cryptography.in.th-nuernberg.de

- Technische Hochschule Nuernberg Georg Simon Ohm -

Issued by Ohm CA - G01

About this certificate

This digital certificate with serial number 1a:80:d9:8a:e7:37:65 was issued on by Georg-Simon-Ohm-Hochschule f. angewandte Wissenschaften FH Nbg.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature ContentCommitment KeyEncipherment] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Technische Hochschule Nuernberg Georg Simon Ohm

Organization: Technische Hochschule Nuernberg Georg Simon Ohm
Organization unit: Informatik
State / Province: Bayern
Locality: Nuernberg
Country: DE

Georg-Simon-Ohm-Hochschule f. angewandte Wissenschaften FH Nbg

Organization: Georg-Simon-Ohm-Hochschule f. angewandte Wissenschaften FH Nbg
Organization unit: Rechenzentrum
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1a:80:d9:8a:e7:37:65
Serial Number (int): 7460021221144421
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: b2:ba:8a:a8:52:a2:96:46:6a:d0:b3:2e:ab:63:b4:69:2c:0e:f6:ef
AuthorityKeyId: 85:24:b0:c9:de:be:73:eb:f8:aa:14:50:35:a0:82:cb:57:a8:47:0f

Fingerprint (sha1): 4d:16:dc:04:a1:8a:ba:d1:02:70:12:a8:68:67:64:f5:8a:a3:60:5c
Fingerprint (sha256): 46:3d:fa:55:70:c7:4b:ee:8f:7e:aa:7e:8a:75:09:a7:60:75:91:da:5c:ea:b2:86:f2:aa:a1:ac:6d:31:b3:10

Issuing Certificate URL: http://cdp1.pca.dfn.de/hs-nuernberg-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/hs-nuernberg-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/hs-nuernberg-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/hs-nuernberg-ca/pub/crl/cacrl.crl

Check the revocation status for certificate cryptography.in.th-nuernberg.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cryptography.in.th-nuernberg.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cryptography.in.th-nuernberg.de

Other certificates including the domain name th-nuernberg.de

(limited to 100 certificates)
fachschaft.mb.th-nuernberg.de
fachschaften.th-nuernberg.de
mailgw.th-nuernberg.de
personalentwicklung.ext.th-nuernberg.de
fachschaften.th-nuernberg.de
maphyn.amp.th-nuernberg.de
git.efi.th-nuernberg.de
www.in.th-nuernberg.de
fachschaften.th-nuernberg.de
fachschaften.th-nuernberg.de
in-tra.th-nuernberg.de
jobboerse.th-nuernberg.de
alumni.in-tra.th-nuernberg.de
hochschul-praxistage.informatik.fh-nuernberg.de
wwwtest.efi.th-nuernberg.de
fachschaft.in.th-nuernberg.de
abschlussarbeiten.in-tra.th-nuernberg.de
me.efi.th-nuernberg.de
gallery.fachschaft.in
fachschaft.mb.th-nuernberg.de
alumni.in-tra.th-nuernberg.de
ohm-alumni.in.th-nuernberg.de
engagiert-studiert.th-nuernberg.de
fwpf.in-tra.th-nuernberg.de
seeyou.th-nuernberg.de
www.in-tra.th-nuernberg.de
hochschul-praxistage.informatik.fh-nuernberg.de
fachschaften.th-nuernberg.de
fachschaft.in.th-nuernberg.de
scs.th-nuernberg.de
hochschul-praxistage.informatik.fh-nuernberg.de
www2.in-tra.th-nuernberg.de
fhntp20.bib-bvb.de
fachschaft.efi.th-nuernberg.de
fachschaften.th-nuernberg.de
jobboerse.th-nuernberg.de
kunden.hochschuljobboerse.de
www2.in.th-nuernberg.de
www.in.th-nuernberg.de
fachschaft.efi.th-nuernberg.de
fachschaft.efi.th-nuernberg.de
www2.in-tra.th-nuernberg.de
cms-profs.in.th-nuernberg.de
www.in-tra.th-nuernberg.de
alumni.in-tra.th-nuernberg.de
jobboerse.in-tra.th-nuernberg.de
jobboerse.th-nuernberg.de
medinf.efi.th-nuernberg.de
fachschaften.th-nuernberg.de
fachschaft.efi.th-nuernberg.de
asta.th-nuernberg.de
fachschaften.th-nuernberg.de
blendedlearning.th-nuernberg.de
me.efi.th-nuernberg.de
ohmylove.th-nuernberg.de
fachschaft.vt.th-nuernberg.de
in-tra.th-nuernberg.de
fachschaften.th-nuernberg.de
mailer.in-tra.th-nuernberg.de
jobboerse.th-nuernberg.de
www.in-tra.th-nuernberg.de
medinf.efi.th-nuernberg.de
www.th-nuernberg.de
www.efi.th-nuernberg.de
casotex.in.th-nuernberg.de
fachschaft.in.th-nuernberg.de
fhnoz3.bib-bvb.de
fachschaft.in.th-nuernberg.de
fachschaft.d.th-nuernberg.de
cryptography.in.th-nuernberg.de
fachschaft.efi.th-nuernberg.de
www2.in-tra.th-nuernberg.de
www.in.th-nuernberg.de
cryptography.in.th-nuernberg.de
blendedlearning.th-nuernberg.de
fachschaft.amp.th-nuernberg.de
fachschaft.amp.th-nuernberg.de
ohm-alumni.in.th-nuernberg.de
fachschaft.efi.th-nuernberg.de
www2.in-tra.th-nuernberg.de
fachschaft.in.th-nuernberg.de
fachschaft.efi.th-nuernberg.de
fachschaft.efi.th-nuernberg.de
cryptography.in.th-nuernberg.de
blendedlearning.th-nuernberg.de
me.efi.th-nuernberg.de
ohm-alumni.in.th-nuernberg.de
deutschlandstipendium.th-nuernberg.de
www2.in.th-nuernberg.de
fachschaft.in.th-nuernberg.de
medinf.efi.th-nuernberg.de
fwpf.in-tra.th-nuernberg.de
fachschaft.in.th-nuernberg.de
fachschaften.th-nuernberg.de
scs.th-nuernberg.de
fachschaft.in.th-nuernberg.de
alumni.in-tra.th-nuernberg.de
jobboerse.th-nuernberg.de
fachschaft.in.th-nuernberg.de
jobboerse.th-nuernberg.de

Certificate

The complete raw certificate details for cryptography.in.th-nuernberg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2Ni4s/iL1UcLtWeUhGw
iRAY3D+TTPETBWNXRKIme6kusZj6dahzE2Rr1qXyUl1ZUNsJGFmy+yYGAWWxWYcZ
s2FmbVLfDBLXrt9vp892lz3by7Uc1Z5U0yz0OwTI6JBT3tqNsRVKYlAw/i4jl6VL
7K6LXYbEWZFryfyukOuMVAxuhJZaUUo/zihZ2bkl48u1I0XWIn0K2YSpyFuXvzLm
StHVr7Hfpgn+Xlo8+Osk78RTFUA4v4Y4sCcfxuzZ3/Ku6a1pkHBHtrjOWjTyuRXl
Nz6OGWECRgyT1qi6C/COPYQ27nmpFq5+ESOMtzuPY4w4VZ1Vt4pRNK2YrnEXCzr7
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7460021221144421
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georg-Simon-Ohm-Hochschule f. angewandte Wissenschaften FH Nbg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rechenzentrum'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohm CA - G01'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-04 09:25:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-02 09:25:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nuernberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Technische Hochschule Nuernberg Georg Simon Ohm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Informatik'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'cryptography.in.th-nuernberg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26180338325974232596928925058065088688823014755375967837924471248366599235695066062508746975729283130327539571205184712742984823146147261972133363294909719178222439527422782872878256360507992788633442628876074181117609280789227316433817025597116241523760592611897169006046554436554211542137109817085596119890440021142411351900321371253192002783200371682521835336777451275443384922444446078924490282510477800877147023220191494256285261996347560416848230939115695228422026306094269757048765935868985153425404250559085001295487318424191076969652263662457452034814790736792814755329663757890640665039735265394296222317509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b2ba8aa852a296466ad0b32eab63b4692c0ef6ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8524b0c9debe73ebf8aa145035a082cb57a8470f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptography.in.th-nuernberg.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/hs-nuernberg-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/hs-nuernberg-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (204 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/hs-nuernberg-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/hs-nuernberg-ca/pub/cacert/cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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