fb08-ckat.uni-giessen.de

- Justus-Liebig-Universitaet Giessen -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 25:da:b9:ef:95:96:4b:de:ed:44:e1:45 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Justus-Liebig-Universitaet Giessen

Organization: Justus-Liebig-Universitaet Giessen
State / Province: Hessen
Locality: Giessen
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 25:da:b9:ef:95:96:4b:de:ed:44:e1:45
Serial Number (int): 11715369249415807382843613509
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: b1:4e:98:56:b2:ed:56:33:5e:e3:a7:59:72:cb:7f:63:60:7f:6e:2f
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): da:c8:aa:f7:86:c2:59:60:12:f2:f1:3c:e3:c4:4d:65:64:60:06:1a
Fingerprint (sha256): 4a:28:0b:2b:50:8e:bd:c6:8a:03:14:dc:89:0d:66:26:47:91:01:68:86:5e:7d:44:d5:24:55:33:44:04:21:c0

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate fb08-ckat.uni-giessen.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fb08-ckat.uni-giessen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fb08-ckat.uni-giessen.de

Other certificates including the domain name uni-giessen.de

(limited to 100 certificates)
dzl.fb11.uni-giessen.de
wi-labor30.wirtschaft.uni-giessen.de
fb07-geo-jluco2.geo.uni-giessen.de
pczv-3009-nb.admin.uni-giessen.de
surveys.hrz.uni-giessen.de
zvnb-u018255.admin.uni-giessen.de
zvnb-u014212.admin.uni-giessen.de
smtp01.hrz.uni-giessen.de
zvpc-u015870.admin.uni-giessen.de
webmail.hrz.uni-giessen.de
zvnb-u012636.admin.uni-giessen.de
zvnb-u018790.admin.uni-giessen.de
osa.uni-giessen.de
zvnb-u015958.admin.uni-giessen.de
tickatlab.vetmed.uni-giessen.de
zvnb-u016811.admin.uni-giessen.de
zvnb-u018242.admin.uni-giessen.de
wiwi.uni-giessen.de
digisam.ub.uni-giessen.de
zvnb-u020090.admin.uni-giessen.de
zvnb-u013324.admin.uni-giessen.de
helpdesk.wirtschaft.uni-giessen.de
zvnb-u019108.admin.uni-giessen.de
webmail.hrz.uni-giessen.de
statistik.wirtschaft.uni-giessen.de
ldap-97.hrz.uni-giessen.de
wahl.uni-giessen.de
zvnb-u013536.admin.uni-giessen.de
nbzv-10575.admin.uni-giessen.de
zvnb-u017636.admin.uni-giessen.de
justhpc.hpc.uni-giessen.de
mcdb.hrz.uni-giessen.de
zvnb-u011449.admin.uni-giessen.de
zvpc-u012362.admin.uni-giessen.de
zvnb-u014583.admin.uni-giessen.de
zvnb-u012637.admin.uni-giessen.de
zvpc-u014656.admin.uni-giessen.de
zvnb-u018339.admin.uni-giessen.de
ldapsearch2.hrz.uni-giessen.de
ocum.hrz.uni-giessen.de
zvpc-u014754.admin.uni-giessen.de
zvnb-u014460.admin.uni-giessen.de
app.wiwi.uni-giessen.de
zvpc-u015867.admin.uni-giessen.de
mailout.uni-giessen.de
sm-pm01.hrz.uni-giessen.de
zvpc-u016515.admin.uni-giessen.de
zvnb-u018145.admin.uni-giessen.de
zvnb-u019035.admin.uni-giessen.de
vc-testdev.hrz.uni-giessen.de
pc-labor38.wirtschaft.uni-giessen.de
zvnb-u011873.admin.uni-giessen.de
diana.hrz.uni-giessen.de
helpdesk.wirtschaft.uni-giessen.de
backupveeam.hrz.uni-giessen.de
clakst.uni-giessen.de
zvnb-u018972.admin.uni-giessen.de
zvpc-u015870.admin.uni-giessen.de
zvnb-u018011.admin.uni-giessen.de
zvnb-u014484.admin.uni-giessen.de
hznappv1.ad.uni-giessen.de
zvpc-u015899.admin.uni-giessen.de
nbzv-11501.admin.uni-giessen.de
nbzv-11505.admin.uni-giessen.de
zvnb-u015330.admin.uni-giessen.de
zvnb-u014948.admin.uni-giessen.de
zvnb-u013115.admin.uni-giessen.de
zvtb-u017895.admin.uni-giessen.de
webmail.stud.uni-giessen.de
cedata-v2.fb11.uni-giessen.de
zvpc-u016776.admin.uni-giessen.de
zvnb-u016924.admin.uni-giessen.de
zvpc-u015875.admin.uni-giessen.de
cloud.computational.bio.uni-giessen.de
vpnserver.uni-giessen.de
zvpc-u013881.admin.uni-giessen.de
zvpc-u013018.admin.uni-giessen.de
zvnb-u017716.admin.uni-giessen.de
zvnb-u016539.admin.uni-giessen.de
zvpc-u013891.admin.uni-giessen.de
zvnb-u014550.admin.uni-giessen.de
zvnb-u015914.admin.uni-giessen.de
zvnb-u018728.admin.uni-giessen.de
pczv-10100.admin.uni-giessen.de
zvnb-u016060.admin.uni-giessen.de
srv0276.verwaltung.uni-giessen.de
zvnb-u017557.admin.uni-giessen.de
ipamprod.hrz.uni-giessen.de
zvnb-u016617.admin.uni-giessen.de
ldap-05.hrz.uni-giessen.de
wi-labor30.wirtschaft.uni-giessen.de
zvnb-u014859.admin.uni-giessen.de
zvnb-u018254.admin.uni-giessen.de
zvpc-u016611.admin.uni-giessen.de
zvnb-u018519.admin.uni-giessen.de
sandbox-opac.hrz.uni-giessen.de
fmc.hrz.uni-giessen.de
pc-labor38.wirtschaft.uni-giessen.de
hznvrops.hrz.uni-giessen.de
zvnb-u012416.admin.uni-giessen.de

Certificate

The complete raw certificate details for fb08-ckat.uni-giessen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnO2fhRyVn0yZklbJgGlo
S+AjhJQsrTOzXei7oFW92Jx58pXJi19o3lat8jubsl8e4fBUShh7OKgdkuShhN87
+QgRZVMiheCstXyDQcSj3QY6HqECyeIY9R/fPc7D+1OkvhDumsCP6WAGf1x1Nm2B
tv2AEigx/5RgI1y6sM0r+JTE+IB/2Uk9l35PLegY/YX6c9YLqY+xZFnxiz7QLZeI
QTqQtih+5YXo1QUVShOmaS+vxXZrfd7py04XejubAcXoe6ghaZFxGWqXho/gYQxM
YF/55f+wD51/eAn8u6gJYHYljzSRMHpVQTazl83wyM+oGtwJrmfJBrG647JNSS6h
N5//Zn4AQ7Wm3O4AB0jAxoYwov9HZfsdAO6vb/HEhFPcjQrzZJiJbrvTBEL/rk/3
cjoSwDaJ8wr8BbEpGdITYt7GxdlwqjdfaiJ08en1DHUHFCJ4LNcovVgO0OKeIEtv
GS10+2VRCyXGlJKMVWcW5H6Z690z7flk2MHekCnpXQcfk6Y6MMqOLaqQ2aA/WKjv
JYquXGaxEmCLl0ZExch6SY6PiK2Egrf9Fs/fp1S/zBkU8VyGjAvwHGQ5AIk/E7u5
fWeKFtTOqAa5oEbTeTviturFu6uT/jTgReZf/JdduyttB+48yJvUDNLSf1NzijiJ
AdEruc27RVFoJLTmTUF/zH8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11715369249415807382843613509
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-16 13:17:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-16 13:17:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Giessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Justus-Liebig-Universitaet Giessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'fb08-ckat.uni-giessen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 640211262782277955086884837761913526808977944547864647889911245438428205578107642825624421606031978293279646188318941149173645056838573896163292174243501858210226216008502175222170254911099806142091828699014012843930451041918685389431927112637907263614846598846031846915908454674721215424742249611687051553081187334484401360771576594800159055115292299513040315724914844330134013950471037408328434501833673471895331115969821081169898794736163111172700773963229911023746848435556324371562251871631017877580984882623485295195396517988764119108115805452114933631583684587957142770625823035015997040899672542887700116722801783708701544525566143057410274139081044024381549394324673475543500316190157326331117690883959572408587837499655151613817498854968393966737240315289493250801807055023160872096447843371231807837101424071249582083566414192952420515245637110229667260582409237549991149087126761492236050287226183662733097389650905713601203304304590621810367226818897645196504307497442998826111219761008269143148710288352524549338010373038087365739082800087941446952823644860228375446955326738753652148887262597640330247516057118881284849159402531154171461413980931085636993144662807420555812588139552122837575483262672995969968849800319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.10
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b14e9856b2ed56335ee3a75972cb7f63607f6e2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb08-ckat.uni-giessen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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