tla.bbaw.de

- Berlin-Brandenburgische Akademie der Wissenschaften -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 26:07:98:a5:19:00:14:a7:44:c3:a7:4e was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Berlin-Brandenburgische Akademie der Wissenschaften

Organization: Berlin-Brandenburgische Akademie der Wissenschaften
State / Province: Berlin
Locality: Berlin
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 26:07:98:a5:19:00:14:a7:44:c3:a7:4e
Serial Number (int): 11769613699168045923507087182
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 1c:40:0e:df:23:0f:aa:af:3d:5e:ee:cf:64:09:61:5b:2d:18:3d:8a
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 7d:16:f0:8e:01:3b:05:a4:14:03:03:19:c8:2e:89:70:3c:3b:5c:51
Fingerprint (sha256): 3b:71:dc:40:cc:c3:ad:3a:d6:7c:d6:89:e1:36:96:16:5f:a7:33:b7:68:00:eb:b4:08:39:5f:49:45:c5:60:e0

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate tla.bbaw.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tla.bbaw.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tla.bbaw.de

Other certificates including the domain name bbaw.de

(limited to 100 certificates)
cil.bbaw.de
telotawebpublic.bbaw.de
nubes.bbaw.de
telotawebdev.bbaw.de
gorkon.bbaw.de
achard.bbaw.de
abfallenergieverwertung.bbaw.de
bibelexegese.bbaw.de
wirt1.bbaw.de
login.bbaw.de
veranstaltungszentrum.bbaw.de
virtuelles-schuelerlabor.bbaw.de
bareos-director.bbaw.de
mgh.bbaw.de
bureau.bbaw.de
brainudl.bbaw.de
aaew.bbaw.de
praesidenten.bbaw.de
gitlab.bbaw.de
mx1.bbaw.de
zeugs.bbaw.de
devbib.bbaw.de
cil.bbaw.de
shibboleth.bbaw.de
mailman.bbaw.de
census.bbaw.de
wsus64.bbaw.de
cmg.bbaw.de
www.gentechnologiebericht.de
clarin.bbaw.de
ldap.bbaw.de
edoc.bbaw.de
syslog.bbaw.de
vimes.bbaw.de
proxy.bbaw.de
cmg.bbaw.de
xmlpublic.bbaw.de
forschungsdatenmanagement.bbaw.de
telotadev.bbaw.de
www.bbaw.de
bureau.bbaw.de
akademieregistres.bbaw.de
pdrprod.bbaw.de
xmledit.bbaw.de
praesidenten.bbaw.de
login.bbaw.de
achard.bbaw.de
mailman.bbaw.de
www2.bbaw.de
actaborussica.bbaw.de
telotadev.bbaw.de
pdrprod.bbaw.de
eduroam2.bbaw.de
www.correspsearch.net
proxy2.bbaw.de
mailix.bbaw.de
digiclass.bbaw.de
mailix2.bbaw.de
aaew-dev.bbaw.de
lebenswelten-digital.bbaw.de
shibboleth.bbaw.de
brainudl.bbaw.de
mailix.bbaw.de
wwwdev.bbaw.de
gaerten.bbaw.de
vimes.bbaw.de
gerechtigkeit.bbaw.de
census-lod.bbaw.de
login2.bbaw.de
brainjae.bbaw.de
hws.bbaw.de
ldap.bbaw.de
kollokationen.bbaw.de
telotadev.bbaw.de
edoc.bbaw.de
shibboleth.bbaw.de
frauenvertretung.bbaw.de
bibliothek.bbaw.de
kant.bbaw.de
vimes.bbaw.de
agora.bbaw.de
bibelexegese.bbaw.de
edition-humboldt.de
t3extern.bbaw.de
mittelalterzentrum.bbaw.de
tla.bbaw.de
actaborussica.bbaw.de
tableau.bbaw.de
dschutz.bbaw.de
ostwald.bbaw.de
encoding-correspondence.bbaw.de
forschungsdatenmanagement.bbaw.de
avh-r.bbaw.de
cil.bbaw.de
aaew.bbaw.de
hippo.bbaw.de
agora.bbaw.de
hippo.bbaw.de
idqw.bbaw.de
inetbbaw.bbaw.de

Certificate

The complete raw certificate details for tla.bbaw.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1E8WqmpaSfwh/23hIhHY
O4yvpTI/U7nngICo14ZnRTs77HD7ifjXWC5kJuTpImFBmKc1qBdwIuyXpyC4T+3W
rl9ANF/SI8vBsTzFxqDAs37k+DRK8N3pLhnC4wb+p9b+SY86Indmp9LucYOcgdZI
bODEg7177TG2KClAK4hYSuIfLnZ/wgDIDbI75iDsX4fQHrfAL79ZvIqDxflIh/3P
/7CGsSDv35p/ShaqDQPKPmDxjn5BSwR/PbY+qzMe/82tyWSW1KiSy43IdzabOhJl
jmmQX6pUx0RRVtLvecYsanz9WMW4eOzr0/y9ilFcRpfyD3AFlD1soB2lLM2xjfVK
eIGKaEhB1H8s4Y2gWhLREo5SvnWbzya3881P7ZyEwxlPDdiyDts/2odbDV9wfXY7
nIIShvLe2MwjLs9h+t3VOOlhcx4fKsbK/op70OFAMQ4hnAve6q97Irici11PuMZh
5s9r8ertYGdJvp5qeAHbuoSrBhtS4E3iJfSZSoDeh/SV7DlcxPzkCDkWiBZ29WFi
Gr/6ZMcDNAMWt4h05GMLpyhb2NF83fFN3akMEYNriOGmqebRnV/Vy8Vnh+lcclfN
KwC5RDOpyXW7WOWoJUPVdvZ3liZOBIKWrK8fU0mo2fJArgdVxaQGGjIJTENkWw7J
R2OzSp9ws0C/72w00KWr6gECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11769613699168045923507087182
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-19 14:07:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-19 14:07:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin-Brandenburgische Akademie der Wissenschaften'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'tla.bbaw.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 866144906030500607965950253269005915431351710490262744889166963155208995239738533354759604084496827063972676699246268766046679077181528806178275407108555373351049731646118108366680582865713298218946904913719622246052200477704214761923599186722335020847685043848446386981359617697396000540807967701140343459932403498682942581032268122130629595958639528393323197015985915093972375411890822989038125765719015873166752246845624870943240354751454414092147638361548285365019729770233284352686475428888349377047394983424432826479797822298639147210715469301843855532230941235359702309613220980101570448608138961150382024729416883601561313085760206113126715906992937842847412722540655380595454819936381960286896523584108117684220047770282434207101112442003697379902168645127169874995527463715754279155932187048191422537209906684057924103485502871320083116287549120653294433987403263550384382379642533584102158575437277073930995539888995615395479759779805501001440095423951075918379409762182728888569260202135269209370264239441066093824243586199387660586241863121525342527294786940308710730351046181118920911086224150142205349000895997970328255391805789956108898952314036409171907632623094366168244015029284397449212633711005718469420407056897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.10
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c400edf230faaaf3d5eeecf6409615b2d183d8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tla.bbaw.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001d1f2dce5a039310ca0a52446b58e8f2f507f618e87023000f763153cb1fade588868106ecda08e89c16f9413b7c6ce63359726374ba5c2ec7825fda412673872398361b2ab882318f4faf735619dd57a34648b6c35009c950a91dc8c881bfe870aed55758b200ff03225cc18a8946b0b277fc016894f83bb1683ef5808d7623cb092c8988d7678efaa3a105c0037e06b51241d153994cbe918195ea97ffdf36e08909ab8c6cccaa31abcefa3561f4e52a59556a4193feb87970534a3157b49420bc0fd8fd30ef1c3d8b7888318141cbd40f4ef1cfdc24595729dcc0e4ee4bea0362c46e151ad585a700f3b291e3e1e3365fe848d3b51bac9b7552db3952564c