www.ldi.nrw.de

Issued by TeleSec ServerPass CA 1

About this certificate


This digital certificate with serial number 3f:15:6c:79:27:8d:a2:91 was issued on by T-Systems International GmbH .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • WARNING: Certificate contains a Authority Info Access Issuer with an non-preferred scheme ([ldap])
  • ERROR: Certificate contains a CRL with an non-preferred scheme ([ldap])

LDI

Organization: LDI
State / Province: NRW
Locality: Duesseldorf
Country: DE

T-Systems International GmbH

Organization: T-Systems International GmbH
Organization unit: Trust Center Services
State / Province: NRW
Locality: Duesseldorf
Country: DE

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:15:6c:79:27:8d:a2:91
Serial Number (int): 4545658666510819985
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 51:fd:77:e9:bd:40:96:d5:9b:04:c8:bf:4b:95:45:28:66:f0:eb:9d
AuthorityKeyId: 33:dc:9e:96:ec:d8:e8:35:1f:6d:90:1b:0b:38:a4:af:74:1b:c6:58

Fingerprint (sha1): b2:2e:9e:4b:06:61:25:18:f4:58:07:db:4d:34:dd:d4:08:22:34:8b
Fingerprint (sha256): 51:93:7b:d1:df:d1:9e:61:0d:d7:fe:67:06:53:8c:b2:ee:7d:92:89:bc:23:e4:df:4c:d4:d5:02:72:b4:9a:8d

Issuing Certificate URL: http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_CA_1.cer
Issuing Certificate URL: ldap://ldap.serverpass.telesec.de/cn=TeleSec%20ServerPass%20CA%201,ou=Trust%20Center%20Services,o=T-Systems%20International%20GmbH,c=de?cACertificate

Revocation information

OCSP Server: http://ocsp.serverpass.telesec.de/ocspr
CRL Distribution Point: http://crl.serverpass.telesec.de/rl/TeleSec_ServerPass_CA_1.crl
CRL Distribution Point: ldap://ldap.serverpass.telesec.de/cn=TeleSec%20ServerPass%20CA%201,ou=Trust%20Center%20Services,o=T-Systems%20International%20GmbH,c=de?certificateRevocationlist?base?certificateRevocationlist=*

Check the revocation status for the current certificate on www.ldi.nrw.de
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: www.ldi.nrw.de

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGozCCBYugAwIBAgIIPxVseSeNopEwDQYJKoZIhvcNAQEFBQAwdjELMAkGA1UE BhMCREUxJTAjBgNVBAoTHFQtU3lzdGVtcyBJbnRlcm5hdGlvbmFsIEdtYkgxHjAc BgNVBAsTFVRydXN0IENlbnRlciBTZXJ2aWNlczEgMB4GA1UEAxMXVGVsZVNlYyBT ZXJ2ZXJQYXNzIENBIDEwHhcNMTEwNzI5MTEyNDI5WhcNMTQwODAzMjM1OTU5WjBY MQswCQYDVQQGEwJERTEMMAoGA1UEChMDTERJMQwwCgYDVQQIEwNOUlcxFDASBgNV BAcTC0R1ZXNzZWxkb3JmMRcwFQYDVQQDEw53d3cubGRpLm5ydy5kZTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAPJebYbTVL9F1IONjK9xD0/ypwQw26Gt kFSlZtEmD/edBBd7CqSz4E37qno06KMNZjrTnCCd3wpyBgX6ddN2ViXClFqUcyUz 6UhiY+kRXOMWki2VWMsBnzSNG3rWmHnHcHvAt9VWPS7onQlLCK/iWOrTZgq2Aac+ sWdOLvA206SWSu/TDIa3gvuwIvQm/vUkW83IqrRok6lcno8kmQGKlAR/8JjRgms6 5Pppse8OFyzraa9/ilPFebMAUq6CRPSIhEr4JYWssR53X5ykwUCpuivAxolQS7/Q J8xPWoniHrFFmOtdNHaxIcOheFTMa6kwqiKPE6P3jFSdj0Xv/ggAkLsCAwEAAaOC A1EwggNNMB8GA1UdIwQYMBaAFDPcnpbs2Og1H22QGws4pK90G8ZYMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwHQYDVR0OBBYE FFH9d+m9QJbVmwTIv0uVRShm8OudME8GA1UdIARIMEYwRAYJKwYBBAG9Rw0CMDcw NQYIKwYBBQUHAgEWKWh0dHA6Ly93d3cudGVsZXNlYy5kZS9zZXJ2ZXJwYXNzL2Nw cy5odG1sMIIBIgYDVR0fBIIBGTCCARUwRaBDoEGGP2h0dHA6Ly9jcmwuc2VydmVy cGFzcy50ZWxlc2VjLmRlL3JsL1RlbGVTZWNfU2VydmVyUGFzc19DQV8xLmNybDCB y6CByKCBxYaBwmxkYXA6Ly9sZGFwLnNlcnZlcnBhc3MudGVsZXNlYy5kZS9jbj1U ZWxlU2VjJTIwU2VydmVyUGFzcyUyMENBJTIwMSxvdT1UcnVzdCUyMENlbnRlciUy MFNlcnZpY2VzLG89VC1TeXN0ZW1zJTIwSW50ZXJuYXRpb25hbCUyMEdtYkgsYz1k ZT9jZXJ0aWZpY2F0ZVJldm9jYXRpb25saXN0P2Jhc2U/Y2VydGlmaWNhdGVSZXZv Y2F0aW9ubGlzdD0qMIIBOgYIKwYBBQUHAQEEggEsMIIBKDAzBggrBgEFBQcwAYYn aHR0cDovL29jc3Auc2VydmVycGFzcy50ZWxlc2VjLmRlL29jc3ByMEwGCCsGAQUF BzAChkBodHRwOi8vY3JsLnNlcnZlcnBhc3MudGVsZXNlYy5kZS9jcnQvVGVsZVNl Y19TZXJ2ZXJQYXNzX0NBXzEuY2VyMIGiBggrBgEFBQcwAoaBlWxkYXA6Ly9sZGFw LnNlcnZlcnBhc3MudGVsZXNlYy5kZS9jbj1UZWxlU2VjJTIwU2VydmVyUGFzcyUy MENBJTIwMSxvdT1UcnVzdCUyMENlbnRlciUyMFNlcnZpY2VzLG89VC1TeXN0ZW1z JTIwSW50ZXJuYXRpb25hbCUyMEdtYkgsYz1kZT9jQUNlcnRpZmljYXRlMAwGA1Ud EwEB/wQCMAAwGQYDVR0RBBIwEIIOd3d3LmxkaS5ucncuZGUwDQYJKoZIhvcNAQEF BQADggEBAHDTVNsU6G3wq7aR1+Rvuwr6SRxizobpQRIYlNQAqJ68HnULsXtXOmkB MEOoIZspP0l6H6SioppE1cyXPEoFZYlzYYm/K5sm1VH/J1pzyt5JLki2WX2mJ68g wQOFVYSuYs9fXBbgoQryM6/zs3cUcuyeyfKEMfATtavnZk+M+xuadjQ18XRB05aY ipXyLq4dPj4OT5gUyarmwY8wbr7PoxFYgL+F//JyworWjxleq878MsHMawfYcZDv FjOAupks+OvAkVzNp7ZL19WA1UVTcbnhwtshbGPX/7qb4ViP7WV6/4v195FAjK4g j8w+5UYmCY18HgYJStLnrnWuPN6zbuo= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8l5thtNUv0XUg42Mr3EP T/KnBDDboa2QVKVm0SYP950EF3sKpLPgTfuqejToow1mOtOcIJ3fCnIGBfp103ZW JcKUWpRzJTPpSGJj6RFc4xaSLZVYywGfNI0betaYecdwe8C31VY9LuidCUsIr+JY 6tNmCrYBpz6xZ04u8DbTpJZK79MMhreC+7Ai9Cb+9SRbzciqtGiTqVyejySZAYqU BH/wmNGCazrk+mmx7w4XLOtpr3+KU8V5swBSroJE9IiESvglhayxHndfnKTBQKm6 K8DGiVBLv9AnzE9aieIesUWY6100drEhw6F4VMxrqTCqIo8To/eMVJ2PRe/+CACQ uwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4545658666510819985 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'T-Systems International GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Center Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TeleSec ServerPass CA 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-07-29 11:24:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LDI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NRW' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Duesseldorf' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ldi.nrw.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30596233904430265799204591646914363865680541198791819341502795540862647629316449272734121707739010377217749582776590466866403369163588768960093165065606470558590369630013725816254996324097258784169017354937203972959323805571633561795670743324547536935356773140947799137558564019314311717362885685496387100731731206062417592470063783419003216829887805236948226688667880006348116661942132670941147923181172444256048149036985140605989623927515969571682119725862581472150189529702289504453410445652899223347627160313160893184495020258242135488252330774643998076240298880609696660190108719788090741853421376350861731598523 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 33dc9e96ecd8e8351f6d901b0b38a4af741bc658 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 51fd77e9bd4096d59b04c8bf4b95452866f0eb9d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.7879.13.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.telesec.de/serverpass/cps.html' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (281 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/rl/TeleSec_ServerPass_CA_1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.serverpass.telesec.de/cn=TeleSec%20ServerPass%20CA%201,ou=Trust%20Center%20Services,o=T-Systems%20International%20GmbH,c=de?certificateRevocationlist?base?certificateRevocationlist=*' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (300 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.serverpass.telesec.de/ocspr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_CA_1.cer' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.serverpass.telesec.de/cn=TeleSec%20ServerPass%20CA%201,ou=Trust%20Center%20Services,o=T-Systems%20International%20GmbH,c=de?cACertificate' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ldi.nrw.de' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0070d354db14e86df0abb691d7e46fbb0afa491c62ce86e941121894d400a89ebc1e750bb17b573a69013043a8219b293f497a1fa4a2a29a44d5cc973c4a056589736189bf2b9b26d551ff275a73cade492e48b6597da627af20c103855584ae62cf5f5c16e0a10af233aff3b3771472ec9ec9f28431f013b5abe7664f8cfb1b9a763435f17441d396988a95f22eae1d3e3e0e4f9814c9aae6c18f306ebecfa3115880bf85fff272c28ad68f195eabcefc32c1cc6b07d87190ef163380ba992cf8ebc0915ccda7b64bd7d580d5455371b9e1c2db216c63d7ffba9be1588fed657aff8bf5f791408cae208fcc3ee54626098d7c1e06094ad2e7ae75ae3cdeb36eea