openproj2-test.basisit.de

- Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 26:32:dc:42:3d:ce:d2:1b:e3:cb:c2:9e was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH

Organization: Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH
State / Province: Berlin
Locality: Berlin
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 26:32:dc:42:3d:ce:d2:1b:e3:cb:c2:9e
Serial Number (int): 11821916806756912355798139550
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 5c:09:93:05:5a:79:0b:78:d6:ec:e5:74:91:e0:19:93:db:68:1a:0c
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 89:15:85:67:45:0a:3f:86:bd:81:aa:40:e5:1f:2b:d9:84:aa:5d:28
Fingerprint (sha256): 5b:2f:ff:13:00:d8:fa:cd:47:5c:ef:6d:b6:16:68:81:ac:c0:a8:81:5c:9a:6a:f9:45:b6:05:a9:00:c5:6c:6f

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate openproj2-test.basisit.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for openproj2-test.basisit.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

openproj2-test.basisit.de

Other certificates including the domain name basisit.de

(limited to 100 certificates)
webapp.basisit.de
it-ed-forum.basisit.de
sledge.basisit.de
divuwiki.basisit.de
cliqweb-test.basisit.de
nc.helmholtz-berlin.de
ldap.basisit.de
utax-w-kh218.basisit.de
collab.helmholtz-berlin.de
utax-w-ge166.basisit.de
divversion.basisit.de
rica.helmholtz-berlin.de
rica.helmholtz-berlin.de
utax-w-dv323.basisit.de
nc.basisit.de
it-ed-git.basisit.de
kanboard.helmholtz-berlin.de
nc-dev.basisit.de
icinga-fmd.basisit.de
utax-a-13-10-0113.basisit.de
utax-a-14-51-3210.basisit.de
divic.basisit.de
mail.helmholtz-berlin.de
lyncpool.basisit.de
utax-w-pt211.basisit.de
idp.helmholtz-berlin.de
cliqweb.basisit.de
utax-a-13-7-0204b.basisit.de
basisit.de
utax-w-c229.basisit.de
utax-w-p182.basisit.de
www.helmholtz-berlin.de
sas.helmholtz-berlin.de
utax-a-15-8-0100b.basisit.de
icinga-it-ed-web.basisit.de
radius.helmholtz-berlin.de
www.helmholtz-berlin.de
utax-a-13-7-0316.basisit.de
hc-awx.basisit.de
nc.basisit.de
onlyoffice.helmholtz-berlin.de
utax-w-r123.basisit.de
ed-dockhb1-test.basisit.de
divic.basisit.de
webapp.basisit.de
portal.helmholtz-berlin.de
utax-w-dv204.basisit.de
radius.helmholtz-berlin.de
office.helmholtz-berlin.de
dirac-meister.basisit.de
divic.basisit.de
utax-a-13-7-0308.basisit.de
utax-w-p051.basisit.de
ldap.basisit.de
utax-w-ge166-1.basisit.de
utax-a-13-10-0204.basisit.de
divic.basisit.de
rica.helmholtz-berlin.de
telportal1-prod.basisit.de
idp.helmholtz-berlin.de
utax-a-13-10-0413.basisit.de
www.helmholtz-berlin.de
keycloak1-test.basisit.de
divbibserv.basisit.de
rica.helmholtz-berlin.de
portal-hzb.helmholtz-berlin.de
utax-w-p121.basisit.de
utax-w-lr124.basisit.de
pyweb1.basisit.de
ncoffice.basisit.de
utax-a-14-51-3250.basisit.de
kemp-cluster-2-mgt.basisit.de
cliqapp.basisit.de
divwiki.basisit.de
nc.basisit.de
openproj2-test.basisit.de
jitsi1.basisit.de
utax-w-lr140.basisit.de
dicliqweb.basisit.de
divic.basisit.de
divwiki.basisit.de
nubes.helmholtz-berlin.de
utax-a-13-10-0313.basisit.de
lyncpool.basisit.de
utax-w-e237.basisit.de
cliqapp-test.basisit.de
utax-a-15-8-0200.basisit.de
utax-w-ge211.basisit.de
nubes-test.helmholtz-berlin.de
utax-w-r141.basisit.de
utax-w-lr226.basisit.de
bluespice1-test.basisit.de
nc-office.helmholtz-berlin.de
jitsi1-dev.basisit.de
interflex-test.basisit.de
www.helmholtz-berlin.de
gitlab.helmholtz-berlin.de
utax-w-lr327.basisit.de
divic.basisit.de
utax-a-14-51-3411.basisit.de

Certificate

The complete raw certificate details for openproj2-test.basisit.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHJTCCBg2gAwIBAgIMJjLcQj3O0hvjy8KeMA0GCSqGSIb3DQEBCwUAMIGNMQsw
CQYDVQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVz
IERldXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4t
UEtJMSUwIwYDVQQDDBxERk4tVmVyZWluIEdsb2JhbCBJc3N1aW5nIENBMB4XDTIy
MDIyMTA5NDMxN1oXDTIzMDMyNDA5NDMxN1owgZgxCzAJBgNVBAYTAkRFMQ8wDQYD
VQQIDAZCZXJsaW4xDzANBgNVBAcMBkJlcmxpbjFDMEEGA1UECgw6SGVsbWhvbHR6
LVplbnRydW0gQmVybGluIGZ1ZXIgTWF0ZXJpYWxpZW4gdW5kIEVuZXJnaWUgR21i
SDEiMCAGA1UEAwwZb3BlbnByb2oyLXRlc3QuYmFzaXNpdC5kZTCCAiIwDQYJKoZI
hvcNAQEBBQADggIPADCCAgoCggIBALTpAt9g7YbobaJNXKWgSbtteSby6y21IHPR
M14z1pOsDckd+MvvdEvWao5MGi9XPyBswiiRU5oWXvE7vkGuLg08mN5jqOB12mJ7
+MbqyJumlx6fXgktBqSv6DOkjQEem5UaLszlt82Gz+g9EEHR0yR1/WPIldv1kCFA
rCtUsx5Mqz6TU8Cv+6QPOZAiWoxpw0qBqQWBqaLbgil9xTnxmTzB1lFPuJ41GQjk
qhq42CX0frrdO187YLvgy8f/4ywDrNOMfW8p3BWSF39gbN7RAPPNbGH9fcPvcf7B
yvcCrdH6SGKF/JZSSwsFHqAzXZy+XRmZpzllQCn+Ntjgkjr1mzTxWKYQTCfj5lRA
P+LvayQ93RgYbE+bCymzgWBbgGQo92dWU4Xc2UDm5NxslDx4BNROvyB2cY7wacn4
BW9iMSmIbwcHb51aeLjW2zHq9pZ/tynAI+noAD0niFarRtyYNJMglFKR2H6H5xzP
XMumU24m8iLS45FWBA7ztPiK6BJau0slMwLAY9qw3+GfWmFIKA46hcfPc+dq1aql
ajz8sy5KE+0p7WcYZ65g4ueQrG/T9YuNM4qcV7L2togiFI79K+Vfq2fCcsNfkDZu
/dUm2KNK/9AaMDasHlx3oo3sE31ReFS8PxmJc77wDumE4dq3rS5UBhPP0d8iqkfe
wRfWqseNAgMBAAGjggJ2MIICcjBXBgNVHSAEUDBOMAgGBmeBDAECAjANBgsrBgEE
AYGtIYIsHjAPBg0rBgEEAYGtIYIsAQEEMBAGDisGAQQBga0hgiwBAQQKMBAGDisG
AQQBga0hgiwCAQQKMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQM
MAoGCCsGAQUFBwMBMB0GA1UdDgQWBBRcCZMFWnkLeNbs5XSR4BmT22gaDDAfBgNV
HSMEGDAWgBRrOpiL+fJTidrgrbIyHgkf6Ko7dDAkBgNVHREEHTAbghlvcGVucHJv
ajItdGVzdC5iYXNpc2l0LmRlMIGNBgNVHR8EgYUwgYIwP6A9oDuGOWh0dHA6Ly9j
ZHAxLnBjYS5kZm4uZGUvZGZuLWNhLWdsb2JhbC1nMi9wdWIvY3JsL2NhY3JsLmNy
bDA/oD2gO4Y5aHR0cDovL2NkcDIucGNhLmRmbi5kZS9kZm4tY2EtZ2xvYmFsLWcy
L3B1Yi9jcmwvY2FjcmwuY3JsMIHbBggrBgEFBQcBAQSBzjCByzAzBggrBgEFBQcw
AYYnaHR0cDovL29jc3AucGNhLmRmbi5kZS9PQ1NQLVNlcnZlci9PQ1NQMEkGCCsG
AQUFBzAChj1odHRwOi8vY2RwMS5wY2EuZGZuLmRlL2Rmbi1jYS1nbG9iYWwtZzIv
cHViL2NhY2VydC9jYWNlcnQuY3J0MEkGCCsGAQUFBzAChj1odHRwOi8vY2RwMi5w
Y2EuZGZuLmRlL2Rmbi1jYS1nbG9iYWwtZzIvcHViL2NhY2VydC9jYWNlcnQuY3J0
MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBkA7NVD5W3
WUooUUnWvxz5ZG3sd2mm3XU4R9NKEZtQyzBI8kJycxX7smpHDEqNElspK+kFraVY
9lhoOrc4P1xUNJtgf8aWjMSYg17QLGpoI1HRsyf3ZytdiPefclY23KR0m5bBdOsW
TVBTKIa6qUQsrCgqlfIjh/DiAZoDOo99ESqKo83Erp//c905TpAqRNUMihcczxRD
1CKdtfvvvepddDAVSt8AEjEtbvmaqqwTryyHRPTHNmh+mmFQDGVSRSB2qn22OTUJ
V6WwqGY80h6YADzJC8HNtebwvMnb2E8uREKEbloa9YBx8wFCdBHvftHYr1VxfGjO
0stW4IPj0yGk
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11821916806756912355798139550
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-21 09:43:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-24 09:43:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'openproj2-test.basisit.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 738049224608790855386659620517242088391292249029430202470923699334060087699306847135826930194435651913356130079542658381563739908719204098167649536371344036668973685150406566990709567731054129898734098498128747391410696611938402529811268542414933676630313871817006662590975148767576231504412408764816659049368284655968030488573739059681573778387538169624216067052382152097885539164717853806071769652413380405455987686359466373871393211117159927611943302094724175584714828722121888039256869439368676440608243790499412875982521515902518170549483388569362447489197322385056536514156269284034257182108128427291024974628413636707322961005300091515888540600357328479290696001462381228080072904672788412525596909414676928127988515015468588013238631604668313024994976178557255872227304720110805561652259984410528213961132206303919385032942636930498743537482907927269751805642676124268132652958541927403951520346854972507686619993905586537606883245047988882944434560642596466455345300655838625019287782418953958102411312606925526076657291785153825525607671915435889547319723723505969925599380170949524118667887862006451813637731248372030326205003303781106010983726267932553343118589314537341372569472413470436835126079656596865848390361728909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.10
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c0993055a790b78d6ece57491e01993db681a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openproj2-test.basisit.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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