indico.helmholtz-berlin.de
- Helmholtz-Zentrum Berlin für Materialien und Energie GmbH -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number de:63:56:d5:fa:31:bc:35:56:e8:0a:6f:de:cd:6b:d7 was issued on by GEANT Vereniging.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Helmholtz-Zentrum Berlin für Materialien und Energie GmbH
Organization:
Helmholtz-Zentrum Berlin für Materialien und Energie GmbH
State / Province:
Berlin
Country: DE
Country: DE
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): de:63:56:d5:fa:31:bc:35:56:e8:0a:6f:de:cd:6b:d7Serial Number (int): 295604413693502179911165919575417908183
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 22:3f:25:7e:a7:7e:e9:d8:2b:fb:db:a7:29:35:cb:15:2d:03:8e:32
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): fe:a3:60:89:dc:46:79:2a:16:6d:1d:5d:39:80:8b:9a:53:b1:93:34
Fingerprint (sha256): 63:25:96:f8:5e:77:54:f8:47:7f:36:83:20:fa:ce:18:55:fe:48:cd:7f:c1:4a:74:12:c4:27:68:4e:67:9b:7a
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate indico.helmholtz-berlin.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for indico.helmholtz-berlin.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
indico.helmholtz-berlin.de
Other certificates including the domain name helmholtz-berlin.de
(limited to 100 certificates)
gate.helmholtz-berlin.de
portal.helmholtz-berlin.de
webapp.basisit.de
ise-psn-a-1.helmholtz-berlin.de
imap.helmholtz-berlin.de
ess.helmholtz-berlin.de
divuwiki.basisit.de
dms.helmholtz-berlin.de
nc.helmholtz-berlin.de
workadventure.helmholtz-berlin.de
collab.helmholtz-berlin.de
rica.helmholtz-berlin.de
rica.helmholtz-berlin.de
nc.basisit.de
kanboard.helmholtz-berlin.de
ebisscatent.helmholtz-berlin.de
imap.helmholtz-berlin.de
ebisscatprod.helmholtz-berlin.de
mail.helmholtz-berlin.de
ifolder.helmholtz-berlin.de
lyncpool.basisit.de
idp.helmholtz-berlin.de
www.helmholtz-berlin.de
ebisscattest.helmholtz-berlin.de
nubes.helmholtz-berlin.de
divlog.helmholtz-berlin.de
indico.helmholtz-berlin.de
imap.helmholtz-berlin.de
hzb-intern.helmholtz-berlin.de
sbc-gw-01-int.voip.helmholtz-berlin.de
mail.helmholtz-berlin.de
sbc-lync-01-int.voip.helmholtz-berlin.de
www.helmholtz-berlin.de
sas.helmholtz-berlin.de
sbc-user-01-int.voip.helmholtz-berlin.de
sbc-lync-01-int.voip.helmholtz-berlin.de
dect-controller-01.voip.helmholtz-berlin.de
wssadmin-intern.helmholtz-berlin.de
smtp.helmholtz-berlin.de
sbc-user-01-int.voip.helmholtz-berlin.de
radius.helmholtz-berlin.de
www.helmholtz-berlin.de
hc-awx.basisit.de
ebisscatprod.helmholtz-berlin.de
f-intern.helmholtz-berlin.de
e-intern.helmholtz-berlin.de
ifolder.helmholtz-berlin.de
nc.basisit.de
onlyoffice.helmholtz-berlin.de
ebisscatprod.helmholtz-berlin.de
sbc-gw-01.voip.helmholtz-berlin.de
webapp.basisit.de
mapi.helmholtz-berlin.de
portal.helmholtz-berlin.de
sbc-gw-01-int.voip.helmholtz-berlin.de
radius.helmholtz-berlin.de
office.helmholtz-berlin.de
icat.helmholtz-berlin.de
dirac-meister.basisit.de
sbc-gw-02-int.voip.helmholtz-berlin.de
ebisscatprod.helmholtz-berlin.de
ise-psn-w-2.helmholtz-berlin.de
indico.helmholtz-berlin.de
rica.helmholtz-berlin.de
idp.helmholtz-berlin.de
www.helmholtz-berlin.de
rica.helmholtz-berlin.de
portal-hzb.helmholtz-berlin.de
voip.helmholtz-berlin.de
icat.helmholtz-berlin.de
pyweb1.basisit.de
sbc-user-01-int.voip.helmholtz-berlin.de
voip.helmholtz-berlin.de
ncoffice.basisit.de
autodiscover.helmholtz-berlin.de
divwiki.basisit.de
sbc-gw-02-int.voip.helmholtz-berlin.de
nc.basisit.de
ebissprod.helmholtz-berlin.de
gw-ibz-h2.helmholtz-berlin.de
jitsi1.basisit.de
ise-psn-a-1.helmholtz-berlin.de
dits.helmholtz-berlin.de
sip.helmholtz-berlin.de
indico.helmholtz-berlin.de
evetest.helmholtz-berlin.de
sharetex.helmholtz-berlin.de
divwiki.basisit.de
g-intern.helmholtz-berlin.de
nubes.helmholtz-berlin.de
ebisscatent.helmholtz-berlin.de
nubes.helmholtz-berlin.de
lyncpool.basisit.de
ise-psn-w-2.helmholtz-berlin.de
radius.hmi.de
voip.helmholtz-berlin.de
ise-psn-w-1.helmholtz-berlin.de
dits1.helmholtz-berlin.de
divlog.helmholtz-berlin.de
nubes-test.helmholtz-berlin.de
portal.helmholtz-berlin.de
webapp.basisit.de
ise-psn-a-1.helmholtz-berlin.de
imap.helmholtz-berlin.de
ess.helmholtz-berlin.de
divuwiki.basisit.de
dms.helmholtz-berlin.de
nc.helmholtz-berlin.de
workadventure.helmholtz-berlin.de
collab.helmholtz-berlin.de
rica.helmholtz-berlin.de
rica.helmholtz-berlin.de
nc.basisit.de
kanboard.helmholtz-berlin.de
ebisscatent.helmholtz-berlin.de
imap.helmholtz-berlin.de
ebisscatprod.helmholtz-berlin.de
mail.helmholtz-berlin.de
ifolder.helmholtz-berlin.de
lyncpool.basisit.de
idp.helmholtz-berlin.de
www.helmholtz-berlin.de
ebisscattest.helmholtz-berlin.de
nubes.helmholtz-berlin.de
divlog.helmholtz-berlin.de
indico.helmholtz-berlin.de
imap.helmholtz-berlin.de
hzb-intern.helmholtz-berlin.de
sbc-gw-01-int.voip.helmholtz-berlin.de
mail.helmholtz-berlin.de
sbc-lync-01-int.voip.helmholtz-berlin.de
www.helmholtz-berlin.de
sas.helmholtz-berlin.de
sbc-user-01-int.voip.helmholtz-berlin.de
sbc-lync-01-int.voip.helmholtz-berlin.de
dect-controller-01.voip.helmholtz-berlin.de
wssadmin-intern.helmholtz-berlin.de
smtp.helmholtz-berlin.de
sbc-user-01-int.voip.helmholtz-berlin.de
radius.helmholtz-berlin.de
www.helmholtz-berlin.de
hc-awx.basisit.de
ebisscatprod.helmholtz-berlin.de
f-intern.helmholtz-berlin.de
e-intern.helmholtz-berlin.de
ifolder.helmholtz-berlin.de
nc.basisit.de
onlyoffice.helmholtz-berlin.de
ebisscatprod.helmholtz-berlin.de
sbc-gw-01.voip.helmholtz-berlin.de
webapp.basisit.de
mapi.helmholtz-berlin.de
portal.helmholtz-berlin.de
sbc-gw-01-int.voip.helmholtz-berlin.de
radius.helmholtz-berlin.de
office.helmholtz-berlin.de
icat.helmholtz-berlin.de
dirac-meister.basisit.de
sbc-gw-02-int.voip.helmholtz-berlin.de
ebisscatprod.helmholtz-berlin.de
ise-psn-w-2.helmholtz-berlin.de
indico.helmholtz-berlin.de
rica.helmholtz-berlin.de
idp.helmholtz-berlin.de
www.helmholtz-berlin.de
rica.helmholtz-berlin.de
portal-hzb.helmholtz-berlin.de
voip.helmholtz-berlin.de
icat.helmholtz-berlin.de
pyweb1.basisit.de
sbc-user-01-int.voip.helmholtz-berlin.de
voip.helmholtz-berlin.de
ncoffice.basisit.de
autodiscover.helmholtz-berlin.de
divwiki.basisit.de
sbc-gw-02-int.voip.helmholtz-berlin.de
nc.basisit.de
ebissprod.helmholtz-berlin.de
gw-ibz-h2.helmholtz-berlin.de
jitsi1.basisit.de
ise-psn-a-1.helmholtz-berlin.de
dits.helmholtz-berlin.de
sip.helmholtz-berlin.de
indico.helmholtz-berlin.de
evetest.helmholtz-berlin.de
sharetex.helmholtz-berlin.de
divwiki.basisit.de
g-intern.helmholtz-berlin.de
nubes.helmholtz-berlin.de
ebisscatent.helmholtz-berlin.de
nubes.helmholtz-berlin.de
lyncpool.basisit.de
ise-psn-w-2.helmholtz-berlin.de
radius.hmi.de
voip.helmholtz-berlin.de
ise-psn-w-1.helmholtz-berlin.de
dits1.helmholtz-berlin.de
divlog.helmholtz-berlin.de
nubes-test.helmholtz-berlin.de
Certificate
The complete raw certificate details for indico.helmholtz-berlin.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIiDCCBnCgAwIBAgIRAN5jVtX6Mbw1VugKb97Na9cwDQYJKoZIhvcNAQEMBQAw RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIyMTAzMTAwMDAwMFoXDTIzMTAzMTIz NTk1OVowgYgxCzAJBgNVBAYTAkRFMQ8wDQYDVQQIEwZCZXJsaW4xQzBBBgNVBAoM OkhlbG1ob2x0ei1aZW50cnVtIEJlcmxpbiBmw7xyIE1hdGVyaWFsaWVuIHVuZCBF bmVyZ2llIEdtYkgxIzAhBgNVBAMTGmluZGljby5oZWxtaG9sdHotYmVybGluLmRl MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAppkJ1ae+U72njB+8vKgw hnVwcSj8gScF7F3z+ckwt1fmyYmo5eHF6BG8VnasE/V8go1as/YkJ7LS8DlDUuNy c7v8+xKxGbebBlx3aPz+g5VSgXfvJ8tPyoV5o1IIo5Bo4xS96ks2KIU5/oZUAuzs oSb2SfE/aYjRYFu0PpwnvS9aGYKqjwfH8TH9G23wS/s20S/Hlvj2TEJpNJ5K4Tg1 eRP8DdepUQAGHhwZWtqfmf143/Zxxlt7DPwUBY9VeELjf3PopX/6KMlC42NcIHWI cuKGaaUVHsjEUrOeZf5/oGUnnvOIQLm9OtZwp0YKvQZgLXgzaDJJOzcmhNk8FPok GORbjFW5TWUoplkIdX+EVpn8vJ4Tq+NGZy8dch4CxObp+2Qbptj2ODNx9Ilx4DGk fwgRqAcQP8VbDb5dt/470drWgFcJwGbgLRTRB8VUQluh76l/0eyWgKFjQNGt/Lxd utnOvTuVD1RPZe1H5UKFMJSA6UPC7UhShIdtVwodLEWkVB3rwK1v5JmueTJk2A82 UXl1z8gc9RSnDUBEy63wcR07Jw0AHw/MO12a4SH1Jmtii2k26uXKRz02wcwMZMLl 8SOzj6nl/7UlNTvltyt8JyeXQVMZzsXpgFV1/rAROXLtbERuZ1KlnGAk9shGZkLp lvYCvS5G5NaH+Sy19c+e0iUCAwEAAaOCAy4wggMqMB8GA1UdIwQYMBaAFG8dNUkQ bDL6WaCevIroH5W+cXoMMB0GA1UdDgQWBBQiPyV+p37p2Cv726cpNcsVLQOOMjAO BgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICTzAlMCMGCCsGAQUF BwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgIwPwYDVR0fBDgw NjA0oDKgMIYuaHR0cDovL0dFQU5ULmNybC5zZWN0aWdvLmNvbS9HRUFOVE9WUlNB Q0E0LmNybDB1BggrBgEFBQcBAQRpMGcwOgYIKwYBBQUHMAKGLmh0dHA6Ly9HRUFO VC5jcnQuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcnQwKQYIKwYBBQUHMAGG HWh0dHA6Ly9HRUFOVC5vY3NwLnNlY3RpZ28uY29tMIIBfwYKKwYBBAHWeQIEAgSC AW8EggFrAWkAdwCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yCigAAAYQs 2RaZAAAEAwBIMEYCIQChUaYnD20DbGgiuNCY6H0MG5TKVjAjU970flEEQpBw0QIh ANAYyPwJKa2bD3wdzWOVpEAA5bTmJ9ke1m52+seKzJFoAHcAejKMVNi3LbYg6jjg Uh7phBZwMhOFTTvSK8E6V6NS61IAAAGELNkWoQAABAMASDBGAiEA/cBqjcbE7QUs +TbI3zSY9mR0fFffsyeWf9u+0IF5ReoCIQCHumG1NrvD8f1BRIzrTAaNDRBUIITf hxggkeSBs838HgB1AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAAB hCzZFncAAAQDAEYwRAIgEZKzrYejIYQidZr5+MiuNypHZDX2zYxTrcRqdhSxe2IC IBr1WDAZvT5YTHXypUa6kY4d/LZq7O6Y9KbDKpX5+VYjMCUGA1UdEQQeMByCGmlu ZGljby5oZWxtaG9sdHotYmVybGluLmRlMA0GCSqGSIb3DQEBDAUAA4ICAQAJhXNZ h2AirGhxBJRoPl8YhJRCXQEHxygc4xm7CebJc5RLos4L+ogEPykjZmSzYPHY/ZVL d7REERCrautgWENS8uJWWY3FIy8QF1huiLE1ajf8tFlqdTgCFBxwrgMaNa4p2zxu pQhzO1zPTFurZ1God8UYowTAz7ZOMpCKUGxtkSQvRuZIv8jCnJmGBi0fmesBxpFx 9032emjKoKUmvowDrBy78oemOQ8tfhTthJXFKWhByvLFA8OP9bVeEbAsJYEO4Vn0 vIl5RhaOm+usX85iPD/K9w8HphUFAc4Z0MhegHXz1ealYIREhQ/uaPWGCUm931XL geUWdo/99QOrT36IxSQX3G2bzS2QDgDjZ8Ro3YnvruTjrJwmXuXMvNPCVjx5vMwl b05ctNjQp393zKITk4F2S1cBkQduSBd3DSqCXXO2ajl4hRqBGAZkM02yRmcK6n2z dQHLb4Kj8HJgZeZ1V6KiCrzl21X3rgm7mfb5Tf9W2SZ2S+HUtfBj4MzHrbRTAkLU 5iwCDbfi++JdhwGbLB1I/7yeXxCB3ISFFZQhxH1uBQDAuxL/098VnL5YZv4E7KuW kSIw1AIb/Ze2coAr1YXclrs12qUI9wkTVrbgt+CQXXNTmBplXI6u8gguCuc2FNnA xZImxuYp4a6tjew3rBVYb0TGtnIZvPBVnioGDg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAppkJ1ae+U72njB+8vKgw hnVwcSj8gScF7F3z+ckwt1fmyYmo5eHF6BG8VnasE/V8go1as/YkJ7LS8DlDUuNy c7v8+xKxGbebBlx3aPz+g5VSgXfvJ8tPyoV5o1IIo5Bo4xS96ks2KIU5/oZUAuzs oSb2SfE/aYjRYFu0PpwnvS9aGYKqjwfH8TH9G23wS/s20S/Hlvj2TEJpNJ5K4Tg1 eRP8DdepUQAGHhwZWtqfmf143/Zxxlt7DPwUBY9VeELjf3PopX/6KMlC42NcIHWI cuKGaaUVHsjEUrOeZf5/oGUnnvOIQLm9OtZwp0YKvQZgLXgzaDJJOzcmhNk8FPok GORbjFW5TWUoplkIdX+EVpn8vJ4Tq+NGZy8dch4CxObp+2Qbptj2ODNx9Ilx4DGk fwgRqAcQP8VbDb5dt/470drWgFcJwGbgLRTRB8VUQluh76l/0eyWgKFjQNGt/Lxd utnOvTuVD1RPZe1H5UKFMJSA6UPC7UhShIdtVwodLEWkVB3rwK1v5JmueTJk2A82 UXl1z8gc9RSnDUBEy63wcR07Jw0AHw/MO12a4SH1Jmtii2k26uXKRz02wcwMZMLl 8SOzj6nl/7UlNTvltyt8JyeXQVMZzsXpgFV1/rAROXLtbERuZ1KlnGAk9shGZkLp lvYCvS5G5NaH+Sy19c+e0iUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 295604413693502179911165919575417908183 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-31 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helmholtz-Zentrum Berlin für Materialien und Energie GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'indico.helmholtz-berlin.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 679659752273858786997497646637446636523233765936467039668280902673435673696287943405055104922902379099521076219706532622403959738814363248210226178192363117688326915813410525550047645794691415222692220838702747134190113921305847526368204859870336776287452917219013338590920103178596748251788399729396290102748455428072203153751898113462366937813632839351404274166167089819120052073460927751483804139667867322011768968720747616993270824341549774894497409046820723352514741446878869744015541778495278241425892484306848646180086379404009162508600874321766353050987851973317581714051420767608572790781851523032901712592166765120201987834633267634675911846431874944788990217940890677900551071761575622418212552591724137071778028087692172296861885943673114590952564588716059359953050877834347252075195107767660745873094148915984636016086684105566355259039349165388575741914120678412255833773483231385636441996184234532900127927249844140432742532664463152096181492790023358063785929903516158021468004419594202130797015765246442548358840600586855847877327093148371357399764510176194167604076205843400437246637872159251495011610321432024558896517437531560723368995356003180322851365853946125749925515307903213658945851988196617474345720009253 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 223f257ea77ee9d82bfbdba72935cb152d038e32 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indico.helmholtz-berlin.de' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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