hk.mandant.dwd.de
- Deutscher Wetterdienst -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number 42:1f:79:8d:87:9f:95:4d:94:bf:7f:02:07:48:c2:21 was issued on by GEANT Vereniging.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Deutscher Wetterdienst
Organization:
Deutscher Wetterdienst
State / Province:
Hessen
Country: DE
Country: DE
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): 42:1f:79:8d:87:9f:95:4d:94:bf:7f:02:07:48:c2:21Serial Number (int): 87892474309125384226452586526061150753
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: bc:0d:04:ff:82:64:66:2d:5b:0f:55:73:2e:2b:a3:79:04:3c:5b:a8
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): 16:2a:b3:8c:5e:60:b7:1e:78:ff:55:55:46:cb:8a:4f:df:89:f6:eb
Fingerprint (sha256): 22:62:ba:97:23:93:f4:7d:67:b6:fa:4c:9c:c7:95:58:98:e0:94:a7:1f:cb:d8:29:85:de:38:2a:dc:fe:27:4f
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate hk.mandant.dwd.de
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for hk.mandant.dwd.de
Public Key Algorithm
RSA
Key Size
3072
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
hk.mandant.dwd.de
havariekommando.de
www.havariekommando.de
havariekommando.de
www.havariekommando.de
Other certificates including the domain name dwd.de
(limited to 100 certificates)
maps.dwd.de
ssi-intern.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
ssi.dwd.de
www.deutscher-wetterdienst.de
hosting.dwd.de
maps.dwd.de
kunden.dwd.de
dwdvd.dwd.de
hosting.dwd.de
nl-prox.dwd.de
www.flugwetter.de
expertennetzwerk.mandant.dwd.de
www.dwd.de
ssi.dwd.de
isedmz-p.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
wis-gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
www.dwd.de
kunden.dwd.de
oflsd46.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
ebc.mandant.dwd.de
ofvkexpc01.dwd.de
pappl.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
alephino.dwd.de
hosting.dwd.de
fralux.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
kassandra.dwd.de
maps.dwd.de
brzvpngw.dwd.de
listen-prox.dwd.de
dwdhosting.mandant.dwd.de
hosting.dwd.de
hk.mandant.dwd.de
virtadm-hosts.dwd.de
klimawandel.mandant.dwd.de
oflxd18.dwd.de
hosting.dwd.de
oflxsn10.dwd.de
hosting.dwd.de
xmdm.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
qs-ninjoservices.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
cdc.dwd.de
oflsd46.dwd.de
beobachtungen.dwd.de
ninjoservices-neu.dwd.de
oflxs616.dwd.de
prometheus.dwd.de
gdws.mandant.dwd.de
ofvkexpe01.dwd.de
hosting.dwd.de
opendata.dwd.de
hosting.dwd.de
sva.mandant.dwd.de
stbauf.mandant.dwd.de
kunden.dwd.de
beobachtungen.dwd.de
hosting.dwd.de
oflsd46.dwd.de
molrao.dwd.de
hosting.dwd.de
webwerdis-intra.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
listen-prox.dwd.de
ssi-intern.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
ssi.dwd.de
www.deutscher-wetterdienst.de
hosting.dwd.de
maps.dwd.de
kunden.dwd.de
dwdvd.dwd.de
hosting.dwd.de
nl-prox.dwd.de
www.flugwetter.de
expertennetzwerk.mandant.dwd.de
www.dwd.de
ssi.dwd.de
isedmz-p.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
wis-gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
www.dwd.de
kunden.dwd.de
oflsd46.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
ebc.mandant.dwd.de
ofvkexpc01.dwd.de
pappl.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
alephino.dwd.de
hosting.dwd.de
fralux.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
kassandra.dwd.de
maps.dwd.de
brzvpngw.dwd.de
listen-prox.dwd.de
dwdhosting.mandant.dwd.de
hosting.dwd.de
hk.mandant.dwd.de
virtadm-hosts.dwd.de
klimawandel.mandant.dwd.de
oflxd18.dwd.de
hosting.dwd.de
oflxsn10.dwd.de
hosting.dwd.de
xmdm.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
qs-ninjoservices.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
cdc.dwd.de
oflsd46.dwd.de
beobachtungen.dwd.de
ninjoservices-neu.dwd.de
oflxs616.dwd.de
prometheus.dwd.de
gdws.mandant.dwd.de
ofvkexpe01.dwd.de
hosting.dwd.de
opendata.dwd.de
hosting.dwd.de
sva.mandant.dwd.de
stbauf.mandant.dwd.de
kunden.dwd.de
beobachtungen.dwd.de
hosting.dwd.de
oflsd46.dwd.de
molrao.dwd.de
hosting.dwd.de
webwerdis-intra.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
listen-prox.dwd.de
Certificate
The complete raw certificate details for hk.mandant.dwd.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIH/DCCBeSgAwIBAgIQQh95jYeflU2Uv38CB0jCITANBgkqhkiG9w0BAQwFADBE MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjIxMTIzMDAwMDAwWhcNMjMxMTIzMjM1 OTU5WjBbMQswCQYDVQQGEwJERTEPMA0GA1UECBMGSGVzc2VuMR8wHQYDVQQKExZE ZXV0c2NoZXIgV2V0dGVyZGllbnN0MRowGAYDVQQDExFoay5tYW5kYW50LmR3ZC5k ZTCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAO4x+FjOZ2zdaS/J2yCz gdgO/0TWdHGSv4k3QOzK4FPizbDhPzkCqd8dGgmxDU0DOILtL4gm9b613kKS7Uwo +y3E5t+1vvDyMlWVp+lQGQRSzCbIWpt1qE4VDtbwsa4C47ToV/7pVQd75NDUpKtZ 4ee9odmiE8OGOeoI/Z4CaedHYEyEmYCcw8OHcEIKUs586l74dIh5IQPjBA6knl7x q/oEoonjOtydjZ/t8/Wd9dWPy3U2dT95WvzTivXazeiEWhHKTL11K2DbHVoX6rSz /wGnW5WgcKXqryEuQt9OxGauQuEAfSxmODcnpfW+87Dqe/Osn6mhUekGn3NIGEjf jkoTxMH2iXJmuuiMD94siRrpdqV7PYf+cuy78EyItmQvJLw8U+pE7vNOMdxwjQJx JxCPi4cEgX/vbdjoYH84Y3YS+cI+Hg8CDHnpaCugHTYMP9WdBfyR5XW2iO6tj4Tw kwkXNzzmpQWI6RMLPCDKgd6Iatg43ySpX7v2BX1VmH7mUwIDAQABo4IDUTCCA00w HwYDVR0jBBgwFoAUbx01SRBsMvpZoJ68iugflb5xegwwHQYDVR0OBBYEFLwNBP+C ZGYtWw9Vcy4ro3kEPFuoMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNVHSAEQjBAMDQGCysGAQQB sjEBAgJPMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgG BmeBDAECAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vR0VBTlQuY3JsLnNlY3Rp Z28uY29tL0dFQU5UT1ZSU0FDQTQuY3JsMHUGCCsGAQUFBwEBBGkwZzA6BggrBgEF BQcwAoYuaHR0cDovL0dFQU5ULmNydC5zZWN0aWdvLmNvbS9HRUFOVE9WUlNBQ0E0 LmNydDApBggrBgEFBQcwAYYdaHR0cDovL0dFQU5ULm9jc3Auc2VjdGlnby5jb20w ggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AK33vvp8/xDIi509nB4+GGq0Zyld z7EMJMqFhjTr3IKKAAABhKSiol8AAAQDAEcwRQIhAMpCBcqAcKwbnNP5JDYJ/iTk 0dq6/iDcl7hZ+0NvZdQqAiAPnjUltetpr3jkiDqWYRRmEKSIfjjxUxYkLGt/SMXM 8wB3AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABhKSiomkAAAQD AEgwRgIhAPKWuZQO4svRXf2tSCil3FS87LI/ROvV83VE7UtQlK1qAiEAm1QRTvJf NUJxRFcoc4rtozJRRX3xITVfGQ+wb/PQB60AdgDoPtDaPvUGNTLnVyi8iWvJA9PL 0RFr7Otp4Xd9bQa9bgAAAYSkoqI7AAAEAwBHMEUCIQCwKgZ7sr788M7eBMYrbe5Y hfPRTY2fhHuezN8V0J8NywIgJwO+CsaDQT9VtkwB6ZEeSwjHYXt9gozMW81oNnC6 5DQwSAYDVR0RBEEwP4IRaGsubWFuZGFudC5kd2QuZGWCEmhhdmFyaWVrb21tYW5k by5kZYIWd3d3LmhhdmFyaWVrb21tYW5kby5kZTANBgkqhkiG9w0BAQwFAAOCAgEA c20SM2fs6ErCGHcguxHnCyvEDA/LIRdfYl190uW4fVgPH0JTffB3r4CefPrv1fy5 itXdYZsxT2zZI0INz5SlHl5T3g6hsLJqOihunQD81OHsIwUXdo148dtvAf3reRFO H1kpESgehSiV5y2s0w1DSuawC8203ptkdWe5Jc3+x6ca69lmlIG4UdwPloRBfw+R eHSB4Ckv/ENSs9QNCxLXWstCYshgoK2Yii+igYmKclu7itfZ/F5kNt5QXAsWIfhY DWIRAKscojioVX6g+dsqBDuahiPmLnpa8x/2tbU5Xb8s+KcmYrxaS+7aBAKNVEzh KXLGR3/hL+Fkk8hbKSWqFyFyRr4hCvnPkKaYQ/r4mA1BUH9rP9JIEU+is1lO4St2 kdMUQoU2l5x2fgk0bF03m/fKPMqVmtGIRYbQm3++DpCs6m3UHH6YPlyBabzKNbc3 WkGidgCZbK43AWsXJqKLiXRmw2ingOzXuExDQQ5js6O+MULx0nI72TkESADl3dOW b+dwU2Ea2sLhUDRL9haGycxPtne//ZMejBfEFv+b6OBP3xr2hY4Wyc/5gkssCjtf VRgLHXL99lBbX7Gy0Jg3M75eh0+YIskevSI6Hh7m8yofg7ynYqWwo/tXvdq6cWPx eTeogR7Kw5nMI9Mn4PboH0KvLyb6VKMwW6/tw+ZGEpo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEA7jH4WM5nbN1pL8nbILOB 2A7/RNZ0cZK/iTdA7MrgU+LNsOE/OQKp3x0aCbENTQM4gu0viCb1vrXeQpLtTCj7 LcTm37W+8PIyVZWn6VAZBFLMJsham3WoThUO1vCxrgLjtOhX/ulVB3vk0NSkq1nh 572h2aITw4Y56gj9ngJp50dgTISZgJzDw4dwQgpSznzqXvh0iHkhA+MEDqSeXvGr +gSiieM63J2Nn+3z9Z311Y/LdTZ1P3la/NOK9drN6IRaEcpMvXUrYNsdWhfqtLP/ AadblaBwpeqvIS5C307EZq5C4QB9LGY4Nyel9b7zsOp786yfqaFR6Qafc0gYSN+O ShPEwfaJcma66IwP3iyJGul2pXs9h/5y7LvwTIi2ZC8kvDxT6kTu804x3HCNAnEn EI+LhwSBf+9t2OhgfzhjdhL5wj4eDwIMeeloK6AdNgw/1Z0F/JHldbaI7q2PhPCT CRc3POalBYjpEws8IMqB3ohq2DjfJKlfu/YFfVWYfuZTAgMBAAE= -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 87892474309125384226452586526061150753 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-23 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutscher Wetterdienst' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hk.mandant.dwd.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5405547801329651433123521680985445280487974862704570348677753258008928849449318205128078075708160123797343664129838538774067951772443059813732685762533958865855103305726840134850973035011281233051584573465953177819010917258781260274870241494777359566263831574365855321749662354878271648469536552418594982558855920818705455862187510171846963163844789531296440134691240963526663326419736533263166227750022019878511523812278321051621550741253949834570237378187712066853689432973183521491126651068362783684788715818365645931002973934931283725645552251707845790062382921645667292119506169830664578929617330673000070881338430088911688603307499237086608503459215204773442273486108148306434425825067356157988082491772895851152444188380195925838137704241794801545770771972230133295874791039311273183444282322139627877124387948679909181447728233566961142388775847598541912341314660326595057794959108521261594006675587726839142747661907 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bc0d04ff8264662d5b0f55732e2ba379043c5ba8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.mandant.dwd.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havariekommando.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havariekommando.de' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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