oos.dfg.de

- Deutsche Forschungsgemeinschaft e.V. -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 21:3a:a2:38:8c:9d:f5:fd:cd:7e:28:19 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Deutsche Forschungsgemeinschaft e.V.

Organization: Deutsche Forschungsgemeinschaft e.V.
Organization unit: I-INF-1
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 21:3a:a2:38:8c:9d:f5:fd:cd:7e:28:19
Serial Number (int): 10283889088162453977386854425
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 95:da:67:ae:50:d4:1a:35:83:b4:bf:f6:5d:ea:ae:50:1a:7e:56:d7
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): e0:ea:d1:3b:eb:0b:76:2f:53:a6:72:b1:33:a8:47:25:31:70:a0:4e
Fingerprint (sha256): 1e:c3:77:9e:c1:24:06:93:eb:de:4b:05:36:cd:bb:5e:b9:d3:4c:eb:da:b0:07:c6:8d:b9:d3:bc:6f:c0:cb:41

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate oos.dfg.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oos.dfg.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oos.dfg.de

Other certificates including the domain name dfg.de

(limited to 100 certificates)
fta.dfg.de
remote.dfg.de
dfg.de
mediathek.dfg.de
mail.dfg.de
remote.dfg.de
elan-t.dfg.de
elan.dfg.de
wlan.dfg.de
mbx.t.dfg.de
remote.dfg.de
konten-entw.dfg.de
mediant.dfg.de
jira.dfg.de
mx2.dfg.de
mediathek.dfg.de
ai-initiative.dfg.de
elan-entw.dfg.de
log-t.dfg.de
oos.dfg.de
log-t.dfg.de
jobs.dfg.de
autodiscover.t.dfg.de
ot.dfg.de
mediant.dfg.de
dfg.de
log.dfg.de
spamverdacht.dfg.de
fta-eval.dfg.de
elan.dfg.de
remote.dfg.de
log-t.dfg.de
telearbeit.int.dfg.de
srwgp319.dfg.de
jobs.dfg.de
captiveportal.dfg.de
uc.dfg.de
instrumentenkasten.dfg.de
mediant.dfg.de
elan-ci-entw.dfg.de
srlgp042.dfg.de
elan.dfg.de
dfg.de
dfggast.dfg.de
meeting.dfg.de
jobs.dfg.de
ics.t.dfg.de
dfg.de
konten-entw.dfg.de
log.dfg.de
wlan.dfg.de
remote.dfg.de
fta.dfg.de
elan-entw-en.dfg.de
da.dfg.de
autodiscover.dfg.de
uc.dfg.de
autodiscover.dfg.de
wlan.dfg.de
log-t.dfg.de
dfg.de
dfggast.dfg.de
itsm-web.int.dfg.de
elan.dfg.de
www.events.dfg.de
mediathek.dfg.de
*.dfg.de
elan.dfg.de
remote.dfg.de
eduroam.dfg.de
quicklink-t.dfg.de
elan-entw.en.dfg.de
konten-entw.dfg.de
wlan.dfg.de
uc.t.dfg.de
elan.dfg.de
dfg.de
*.dfg.de
remote.dfg.de
itsm-web.int.dfg.de
ai-initiative.dfg.de
wlan.dfg.de
quicklink-t.dfg.de
log.dfg.de
vpn-tau.dfg.de
fta.dfg.de
ai-initiative.dfg.de
dfggast.dfg.de
groupware.dfg.de
remote-entw.dfg.de
dfg.de
dfg.de
wlan.dfg.de
dfggast.dfg.de
konten-entw.dfg.de
quicklink-t.dfg.de
dfg.de
dfg.de
remote.dfg.de
groupware.dfg.de

Certificate

The complete raw certificate details for oos.dfg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJWzCCCEOgAwIBAgIMITqiOIyd9f3NfigZMA0GCSqGSIb3DQEBCwUAMIGNMQsw
CQYDVQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVz
IERldXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4t
UEtJMSUwIwYDVQQDDBxERk4tVmVyZWluIEdsb2JhbCBJc3N1aW5nIENBMB4XDTE5
MDcwMjA5MzIyOVoXDTIxMTAwMzA5MzIyOVowgZAxCzAJBgNVBAYTAkRFMRwwGgYD
VQQIDBNOb3JkcmhlaW4tV2VzdGZhbGVuMQ0wCwYDVQQHDARCb25uMS0wKwYDVQQK
DCREZXV0c2NoZSBGb3JzY2h1bmdzZ2VtZWluc2NoYWZ0IGUuVi4xEDAOBgNVBAsM
B0ktSU5GLTExEzARBgNVBAMMCm9vcy5kZmcuZGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDl/p4RDlStHv57hzQmXzcqIWWVv0RkhDnxUuNusRveDxc/
tcJRBe9/vFhZ1KHgoC207DWXt3izpvMwLkR7vaB1d3vDIuZlFeF8I98tYVkTODbH
WLFvFedyGVVazAOln7e0tFw7zShGHx90qmloUBwns88xkqxiuqGGTXLMv5Wtb6RY
oU02stgRkPrUAyTXPqrAXNbvRQJYx9TYw24LVIoalEfuH8+AeLVCOBYQLSSCiS7T
Il5oD61AzHLvDAoWZDOH5Ujn1D0/tTpWM7uqz/meKzE5hFoBhrR46RZatuRcXOYB
dPW/GwJPHDgdlZ7VD6Q1pddUVZeFVWmDbdPQd3elAgMBAAGjggW0MIIFsDBXBgNV
HSAEUDBOMAgGBmeBDAECAjANBgsrBgEEAYGtIYIsHjAPBg0rBgEEAYGtIYIsAQEE
MBAGDisGAQQBga0hgiwBAQQEMBAGDisGAQQBga0hgiwCAQQEMAkGA1UdEwQCMAAw
DgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMB0GA1UdDgQWBBSV
2meuUNQaNYO0v/Zd6q5QGn5W1zAfBgNVHSMEGDAWgBRrOpiL+fJTidrgrbIyHgkf
6Ko7dDAVBgNVHREEDjAMggpvb3MuZGZnLmRlMIGNBgNVHR8EgYUwgYIwP6A9oDuG
OWh0dHA6Ly9jZHAxLnBjYS5kZm4uZGUvZGZuLWNhLWdsb2JhbC1nMi9wdWIvY3Js
L2NhY3JsLmNybDA/oD2gO4Y5aHR0cDovL2NkcDIucGNhLmRmbi5kZS9kZm4tY2Et
Z2xvYmFsLWcyL3B1Yi9jcmwvY2FjcmwuY3JsMIHbBggrBgEFBQcBAQSBzjCByzAz
BggrBgEFBQcwAYYnaHR0cDovL29jc3AucGNhLmRmbi5kZS9PQ1NQLVNlcnZlci9P
Q1NQMEkGCCsGAQUFBzAChj1odHRwOi8vY2RwMS5wY2EuZGZuLmRlL2Rmbi1jYS1n
bG9iYWwtZzIvcHViL2NhY2VydC9jYWNlcnQuY3J0MEkGCCsGAQUFBzAChj1odHRw
Oi8vY2RwMi5wY2EuZGZuLmRlL2Rmbi1jYS1nbG9iYWwtZzIvcHViL2NhY2VydC9j
YWNlcnQuY3J0MIIDXgYKKwYBBAHWeQIEAgSCA04EggNKA0gAdwBvU3asMfAxGdiZ
AKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWuyB1GVAAAEAwBIMEYCIQCSB9CputPI
czkNWJ7sT3YuhTxdj3mHUaRDTZr40oUmvQIhAJTeKEz83MipifSHDCTcIT1giBty
eJvl64N4ss+d6fMrAHYAqucLfzy41WbIbC8Wl5yfRF9pqw60U1WJsvd6AwEE880A
AAFrsgdRnQAABAMARzBFAiAqiEv1qKh4QT83GzTd0U9chx3KnFI22KgExaBCV0+t
VQIhAPHyFFYQL8RdG2X4VLxQAh+tCT+dMeTD0NP7SX1sf/sHAHYAVYHUwhaQNgFK
6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFrsgdSnQAABAMARzBFAiEA8NXfck9q
Q+Cqh/Pq+kQTtY3hLxizRCgX+vMCDkI4V4cCIAamJB4VwCtCTKFvUADfehIXCzSQ
6pzlA6mj3QnRZxTyAHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csA
AAFrsgdR9QAABAMARzBFAiEA+s/UERPNiKFY6FcUbmeFt6ngeTEHsG294Kz1ZUeH
ir0CIE4OQCMw5beEY/fqoZwQJLLZ4g5gxgg6I5K9AGFzxjHbAHUAu9nfvB+KcbWT
lCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFrsgdR9AAABAMARjBEAiBLm/jbj85K
PYYRfTmvurUYn8gmPmXCVgjnTlD7Yf5dFAIgRTg4wkPBHBm8XgxeeBr2k0DCeCS/
7y48vkHaEUEhPeEAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAA
AWuyB1H8AAAEAwBHMEUCIHmyan+qhE3VXZV4jPR/cEbx1P+COpEOvxjYevxKwVbM
AiEAhQMmyjGjUSvsi1lm0ey1zu3ZtQKsBoamvMQHGRBbw/EAdgBElGUusO7Or8RA
B9io/ijA2uaCvtjLMbU/0zOWtbaBqAAAAWuyB1g0AAAEAwBHMEUCIGPYr0Z+u6G/
4O2hOC0uSG2pfqvY7QRtJeNcA4Bi3yy7AiEA8tK5VI2wVQGF0YhjQvy4t+cE6ak0
OhhFHE6coz0vWFAwDQYJKoZIhvcNAQELBQADggEBABTQ1X7Lpk7eg0pR/nIuKlFl
JxbO6TT9rSbuf9jERzbHUUZ+RuXqPl5FHc+0FLqlhQp9PYd40gil2ZrcWjYMhQJr
F3BizJZwzH6W+E2n2FSYnSlEm3c3umt75BaXInANGv0jznstZL10pRLRM8PGndD1
6usc7D6R9AhAJFF6kuIhOQ7t19E+Udy5a06ITBr1D59NcvjmezDOPchxajf3OGwZ
bYMELy5qqPTxVrNez7CN6PNERuBX0oIskRH+raviBBqn3/9685ZvctspEvPqGTYy
OLH6LkQyaZRfDlq/88cZ316UO4Zcp9lDsjRPN/n4PM1LHXRWcKPgY8Jg76mDUH4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5f6eEQ5UrR7+e4c0Jl83
KiFllb9EZIQ58VLjbrEb3g8XP7XCUQXvf7xYWdSh4KAttOw1l7d4s6bzMC5Ee72g
dXd7wyLmZRXhfCPfLWFZEzg2x1ixbxXnchlVWswDpZ+3tLRcO80oRh8fdKppaFAc
J7PPMZKsYrqhhk1yzL+VrW+kWKFNNrLYEZD61AMk1z6qwFzW70UCWMfU2MNuC1SK
GpRH7h/PgHi1QjgWEC0kgoku0yJeaA+tQMxy7wwKFmQzh+VI59Q9P7U6VjO7qs/5
nisxOYRaAYa0eOkWWrbkXFzmAXT1vxsCTxw4HZWe1Q+kNaXXVFWXhVVpg23T0Hd3
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10283889088162453977386854425
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-02 09:32:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-03 09:32:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Deutsche Forschungsgemeinschaft e.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'I-INF-1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'oos.dfg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29034128380271165660222383966408490468553350553209818530494189126545149690832527560481646506259792707632446719106621218073545034393894499537584140194143390056001428885037533699710031345084905518280964434379599920876015748695996695954839772443576117137406425677934393034468715958207932897490859689268808819427189010148347323398277217771711538284556422361490248741796800425842763770187727187373867318078660993921036543259951707828485266754305431412217738573007100590266230447270248154268628193661364988293340183292594184512922596372729712842359312972605609769530079911235644787280566962421531008183245610205318099728293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							95da67ae50d41a3583b4bff65deaae501a7e56d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oos.dfg.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (846 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (842 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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