mszweb.mandant.dwd.de
- Deutscher Wetterdienst -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number 95:08:e1:fb:5f:e1:1c:1c:f1:61:7c:f8:b6:6f:d8:db was issued on by GEANT Vereniging.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Deutscher Wetterdienst
Organization:
Deutscher Wetterdienst
State / Province:
Hessen
Country: DE
Country: DE
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate will expire on
Certificate Details
Serial Number (hex): 95:08:e1:fb:5f:e1:1c:1c:f1:61:7c:f8:b6:6f:d8:dbSerial Number (int): 198101093204923573392494368214108592347
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 91:9a:d2:7d:22:80:e0:53:70:19:b5:6a:e4:1b:91:8b:1c:7e:d9:4d
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): d9:0c:50:02:ca:80:22:05:6e:05:1b:fa:91:37:9c:aa:49:f2:4b:54
Fingerprint (sha256): 33:c8:1d:b5:98:6e:b8:ef:66:ba:f2:47:cd:b2:5c:e0:28:09:3f:49:3b:41:c1:06:cd:ee:30:72:5d:2c:4c:bf
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate mszweb.mandant.dwd.de
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mszweb.mandant.dwd.de
Public Key Algorithm
RSA
Key Size
3072
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mszweb.mandant.dwd.de
msz-cuxhaven.de
www.kuestenwache.de
www.msz-cuxhaven.com
www.msz-cuxhaven.de
www.msz-cuxhaven.info
www.msz-cuxhaven.org
www.xn--kstenwache-9db.de
msz-cuxhaven.de
www.kuestenwache.de
www.msz-cuxhaven.com
www.msz-cuxhaven.de
www.msz-cuxhaven.info
www.msz-cuxhaven.org
www.xn--kstenwache-9db.de
Other certificates including the domain name dwd.de
(limited to 100 certificates)
maps.dwd.de
ssi-intern.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
ssi.dwd.de
www.deutscher-wetterdienst.de
hosting.dwd.de
maps.dwd.de
kunden.dwd.de
dwdvd.dwd.de
hosting.dwd.de
nl-prox.dwd.de
www.flugwetter.de
expertennetzwerk.mandant.dwd.de
www.dwd.de
ssi.dwd.de
isedmz-p.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
wis-gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
www.dwd.de
kunden.dwd.de
oflsd46.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
ebc.mandant.dwd.de
ofvkexpc01.dwd.de
pappl.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
alephino.dwd.de
hosting.dwd.de
fralux.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
kassandra.dwd.de
maps.dwd.de
brzvpngw.dwd.de
listen-prox.dwd.de
dwdhosting.mandant.dwd.de
hosting.dwd.de
hk.mandant.dwd.de
virtadm-hosts.dwd.de
klimawandel.mandant.dwd.de
oflxd18.dwd.de
hosting.dwd.de
oflxsn10.dwd.de
hosting.dwd.de
xmdm.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
qs-ninjoservices.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
cdc.dwd.de
oflsd46.dwd.de
beobachtungen.dwd.de
ninjoservices-neu.dwd.de
oflxs616.dwd.de
prometheus.dwd.de
gdws.mandant.dwd.de
ofvkexpe01.dwd.de
hosting.dwd.de
opendata.dwd.de
hosting.dwd.de
sva.mandant.dwd.de
stbauf.mandant.dwd.de
kunden.dwd.de
beobachtungen.dwd.de
hosting.dwd.de
oflsd46.dwd.de
molrao.dwd.de
hosting.dwd.de
webwerdis-intra.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
listen-prox.dwd.de
ssi-intern.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
ssi.dwd.de
www.deutscher-wetterdienst.de
hosting.dwd.de
maps.dwd.de
kunden.dwd.de
dwdvd.dwd.de
hosting.dwd.de
nl-prox.dwd.de
www.flugwetter.de
expertennetzwerk.mandant.dwd.de
www.dwd.de
ssi.dwd.de
isedmz-p.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
wis-gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
www.dwd.de
kunden.dwd.de
oflsd46.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
ebc.mandant.dwd.de
ofvkexpc01.dwd.de
pappl.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
alephino.dwd.de
hosting.dwd.de
fralux.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
kassandra.dwd.de
maps.dwd.de
brzvpngw.dwd.de
listen-prox.dwd.de
dwdhosting.mandant.dwd.de
hosting.dwd.de
hk.mandant.dwd.de
virtadm-hosts.dwd.de
klimawandel.mandant.dwd.de
oflxd18.dwd.de
hosting.dwd.de
oflxsn10.dwd.de
hosting.dwd.de
xmdm.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
qs-ninjoservices.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
cdc.dwd.de
oflsd46.dwd.de
beobachtungen.dwd.de
ninjoservices-neu.dwd.de
oflxs616.dwd.de
prometheus.dwd.de
gdws.mandant.dwd.de
ofvkexpe01.dwd.de
hosting.dwd.de
opendata.dwd.de
hosting.dwd.de
sva.mandant.dwd.de
stbauf.mandant.dwd.de
kunden.dwd.de
beobachtungen.dwd.de
hosting.dwd.de
oflsd46.dwd.de
molrao.dwd.de
hosting.dwd.de
webwerdis-intra.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
listen-prox.dwd.de
Certificate
The complete raw certificate details for mszweb.mandant.dwd.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIdDCCBlygAwIBAgIRAJUI4ftf4Rwc8WF8+LZv2NswDQYJKoZIhvcNAQEMBQAw RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIzMTAyNTAwMDAwMFoXDTI0MTAyNDIz NTk1OVowXzELMAkGA1UEBhMCREUxDzANBgNVBAgTBkhlc3NlbjEfMB0GA1UEChMW RGV1dHNjaGVyIFdldHRlcmRpZW5zdDEeMBwGA1UEAxMVbXN6d2ViLm1hbmRhbnQu ZHdkLmRlMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAuzw0/uNJLDza M98rOGmEnysmDiMZvQttwoREBT9paT9FxmHTmVeBVRoye40wnmtaSoNKZvCrAv4R 2jwcjHjB4WcyAGN3hsfkMKVBdwpj828WEmeZ+qN7zwFxs5CM8xT9lR7xWabEf0xn rhYafXW22DRrAC+1BP4ETGE0a48nxcjQGkMyWYB3AUEORvsPEbHh2Hm5HSe9Pyo7 43x+WR6Xc9bYCNyaPjv+KzetkxODB1u5lZWKeFgfyxw8Dbld783ESBBM4gJFtggy c6hTfQEQQNwQsSeLyZ/YeI9m6pcCgl/Sdp/STqmFs9ykr0YWHr6lDBQi/ZI1PelM udxoIHtFq0qVe47cDzY6PASNm4J8YLQd6qCpRufZUtK6k7oACKYU4f+IxPBr3YXU QnFnj2xMEHOeO7JpwD2ubKR9K/K3NQbp5kSmt9xPs7N197x/LYN3lA0LKn/3iroE j5dxtJSv6PiNEXU0dhetCfyHyvvyilFbuLoMThK6sYTH9cVG27HfAgMBAAGjggPE MIIDwDAfBgNVHSMEGDAWgBRvHTVJEGwy+lmgnryK6B+VvnF6DDAdBgNVHQ4EFgQU kZrSfSKA4FNwGbVq5BuRixx+2U0wDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQC MAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1UdIARCMEAwNAYL KwYBBAGyMQECAk8wJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9D UFMwCAYGZ4EMAQICMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9HRUFOVC5jcmwu c2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcmwwdQYIKwYBBQUHAQEEaTBnMDoG CCsGAQUFBzAChi5odHRwOi8vR0VBTlQuY3J0LnNlY3RpZ28uY29tL0dFQU5UT1ZS U0FDQTQuY3J0MCkGCCsGAQUFBzABhh1odHRwOi8vR0VBTlQub2NzcC5zZWN0aWdv LmNvbTCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHcAdv+IPwq2+5VRwmHM9Ye6 NLSkzbsp3GhCCp/mZ0xaOnQAAAGLZUQJJQAABAMASDBGAiEA4Eis2IkIczpdQMoK jm8FZQ0cS5KTxveOrZ3N5UBJuuQCIQDS/eSFEQozRbXJyiCZmRCtUAl0IyVcagNX WdFr4jNSHAB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABi2VE CXsAAAQDAEcwRQIhAOaP06b3MZbAVil7VdC5tC5Rf493rudcwNGJIc5ufDg2AiAe hvo4+JY3VuRyFRGx+8kG1WGMVo5Wf6VRclFFX9u5ugB1AO7N0GTV2xrOxVy3nbTN E6Iyh0Z8vOzew1FIWUZxH7WbAAABi2VECVMAAAQDAEYwRAIgeRTSxVgwgtyea7Rm yasaPoyI5IyuU2RNd8BY3fTl6psCIEJlgNGIKGNRmhGgG9uJ/ADQw4XhGBu6YHsx FLUaVfL7MIG7BgNVHREEgbMwgbCCFW1zendlYi5tYW5kYW50LmR3ZC5kZYIPbXN6 LWN1eGhhdmVuLmRlghN3d3cua3Vlc3RlbndhY2hlLmRlghR3d3cubXN6LWN1eGhh dmVuLmNvbYITd3d3Lm1zei1jdXhoYXZlbi5kZYIVd3d3Lm1zei1jdXhoYXZlbi5p bmZvghR3d3cubXN6LWN1eGhhdmVuLm9yZ4IZd3d3LnhuLS1rc3RlbndhY2hlLTlk Yi5kZTANBgkqhkiG9w0BAQwFAAOCAgEAYaHa17psXBovGCklbdRbX5I05CKR2Y1a rVAjz32DFInvQW+zWGgZpqNiEtgc3zH37W2H3wfGjjQVGyMoaDg6pI2zKcSFDVKM SkrfuVeFM70wge65ze5LJMjboXJ16wifhzTYLC6y3S7bNKTFICsQRZe8VEiSnfYE NSM3E5/8iMg1L7dNMeKvwflZte1wove+/8wsxx0qbwqG8o5a2r5bQqndqXr+i/a9 hpcNkrnsY44okvYhZ70JsdHF0XXRMczad6A/eJuB+oFA/Vxw5QAitcA959Ax4DPN f80XL0pEFJUhUy21Qgjl1MGve+0SEhvSqKXjMy6qbZKrmf3nsyrPIc/CRl7rbPkU MgvfBZSn6v99i8AmzsumBSbPLFExWERI7yC14aLzuAkESQBFk9kWKBVJrWhGADEH wkCI3r0cod5JGkChHJInyAvk1pnnLMadDFRmMsmzc/H7hdvKSdosJWO9oqCj6YDY KD7IVd4NtciY3eBCiX5G0HxH+NlnyS41KMuWLV/4k2O3B/M+e5WVjc+gBbAOZoyD kwckXATUJWQFPMps4W5t6ilrYaKBAAvr2PJaAo3U+Ju2A/nwJVQl5vDQczt3cPIn qnfjz5QAdZuXh6B27vEZVXfcw/Y3dpeLtxstamWpo1R2+MPTQnYA0BCCkutvdFgY LstllXHggQw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAuzw0/uNJLDzaM98rOGmE nysmDiMZvQttwoREBT9paT9FxmHTmVeBVRoye40wnmtaSoNKZvCrAv4R2jwcjHjB 4WcyAGN3hsfkMKVBdwpj828WEmeZ+qN7zwFxs5CM8xT9lR7xWabEf0xnrhYafXW2 2DRrAC+1BP4ETGE0a48nxcjQGkMyWYB3AUEORvsPEbHh2Hm5HSe9Pyo743x+WR6X c9bYCNyaPjv+KzetkxODB1u5lZWKeFgfyxw8Dbld783ESBBM4gJFtggyc6hTfQEQ QNwQsSeLyZ/YeI9m6pcCgl/Sdp/STqmFs9ykr0YWHr6lDBQi/ZI1PelMudxoIHtF q0qVe47cDzY6PASNm4J8YLQd6qCpRufZUtK6k7oACKYU4f+IxPBr3YXUQnFnj2xM EHOeO7JpwD2ubKR9K/K3NQbp5kSmt9xPs7N197x/LYN3lA0LKn/3iroEj5dxtJSv 6PiNEXU0dhetCfyHyvvyilFbuLoMThK6sYTH9cVG27HfAgMBAAE= -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 198101093204923573392494368214108592347 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-25 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-24 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutscher Wetterdienst' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mszweb.mandant.dwd.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4249072833884786656892048008149469662973219137856237366636571431683449731427649843019239315078247895696780669100388987761118571082994276793217313895993140373934754348011505916737467411373846127680381730555421954977464862557260899184387862074571847277828814778464052733481831277073244667108653841672054842511964934797959745247193127188197501434727364011498811828303350239777072747905269433203900191154191205690195436619194884763962469338186218423640971755529918432591105880216212189998008899144273565031480988600592876847699884053053340178103867441346665824219236702693550921209202981788583416079867192431034704195076119288592817669251015999622929800740773015079988781086082162477293713163149829821823607093865094840636063200272500312534681498666422755471242931289949750269263069001479730050284142903500523289919250035696855707549832840698027578675324504012483340505730334729992318980486490948026541212195225403573769305043423 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 919ad27d2280e0537019b56ae41b918b1c7ed94d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (179 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mszweb.mandant.dwd.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msz-cuxhaven.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuestenwache.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msz-cuxhaven.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msz-cuxhaven.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msz-cuxhaven.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msz-cuxhaven.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--kstenwache-9db.de' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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