gitlab-t.uk-koeln.de
Issued by Sectigo RSA Domain Validation Secure Server CA
About this certificate
This digital certificate with serial number c4:4d:11:21:cd:0e:08:c7:54:ea:c0:4e:61:4d:64:16 was issued on by Sectigo Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=gitlab-t.uk-koeln.de
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate will expire on
Certificate Details
Serial Number (hex): c4:4d:11:21:cd:0e:08:c7:54:ea:c0:4e:61:4d:64:16Serial Number (int): 260928841510904711296466571731516875798
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: fb:b3:bf:5e:e9:3f:f8:69:66:48:3f:b2:b4:f7:4c:f5:94:30:83:f9
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1
Fingerprint (sha1): e7:24:ee:a4:30:a1:37:3c:0c:83:f7:d9:72:fc:27:c2:11:0c:df:5c
Fingerprint (sha256): 2b:f8:68:76:3d:1b:61:2a:01:55:f0:7c:fb:0b:58:74:7f:63:11:98:57:b7:0b:89:11:fa:1a:a6:af:1b:1c:05
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCheck the revocation status for certificate gitlab-t.uk-koeln.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gitlab-t.uk-koeln.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gitlab-t.uk-koeln.de
www.gitlab-t.uk-koeln.de
www.gitlab-t.uk-koeln.de
Other certificates including the domain name uk-koeln.de
(limited to 100 certificates)
arztportal.uk-koeln.de
arztportal.uk-koeln.de
itserviceportal.uk-koeln.de
itserviceportal.uk-koeln.de
sapportal-dev.uk-koeln.de
srm-qs.uk-koeln.de
smtp.uk-koeln.de
dwa.uk-koeln.de
l-medic-vonk-p.vm.uk-koeln.de
srm-qs.uk-koeln.de
qlm-infoboard.uk-koeln.de
hcm-dev.uk-koeln.de
srm-dev.uk-koeln.de
radar.uk-koeln.de
*.uk-koeln.de
ish-dev.uk-koeln.de
*.uk-koeln.de
vpnukk.uk-koeln.de
srm-qs.uk-koeln.de
cag-extern.uk-koeln.de
owa.uk-koeln.de
srm.uk-koeln.de
grc-dev.uk-koeln.de
owa.uk-koeln.de
srv-dcllsg.uk-koeln.de
speechlbnms.ads.uk-koeln.de
ilias.uk-koeln.de
cag.uk-koeln.de
iam.uk-koeln.de
speechlbnms.ads.uk-koeln.de
webexadmin.uk-koeln.de
*.uk-koeln.de
webexmeetings.uk-koeln.de
ilias.uk-koeln.de
corona.uk-koeln.de
ish-qs.uk-koeln.de
smtp2.uk-koeln.de
radar.uk-koeln.de
sectravna.uk-koeln.de
abbuch.uk-koeln.de
cag-extern2.uk-koeln.de
l-medic-vonk-p.vm.uk-koeln.de
ukk.uk-koeln.de
cag-extern.uk-koeln.de
arztportal.uk-koeln.de
l-nngm-app.vm.uk-koeln.de
vpnukk.uk-koeln.de
webexadmin.uk-koeln.de
ish-qs.uk-koeln.de
gitlab-t.uk-koeln.de
ish-dev.uk-koeln.de
*.net.uk-koeln.de
owa.uk-koeln.de
fu.uk-koeln.de
pmv.uk-koeln.de
srm.uk-koeln.de
w-osr-dms06.ads.uk-koeln.de
verinice.uk-koeln.de
dwa.uk-koeln.de
sapportal-qs.uk-koeln.de
abbuch-t.uk-koeln.de
webstatistik.uk-koeln.de
grc-qs.uk-koeln.de
processmining.uk-koeln.de
grc-dev.uk-koeln.de
owa.uk-koeln.de
grc-dev.uk-koeln.de
hrtbt-patientenportal.uk-koeln.de
owa.uk-koeln.de
ilias.uk-koeln.de
dl-medic-prxsecfw-t.dmz4.uk-koeln.de
cag-extern.uk-koeln.de
cag-extern.uk-koeln.de
*.uk-koeln.de
corona-impfung.uk-koeln.de
arztportal.uk-koeln.de
ilias.uk-koeln.de
dl-medic-prxsecfw-t.dmz4.uk-koeln.de
speechlbnms.ads.uk-koeln.de
speechlbdms.ads.uk-koeln.de
cag.uk-koeln.de
srm.uk-koeln.de
dwa.uk-koeln.de
srm.uk-koeln.de
speechlbdms.ads.uk-koeln.de
EXP-C-MRA01.voice.uk-koeln.de
intranet-stage.uk-koeln.de
ukkrad03.net.uk-koeln.de
radar.uk-koeln.de
hrtbt-patientenportal.uk-koeln.de
EXP-C-MRA01.voice.uk-koeln.de
radar.uk-koeln.de
ukk-aktuell.uk-koeln.de
iam.uk-koeln.de
prime.uk-koeln.de
speechlbnms.ads.uk-koeln.de
EXP-E-MRA01.uk-koeln.de
hnc-cms.uk-koeln.de
hcm-dev.uk-koeln.de
srv-dcllsg.uk-koeln.de
arztportal.uk-koeln.de
itserviceportal.uk-koeln.de
itserviceportal.uk-koeln.de
sapportal-dev.uk-koeln.de
srm-qs.uk-koeln.de
smtp.uk-koeln.de
dwa.uk-koeln.de
l-medic-vonk-p.vm.uk-koeln.de
srm-qs.uk-koeln.de
qlm-infoboard.uk-koeln.de
hcm-dev.uk-koeln.de
srm-dev.uk-koeln.de
radar.uk-koeln.de
*.uk-koeln.de
ish-dev.uk-koeln.de
*.uk-koeln.de
vpnukk.uk-koeln.de
srm-qs.uk-koeln.de
cag-extern.uk-koeln.de
owa.uk-koeln.de
srm.uk-koeln.de
grc-dev.uk-koeln.de
owa.uk-koeln.de
srv-dcllsg.uk-koeln.de
speechlbnms.ads.uk-koeln.de
ilias.uk-koeln.de
cag.uk-koeln.de
iam.uk-koeln.de
speechlbnms.ads.uk-koeln.de
webexadmin.uk-koeln.de
*.uk-koeln.de
webexmeetings.uk-koeln.de
ilias.uk-koeln.de
corona.uk-koeln.de
ish-qs.uk-koeln.de
smtp2.uk-koeln.de
radar.uk-koeln.de
sectravna.uk-koeln.de
abbuch.uk-koeln.de
cag-extern2.uk-koeln.de
l-medic-vonk-p.vm.uk-koeln.de
ukk.uk-koeln.de
cag-extern.uk-koeln.de
arztportal.uk-koeln.de
l-nngm-app.vm.uk-koeln.de
vpnukk.uk-koeln.de
webexadmin.uk-koeln.de
ish-qs.uk-koeln.de
gitlab-t.uk-koeln.de
ish-dev.uk-koeln.de
*.net.uk-koeln.de
owa.uk-koeln.de
fu.uk-koeln.de
pmv.uk-koeln.de
srm.uk-koeln.de
w-osr-dms06.ads.uk-koeln.de
verinice.uk-koeln.de
dwa.uk-koeln.de
sapportal-qs.uk-koeln.de
abbuch-t.uk-koeln.de
webstatistik.uk-koeln.de
grc-qs.uk-koeln.de
processmining.uk-koeln.de
grc-dev.uk-koeln.de
owa.uk-koeln.de
grc-dev.uk-koeln.de
hrtbt-patientenportal.uk-koeln.de
owa.uk-koeln.de
ilias.uk-koeln.de
dl-medic-prxsecfw-t.dmz4.uk-koeln.de
cag-extern.uk-koeln.de
cag-extern.uk-koeln.de
*.uk-koeln.de
corona-impfung.uk-koeln.de
arztportal.uk-koeln.de
ilias.uk-koeln.de
dl-medic-prxsecfw-t.dmz4.uk-koeln.de
speechlbnms.ads.uk-koeln.de
speechlbdms.ads.uk-koeln.de
cag.uk-koeln.de
srm.uk-koeln.de
dwa.uk-koeln.de
srm.uk-koeln.de
speechlbdms.ads.uk-koeln.de
EXP-C-MRA01.voice.uk-koeln.de
intranet-stage.uk-koeln.de
ukkrad03.net.uk-koeln.de
radar.uk-koeln.de
hrtbt-patientenportal.uk-koeln.de
EXP-C-MRA01.voice.uk-koeln.de
radar.uk-koeln.de
ukk-aktuell.uk-koeln.de
iam.uk-koeln.de
prime.uk-koeln.de
speechlbnms.ads.uk-koeln.de
EXP-E-MRA01.uk-koeln.de
hnc-cms.uk-koeln.de
hcm-dev.uk-koeln.de
srv-dcllsg.uk-koeln.de
Certificate
The complete raw certificate details for gitlab-t.uk-koeln.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF3zCCBMegAwIBAgIRAMRNESHNDgjHVOrATmFNZBYwDQYJKoZIhvcNAQELBQAw gY8xCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE3MDUGA1UE AxMuU2VjdGlnbyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD QTAeFw0yMzEyMTEwMDAwMDBaFw0yNTAxMTAyMzU5NTlaMB8xHTAbBgNVBAMTFGdp dGxhYi10LnVrLWtvZWxuLmRlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC AgEA0E3fCaDK4gPi/aKO3uaXnHpoDtWYLLsltRlYW6oj4Nuei2HPentNQ14tHWO+ 7tjuXnqDOij2ZFbUJw7tzsga4qds2SpuRzIlHBbp2mwwEIH76k+9R4OBEFKCtluj mQTOTmIBvhIQ50HGKcpsiuNAgjPHquRMtpgXDlQXdZgyO2L8z9yZ4a7TwSAoUEg3 sKenQOG9AY5ruE9zLqnDqesX4Vo4JSXI+gPr/tSjOzeHRNo3Ng3SQHiNw2ZIwm17 cXdc6r7X4ftrwfYmTElL5iaJAu6PImQ83MK01eH+FehmN/LSeHCrFNqj5iOEZ3GM Yo/HkBQGwJxoa1fFPYhFJmCgNDfZXs6uHgeMdKejSiErLGcQMGa9YBYZ0rs6txnl LEVby+JT28JRSgvP9/WqXBtH3bB2tcKh5yYKuEeoo7+CpFDNvdNpKcbwmKElOsEy 60exWM3WlMFgUXFl/CFWuZTe5bPaL5EGt0zFQ+fbETiet2Muw39I0B09aecw+OPI YQnUuakVZInJ2VJgPeDVik1KJgh1o5TaaOouQsB8VafkPDGCSfg7LX2aukGMTrmB qily2bGcFArLQs66JWY2bFw6sEBCRGbXbGnAIV1phRwYswaPycx9dIykAYEgekeh RIYYFGvJTcDqgC1JZJiUOqGnRE8SJhedKikyBQTlpGbGoucCAwEAAaOCAaMwggGf MB8GA1UdIwQYMBaAFI2MXsRUrYrhd+mb+ZsF4bgBjWHhMB0GA1UdDgQWBBT7s79e 6T/4aWZIP7K090z1lDCD+TAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEE AbIxAQICBzAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAI BgZngQwBAgEwgYQGCCsGAQUFBwEBBHgwdjBPBggrBgEFBQcwAoZDaHR0cDovL2Ny dC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBRG9tYWluVmFsaWRhdGlvblNlY3VyZVNl cnZlckNBLmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20w OQYDVR0RBDIwMIIUZ2l0bGFiLXQudWsta29lbG4uZGWCGHd3dy5naXRsYWItdC51 ay1rb2Vsbi5kZTATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg/MGcTyxuymvVjq6c3vnbAyEtPkqbIsjobuQwJIQrI3LN+pGUD7SfK23/Liq IkFIU69FJKN83Dr79RcOyXN/4G8rkllB7u9miiSPOfoIbmo7nTz3w4wgNldX8isE 9cP79d8k4ILplMdANKZtxsnKZjpxOs0z5qPJVKDZ/8FEJKydSLXkVEX0S078NfOp 5edVKEU/OvjVTktlY8h5DUEful/e5/Wvxd84Kmh4t51E4Jm0YUxNDB2EktWQVK99 L9TxKb8a6khcDWmv0Rg/4tajJbGmHlQW23JQRJvL4kDPWgvqBganpNaNw1XkjW6a csDJKNciNb24al3Z/7FieO4xPA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0E3fCaDK4gPi/aKO3uaX nHpoDtWYLLsltRlYW6oj4Nuei2HPentNQ14tHWO+7tjuXnqDOij2ZFbUJw7tzsga 4qds2SpuRzIlHBbp2mwwEIH76k+9R4OBEFKCtlujmQTOTmIBvhIQ50HGKcpsiuNA gjPHquRMtpgXDlQXdZgyO2L8z9yZ4a7TwSAoUEg3sKenQOG9AY5ruE9zLqnDqesX 4Vo4JSXI+gPr/tSjOzeHRNo3Ng3SQHiNw2ZIwm17cXdc6r7X4ftrwfYmTElL5iaJ Au6PImQ83MK01eH+FehmN/LSeHCrFNqj5iOEZ3GMYo/HkBQGwJxoa1fFPYhFJmCg NDfZXs6uHgeMdKejSiErLGcQMGa9YBYZ0rs6txnlLEVby+JT28JRSgvP9/WqXBtH 3bB2tcKh5yYKuEeoo7+CpFDNvdNpKcbwmKElOsEy60exWM3WlMFgUXFl/CFWuZTe 5bPaL5EGt0zFQ+fbETiet2Muw39I0B09aecw+OPIYQnUuakVZInJ2VJgPeDVik1K Jgh1o5TaaOouQsB8VafkPDGCSfg7LX2aukGMTrmBqily2bGcFArLQs66JWY2bFw6 sEBCRGbXbGnAIV1phRwYswaPycx9dIykAYEgekehRIYYFGvJTcDqgC1JZJiUOqGn RE8SJhedKikyBQTlpGbGoucCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 260928841510904711296466571731516875798 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-10 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gitlab-t.uk-koeln.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 849806930777250905794774563485763120617418100871116730230483631912406102982199179546552536994756084468855436845230321194097293611492930001723264079369240916413940162154485439096578758383845336101297599236657106827063745210881592703312597984345144344687790914039336487088030378829609640037090176616555208429027224092436095705451064211496799514175272389961823587827457820994300309015088184011295575405357913992728284366625017751944090727932842091665651293974416504985075215958506107158671691023943496076484792280466773879786133566494742508474883594792415354770036541626805154269041459360056901522414504099997677907827543492256085343265183745416840646250147679956693795782712641766738137574970421628814230306491030284933209116241566504069997620200390991991309812447702214490051601538830171234114436102921603064209399780555542605201248953687453764775920587232808620684344928787499269343948959124414761972477768352537791843625509286340835416257185641447096940566776897413455972479775246342815066257991413470576746745608910480176966593867651002193539472784609056831070639725436930251995181167369201389011178979749910879897416902406883874705965826879785869560015171642352543173970067356095209501305044295798037824013383898916415282088420071 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fbb3bf5ee93ff86966483fb2b4f74cf5943083f9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab-t.uk-koeln.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gitlab-t.uk-koeln.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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