forschungsportal.ukaachen.de

- RWTH Aachen -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 21:21:e9:a7:c5:40:61:7d:90:4e:f2:86 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

RWTH Aachen

Organization: RWTH Aachen
Organization unit: Informationstechnologie
State / Province: Nordrhein-Westfalen
Locality: Aachen
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 21:21:e9:a7:c5:40:61:7d:90:4e:f2:86
Serial Number (int): 10254003282361906583414174342
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 4a:50:d0:77:8e:ca:1b:38:7b:d3:b5:9e:37:dc:05:94:1d:36:d9:b7
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): ba:80:03:59:8f:5b:18:f8:ac:f9:67:d3:71:26:2e:80:be:ce:66:d6
Fingerprint (sha256): 53:0d:5c:bc:8c:7f:0a:15:cb:d8:90:60:d2:71:c1:ef:99:22:48:5b:b6:19:b3:05:5f:a5:c7:ea:48:21:07:cc

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate forschungsportal.ukaachen.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for forschungsportal.ukaachen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

forschungsportal.klinikum.rwth-aachen.de
forschungsportal.ukaachen.de
mysite.ukaachen.de

Other certificates including the domain name ukaachen.de

(limited to 100 certificates)
jobs.ukaachen.de
for2591.ukaachen.de
proans.ukaachen.de
db-ucr-ods-d1.ukaachen.de
sbc2-n5-trk2a.tk.ukaachen.de
vhukaprdai01.hec.klinikum.rwth-aachen.de
balu-api.ukaachen.de
balu-api.ukaachen.de
db-iris-ths-d.ukaachen.de
elab-oos.cloud.ukaachen.de
medienonline.ukaachen.de
sbc2-n5-trk2a.tk.ukaachen.de
webmail.ukaachen.de
isp-notfall.pacs.ukaachen.de
db-ucr-ods-p1.ukaachen.de
vhukasnqci.hec.klinikum.rwth-aachen.de
as-medwik-imi.klinikum.rwth-aachen.de
aed-logs.ukaachen.de
webmail.ukaachen.de
db-trans-p2.ukaachen.de
as-prime02.klinikum.rwth-aachen.de
medical.ukaachen.de
vhukasnqci.hec.klinikum.rwth-aachen.de
vhukasnpci.hec.klinikum.rwth-aachen.de
as-nicofa.klinikum.rwth-aachen.de
www.cbmb.ukaachen.de
www.ukaachen.de
balu-api.ukaachen.de
vhukaepqci.hec.klinikum.rwth-aachen.de
mediaface.ukaachen.de
ndp.ukaachen.de
sts.ukaachen.de
balu-api.ukaachen.de
as-covas01.klinikum.rwth-aachen.de
www.vm.ukaachen.de
aed-dashboard.ukaachen.de
elab.cloud.ukaachen.de
as-prime03.klinikum.rwth-aachen.de
db-ucr-p1.ukaachen.de
as-iris-ws-p1.ukaachen.de
webmail.ukaachen.de
ctca-edc.ukaachen.de
izkf.ukaachen.de
vhukabp1sbo01.hec.klinikum.rwth-aachen.de
db-hi-p1.ukaachen.de
startportal.ukaachen.de
gast01.klinikum.rwth-aachen.de
db-ucr-t1.ukaachen.de
as-ucr-ws-p1.ukaachen.de
mdmrelay.ukaachen.de
service-portal.ukaachen.de
test-support.ukaachen.de
jobs.ukaachen.de
intranet.ukaachen.de
intranet.ukaachen.de
as-ucr-ws-t1.ukaachen.de
labooratory-eslide.ukaachen.de
redcap-weber.klinikum.rwth-aachen.de
ldaps-int.ukaachen.de
jobs.ukaachen.de
www.e-learning.ukaachen.de
momo.ukaachen.de
test-support.ukaachen.de
apps.ukaachen.de
imioc.ukaachen.de
db-ucr-ods-d2.ukaachen.de
ums-relay01.ukaachen.de
jira-imi.ukaachen.de
intranet.ukaachen.de
forschungsportal.ukaachen.de
rechtskataster.ukaachen.de
as-simlab.klinikum.rwth-aachen.de
jobs.ukaachen.de
vhukasndci.hec.klinikum.rwth-aachen.de
vhukaqssci.hec.klinikum.rwth-aachen.de
mdmrelay.ukaachen.de
as-cobra01.klinikum.rwth-aachen.de
cmdb.ukaachen.de
forschungsportal.ukaachen.de
elab-oos.cloud.ukaachen.de
coupons.ukaachen.de
as-jira-imi.klinikum.rwth-aachen.de
webmail.ukaachen.de
openproject-gbma.ukaachen.de
labooratory-eslide.ukaachen.de
medical.ukaachen.de
cipher2.ukaachen.de
vhukaepdci.hec.klinikum.rwth-aachen.de
db-trans-p2.ukaachen.de
cipher2.ukaachen.de
db-hi-t1.ukaachen.de
jobs.ukaachen.de
support.ukaachen.de
www.cbmb.ukaachen.de
ukaachen.de
pwreset.ukaachen.de
forschungsportal.ukaachen.de
isp-pacs.pacs.ukaachen.de
vhukaeppci.hec.klinikum.rwth-aachen.de
sbc1-n5-trk2b.tk.ukaachen.de

Certificate

The complete raw certificate details for forschungsportal.ukaachen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10254003282361906583414174342
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-13 15:30:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-14 15:30:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Aachen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'RWTH Aachen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Informationstechnologie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'forschungsportal.ukaachen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 688821061258094789573471379586760386778963399542539321029500125690142296123228647407327726058664152558840126472596517467324159339574043279442390104097170869417298404535883221523217402709335723978669991534702675650490411458768029176505905247254153752525311092485620741440253009425798287956396773865580043623485783994003031330361931096241362902983109785739740147909836707550234083890997569718746647173962592146354180202141641725811448073322738396246314327578437756285548098089849859154312112459438422201367649392928299045108404608554931511805373937624811349474636024987576815186280302417717783681781517149101058358303296600732106650964088335609654636330019649011982798448558461016410013561200616253930488239545178663909318809693651289248745663965535396059692523771437670322634355541176045449193228486066277446159463021507346769847680232713003641143698759613776046802123262917839298709884324699844326762915571996522839976739412673078586410413820106446630658810509130201215614735109500435880040190332459860618775212363808016610159129627608881203657365638664515783880029493486960081301844918662425581522466142148547322881271510389203287375362792202059545303372183826309280652555989769229550322989517077307766910754732605570671326037346969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a50d0778eca1b387bd3b59e37dc05941d36d9b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forschungsportal.klinikum.rwth-aachen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forschungsportal.ukaachen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysite.ukaachen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (846 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (842 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00665ef5883fec37307d54e9429c4f1359d4ae16a8ea5d2c315580f2db85d09c155cf58be1b9f0d616322ce270e16a7f2e4303e1a810b1de419a261b9f15e930f61afe4f2b9607740b313640cbf55145e73b134f6ed426a4467a00108f7ad75074676d3371738a5f2bb23da0c108bd20486ec6d4b721fd760186ca441cf1a571252721c844ef0fd5f5a3046afcbb469d58c2c9dd6385555ef8c2854d4933cd3cdf88ba8fd138aef089c4fa71db031166dd7c91fb15775a192470160e00fe4871b2da96d33752bb9d28321065e3e6be4e4c4c21c5ddc969a4355e77867507a6f6ebecf65f5b557e5c252dd289ef3ae16d3e2c890b20d3c232f89b3d3c51dee6e6d4