apps.dmz.marum.de

- Universitaet Bremen -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 1f:6e:9d:ae:c4:59:d1:93:0f:91:f0:a8 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universitaet Bremen

Organization: Universitaet Bremen
Organization unit: MARUM-IT
State / Province: Bremen
Locality: Bremen
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:6e:9d:ae:c4:59:d1:93:0f:91:f0:a8
Serial Number (int): 9727761780039155833359167656
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 85:06:3c:e5:0d:6e:0b:d3:45:02:c4:b1:41:3f:f1:53:f8:87:61:e3
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 4a:ff:b0:28:fe:8b:70:70:a0:1c:46:3b:64:82:7f:83:83:6a:fd:9a
Fingerprint (sha256): 60:2f:7b:60:5e:dd:b0:34:ed:23:f6:bc:39:9f:08:59:55:08:4b:e0:7a:5e:1d:a7:12:e4:43:89:44:3e:d9:41

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate apps.dmz.marum.de

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apps.dmz.marum.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apps.dmz.marum.de
apps.intranet.marum.de
apps2.dmz.marum.de
apps2.intranet.marum.de
webapps.dmz.marum.de
webapps.intranet.marum.de
webapps.marum.de

Other certificates including the domain name marum.de

(limited to 100 certificates)
maps.marum.de
gdfbmapserver.marum.de
cloud.marum.de
idmdev.marum.de
www.marum.de
pangaea-mw2.marum.de
paloz.marum.de
stats.marum.de
pushmail.marum.de
git.marum.de
geoserv1.marum.de
ds.it.int.marum.de
stats.marum.de
logistik.marum.de
lists.marum.de
mail1.marum.de
zer0.de
logistik.marum.de
pangaea-mw2.marum.de
schlammspritzer.marum.de
mail1.marum.de
www.marum.de
stats.marum.de
logistik.marum.de
paloz.marum.de
groupware2.marum.de
idmdev.marum.de
drabo.marum.de
stats.marum.de
waveglider.marum.de
mx1.marum.de
paloz.marum.de
drabo.marum.de
waveglider.marum.de
drabo.marum.de
pangaea-mw2.marum.de
stats.marum.de
groupware.marum.de
publications.marum.de
connect2.marum.de
publications.marum.de
pangaea-mw2.marum.de
paloz.marum.de
vpn2.marum.de
logistik.marum.de
schlammspritzer.marum.de
schlammspritzer.marum.de
waveglider.marum.de
zer0.de
marum.de
apps.dmz.marum.de
paloz.marum.de
www.schlammspritzer.marum.de
rt.marum.de
geoserv2.marum.de
geoserv1.marum.de
cloud.marum.de
zer0.de
stats.marum.de
schlammspritzer.marum.de
paloz.marum.de
paloz.marum.de
waveglider.marum.de
www.schlammspritzer.marum.de
connect2.marum.de
logistik.marum.de
pangaea-pm.marum.de
stats.marum.de
idmdev.marum.de
geoserv2.marum.de
stats.marum.de
geoserv1.marum.de
pangaea-pm.marum.de
logistik.marum.de
pangaea-mw2.marum.de
waveglider.marum.de
zer0.de
blog.marum.de
stats.marum.de
matter.palmod.uni-bremen.de
pangaea-pm.marum.de
logistik.marum.de
maps.marum.de
drabo.marum.de
nasiodp.marum.de
mail1.marum.de
idmdev.marum.de
cloud.marum.de
waveglider.marum.de
logistik.marum.de
stats.marum.de
waveglider.marum.de
apps.dmz.marum.de
pangaea-pm.marum.de
paloz.marum.de
nasiodp.marum.de
groupware.marum.de
schlammspritzer.marum.de
mgmt.marum.de
drabo.marum.de

Certificate

The complete raw certificate details for apps.dmz.marum.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9727761780039155833359167656
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-18 11:10:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-20 11:10:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Universitaet Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MARUM-IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'apps.dmz.marum.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 753237257014256479783908349175682950253724345424780653945289462154943970046592584615426954150004274399689846594612971228664194747595044860258219525774494725252911270977666557329256737234451904013569459896353819662859076063889400998032116355017299572175733222803224869800891921735328664891451238954744630181354515118316946101772420992311973593144863364443537823015316554438210550151537602646735468739684973637097848464987975973235297368632591281894292499692371358165507129493508115281383463190945595460809248678292575426109387272851969826933908143392500862923744635377471867339370671998314176242555083587399752701439758514531974726445759160876458106548565110027816099594393568694414014706080649042124534172073657911502606618789353332498923559113484604643874222249505689489435182830922357283824588168960357681179137504062300104964702178401767529997584616328610777847740247167677367627570902228971571024448500989406194633631210270182136724228697108585699106020953092498036547785151595735269311123927643516994767149357060150512397131595112605342082519600166075468816066212401881396318746738210174268129324868276984708747876183497573543456629033046304866523981338442575876354320371592096622689835451134023668542217804577002276988838725863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85063ce50d6e0bd34502c4b1413ff153f88761e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (158 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.dmz.marum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.intranet.marum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps2.dmz.marum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps2.intranet.marum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapps.dmz.marum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapps.intranet.marum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapps.marum.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (965 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (961 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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