vm3118.zivit-f.zivb.net

- Informationstechnikzentrum Bund (ITZBund) -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 1e:d1:d8:03:8c:01:85:2c:27:2a:b7:2c was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Informationstechnikzentrum Bund (ITZBund)

Organization: Informationstechnikzentrum Bund (ITZBund)
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:d1:d8:03:8c:01:85:2c:27:2a:b7:2c
Serial Number (int): 9538235887528832688720623404
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: eb:cb:61:4c:2a:a2:b5:c5:99:96:83:46:a5:b1:e0:10:f0:72:73:b3
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): fe:c6:bb:f6:e9:ea:c4:16:24:00:2d:6e:78:db:69:4b:50:64:77:68
Fingerprint (sha256): 2c:d3:60:80:ab:af:59:92:6e:d4:67:9b:1e:9c:40:6d:9f:30:62:4e:7c:2e:4a:57:0b:13:bf:06:e5:be:d2:60

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate vm3118.zivit-f.zivb.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vm3118.zivit-f.zivb.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vm3118.zivit-f.zivb.net

Other certificates including the domain name zivb.net

(limited to 100 certificates)
www.internetantrag-abin-intg.zivit.zivb.net
nida.itz.itzbund.net
sp-test.vzd-ent.zivb.net
sp.vzd.zivb.net
dwh-integration.goaml.fiu.in.bund.de
vlt62901.test.nizza.zoll.itzbund.net
vwe12977.zivit.vzd.zivb.net
behoerdennetz.fms.zivb.net
piwik.prod.gsb.service.zivb.net
mitarbeiterportal.zoll.zivb.net
mt2-fw.itsm-framework.service.itzbund.net
redaktion.prod.gsb.bka.zivb.net
bbbund.bmf.zivb.net
redaktion.prod.gsb.bka.zivb.net
www.internetantrag-abin-intg.zivit.zivb.net
int.mapz.zoll.zivb.net
vwp28739.vzd.zivb.net
egvp.bamf.zivb.net
formulare.zd.intranet.bund.de
bbbund.bmf.zivb.net
vwp12982.zivit.vzd.zivb.net
ref.gzd.sharepoint.vzd.zivb.net
vlp62219.prod.lims.zoll.zivb.net
permalink.evsf.zivb.net
vwe24254.vzd-ent.zivb.net
vle61186.entw.evs.zoll.zivb.net
redaktion.prod.gsb.bund.zivb.net
wpb.badv2.vzd.zivb.net
formulare.zd.intranet.bund.de
bidida.zoll.zivb.net
vwe12976.zivit.vzd.zivb.net
wiki.ddi.zd.in.bund.de
ivbb.citrix.zivit.zivb.net
vm3068.zoll.adm.zivb.net
enablenow-zolleweb.entw.sap.zoll.itzbund.net
vlt22900.test.osci.service.itzbund.net
test2.mapz.zoll.itzbund.net
vwi12980.zivit.vzd.zivb.net
vwp24520.zoll.vzd.zivb.net
appstore.vzd.zivb.net
test2.mapz.zoll.itzbund.net
test2.mapz.zoll.itzbund.net
mail.vzd.zivb.net
mt3-fw.itsm-framework.service.itzbund.net
office-test.vzd-ent.zivb.net
entw.poseidon.zivb.net
enablenow-bmfeweb.entw.sap.bmf.itzbund.net
vwp24813.vzd.zivb.net
gsbintranetadmin.prod.gsb.bmf.zivb.net
redaktion.prod.gsb.bka.zivb.net
test.zeus.zivb.net
ref.gzd.sharepoint.vzd.zivb.net
mail.vzd.zivb.net
redaktion.prod.gsb.bund.zivb.net
vlp62218.prod.lims.zoll.zivb.net
vwe24085.vzd-ent.zivb.net
mail.vzd.zivb.net
enablenow-zolleweb.entw.sap.zoll.itzbund.net
luzina.zd.in.bund.de
bfdwtest.zoll.in.bund.de
enablenow-fkspweb.prod.sap.zoll.itzbund.net
zolldesk.gzd.sharepoint.vzd.zivb.net
mt1-fw.itsm-framework.service.itzbund.net
vwp64323.profis.zivit-f.zivb.net
sp-ref.vzd.zivb.net
report.sp.vzd.zivb.net
vwp83491.vzd.zivb.net
fms.preview.prod.gsb.bund.zivb.net
vli62214.test.lims.zoll.zivb.net
mitarbeiterportal.zoll.zivb.net
vm3118.zivit-f.zivb.net
ca.sp-test.vzd-ent.zivb.net
vlp62215.prod.lims.zoll.zivb.net
vwi12980.zivit.vzd.zivb.net
vwp68137.vzd.zivb.net
kraftst-atu1.zoll.zivb.net
egvp.bamf.zivb.net
test.spexpert.bzst.in.bund.de
bidida.zoll.zivb.net
vwp50467.zivit.vzd.zivb.net
office.gzd.sharepoint.vzd.zivb.net
redaktion.prod.gsb.bka.zivb.net
cas.prod.gsb.bund.zivb.net
gw-citrix.service.itzbund.net
gsbintranetadmin.prod.gsb.bmf.zivb.net
wiki.service.itzbund.net
spexpert.bzst.in.bund.de
vle61186.entw.evs.zoll.zivb.net
vwp27494.vzd.zivb.net
vwp24520.zoll.vzd.zivb.net
afo-prozesse.itz.intranet.bund.de
mt3-fw.itsm-framework.service.itzbund.net
vwi12979.zivit.vzd.zivb.net
dwh-fachtest.goaml.fiu.in.bund.de
enablenow-fkspweb.prod.sap.zoll.itzbund.net
vwe12976.zivit.vzd.zivb.net
vlp62216.prod.lims.zoll.zivb.net
appstore.vzd.zivb.net
gsb.paris.zka.zivb.net
redaktion.prod.gsb.bmf.intranet.bund.de

Certificate

The complete raw certificate details for vm3118.zivit-f.zivb.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIMHtHYA4wBhSwnKrcsMA0GCSqGSIb3DQEBCwUAMIGNMQsw
CQYDVQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVz
IERldXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4t
UEtJMSUwIwYDVQQDDBxERk4tVmVyZWluIEdsb2JhbCBJc3N1aW5nIENBMB4XDTE4
MDMyMTEzMTMyNloXDTIwMDYyMzEzMTMyNlowgZAxCzAJBgNVBAYTAkRFMRwwGgYD
VQQIDBNOb3JkcmhlaW4tV2VzdGZhbGVuMQ0wCwYDVQQHDARCb25uMTIwMAYDVQQK
DClJbmZvcm1hdGlvbnN0ZWNobmlremVudHJ1bSBCdW5kIChJVFpCdW5kKTEgMB4G
A1UEAwwXdm0zMTE4Lnppdml0LWYueml2Yi5uZXQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDeVh1C9HpzMFbs9bE6AkQC4yhHQosfNlYTP12Ft0+1lyua
+VqirCLvRTgTxgZGG2aZJAG6HK7TaPhf39z9TQYdchu0xTqyEguLsmdyThUI+pbe
Jd4MigGK1hltjGhu7uUQUlUNA7N51m+yZxnCDuu4IjrkHzRqxJE+DBJEbTODnvJ3
5I0OqJMtCOvyLOfYLxE5apLCpT1qAiLKIfeuTVokXC93eydZEfsWImzjgSDK4II2
5T5AigcbrPJ+weIQgMpuSYStjjYAhkxlzV1wSl0JS2ToIUlFcEV9SG+ZxPLb7uHM
dTKc0OOrRpYh1nprD4Sa/UdZd84zJXF6glzRw3R7AgMBAAGjggJ2MIICcjBZBgNV
HSAEUjBQMAgGBmeBDAECAjANBgsrBgEEAYGtIYIsHjAPBg0rBgEEAYGtIYIsAQEE
MBEGDysGAQQBga0hgiwBAQQDCDARBg8rBgEEAYGtIYIsAgEEAwgwCQYDVR0TBAIw
ADAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwHQYDVR0OBBYE
FOvLYUwqorXFmZaDRqWx4BDwcnOzMB8GA1UdIwQYMBaAFGs6mIv58lOJ2uCtsjIe
CR/oqjt0MCIGA1UdEQQbMBmCF3ZtMzExOC56aXZpdC1mLnppdmIubmV0MIGNBgNV
HR8EgYUwgYIwP6A9oDuGOWh0dHA6Ly9jZHAxLnBjYS5kZm4uZGUvZGZuLWNhLWds
b2JhbC1nMi9wdWIvY3JsL2NhY3JsLmNybDA/oD2gO4Y5aHR0cDovL2NkcDIucGNh
LmRmbi5kZS9kZm4tY2EtZ2xvYmFsLWcyL3B1Yi9jcmwvY2FjcmwuY3JsMIHbBggr
BgEFBQcBAQSBzjCByzAzBggrBgEFBQcwAYYnaHR0cDovL29jc3AucGNhLmRmbi5k
ZS9PQ1NQLVNlcnZlci9PQ1NQMEkGCCsGAQUFBzAChj1odHRwOi8vY2RwMS5wY2Eu
ZGZuLmRlL2Rmbi1jYS1nbG9iYWwtZzIvcHViL2NhY2VydC9jYWNlcnQuY3J0MEkG
CCsGAQUFBzAChj1odHRwOi8vY2RwMi5wY2EuZGZuLmRlL2Rmbi1jYS1nbG9iYWwt
ZzIvcHViL2NhY2VydC9jYWNlcnQuY3J0MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0G
CSqGSIb3DQEBCwUAA4IBAQCbxWWNGvN23S2pJsRi4Kq9vTrRGo7JxbmX4xokJNDV
EmA6RtkDQusWmVJvjKkMolM4Shrb6p+dHZyOAjiP0DIYyZ20ReestN76J3xHyIXZ
EtkAxxDo7ozRG2nIqGhYZEYcnzfm39ixLmgJvbJfACt5CxNEWKtWBh/H1IuxKazv
dKHrC5nzOlCoCmMOzq+BglZIezOyJNgoRhFnIwr2FSeG0ho5Tx41xtZzWFLz+N4m
z0I+ufEP7bhPDkmNLQHQV9PAk+ORGMo+EuQh5KhqMYObQWIEb/du3RwpRcXdLm2C
DLyMfPzsYRkM30bzPC5NtTidKxQKdLSXIsXO4JHlEqiA
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lYdQvR6czBW7PWxOgJE
AuMoR0KLHzZWEz9dhbdPtZcrmvlaoqwi70U4E8YGRhtmmSQBuhyu02j4X9/c/U0G
HXIbtMU6shILi7Jnck4VCPqW3iXeDIoBitYZbYxobu7lEFJVDQOzedZvsmcZwg7r
uCI65B80asSRPgwSRG0zg57yd+SNDqiTLQjr8izn2C8ROWqSwqU9agIiyiH3rk1a
JFwvd3snWRH7FiJs44EgyuCCNuU+QIoHG6zyfsHiEIDKbkmErY42AIZMZc1dcEpd
CUtk6CFJRXBFfUhvmcTy2+7hzHUynNDjq0aWIdZ6aw+Emv1HWXfOMyVxeoJc0cN0
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9538235887528832688720623404
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-21 13:13:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-23 13:13:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Informationstechnikzentrum Bund (ITZBund)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vm3118.zivit-f.zivb.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28067368247901332766985305155596497448239050103555693977211723754903826452433695198374985965785370891853994841771261730836281762549166678391246986101218930698599948693622935182491579687614325696164280894912027108314081722518139523256070526515732459114567883519637207242913899564132620470724104016611457084805737620244589665119604603833718011661634806633117427745026931854738446101310685877756468087546604747414207460130881283000514432433451549968025169689104286274650269872575501994186680389342428848606165108062242318063232949620537805287022624279949042779991084566150992607394022601430360115780898792354886644364411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ebcb614c2aa2b5c599968346a5b1e010f07273b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vm3118.zivit-f.zivb.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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