057413902860550463599120691813329796679925901168243054553270664038810216731455049356987938703706023970828411182640143755869597672769682098508739344666023629631038152965172552619383391758973456055841880497721497750630401935210661240733386083528427691532363565250902379207548850400262946970913280696211483800376987334647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8f3e5a6c57cb9108bf2b4432c7e648932de373d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 29ad00decb66e51fdeaa8d6dec9cb442fefb9b21
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goethe.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goethe-lyon.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goethe-caracas.bsz-bw.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/bsz-bw-ca/pub/crl/g_cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/bsz-bw-ca/pub/crl/g_cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (196 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/bsz-bw-ca/pub/cacert/g_cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/bsz-bw-ca/pub/cacert/g_cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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