www.ai.fh-erfurt.de

- Fachhochschule Erfurt -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 21:23:17:d1:59:5c:f2:14:18:bb:91:91 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fachhochschule Erfurt

Organization: Fachhochschule Erfurt
State / Province: Thueringen
Locality: Erfurt
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 21:23:17:d1:59:5c:f2:14:18:bb:91:91
Serial Number (int): 10255430204028804431529873809
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 5b:27:2d:68:81:d2:45:93:34:c8:76:be:28:4a:3a:00:40:81:16:5f
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): bf:d1:c4:31:80:2f:81:0e:77:3e:74:73:a7:8b:49:04:90:65:5c:8f
Fingerprint (sha256): 51:14:82:c2:3a:09:72:04:a3:99:d3:6e:34:74:ba:de:08:e4:a3:99:e8:e3:16:a1:cc:cb:a3:9b:cd:8e:21:e6

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate www.ai.fh-erfurt.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ai.fh-erfurt.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ai.fh-erfurt.de
webserver.ai.fh-erfurt.de
www.ai.fh-erfurt.de

Other certificates including the domain name fh-erfurt.de

(limited to 100 certificates)
tkm.fh-erfurt.de
fgk-nas-1.fh-erfurt.de
evasys.fh-erfurt.de
webmail.fh-erfurt.de
sbc-01.fh-erfurt.de
wwws-analyse.fh-erfurt.de
fhe-mailbox.fh-erfurt.de
fwng.fh-erfurt.de
vpl.fh-erfurt.de
fhemail.fh-erfurt.de
fhewebmail.fh-erfurt.de
stud-vpn.fh-erfurt.de
morpheus.fh-erfurt.de
hye.ai.fh-erfurt.de
www.ai.fh-erfurt.de
cti-proxy.fh-erfurt.de
fhe-pecunia.fh-erfurt.de
cti-proxy.fh-erfurt.de
netstorage.fh-erfurt.de
exa-cust.fh-erfurt.de
radius1.fh-erfurt.de
vpl.fh-erfurt.de
webmail.fh-erfurt.de
h1-test.fh-erfurt.de
fhe-tsbroker-2.fhe-ad.fh-erfurt.de
nc.fh-erfurt.de
sbc-02.fh-erfurt.de
netstorage.fh-erfurt.de
test-moodle.fh-erfurt.de
bewerben.fh-erfurt.de
emedia.fh-erfurt.de
www.fh-erfurt.de
test-moodle.fh-erfurt.de
cloud.fh-erfurt.de
idp.fh-erfurt.de
fhe-mail-relay2.fh-erfurt.de
exa-test.fh-erfurt.de
migration.fh-erfurt.de
stundenplan.fh-erfurt.de
get.fh-erfurt.de
exa-test2.fh-erfurt.de
email.fh-erfurt.de
wstud.fh-erfurt.de
qis.fh-erfurt.de
katalog.fh-erfurt.de
pruefung.fh-erfurt.de
fh-erfurt.de
www.fh-erfurt.de
test-a1.fh-erfurt.de
webmail.fh-erfurt.de
pad.fh-erfurt.de
wwws.fh-erfurt.de
group.fh-erfurt.de
wwwp1.fh-erfurt.de
haushalt.fh-erfurt.de
adfs.fh-erfurt.de
nctest.fh-erfurt.de
gwweb.fh-erfurt.de
moodle.fh-erfurt.de
oas.fh-erfurt.de
morpheus.fhe-ad.fh-erfurt.de
www.fh-erfurt.de
www.fh-erfurt.de
moodle.fh-erfurt.de
pruefung.fh-erfurt.de
terpsichore.fh-erfurt.de
evasys.fh-erfurt.de
gwweb.fh-erfurt.de
www.ai.fh-erfurt.de
source.ai.fh-erfurt.de
elms.fh-erfurt.de
evasys.fh-erfurt.de
fhe-mail-smtp2.fh-erfurt.de
iscommerce.fh-erfurt.de
studienkonto.fh-erfurt.de
fhe-mailbox.fh-erfurt.de
netstorage.fh-erfurt.de
fhe-zentral-1.fh-erfurt.de
support.fh-erfurt.de
test-moodle.fh-erfurt.de
nc-eval.fh-erfurt.de
studienkonto.fh-erfurt.de
bewerbung.fh-erfurt.de
notrust.fh-erfurt.de
netstorage.fh-erfurt.de
radius.fh-erfurt.de
studienkonto.fh-erfurt.de
oas.fh-erfurt.de
radius1.fh-erfurt.de
metacoon.fh-erfurt.de
fhe-test-sam.fh-erfurt.de
webmail.fh-erfurt.de
fhe-vw-7.fh-erfurt.de
www.fh-erfurt.de
itkom.ai.fh-erfurt.de
a1.fh-erfurt.de
elearning.ars.fh-erfurt.de
svn.ai.fh-erfurt.de
www.ai.fh-erfurt.de
netstorage.fh-erfurt.de

Certificate

The complete raw certificate details for www.ai.fh-erfurt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NiRjOUN9sp3E3j4CL13
wvTx7HlDzQff6TS2yxlFLeJb8iAjLsf05yY/gWLS0JEKqNTMJFFQTs80TYRHYMdg
3ZmYCL0XY2Op1dmG+ouVnxssFLR37CFG7Rv7SIqCnebgpEmta04TW7+OdVGZyWv2
bT1vR3IayBUBWU2J2R2tgTwlbLxnwRh4VtxECtqRR34+wTdHvTIGv+H9/sQujOSZ
lEWCK1MCX/6Eg4ReDVUSBkBQgzY963lMNPjR7ZtPaYOYmkZfHeRSE8OAvm3tHCa3
/1gqFJ3VgkqZCwmb6i0Dn9Iqf+vV+XqMWZHWxQTqvop+JGxcI4Of32ERHPev6NOs
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10255430204028804431529873809
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-14 12:59:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-15 12:59:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Thueringen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Erfurt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fachhochschule Erfurt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.ai.fh-erfurt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27879221027826646211301660072374305594557065588401986271497843827108202025299978318110772491429613952675256321588497713735540215401273733217030679493591832573715919144265759339718988658130267313768751333006392283086152040267407228824664808537571063979023329820808263177382483820479237046447277753180564824979690175568257071452389368217874141141450238184790897943520986616867043378898035241686354850303699153507139942078890701086963084472873027805181166482151250302397007604061642359771417910634663178548347503860576404309700649753248470430808813467339553483215153012102923425063756783371233252963241782835857098779657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b272d6881d2459334c876be284a3a004081165f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ai.fh-erfurt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webserver.ai.fh-erfurt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ai.fh-erfurt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (848 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (844 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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