trideccloud.gfz-potsdam.de

- Helmholtz-Zentrum Potsdam - Deutsches GeoForschungsZentrum GFZ -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 1f:0a:8e:1e:60:2e:68:91:27:c4:ba:e5 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Helmholtz-Zentrum Potsdam - Deutsches GeoForschungsZentrum GFZ

Organization: Helmholtz-Zentrum Potsdam - Deutsches GeoForschungsZentrum GFZ
Organization unit: eScience Centre
State / Province: Brandenburg
Locality: Potsdam
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:0a:8e:1e:60:2e:68:91:27:c4:ba:e5
Serial Number (int): 9606795699031324972338690789
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: cd:50:32:38:69:e4:5c:a9:cd:90:68:27:ea:f5:07:fb:a7:06:5e:ef
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): cb:d2:98:fd:67:ba:17:b7:68:2d:e4:a0:97:65:6d:0f:15:58:55:bd
Fingerprint (sha256): 2a:53:19:40:18:1d:54:6e:09:0e:b7:9c:2e:0c:06:35:f0:b7:50:19:8d:ef:c6:4e:85:55:d2:12:20:bc:71:a9

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate trideccloud.gfz-potsdam.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for trideccloud.gfz-potsdam.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rz-vm420.gfz-potsdam.de
trideccloud.gfz-potsdam.de

Other certificates including the domain name gfz-potsdam.de

(limited to 100 certificates)
geofon.gfz-potsdam.de
rz-vcs1.gfz-potsdam.de
d3m.gfz-potsdam.de
rz-vm140.gfz-potsdam.de
hydro.gfz-potsdam.de
gisasaprouter.gfz-potsdam.de
sec21-dmz1b.gfz-potsdam.de
hydro.gfz-potsdam.de
sec21-dmz1b.gfz-potsdam.de
wol.gfz-potsdam.de
webstats.gfz-potsdam.de
email.gwdg.de
mobilehub.gfz-potsdam.de
intranet.gfz-potsdam.de
dokuwiki.gfz-potsdam.de
sec21-dmz2b.gfz-potsdam.de
moses-dmp.gfz-potsdam.de
spaceweather.gfz-potsdam.de
events.gfz-potsdam.de
rbm9.gfz-potsdam.de
nera-ern.gfz-potsdam.de
api.itsm.gfz-potsdam.de
wlc.gfz-potsdam.de
ebissiq.gfz-potsdam.de
exportcontrol.gfz-potsdam.de
rz-support.gfz-potsdam.de
sec21-dmz1b.gfz-potsdam.de
email.gwdg.de
git.gfz-potsdam.de
rz-vm175.gfz-potsdam.de
hydro.gfz-potsdam.de
varve.gfz-potsdam.de
idp-dev.gfz-potsdam.de
webstats.gfz-potsdam.de
geomagia.gfz-potsdam.de
www.gfz-potsdam.de
fw-ext.gfz-potsdam.de
rz-vm213.gfz-potsdam.de
fw-ext.gfz-potsdam.de
geofon.gfz-potsdam.de
gfzpublic.gfz-potsdam.de
eismassendynamik.gfz-potsdam.de
rz-vm174.gfz-potsdam.de
rz-vm112.gfz-potsdam.de
simultan.gfz-potsdam.de
events.gfz-potsdam.de
rz-vm234.gfz-potsdam.de
gfzock.gfz-potsdam.de
collabora.gfz-potsdam.de
www-app5.gfz-potsdam.de
enhsp.gfz-potsdam.de
timeseries.gfz-potsdam.de
printer-core.gfz-potsdam.de
rz-vm457.gfz-potsdam.de
nextcloud.gfz-potsdam.de
geomagia.gfz-potsdam.de
escidoc.gfz-potsdam.de
idp-test.gfz-potsdam.de
sec21-bbb.gfz-potsdam.de
rz-vm62.gfz-potsdam.de
rz-vm119.gfz-potsdam.de
gfz-potsdam.de
ccmp-pompei.gfz-potsdam.de
moses-dmp.gfz-potsdam.de
wlantickets.gfz-potsdam.de
aschera.gfz-potsdam.de
dep1doc.gfz-potsdam.de
varve.gfz-potsdam.de
index-search-prod.gfz-potsdam.de
ebiss.gfz-potsdam.de
rz-vm89.gfz-potsdam.de
gisasaprouter.gfz-potsdam.de
www.gfz-potsdam.de
forms.gfz-potsdam.de
asip.gfz-potsdam.de
bscw.gfz-potsdam.de
nextcloud.gfz-potsdam.de
benno.gfz-potsdam.de
ad.gfz-potsdam.de
rz-vm278.gfz-potsdam.de
intranet-test.gfz-potsdam.de
rz-ftp1.gfz-potsdam.de
s3ceph.gfz-potsdam.de
ssl.gfz-potsdam.de
moses-data.gfz-potsdam.de
egsim.gfz-potsdam.de
systemerde.gfz-potsdam.de
itsm.gfz-potsdam.de
dataservices.gfz-potsdam.de
rz-monstor3.gfz-potsdam.de
geso122.gfz-potsdam.de
d3m.gfz-potsdam.de
v4-server3.gfz-potsdam.de
trideccloud.gfz-potsdam.de
rz-vm65-dev.gfz-potsdam.de
otms.gfz-potsdam.de
kg3-dmz.gfz-potsdam.de
benno.gfz-potsdam.de
ldapext.gfz-potsdam.de
rz-vm121.gfz-potsdam.de

Certificate

The complete raw certificate details for trideccloud.gfz-potsdam.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILKjCCChKgAwIBAgIMHwqOHmAuaJEnxLrlMA0GCSqGSIb3DQEBCwUAMIGNMQsw
CQYDVQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVz
IERldXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4t
UEtJMSUwIwYDVQQDDBxERk4tVmVyZWluIEdsb2JhbCBJc3N1aW5nIENBMB4XDTE4
MDUwMzEzMzcyMloXDTIwMDgwNTEzMzcyMlowgb0xCzAJBgNVBAYTAkRFMRQwEgYD
VQQIDAtCcmFuZGVuYnVyZzEQMA4GA1UEBwwHUG90c2RhbTFHMEUGA1UECgw+SGVs
bWhvbHR6LVplbnRydW0gUG90c2RhbSAtIERldXRzY2hlcyBHZW9Gb3JzY2h1bmdz
WmVudHJ1bSBHRloxGDAWBgNVBAsMD2VTY2llbmNlIENlbnRyZTEjMCEGA1UEAwwa
dHJpZGVjY2xvdWQuZ2Z6LXBvdHNkYW0uZGUwggIiMA0GCSqGSIb3DQEBAQUAA4IC
DwAwggIKAoICAQDCCXwVRJMKiH8n8ogkTJDpPQ7hNL7/VHLYSKCP76hrb8ZzSDqd
JS7b4LDL8o4uNWkvxoAR+vfx0kfKAqQd9KtdVEiXRGQN+WsETOz/uVa+zFDc7Vws
o+c1PllOiI4Lm3DdHhf+4ZHPoZUnmxRubn6ywSYyZunaFzrKyQm93pH+WlnyM6D0
/GevZwmieOofJD88CVJvwKTJQagltMYGqr8rzE2zGMnBmSuukInAHnEo4cBCoiGO
+3e4Ebl5V1GaH5VyoquhXkXXvL9HhylkVulwHpgXwkZnqa7A/M1Q93IUhphTM2P3
XV/32cAoao0oBWX2lSJDlmAKfF3f2HwuJJ8DIxg2DHyLp1J2ddckTqKMW9Q3onkl
Q4Kg8fJ123DEgdF4BKvSmC7N+kpphm3IPeBp9EMids8LievBUn+MFcL3Ok8gb/Lj
HDDnfy9K5Q49XRMOUcpG3m6LCys/8/pbOYg2INzr00tajwLWDp0vpLVW4x5cxrdd
kj5O7WkupFrb0xCPchpC7mMEORxWVglcJ+ndxx8P5McF8NzErbnzaAa/hQ9zuVnU
Qju4ORHEA7Sp8jKYcNPJkCK0hm6KujGDy9v0M7PkvJ6CcfymTGTSxog4lthN4MXI
aba0aPD2xFk2QRNtIUvl3+Ncnel4h/C/OnG9hLle/BWeKwR/2B4rlimmnQIDAQAB
o4IGVjCCBlIwWQYDVR0gBFIwUDAIBgZngQwBAgIwDQYLKwYBBAGBrSGCLB4wDwYN
KwYBBAGBrSGCLAEBBDARBg8rBgEEAYGtIYIsAQEEAwgwEQYPKwYBBAGBrSGCLAIB
BAMIMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUF
BwMBMB0GA1UdDgQWBBTNUDI4aeRcqc2QaCfq9Qf7pwZe7zAfBgNVHSMEGDAWgBRr
OpiL+fJTidrgrbIyHgkf6Ko7dDA+BgNVHREENzA1ghdyei12bTQyMC5nZnotcG90
c2RhbS5kZYIadHJpZGVjY2xvdWQuZ2Z6LXBvdHNkYW0uZGUwgY0GA1UdHwSBhTCB
gjA/oD2gO4Y5aHR0cDovL2NkcDEucGNhLmRmbi5kZS9kZm4tY2EtZ2xvYmFsLWcy
L3B1Yi9jcmwvY2FjcmwuY3JsMD+gPaA7hjlodHRwOi8vY2RwMi5wY2EuZGZuLmRl
L2Rmbi1jYS1nbG9iYWwtZzIvcHViL2NybC9jYWNybC5jcmwwgdsGCCsGAQUFBwEB
BIHOMIHLMDMGCCsGAQUFBzABhidodHRwOi8vb2NzcC5wY2EuZGZuLmRlL09DU1At
U2VydmVyL09DU1AwSQYIKwYBBQUHMAKGPWh0dHA6Ly9jZHAxLnBjYS5kZm4uZGUv
ZGZuLWNhLWdsb2JhbC1nMi9wdWIvY2FjZXJ0L2NhY2VydC5jcnQwSQYIKwYBBQUH
MAKGPWh0dHA6Ly9jZHAyLnBjYS5kZm4uZGUvZGZuLWNhLWdsb2JhbC1nMi9wdWIv
Y2FjZXJ0L2NhY2VydC5jcnQwggPVBgorBgEEAdZ5AgQCBIIDxQSCA8EDvwB1AG9T
dqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABYyY4xUUAAAQDAEYwRAIg
cPeYmGLnZKqTxk+znPTMjQ1uFec/tQcN+B4AIsu/uS8CIGOQ1j6CkiDZyuuBoHGd
p9Ft8FF9nH319cDLCC7MZQ3kAHcA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7
iXqo/csAAAFjJjjFaAAABAMASDBGAiEAygIQhX2njRvhPpgX4TzYiv10mbMZxo3P
kLGz5fr3vgECIQCZPrefMaCeDq+K8B7ECQbQmezMhg+jffADFAOKCUBm7wB1AFWB
1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABYyY4xlAAAAQDAEYwRAIg
c9aqSGfuonJnTwDIQ7s50YxFhkLbgBobHAF8/saWpPwCIHEpgOhUCkn+iUTZJEer
1MLJBkF3b3JowqChi5gZNpCaAHYAqucLfzy41WbIbC8Wl5yfRF9pqw60U1WJsvd6
AwEE880AAAFjJjjFLAAABAMARzBFAiBwV0XC4E3AYdsIwg/UYtLXPfKMunZjX5Io
LjPiIJmb9QIhAO5FV6UjwhBtTEglZXbcwkPWcq0TJtCmiTMCEjEzOp+kAHYApLkJ
kLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFjJjjH1gAABAMARzBFAiEA
yNpjZ0A13yX3v2LzphMMsbeIuHxmGXRPg2/MrpMhJ+MCIEkuFd7SlURs3gtr3HtD
O12XjtfAIEP9NNJczDZKE8YXAHcAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZk
No4e0YUAAAFjJjjHpAAABAMASDBGAiEA5c9AJxSPKM+FQlIBr9+D2j9WfihVE5EB
/xtw63JlG7MCIQCAKT5hDcoDm3/qYIMMsnRTCRD3Vt+sfln5y0sXzoxgmAB2AF6n
c/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABYyY4yooAAAQDAEcwRQIg
I9t3wjr9kjuqy10smJ7JJhZIyyGntBQ1YCYn19v5fkICIQCenVDzRxt7L5onaQDF
leb9SZw/FQG24Y0NEBL4Zfq7MwB1ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJ
Uy3vi5BeAAABYyY4xyEAAAQDAEYwRAIgGF4yYOKomnsp2kLbws9bmGefBgInq3g0
Kn/tz4PoFZICIAuILnxHr50yo+NjyXxsyxmDmZGa1VpbGVA+A0vtjE/tMA0GCSqG
SIb3DQEBCwUAA4IBAQBadJCsoyTVGQquBxrHXPH71ibbv8hyi8P0+hxTzYGdjI3q
pdtst3JjgA6deizd2kDzO7nOQFVNW2pJhqQ/Vfij2wm0zSyN1wRxQjn1HbNiCHou
h9kKwI76Fqv8z9WErtuMax7dg2LeTyV/rpIMjnAi/sn7HkAOsflkxHNex6hokI3H
QHxavm29nw8H1L/HptYATPqbEiNpAR5r757w3a8I/vK7L7xBIJ73LHgaDk2khmEK
+9jDgB29isri4TalFrwM06tI+/NAI5PtEiPzsAgMFamRit8uiV/HjQTPoxKfC/e3
ZbzYM14jXfbLw9j8OiQXMG4xsNMx4t3c4RhZOXKm
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwgl8FUSTCoh/J/KIJEyQ
6T0O4TS+/1Ry2Eigj++oa2/Gc0g6nSUu2+Cwy/KOLjVpL8aAEfr38dJHygKkHfSr
XVRIl0RkDflrBEzs/7lWvsxQ3O1cLKPnNT5ZToiOC5tw3R4X/uGRz6GVJ5sUbm5+
ssEmMmbp2hc6yskJvd6R/lpZ8jOg9Pxnr2cJonjqHyQ/PAlSb8CkyUGoJbTGBqq/
K8xNsxjJwZkrrpCJwB5xKOHAQqIhjvt3uBG5eVdRmh+VcqKroV5F17y/R4cpZFbp
cB6YF8JGZ6muwPzNUPdyFIaYUzNj911f99nAKGqNKAVl9pUiQ5ZgCnxd39h8LiSf
AyMYNgx8i6dSdnXXJE6ijFvUN6J5JUOCoPHyddtwxIHReASr0pguzfpKaYZtyD3g
afRDInbPC4nrwVJ/jBXC9zpPIG/y4xww538vSuUOPV0TDlHKRt5uiwsrP/P6WzmI
NiDc69NLWo8C1g6dL6S1VuMeXMa3XZI+Tu1pLqRa29MQj3IaQu5jBDkcVlYJXCfp
3ccfD+THBfDcxK2582gGv4UPc7lZ1EI7uDkRxAO0qfIymHDTyZAitIZuiroxg8vb
9DOz5LyegnH8pkxk0saIOJbYTeDFyGm2tGjw9sRZNkETbSFL5d/jXJ3peIfwvzpx
vYS5XvwVnisEf9geK5Yppp0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9606795699031324972338690789
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-03 13:37:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-05 13:37:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Brandenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Potsdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helmholtz-Zentrum Potsdam - Deutsches GeoForschungsZentrum GFZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'eScience Centre'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'trideccloud.gfz-potsdam.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 791602098407395109664457948170855174153599401930646109067617583135894840791600913214144608742090177895749170261082756401222838915809998305733071708709499872015412154805298535257629745209848650214511151677987065612491352594639642191887616724005553047683675372059191460451844966040398238084526041055907683519683830561375581400608432919426519181121072003336044456640805378330894774445154325995790844447784194771009731368276522148826865028175198560966781421121585010832536540003734352249274139121234663552926893443759210946384801467438033745087151231963122517449104537555048469135272789157422487163042032911216749063272489815979163533383485834625384107629469886604147773332635767508306320662753936764173729143030793202043451563809229614978037517540427324814632666661349676319755346015438093377700151320962692411589240346667297418010471999861596237922452934332267741378681488259355634405477172300061402512064460516172452707266260636913054562291036784656323159322313345490344125509737862408897990156571253281244513437562054932585349292888442344858988895130402144192114195274142387470797905822085351837865972979659518257758062394122151082102654975596493351056088887457468286726229819538395025914987243118431454977695558111302712343409567389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd50323869e45ca9cd906827eaf507fba7065eef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rz-vm420.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trideccloud.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (965 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (961 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005a7490aca324d5190aae071ac75cf1fbd626dbbfc8728bc3f4fa1c53cd819d8c8deaa5db6cb77263800e9d7a2cddda40f33bb9ce40554d5b6a4986a43f55f8a3db09b4cd2c8dd704714239f51db362087a2e87d90ac08efa16abfccfd584aedb8c6b1edd8362de4f257fae920c8e7022fec9fb1e400eb1f964c4735ec7a868908dc7407c5abe6dbd9f0f07d4bfc7a6d6004cfa9b122369011e6bef9ef0ddaf08fef2bb2fbc41209ef72c781a0e4da486610afbd8c3801dbd8acae2e136a516bc0cd3ab48fbf3402393ed1223f3b0080c15a9918adf2e895fc78d04cfa3129f0bf7b765bcd8335e235df6cbc3d8fc3a2417306e31b0d331e2dddce118593972a6