fhe-mail-relay2.fh-erfurt.de

- Fachhochschule Erfurt -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 25:86:40:94:77:15:a1:33:42:f2:f5:e1 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fachhochschule Erfurt

Organization: Fachhochschule Erfurt
State / Province: Thueringen
Locality: Erfurt
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 25:86:40:94:77:15:a1:33:42:f2:f5:e1
Serial Number (int): 11613246393372096325097813473
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 69:aa:55:77:04:15:df:0e:ec:00:e8:7b:b9:d0:54:a9:4e:dc:f5:af
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 2d:bd:e2:93:d5:f0:1d:e3:26:2e:17:e8:0c:74:e8:4d:92:a4:29:e4
Fingerprint (sha256): 24:6a:d2:24:fa:f3:43:7f:d3:1c:3d:e8:c9:b6:93:a7:ee:e8:2b:1e:61:78:5b:78:77:63:c0:0f:96:de:96:df

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate fhe-mail-relay2.fh-erfurt.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fhe-mail-relay2.fh-erfurt.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fhe-mail-relay2.fh-erfurt.de
mailrelay2.fh-erfurt.de

Other certificates including the domain name fh-erfurt.de

(limited to 100 certificates)
tkm.fh-erfurt.de
fgk-nas-1.fh-erfurt.de
evasys.fh-erfurt.de
webmail.fh-erfurt.de
sbc-01.fh-erfurt.de
wwws-analyse.fh-erfurt.de
fhe-mailbox.fh-erfurt.de
fwng.fh-erfurt.de
vpl.fh-erfurt.de
fhemail.fh-erfurt.de
fhewebmail.fh-erfurt.de
stud-vpn.fh-erfurt.de
morpheus.fh-erfurt.de
hye.ai.fh-erfurt.de
www.ai.fh-erfurt.de
cti-proxy.fh-erfurt.de
fhe-pecunia.fh-erfurt.de
cti-proxy.fh-erfurt.de
netstorage.fh-erfurt.de
exa-cust.fh-erfurt.de
radius1.fh-erfurt.de
vpl.fh-erfurt.de
webmail.fh-erfurt.de
h1-test.fh-erfurt.de
fhe-tsbroker-2.fhe-ad.fh-erfurt.de
nc.fh-erfurt.de
sbc-02.fh-erfurt.de
netstorage.fh-erfurt.de
test-moodle.fh-erfurt.de
bewerben.fh-erfurt.de
emedia.fh-erfurt.de
www.fh-erfurt.de
test-moodle.fh-erfurt.de
cloud.fh-erfurt.de
idp.fh-erfurt.de
fhe-mail-relay2.fh-erfurt.de
exa-test.fh-erfurt.de
migration.fh-erfurt.de
stundenplan.fh-erfurt.de
get.fh-erfurt.de
exa-test2.fh-erfurt.de
email.fh-erfurt.de
wstud.fh-erfurt.de
qis.fh-erfurt.de
katalog.fh-erfurt.de
pruefung.fh-erfurt.de
fh-erfurt.de
www.fh-erfurt.de
test-a1.fh-erfurt.de
webmail.fh-erfurt.de
pad.fh-erfurt.de
wwws.fh-erfurt.de
group.fh-erfurt.de
wwwp1.fh-erfurt.de
haushalt.fh-erfurt.de
adfs.fh-erfurt.de
nctest.fh-erfurt.de
gwweb.fh-erfurt.de
moodle.fh-erfurt.de
oas.fh-erfurt.de
morpheus.fhe-ad.fh-erfurt.de
www.fh-erfurt.de
www.fh-erfurt.de
moodle.fh-erfurt.de
pruefung.fh-erfurt.de
terpsichore.fh-erfurt.de
evasys.fh-erfurt.de
gwweb.fh-erfurt.de
www.ai.fh-erfurt.de
source.ai.fh-erfurt.de
elms.fh-erfurt.de
evasys.fh-erfurt.de
fhe-mail-smtp2.fh-erfurt.de
iscommerce.fh-erfurt.de
studienkonto.fh-erfurt.de
fhe-mailbox.fh-erfurt.de
netstorage.fh-erfurt.de
fhe-zentral-1.fh-erfurt.de
support.fh-erfurt.de
test-moodle.fh-erfurt.de
nc-eval.fh-erfurt.de
studienkonto.fh-erfurt.de
bewerbung.fh-erfurt.de
notrust.fh-erfurt.de
netstorage.fh-erfurt.de
radius.fh-erfurt.de
studienkonto.fh-erfurt.de
oas.fh-erfurt.de
radius1.fh-erfurt.de
metacoon.fh-erfurt.de
fhe-test-sam.fh-erfurt.de
webmail.fh-erfurt.de
fhe-vw-7.fh-erfurt.de
www.fh-erfurt.de
itkom.ai.fh-erfurt.de
a1.fh-erfurt.de
elearning.ars.fh-erfurt.de
svn.ai.fh-erfurt.de
www.ai.fh-erfurt.de
netstorage.fh-erfurt.de

Certificate

The complete raw certificate details for fhe-mail-relay2.fh-erfurt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIguq/dKE9+rrVRDO/VD
D/fPF3yMonM//CViuCD9tzFH7q5kG5wvSR+a/qlJNctg9SM/b/gqexJZC7fApZ1P
0ZyEo/SchSSH/GV5E+4tn3pV7J77Lvm9I+y4ShP+4rNzyKGUQ/bOdnBfT4k+b4Jk
HlWzbkqbWHlP9xKMD6UATVPOBoG+HeT2Q/dYCIJBn6nxbVjdCqq4sA79eRIIa2cL
J3fORXr6owtdiW7YW8CUhMJLhKPB/eynAzsnLxYUifa1CRwhNhulf4uVz9Y7mm6A
VSlOAGUqgJNEbf/XJb4Njfm9F2NLIyhPqGjNlbvwyz+6Wmao7YJSTxn27J+S7ZVJ
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11613246393372096325097813473
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-13 11:29:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-13 11:29:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Thueringen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Erfurt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fachhochschule Erfurt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'fhe-mail-relay2.fh-erfurt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22285095674687161646095317322304152053273339864500323647442932205002519259830406960875957574469411947177602707824513316213485837878295021643340247933250356157307965924283421851601648845373624164612356133445785530573017405727953602019076000784853523293811266709392084805925632808505982891261802280653728593770238883929970108999002310377846443680300735241102830787497318406917400471156783838425059397819136549271105692327251060243477572615140361948695214365497267173217221728246140989177029629834456445210861071766861142874080798528837756727518630812567129759735952754039394807734473594719734988733520603774477340592521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.10
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							69aa55770415df0eec00e87bb9d054a94edcf5af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhe-mail-relay2.fh-erfurt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailrelay2.fh-erfurt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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