utility.senckenberg.de

Issued by DFN-CA Global

About this certificate


This digital certificate with serial number 17:6b:53:8b:e0:1e:96 was issued on by DFN-Verein .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: KeyUsage extension SHOULD be marked as critical when present

Senckenberg Gesellschaft fuer Naturforschung

Organization: Senckenberg Gesellschaft fuer Naturforschung
Organization unit: IT-Dienste
State / Province: Hessen
Locality: Frankfurt am Main
Country: DE

DFN-Verein

Organization: DFN-Verein
Organization unit: DFN-PKI
State / Province: Hessen
Locality: Frankfurt am Main
Country: DE

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 17:6b:53:8b:e0:1e:96
Serial Number (int): 6591931037523606
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: 20:ac:d6:46:e4:6e:20:3d:da:41:e1:22:b9:00:51:9a:60:f4:9d:5f
AuthorityKeyId: 3d:24:a4:99:23:28:95:35:6f:bc:58:9f:6f:50:88:45:ef:37:30:96

Fingerprint (sha1): f3:8e:4c:4a:6f:4c:b5:8f:8f:cc:8f:57:da:87:ed:19:87:bf:ca:b9
Fingerprint (sha256): 62:92:b4:a8:08:cc:4c:f2:dc:7b:8d:38:c1:32:51:77:90:1f:b0:40:bf:6c:12:27:d3:c4:8f:20:4c:2f:8d:5e

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global/pub/crl/cacrl.crl

Check the revocation status for the current certificate on utility.senckenberg.de
1
DNS Names
1
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: utility.senckenberg.de [email protected]

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGvzCCBaegAwIBAgIHF2tTi+AeljANBgkqhkiG9w0BAQUFADBMMQswCQYDVQQG EwJERTETMBEGA1UEChMKREZOLVZlcmVpbjEQMA4GA1UECxMHREZOLVBLSTEWMBQG A1UEAxMNREZOLUNBIEdsb2JhbDAeFw0xNDA0MTQxMjM1MDdaFw0xOTA0MTMxMjM1 MDdaMIGnMQswCQYDVQQGEwJERTEPMA0GA1UECBMGSGVzc2VuMRowGAYDVQQHExFG cmFua2Z1cnQgYW0gTWFpbjE1MDMGA1UEChMsU2VuY2tlbmJlcmcgR2VzZWxsc2No YWZ0IGZ1ZXIgTmF0dXJmb3JzY2h1bmcxEzARBgNVBAsTCklULURpZW5zdGUxHzAd BgNVBAMTFnV0aWxpdHkuc2VuY2tlbmJlcmcuZGUwggIiMA0GCSqGSIb3DQEBAQUA A4ICDwAwggIKAoICAQDaIp7cFy0r6s1yXJnoUacQt0whf7fWeHRDTWNw0LHtyiwx tkptCBzz9c8VzvpJJv0XakgC4BPP7hMOV35e5jlFdsIvzitEX6U6PykzyXnSZvff G56GtskgAcKDpQfCLEA2Za9V1f2MGVuohlVvKyQoHb1TIhO3+g5++zt0wdqDknGr CJmBuFaHMELEUzXAXPGplFrQJCjEX2r9Cbig3+IMJKv/WvPLkvO8EPSUNwJgbjqk U6MnRb9i9X035JcNlQ+G/V8oWPW9dhxHpLClW3MgGHPROdsfhiXu35QU1N6R7X2T 7W0WFpCfY5qaz3p5UorvtJmxzVlZXLJdAG2tlnCoLvikkLoF9aL82V1VVtT7zq5z qqH5EwggtZcuh2TWK+DhWTxr+ZTHjVpmVDFjlljvU9rALO5gWAzBlk0Pkx2+7jcO m2I2hh1AWB1Jka8e+Emc9gxy464ASwUYHUsT+G5XVNgUr06k63OUXmZhOrykff09 ZZJNJ9QPxnv8mZcRcjwDESi0+jR96MWW76ALyzqqE+/dty+n+1mNNMz1zQIv52Pk H1nAXtUsEEByrJD7hZcpw/aI7UOyPhs+KJ+rSnvnlyS9z/OqqENosATBcUfjJgu1 SzIKOSOV04Vok8zs0P4N6KxFkXu91ZaqZ3HvkU/Ee/supiBDljZaP4cjZWCm6wID AQABo4ICSDCCAkQwOQYDVR0gBDIwMDARBg8rBgEEAYGtIYIsAQEEAwEwEQYPKwYB BAGBrSGCLAIBBAMBMAgGBmeBDAECAjAJBgNVHRMEAjAAMAsGA1UdDwQEAwIE8DAT BgNVHSUEDDAKBggrBgEFBQcDATAdBgNVHQ4EFgQUIKzWRuRuID3aQeEiuQBRmmD0 nV8wHwYDVR0jBBgwFoAUPSSkmSMolTVvvFifb1CIRe83MJYwOgYDVR0RBDMwMYIW dXRpbGl0eS5zZW5ja2VuYmVyZy5kZYEXYmtvZXN0ZXJAc2VuY2tlbmJlcmcuZGUw gYUGA1UdHwR+MHwwPKA6oDiGNmh0dHA6Ly9jZHAxLnBjYS5kZm4uZGUvZGZuLWNh LWdsb2JhbC9wdWIvY3JsL2NhY3JsLmNybDA8oDqgOIY2aHR0cDovL2NkcDIucGNh LmRmbi5kZS9kZm4tY2EtZ2xvYmFsL3B1Yi9jcmwvY2FjcmwuY3JsMIHVBggrBgEF BQcBAQSByDCBxTAzBggrBgEFBQcwAYYnaHR0cDovL29jc3AucGNhLmRmbi5kZS9P Q1NQLVNlcnZlci9PQ1NQMEYGCCsGAQUFBzAChjpodHRwOi8vY2RwMS5wY2EuZGZu LmRlL2Rmbi1jYS1nbG9iYWwvcHViL2NhY2VydC9jYWNlcnQuY3J0MEYGCCsGAQUF BzAChjpodHRwOi8vY2RwMi5wY2EuZGZuLmRlL2Rmbi1jYS1nbG9iYWwvcHViL2Nh Y2VydC9jYWNlcnQuY3J0MA0GCSqGSIb3DQEBBQUAA4IBAQB0w4l+hCaeORfLIAbr iV3sU4xSenGUKqWT6SfOiXwBNGWderFg5zZLElUoh0KkwVCJ9/Zs2ycaYLH6e5Sn LZd6OY6CgUadpj254qk6FaWzRH+DVAhy4DMPREaKCVZkHOS9iZ1oy+FOlkHfQK+F Ue6GFKXmH8FEXKYPfmwOHWk5apelUg+Eu5m/V2MK+o89E2tdGKRvwdl7npB4N4Hv j0gAVMacuheeCuXWHL5ee1BeT1AWRfKPBLH/5Q4064kx2rrBYlPxV7BZSFkgbzWS 6z4+qENoEiwLapDd71p0YarLTgfJiYv4HG/MdEZ8116ddxeXVRLY0+dFC+9grrER uiJx -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2iKe3BctK+rNclyZ6FGn ELdMIX+31nh0Q01jcNCx7cosMbZKbQgc8/XPFc76SSb9F2pIAuATz+4TDld+XuY5 RXbCL84rRF+lOj8pM8l50mb33xuehrbJIAHCg6UHwixANmWvVdX9jBlbqIZVbysk KB29UyITt/oOfvs7dMHag5JxqwiZgbhWhzBCxFM1wFzxqZRa0CQoxF9q/Qm4oN/i DCSr/1rzy5LzvBD0lDcCYG46pFOjJ0W/YvV9N+SXDZUPhv1fKFj1vXYcR6SwpVtz IBhz0TnbH4Yl7t+UFNTeke19k+1tFhaQn2Oams96eVKK77SZsc1ZWVyyXQBtrZZw qC74pJC6BfWi/NldVVbU+86uc6qh+RMIILWXLodk1ivg4Vk8a/mUx41aZlQxY5ZY 71PawCzuYFgMwZZND5Mdvu43DptiNoYdQFgdSZGvHvhJnPYMcuOuAEsFGB1LE/hu V1TYFK9OpOtzlF5mYTq8pH39PWWSTSfUD8Z7/JmXEXI8AxEotPo0fejFlu+gC8s6 qhPv3bcvp/tZjTTM9c0CL+dj5B9ZwF7VLBBAcqyQ+4WXKcP2iO1Dsj4bPiifq0p7 55ckvc/zqqhDaLAEwXFH4yYLtUsyCjkjldOFaJPM7ND+DeisRZF7vdWWqmdx75FP xHv7LqYgQ5Y2Wj+HI2VgpusCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6591931037523606 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DFN-Verein' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DFN-PKI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DFN-CA Global' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-14 12:35:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-13 12:35:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Frankfurt am Main' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Senckenberg Gesellschaft fuer Naturforschung' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT-Dienste' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'utility.senckenberg.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 889914123642316809656194046805964755448420509011138388674385340117656914609707372706958096829554850194324401212791008277356407667672698280917394085839413993448951970801073910912736371857674122504076120933557464994020570341394283003186357328910772772983214235051119058929072765132896855794262274981738465537136779412043089559170151545825212657787441943858928396876809246744825930039375357884370827688666414675346395053832575914115888442089355647649862006649576177906180770659830838417558198078692193952433050612995865307469039597685464339814143285315789601321315777916564735199127750671394066743546575516878462920502850076181425069564726095564078603820693759499648385905166965009954285165077075419436193827470714963849764747729107653238929607121294358346541455556744957429384020130958935460474950677669338110696342990960998935401414425329110892419642568868457280144003383840803193770080450576035892487768481305832331408509511977996733919392131203172402808528822306906111228158083504576075964822333018632113699268947579870983262355961562348366394299290111545959653204065411867999627857754804994410473359518334773746269546768974738099016791925801508656346281655420641906252935363361371412511384858651552131593687051176425725738646284011 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04f0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 20acd646e46e203dda41e122b900519a60f49d5f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3d24a499232895356fbc589f6f508845ef373096 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utility.senckenberg.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global/pub/crl/cacrl.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global/pub/crl/cacrl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global/pub/cacert/cacert.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global/pub/cacert/cacert.crt' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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