exa-test2.fh-erfurt.de

- Fachhochschule Erfurt -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 26:4e:8b:1c:c0:b3:0b:4f:18:18:5c:ff was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fachhochschule Erfurt

Organization: Fachhochschule Erfurt
State / Province: Thueringen
Locality: Erfurt
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 26:4e:8b:1c:c0:b3:0b:4f:18:18:5c:ff
Serial Number (int): 11855383526476461142168853759
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 56:36:1c:03:40:5b:db:cb:0b:e0:4d:cb:0c:09:c0:31:49:13:66:00
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): b4:c5:3d:a8:1f:db:aa:a0:94:a0:80:ff:18:85:18:e0:1c:d5:bf:f3
Fingerprint (sha256): 26:76:12:d1:ef:fb:88:b7:b5:98:b5:fc:87:57:69:c2:9a:12:24:89:8c:d6:e5:b3:8b:a1:38:bf:92:57:8d:22

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate exa-test2.fh-erfurt.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for exa-test2.fh-erfurt.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

exa-test2.fh-erfurt.de
exa-test2.untrusted.fh-erfurt.de

Other certificates including the domain name fh-erfurt.de

(limited to 100 certificates)
tkm.fh-erfurt.de
fgk-nas-1.fh-erfurt.de
evasys.fh-erfurt.de
webmail.fh-erfurt.de
sbc-01.fh-erfurt.de
wwws-analyse.fh-erfurt.de
fhe-mailbox.fh-erfurt.de
fwng.fh-erfurt.de
vpl.fh-erfurt.de
fhemail.fh-erfurt.de
fhewebmail.fh-erfurt.de
stud-vpn.fh-erfurt.de
morpheus.fh-erfurt.de
hye.ai.fh-erfurt.de
www.ai.fh-erfurt.de
cti-proxy.fh-erfurt.de
fhe-pecunia.fh-erfurt.de
cti-proxy.fh-erfurt.de
netstorage.fh-erfurt.de
exa-cust.fh-erfurt.de
radius1.fh-erfurt.de
vpl.fh-erfurt.de
webmail.fh-erfurt.de
h1-test.fh-erfurt.de
fhe-tsbroker-2.fhe-ad.fh-erfurt.de
nc.fh-erfurt.de
sbc-02.fh-erfurt.de
netstorage.fh-erfurt.de
test-moodle.fh-erfurt.de
bewerben.fh-erfurt.de
emedia.fh-erfurt.de
www.fh-erfurt.de
test-moodle.fh-erfurt.de
cloud.fh-erfurt.de
idp.fh-erfurt.de
fhe-mail-relay2.fh-erfurt.de
exa-test.fh-erfurt.de
migration.fh-erfurt.de
stundenplan.fh-erfurt.de
get.fh-erfurt.de
exa-test2.fh-erfurt.de
email.fh-erfurt.de
wstud.fh-erfurt.de
qis.fh-erfurt.de
katalog.fh-erfurt.de
pruefung.fh-erfurt.de
fh-erfurt.de
www.fh-erfurt.de
test-a1.fh-erfurt.de
webmail.fh-erfurt.de
pad.fh-erfurt.de
wwws.fh-erfurt.de
group.fh-erfurt.de
wwwp1.fh-erfurt.de
haushalt.fh-erfurt.de
adfs.fh-erfurt.de
nctest.fh-erfurt.de
gwweb.fh-erfurt.de
moodle.fh-erfurt.de
oas.fh-erfurt.de
morpheus.fhe-ad.fh-erfurt.de
www.fh-erfurt.de
www.fh-erfurt.de
moodle.fh-erfurt.de
pruefung.fh-erfurt.de
terpsichore.fh-erfurt.de
evasys.fh-erfurt.de
gwweb.fh-erfurt.de
www.ai.fh-erfurt.de
source.ai.fh-erfurt.de
elms.fh-erfurt.de
evasys.fh-erfurt.de
fhe-mail-smtp2.fh-erfurt.de
iscommerce.fh-erfurt.de
studienkonto.fh-erfurt.de
fhe-mailbox.fh-erfurt.de
netstorage.fh-erfurt.de
fhe-zentral-1.fh-erfurt.de
support.fh-erfurt.de
test-moodle.fh-erfurt.de
nc-eval.fh-erfurt.de
studienkonto.fh-erfurt.de
bewerbung.fh-erfurt.de
notrust.fh-erfurt.de
netstorage.fh-erfurt.de
radius.fh-erfurt.de
studienkonto.fh-erfurt.de
oas.fh-erfurt.de
radius1.fh-erfurt.de
metacoon.fh-erfurt.de
fhe-test-sam.fh-erfurt.de
webmail.fh-erfurt.de
fhe-vw-7.fh-erfurt.de
www.fh-erfurt.de
itkom.ai.fh-erfurt.de
a1.fh-erfurt.de
elearning.ars.fh-erfurt.de
svn.ai.fh-erfurt.de
www.ai.fh-erfurt.de
netstorage.fh-erfurt.de

Certificate

The complete raw certificate details for exa-test2.fh-erfurt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB4AsQ+/pNvnkrYt+lZo
/RiIJMq2m1Zkd8HyrotIKqqX1AcmNA+HxHE7Rbq3AEgOfUSWGdO5eUPLWuhUF2K5
yt4tTwx8hbaBBLD8QkXcw98lgNpGI2yyozHNJeXMdfv5bFoLRfrnPfJqsFohIOQ8
XdyPbDwNQxZOzgFfT6rDXyKOsFS+RL4uscKC2ezkZAgi7ErK/OY/TIGOucmnW2MW
pKQrnmDdWpmW3zfA9eQKFdWixnYyfUZgiJaayxbLAP95afz+bRSxViuCYhcC2MZP
nV/XAMmZa0p2BX9K+kdhQ0pPcdYsVeq/Ij7wBZY5GjBmxPkhDqiq54vvGop3OtHB
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11855383526476461142168853759
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-14 09:40:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-14 09:40:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Thueringen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Erfurt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fachhochschule Erfurt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'exa-test2.fh-erfurt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23747596217262026847135710588546902298053936078945234139929731951644164365714762251907324683886611017194423320866675814527116905737554381005659782877307434105720899678395018090151140047739515864486915298026333917238230978904959684275872075699241076975197498430237255089905971581630382346514732487008489208353833176534328211007852687692952829429034175561821978639052529628973231900314147364213484712764032901495634224070170653172346328738883821420140323873596811735211561852383145561761374120434711386640725012017918524871285259015242437342635672116990225755135547333373905495461288247586622788893213557699749369463077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.10
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							56361c03405bdbcb0be04dcb0c09c03149136600
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exa-test2.fh-erfurt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exa-test2.untrusted.fh-erfurt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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