karachi.bsz-bw.de

- Bibliotheksservice-Zentrum Baden-Wuerttemberg -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 20:c5:74:5f:3e:18:9d:30:e1:a4:b2:32 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bibliotheksservice-Zentrum Baden-Wuerttemberg

Organization: Bibliotheksservice-Zentrum Baden-Wuerttemberg
Organization unit: Bibliothekssysteme
State / Province: Baden-Wuerttemberg
Locality: Konstanz
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 20:c5:74:5f:3e:18:9d:30:e1:a4:b2:32
Serial Number (int): 10142228252174323090924548658
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: a2:f2:b7:f7:61:fc:8d:de:7e:a0:bf:0a:75:18:14:52:55:55:6a:55
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): db:b9:45:75:b3:8d:9f:a9:79:47:81:38:f6:10:40:bd:9e:5d:b5:93
Fingerprint (sha256): 1b:b0:e4:86:f7:80:e6:5a:77:88:75:47:4b:02:32:d8:cd:35:f7:ae:83:4c:85:da:dc:15:64:2a:6e:20:43:88

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate karachi.bsz-bw.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for karachi.bsz-bw.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

karachi.bsz-bw.de
karachi.bibliothek.goethe.de
taschkent.bibliothek.goethe.de

Other certificates including the domain name bsz-bw.de

(limited to 100 certificates)
fuji.bsz-bw.de
archiv.bsz-bw.de
ffb.bsz-bw.de
k3.bsz-bw.de
asterix.bsz-bw.de
toronto.bsz-bw.de
dl05test.bsz-bw.de
webpac7.bsz-bw.de
koha01.bsz-bw.de
opus4.bsz-bw.de
kopac.bsz-bw.de
caracas.bsz-bw.de
dbprod.bsz-bw.de
bvfg.bsz-bw.de
repos02.bsz-bw.de
webpac6.bsz-bw.de
mare01test.bsz-bw.de
opus4.bsz-bw.de
seminar-esslingen.bsz-bw.de
ffb.bsz-bw.de
london.bsz-bw.de
bosstest.bsz-bw.de
www.bsz-bw.de
mfo.bsz-bw.de
webpac1.bsz-bw.de
dl04.bsz-bw.de
matomo.bsz-bw.de
zfl.bsz-bw.de
gvi1.bsz-bw.de
idp.bsz-bw.de
iris.bsz-bw.de
zfl-test.bsz-bw.de
lachesis.bsz-bw.de
webpac9.bsz-bw.de
hsportal.bsz-bw.de
wikitest.bsz-bw.de
swbtestproxy.bsz-bw.de
gvi2.bsz-bw.de
hsg.bsz-bw.de
hs-lorsch.bsz-bw.de
sehn.bsz-bw.de
repos02.bsz-bw.de
ffb.bsz-bw.de
biberkopf.bsz-bw.de
bibsysteme.bsz-bw.de
wiki.bsz-bw.de
portal19.bsz-bw.de
repos.bsz-bw.de
eh-freiburgt.bsz-bw.de
bodensee.bsz-bw.de
opusdev.bsz-bw.de
swbplus.bsz-bw.de
windhoek.bsz-bw.de
gvi1.bsz-bw.de
karachi.bsz-bw.de
hfjs.bsz-bw.de
tbilisi.bsz-bw.de
koha02.bsz-bw.de
mailrelay.bsz-bw.de
repos.bsz-bw.de
skat.bsz-bw.de
zfl-test.bsz-bw.de
boss.bsz-bw.de
goethe.bsz-bw.de
silberhorn.bsz-bw.de
dlr-literatursuche.bsz-bw.de
paris.bsz-bw.de
karachi.bsz-bw.de
wiki.bsz-bw.de
dlre.bsz-bw.de
zfl-prod.bsz-bw.de
koha03.bsz-bw.de
dlr-literatursuche.bsz-bw.de
k10bouftest.bsz-bw.de
fltest.bsz-bw.de
mailrelay.bsz-bw.de
swbplus.bsz-bw.de
vpn.bsz-bw.de
vpn.bsz-bw.de
cairo.bsz-bw.de
zfl-dev.bsz-bw.de
bernina.bsz-bw.de
kix.bsz-bw.de
dhaka.bsz-bw.de
hsportal.bsz-bw.de
dl04test.bsz-bw.de
pizol.bsz-bw.de
kopac.bsz-bw.de
vzabbix.bsz-bw.de
bibsysteme.bsz-bw.de
swop.bsz-bw.de
hfjs.bsz-bw.de
mare01.bsz-bw.de
hshl.bsz-bw.de
bahia.bsz-bw.de
santiago.bsz-bw.de
repos.bsz-bw.de
asterope.bsz-bw.de
ebmtool.de
gvi.bsz-bw.de

Certificate

The complete raw certificate details for karachi.bsz-bw.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10142228252174323090924548658
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-04 12:21:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-06 12:21:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Konstanz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bibliotheksservice-Zentrum Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bibliothekssysteme'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'karachi.bsz-bw.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 598898162416354644444553096428924496906028382150158996420501517589572820181370078994065533754508590399111159241889688373619616523856341042996579465601404148060215207509494210343747710915284350329019825439161198817921815484347024070415111487289887330792521879812215332697538048377847217291851913474495243628001915372885953458724370577940577230646095780253579223464485315163826461242323946528405151299833242215591022048515203147283694963862197609857633335433516813498757688363903515254886881554724176857380118989771770662108582639122996045500890128619873330072915359859430339637432410816347642557691257558344479896851720966152063394347471411714149937723903788680654943482280945976111863786765998334824855469511473467318737110919160080618931893287981013137809864559628645024871902439134647136306036898482384704817540421335652581143670793254327768977724381804997332233142958985936659397991736010834922092213668492582007137984337986645698625083423554702872827766842413274475631618027368887900091150872263761292623902391898779083319966120048721186648271253897316568009540995311688787404632278088544048849158993455531446034651996380154103958580313407613220365864480501037225853547333856158262001934654790456650655558897843943898600193434059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.9
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2f2b7f761fc8dde7ea0bf0a7518145255556a55
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karachi.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karachi.bibliothek.goethe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taschkent.bibliothek.goethe.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (844 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (840 bytes)
							03460076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000169e84c3c9f0000040300473045022100d9cc5d4763f8b7e2e4026973e5d4d228ad863ffb6fd4b6f6f62f5da68b9c64ef02202dd46b07a4e379e492e608c32e5209cf5988fff60326ecfc8a7f300c16788161007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000169e84c3ccb00000403004630440220133b8f618e63133de8f41b6404cecde62e4ba20c8ae6c40218117259a6d6eade022061e0e2fb82a7f00fa9e5c789d5a041c01b225aa98e7254d61767437d260df73e007600aae70b7f3cb8d566c86c2f16979c9f445f69ab0eb4535589b2f77a030104f3cd00000169e84c3ca00000040300473045022100948ea5eb683903ac4af708b2a75d81a6805e78f126a39e592060e23ffab3c0ef02205fac213e0819d026d88a8c593eede1c9328a8f599f1a01d08901cc72047415960077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000169e84c3da50000040300483046022100840dfdbb001c36fe41b74eae8dcbbf59a7e801e226bad36e7c3fcecc78900ce9022100fcf148f43eb97e00e56bcfd6b139df9772c699cb55e8dd20f2c4e3559f688dff007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000169e84c3ce30000040300473045022100bf8ea1444ed0589887b97c0be42f5281078a4afdf8c00eb6316627123e914f4d022075a560afbb4782a12d6e1e2011228350fc3801df21c6ff4e1197a713e251d3bd007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000169e84c3cc500000403004630440220163570b349b1db57b0f1a78e3520a39c2954504fefdc4a8d50cafd5c523f33bf02201f1b6d724f9d1909b3fd1bc19578e539cc19431c112e20c6fc1e914341c4bb560075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000169e84c4166000004030046304402201326412e0eb60d865f8367f5a5e68b2df176a9b8c56ff6b2eb59f0452f7b8ccb02202d8249e14303e9dbb234f8aa8ae5c927ee562805ca0f7898beedd0e14df13ae4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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