lyncpool.basisit.de

- Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH -

Issued by HZB CA

About this certificate

This digital certificate with serial number 16:75:cf:36:66:30:5f was issued on by Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • KeyUsage [DigitalSignature ContentCommitment KeyEncipherment DataEncipherment] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH

Organization: Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH
Organization unit: Zentrale DV-Systeme und Netze
State / Province: Berlin
Locality: Berlin
Country: DE

Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH

Organization: Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH
State / Province: Berlin
Locality: Berlin
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 16:75:cf:36:66:30:5f
Serial Number (int): 6321982318981215
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: f4:2c:ee:ee:19:85:50:f4:33:53:55:a1:3d:b9:dc:35:d4:3f:88:cc
AuthorityKeyId: 5e:42:2c:b7:51:36:03:8a:c4:08:9c:81:94:bd:be:db:e3:4b:7c:dc

Fingerprint (sha1): 54:8f:a6:42:d2:9b:88:b2:86:9c:de:4e:38:86:96:5b:75:d5:a7:b1
Fingerprint (sha256): 1d:25:09:c1:fc:e9:ac:f6:96:78:8d:9b:dd:26:29:95:db:f2:d2:c3:fc:f2:0a:11:69:03:aa:2d:f2:dd:8d:0a

Issuing Certificate URL: http://cdp1.pca.dfn.de/hzb-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/hzb-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/hzb-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/hzb-ca/pub/crl/cacrl.crl

Check the revocation status for certificate lyncpool.basisit.de

9

DNS Names

1

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lyncpool.basisit.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lyncpool.basisit.de
sipinternal.helmholtz-berlin.de
lyncdiscoverinternal.helmholtz-berlin.de
lyncweb.basisit.de
lyncweb.helmholtz-berlin.de
meet.helmholtz-berlin.de
lyncdiscover.helmholtz-berlin.de
slim1.basisit.de
slim2.basisit.de
[email protected]

Other certificates including the domain name basisit.de

(limited to 100 certificates)
webapp.basisit.de
it-ed-forum.basisit.de
sledge.basisit.de
divuwiki.basisit.de
cliqweb-test.basisit.de
nc.helmholtz-berlin.de
ldap.basisit.de
utax-w-kh218.basisit.de
collab.helmholtz-berlin.de
utax-w-ge166.basisit.de
divversion.basisit.de
rica.helmholtz-berlin.de
rica.helmholtz-berlin.de
utax-w-dv323.basisit.de
nc.basisit.de
it-ed-git.basisit.de
kanboard.helmholtz-berlin.de
nc-dev.basisit.de
icinga-fmd.basisit.de
utax-a-13-10-0113.basisit.de
utax-a-14-51-3210.basisit.de
divic.basisit.de
mail.helmholtz-berlin.de
lyncpool.basisit.de
utax-w-pt211.basisit.de
idp.helmholtz-berlin.de
cliqweb.basisit.de
utax-a-13-7-0204b.basisit.de
basisit.de
utax-w-c229.basisit.de
utax-w-p182.basisit.de
www.helmholtz-berlin.de
sas.helmholtz-berlin.de
utax-a-15-8-0100b.basisit.de
icinga-it-ed-web.basisit.de
radius.helmholtz-berlin.de
www.helmholtz-berlin.de
utax-a-13-7-0316.basisit.de
hc-awx.basisit.de
nc.basisit.de
onlyoffice.helmholtz-berlin.de
utax-w-r123.basisit.de
ed-dockhb1-test.basisit.de
divic.basisit.de
webapp.basisit.de
portal.helmholtz-berlin.de
utax-w-dv204.basisit.de
radius.helmholtz-berlin.de
office.helmholtz-berlin.de
dirac-meister.basisit.de
divic.basisit.de
utax-a-13-7-0308.basisit.de
utax-w-p051.basisit.de
ldap.basisit.de
utax-w-ge166-1.basisit.de
utax-a-13-10-0204.basisit.de
divic.basisit.de
rica.helmholtz-berlin.de
telportal1-prod.basisit.de
idp.helmholtz-berlin.de
utax-a-13-10-0413.basisit.de
www.helmholtz-berlin.de
keycloak1-test.basisit.de
divbibserv.basisit.de
rica.helmholtz-berlin.de
portal-hzb.helmholtz-berlin.de
utax-w-p121.basisit.de
utax-w-lr124.basisit.de
pyweb1.basisit.de
ncoffice.basisit.de
utax-a-14-51-3250.basisit.de
kemp-cluster-2-mgt.basisit.de
cliqapp.basisit.de
divwiki.basisit.de
nc.basisit.de
openproj2-test.basisit.de
jitsi1.basisit.de
utax-w-lr140.basisit.de
dicliqweb.basisit.de
divic.basisit.de
divwiki.basisit.de
nubes.helmholtz-berlin.de
utax-a-13-10-0313.basisit.de
lyncpool.basisit.de
utax-w-e237.basisit.de
cliqapp-test.basisit.de
utax-a-15-8-0200.basisit.de
utax-w-ge211.basisit.de
nubes-test.helmholtz-berlin.de
utax-w-r141.basisit.de
utax-w-lr226.basisit.de
bluespice1-test.basisit.de
nc-office.helmholtz-berlin.de
jitsi1-dev.basisit.de
interflex-test.basisit.de
www.helmholtz-berlin.de
gitlab.helmholtz-berlin.de
utax-w-lr327.basisit.de
divic.basisit.de
utax-a-14-51-3411.basisit.de

Certificate

The complete raw certificate details for lyncpool.basisit.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1FuETB1p7ZyXwBkfHEJ
tGZmmbPktwP6gv3CtD6VMr7050eKzW3JBj5YBHOk5oE9IbylafDbtsG8qxgcu3mP
If6Ya5KUhdFPi26ckJHXvnL1TxRBJb7g1dtLxaXbwa69o7zju/9WEYDHNo7mRqrZ
BpMsBsDBV36j9UDepbcLa15K2qemhhKlfqor2+L1hdASFaqOgZ9pPaiIl7Pxovrd
CEUJbm35I5Wv2txq1yrg7a3fVaujmjLHrhD3zf1PhKqiPtW/aQyLieuhVL0zfwEV
Y0Wk7AKZQF23frHLjt6CytXNHkHjiSzLgUPr8xXR8fF91zYuQiUMKfjOpXFWtPBL
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6321982318981215
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HZB CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-10 07:05:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-09 07:05:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zentrale DV-Systeme und Netze'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lyncpool.basisit.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20112045094426317098496889009535048765926495868418724068000606718042392437686694764195059642063875959804247895261600974692796554458070147079156894341898665778916404297332305590086418050482083176887391836193061782948448576200675192660317042161646190427186186967046203462500487670399361766405234583035981080973930203817128457827255834153927247266779092073332841125953467495250839568082995746741023700558877355113532883154838268094552951002034309352907933763312013208582669361505553541818115950339096635820321642186702412990217569397760994812912093980844839823885482422480338614182852699823151168841111739384085435403017
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f42ceeee198550f4335355a13db9dc35d43f88cc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5e422cb75136038ac4089c8194bdbedbe34b7cdc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (277 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncpool.basisit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipinternal.helmholtz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.helmholtz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncweb.basisit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncweb.helmholtz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.helmholtz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.helmholtz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slim1.basisit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slim2.basisit.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/hzb-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/hzb-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/hzb-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/hzb-ca/pub/cacert/cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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