rica.helmholtz-berlin.de

- Helmholtz-Zentrum Berlin für Materialien und Energie GmbH -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 4d:41:cb:ea:39:ff:cf:bf:05:60:15:69:88:73:92:a7 was issued on by GEANT Vereniging.

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Helmholtz-Zentrum Berlin für Materialien und Energie GmbH

Organization: Helmholtz-Zentrum Berlin für Materialien und Energie GmbH
State / Province: Berlin
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 4d:41:cb:ea:39:ff:cf:bf:05:60:15:69:88:73:92:a7
Serial Number (int): 102692190857732758333794488647186354855
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 7a:82:5b:1b:3d:d1:c7:80:31:1c:20:14:82:49:62:ab:15:a8:c0:22
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 72:ef:c5:d4:d0:5c:9b:7f:52:47:9c:d7:8b:0a:d5:60:dc:88:6c:78
Fingerprint (sha256): 4b:e0:fe:ef:d5:8e:79:9d:c8:24:54:69:17:66:9e:b0:cb:9b:56:d5:47:a3:cd:63:e2:08:d8:43:a5:ea:7c:90

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate rica.helmholtz-berlin.de

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rica.helmholtz-berlin.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rica.helmholtz-berlin.de
elis.basisit.de
ricag2.helmholtz-berlin.de
sas-dev.helmholtz-berlin.de
sas-r.helmholtz-berlin.de
sas-saphana.helmholtz-berlin.de
sas-test.helmholtz-berlin.de
sas.helmholtz-berlin.de
sasg2-cb1.basisit.de
sasg2-cb2.basisit.de
sasg2-e-sh1.basisit.de
sasg2-gw1.basisit.de
sasg2-gw2.basisit.de
sasg2-r-sh1.basisit.de
sasg2-r-sh2.basisit.de
sasg2-s-sh1.basisit.de
sasg2-sh1-dev.basisit.de
sasg2-sh1-test.basisit.de
sasg2-sh1.basisit.de
sasg2-sh2-dev.basisit.de
sasg2-sh2-test.basisit.de
sasg2-sh2.basisit.de
sasg2-sh3.basisit.de
sasg2-sh4.basisit.de
sasg2.helmholtz-berlin.de

Other certificates including the domain name helmholtz-berlin.de

(limited to 100 certificates)
gate.helmholtz-berlin.de
portal.helmholtz-berlin.de
webapp.basisit.de
ise-psn-a-1.helmholtz-berlin.de
imap.helmholtz-berlin.de
ess.helmholtz-berlin.de
divuwiki.basisit.de
dms.helmholtz-berlin.de
nc.helmholtz-berlin.de
workadventure.helmholtz-berlin.de
collab.helmholtz-berlin.de
rica.helmholtz-berlin.de
rica.helmholtz-berlin.de
nc.basisit.de
kanboard.helmholtz-berlin.de
ebisscatent.helmholtz-berlin.de
imap.helmholtz-berlin.de
ebisscatprod.helmholtz-berlin.de
mail.helmholtz-berlin.de
ifolder.helmholtz-berlin.de
lyncpool.basisit.de
idp.helmholtz-berlin.de
www.helmholtz-berlin.de
ebisscattest.helmholtz-berlin.de
nubes.helmholtz-berlin.de
divlog.helmholtz-berlin.de
indico.helmholtz-berlin.de
imap.helmholtz-berlin.de
hzb-intern.helmholtz-berlin.de
sbc-gw-01-int.voip.helmholtz-berlin.de
mail.helmholtz-berlin.de
sbc-lync-01-int.voip.helmholtz-berlin.de
www.helmholtz-berlin.de
sas.helmholtz-berlin.de
sbc-user-01-int.voip.helmholtz-berlin.de
sbc-lync-01-int.voip.helmholtz-berlin.de
dect-controller-01.voip.helmholtz-berlin.de
wssadmin-intern.helmholtz-berlin.de
smtp.helmholtz-berlin.de
sbc-user-01-int.voip.helmholtz-berlin.de
radius.helmholtz-berlin.de
www.helmholtz-berlin.de
hc-awx.basisit.de
ebisscatprod.helmholtz-berlin.de
f-intern.helmholtz-berlin.de
e-intern.helmholtz-berlin.de
ifolder.helmholtz-berlin.de
nc.basisit.de
onlyoffice.helmholtz-berlin.de
ebisscatprod.helmholtz-berlin.de
sbc-gw-01.voip.helmholtz-berlin.de
webapp.basisit.de
mapi.helmholtz-berlin.de
portal.helmholtz-berlin.de
sbc-gw-01-int.voip.helmholtz-berlin.de
radius.helmholtz-berlin.de
office.helmholtz-berlin.de
icat.helmholtz-berlin.de
dirac-meister.basisit.de
sbc-gw-02-int.voip.helmholtz-berlin.de
ebisscatprod.helmholtz-berlin.de
ise-psn-w-2.helmholtz-berlin.de
indico.helmholtz-berlin.de
rica.helmholtz-berlin.de
idp.helmholtz-berlin.de
www.helmholtz-berlin.de
rica.helmholtz-berlin.de
portal-hzb.helmholtz-berlin.de
voip.helmholtz-berlin.de
icat.helmholtz-berlin.de
pyweb1.basisit.de
sbc-user-01-int.voip.helmholtz-berlin.de
voip.helmholtz-berlin.de
ncoffice.basisit.de
autodiscover.helmholtz-berlin.de
divwiki.basisit.de
sbc-gw-02-int.voip.helmholtz-berlin.de
nc.basisit.de
ebissprod.helmholtz-berlin.de
gw-ibz-h2.helmholtz-berlin.de
jitsi1.basisit.de
ise-psn-a-1.helmholtz-berlin.de
dits.helmholtz-berlin.de
sip.helmholtz-berlin.de
indico.helmholtz-berlin.de
evetest.helmholtz-berlin.de
sharetex.helmholtz-berlin.de
divwiki.basisit.de
g-intern.helmholtz-berlin.de
nubes.helmholtz-berlin.de
ebisscatent.helmholtz-berlin.de
nubes.helmholtz-berlin.de
lyncpool.basisit.de
ise-psn-w-2.helmholtz-berlin.de
radius.hmi.de
voip.helmholtz-berlin.de
ise-psn-w-1.helmholtz-berlin.de
dits1.helmholtz-berlin.de
divlog.helmholtz-berlin.de
nubes-test.helmholtz-berlin.de

Certificate

The complete raw certificate details for rica.helmholtz-berlin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFLSdx69a3DTpOdNG2NL
VSh8MXw5Uc/JVzF0N9uuXJhC3Bxxxy7yFCaah2/ZB/5P28eb+2rWI8E7JZUV+Yg2
OrYZHO+j64Bpb1QMxR1rtmxFF/gklXsjyJwQ/wyzAvdroHsXjAgDxLPYI4yXdI+e
zSjSQO2kUMXAQ8FnHSpxYGP+Fs4W4zfXwKmTiJMQUNe155vYfJL/9KKrFhoUypAx
8Bg7bhShZ7IvycOVCR84cOs9vpuRMriRy7OlsoRONEuwnt16IXjIW91QnfKj0u0Y
WMDLfBvlAnNXLfTk8igO/5HL+vk+SbOv6vZFsJWbHq3y10zDwSidZrykpFBa+VK7
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 102692190857732758333794488647186354855
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helmholtz-Zentrum Berlin für Materialien und Energie GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rica.helmholtz-berlin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24783548887882860241772162908424213301394904706996375052024969689776884803192941207053835838982036627096342799746999752920337191413673572408016056775043005086707566867418741431018462313821305569880504618630745597625700610056614267766128677793663043968973631721732558320375332291504400120394647355306408323940936666039664831067045941518952658200383650030248347039763576021130713524846649431928771824914793528457841265949164547515880605981815049313199813648295291869984258684586744416262012393101213366253520206734276748589743166986516807257044897231512704484783928030711714207918970788684509128309394389994372852792109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a825b1b3dd1c780311c2014824962ab15a8c022
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (624 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rica.helmholtz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elis.basisit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricag2.helmholtz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sas-dev.helmholtz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sas-r.helmholtz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sas-saphana.helmholtz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sas-test.helmholtz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sas.helmholtz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasg2-cb1.basisit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasg2-cb2.basisit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasg2-e-sh1.basisit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasg2-gw1.basisit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasg2-gw2.basisit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasg2-r-sh1.basisit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasg2-r-sh2.basisit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasg2-s-sh1.basisit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasg2-sh1-dev.basisit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasg2-sh1-test.basisit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasg2-sh1.basisit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasg2-sh2-dev.basisit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasg2-sh2-test.basisit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasg2-sh2.basisit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasg2-sh3.basisit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasg2-sh4.basisit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasg2.helmholtz-berlin.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00032237509cc7d4095f8255c399e700596695c420d70438af1d0f8755b341bc657656dc7833d7145c318d29f6f5e8badfa510cb140f24af624402487a02aabb5f4b283138147034837af1df3a0aa0f9af74e8b873b47578fc40c1c597dfd4339d182b1d186bf12943ea93f554d3324fdd22ab9f76ae7cfd1e03e6fabc68c9dc6295d38d40ea818a85af339803202229a9387132a861fbeb2a0221ed1394c470379ebda4cb346b696d1d914d780adc2807a6585b842ce539dddf7f53d54594f9fb32e93c53daf07ea66585047332f8558ec1305c8321aea0449220f2e445373fa099a4abe0c2ed85d56d8d63db7e23d3f5cbd9f0ac8bd08ec02eb46bc1df97500e3dab445f33762b6412ef49d280d2947c9392e62f511861a4a4e12c393f8a8ae970f4ed310d847ec647e4b8772b2c6512308f93fbe0912a6896867a4b46a9bcf0827e92d7ab63361e894e58c4c6249d24ae3ac54937d1821b63d0884bb3de3016a70e81b5117bc70f24e36aebf57de1f8a6328b90d3685a4e5e18591b67f27927c20fecb72e77c08b5d751e5825f0db3c7a9f4a2aa63aa3708b362ef975d99c1651ba3e4895c793b2d2124cc2803c41db3b78c96b1360835e579d0f9bba9bf4407ead86fd9c52e0fae28d731924b22a729d137d2bb4b0a2b42ed00d93608ef463025c4c1c579fd0b6af4d90f1d2c1a39973f115239c6135b7a431ef83cdff3f3b