www.aufbruch.bayern.de

Issued by Bayerische SSL-CA-2012

About this certificate


This digital certificate with serial number 02:0e:5f was issued on by Freistaat Bayern .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • WARNING: Certificate contains a Authority Info Access Issuer with an non-preferred scheme ([ldap])
  • WARNING: Certificate contains a Authority Info Access Issuer with an non-preferred scheme ([ldap])
  • ERROR: Certificate contains a CRL with an non-preferred scheme ([ldap])
  • ERROR: localityName is required for [EV] certificates
  • ERROR: businessCategory is required for [EV] certificates
  • ERROR: jurisdictionCountryName is required for [EV] certificates
  • ERROR: localityName or stateOrProvinceName is required if organizationName is set
  • ERROR: stateOrProvinceName is required if organizationName is set

Freistaat Bayern

Company registration number: 1002267
Organization: Freistaat Bayern
Organization unit: lfstad
Country: DE

Freistaat Bayern

Organization: Freistaat Bayern
Country: DE

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 02:0e:5f
Serial Number (int): 134751
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 4a:8b:9b:d7:0c:fc:06:82
AuthorityKeyId: 75:0d:aa:af:c1:87:a0:98:dc:1d:4f:1c:fe:44:69:cc:c9:6d:2d:1e

Fingerprint (sha1): 63:81:84:4a:05:7e:05:49:8d:26:9b:09:fb:25:33:00:31:35:98:37
Fingerprint (sha256): 63:7e:ad:b0:d0:b5:e6:d6:09:a2:e9:db:89:b1:8f:b7:9f:fe:c9:32:9e:8f:83:23:38:1a:cf:91:20:84:ba:4e

Issuing Certificate URL: ldap://directory.bayern.de/cn=Bayerische%20SSL-CA-2012,ou=CA-certs,dc=pki,dc=bayern,dc=de?cACertificate?base?objectclass=certificationAuthority
Issuing Certificate URL: ldap://directory2.bayern.de/cn=Bayerische%20SSL-CA-2012,ou=CA-certs,dc=pki,dc=bayern,dc=de?cACertificate?base?objectclass=certificationAuthority

Revocation information

OCSP Server: http://ocsp.pki.bayern.de:8080
CRL Distribution Point: ldap://directory.bayern.de/cn=Bayerische%20SSL-CA-2012,ou=crl,dc=pki,dc=bayern,dc=de?certificateRevocationList?base?objectclass=cRLDistributionPoint

Check the revocation status for the current certificate on www.aufbruch.bayern.de
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: www.aufbruch.bayern.de

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHJzCCBg+gAwIBAgIDAg5fMA0GCSqGSIb3DQEBBQUAMEkxCzAJBgNVBAYTAkRF MRkwFwYDVQQKExBGcmVpc3RhYXQgQmF5ZXJuMR8wHQYDVQQDExZCYXllcmlzY2hl IFNTTC1DQS0yMDEyMB4XDTE0MDUxMzIyMDAwM1oXDTE1MDUxMzIyMDAwM1owbDEQ MA4GA1UEBRMHMTAwMjI2NzELMAkGA1UEBhMCREUxGTAXBgNVBAoMEEZyZWlzdGFh dCBCYXllcm4xDzANBgNVBAsMBmxmc3RhZDEfMB0GA1UEAwwWd3d3LmF1ZmJydWNo LmJheWVybi5kZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKRL9Uog zTDjYAV/tNtbgv/dUV//G49ZUaH+S069Y3Pzl1SqP8mIUBFRQtWl0MKeqFVxFcoO nq3mKlAN6B7fa1VVDaBFbW41pRuHLJJ36qcprfUpcvuXGFcY4WBhAkz9CfXd/GKp E6fH0u2IGwlvEzzS8gl96+pGDdNLRk1UUluViXsdnYR+fegtnhCG0A1Se+a8GYvg QP9tQ7+DdHFQkGGZrbo5EWoQ30HyVANdbIy6PmyUI076L9KNiv2N08dZ1zxIu+KI bW3/AODzKUQsfDrIHU3R3dUV6QFfO6yvWfQL5gv9uUDdIPzTuYc6sZy40wcFzDuT X66YUE90uYCfc8ECAwEAAaOCA/MwggPvMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjAfBgNVHSMEGDAWgBR1DaqvwYegmNwdTxz+RGnMyW0tHjCCAX0GCCsG AQUFBwEBBIIBbzCCAWswKgYIKwYBBQUHMAGGHmh0dHA6Ly9vY3NwLnBraS5iYXll cm4uZGU6ODA4MDCBnAYIKwYBBQUHMAKGgY9sZGFwOi8vZGlyZWN0b3J5LmJheWVy bi5kZS9jbj1CYXllcmlzY2hlJTIwU1NMLUNBLTIwMTIsb3U9Q0EtY2VydHMsZGM9 cGtpLGRjPWJheWVybixkYz1kZT9jQUNlcnRpZmljYXRlP2Jhc2U/b2JqZWN0Y2xh c3M9Y2VydGlmaWNhdGlvbkF1dGhvcml0eTCBnQYIKwYBBQUHMAKGgZBsZGFwOi8v ZGlyZWN0b3J5Mi5iYXllcm4uZGUvY249QmF5ZXJpc2NoZSUyMFNTTC1DQS0yMDEy LG91PUNBLWNlcnRzLGRjPXBraSxkYz1iYXllcm4sZGM9ZGU/Y0FDZXJ0aWZpY2F0 ZT9iYXNlP29iamVjdGNsYXNzPWNlcnRpZmljYXRpb25BdXRob3JpdHkwXgYDVR0g BFcwVTBTBgsrBgEEAYGWQgECAzBEMEIGCCsGAQUFBwIBFjZodHRwczovL3d3dy5w a2kuYmF5ZXJuLmRlL3BvbGljeS9wb2xpY3lfc3NsLWNhXzEuMC5wZGYwggGEBgNV HR8EggF7MIIBdzCCAXOgggFvoIIBa4aBlGxkYXA6Ly9kaXJlY3RvcnkuYmF5ZXJu LmRlL2NuPUJheWVyaXNjaGUlMjBTU0wtQ0EtMjAxMixvdT1jcmwsZGM9cGtpLGRj PWJheWVybixkYz1kZT9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0P2Jhc2U/b2Jq ZWN0Y2xhc3M9Y1JMRGlzdHJpYnV0aW9uUG9pbnSGgZVsZGFwOi8vZGlyZWN0b3J5 Mi5iYXllcm4uZGUvY249QmF5ZXJpc2NoZSUyMFNTTC1DQS0yMDEyLG91PWNybCxk Yz1wa2ksZGM9YmF5ZXJuLGRjPWRlP2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q/ YmFzZT9vYmplY3RjbGFzcz1jUkxEaXN0cmlidXRpb25Qb2ludIY6aHR0cDovL29j c3AucGtpLmJheWVybi5kZS9jcmwvQmF5ZXJpc2NoZSUyMFNTTC1DQS0yMDEyLmNy bDARBgNVHQ4ECgQISoub1wz8BoIwDgYDVR0PAQH/BAQDAgTwMCEGA1UdEQQaMBiC Fnd3dy5hdWZicnVjaC5iYXllcm4uZGUwDQYJKoZIhvcNAQEFBQADggEBAFM/Oe1t /lTJFPV+naGc6lyZ3MdZ9jfwu5Tc/YfGckhhTcH8k3LcWtitkHJzQQZreTww9qhF Y7b7ozQE9L0eXsm2B0uuR82eoDVqItvbYsDZ1nn5YNzLPNmQ76xrIufq64FdW8g+ yTigfOufmkcsMS4G0MrbjuV5VS7doE3Vik2xXmPMPLs1AoTulZgARB3Tb+DlMKO8 TP2nMKwoBclki9uaKsgXVZfec1mTUl1FdqrSkWDg4/GboD43tnnT88NVz8chogFq pE2AJKyp6FIAZBW9SSvWSEfdpJ0a7BM6OFSYroumo9qvBLtok60JLtBnJzW1RNKK KYnGKW6Yj9OuraQ= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEv1SiDNMONgBX+021uC /91RX/8bj1lRof5LTr1jc/OXVKo/yYhQEVFC1aXQwp6oVXEVyg6ereYqUA3oHt9r VVUNoEVtbjWlG4csknfqpymt9Sly+5cYVxjhYGECTP0J9d38YqkTp8fS7YgbCW8T PNLyCX3r6kYN00tGTVRSW5WJex2dhH596C2eEIbQDVJ75rwZi+BA/21Dv4N0cVCQ YZmtujkRahDfQfJUA11sjLo+bJQjTvov0o2K/Y3Tx1nXPEi74ohtbf8A4PMpRCx8 OsgdTdHd1RXpAV87rK9Z9AvmC/25QN0g/NO5hzqxnLjTBwXMO5NfrphQT3S5gJ9z wQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 134751 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Freistaat Bayern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayerische SSL-CA-2012' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-13 22:00:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-13 22:00:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1002267' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Freistaat Bayern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'lfstad' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.aufbruch.bayern.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20740538380308992061789151916566944778675486261335951624644978335367124499390830958231989833057924811811356023390366638186941019293006379073130504406313397078342210283570692353961956498100026343026829035523804453566961728732606166743957823362821874826482194297984765190274571686579494885435027293936143076998354893419896971002939199143625527054646671925781723244272775926131610709513762107606304053428192356730319982327548308725400175019389038906396822825274577538481144693912735683317572607890638040885069140560328851601684864501876573068788731529239202659676753167655677193600004338074813372434532449495785211392961 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 750daaafc187a098dc1d4f1cfe4469ccc96d2d1e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.bayern.de:8080' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.bayern.de/cn=Bayerische%20SSL-CA-2012,ou=CA-certs,dc=pki,dc=bayern,dc=de?cACertificate?base?objectclass=certificationAuthority' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory2.bayern.de/cn=Bayerische%20SSL-CA-2012,ou=CA-certs,dc=pki,dc=bayern,dc=de?cACertificate?base?objectclass=certificationAuthority' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.19266.1.2.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.pki.bayern.de/policy/policy_ssl-ca_1.0.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (379 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.bayern.de/cn=Bayerische%20SSL-CA-2012,ou=crl,dc=pki,dc=bayern,dc=de?certificateRevocationList?base?objectclass=cRLDistributionPoint' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory2.bayern.de/cn=Bayerische%20SSL-CA-2012,ou=crl,dc=pki,dc=bayern,dc=de?certificateRevocationList?base?objectclass=cRLDistributionPoint' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.bayern.de/crl/Bayerische%20SSL-CA-2012.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (10 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (8 bytes) 4a8b9bd70cfc0682 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04f0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aufbruch.bayern.de' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00533f39ed6dfe54c914f57e9da19cea5c99dcc759f637f0bb94dcfd87c67248614dc1fc9372dc5ad8ad90727341066b793c30f6a84563b6fba33404f4bd1e5ec9b6074bae47cd9ea0356a22dbdb62c0d9d679f960dccb3cd990efac6b22e7eaeb815d5bc83ec938a07ceb9f9a472c312e06d0cadb8ee579552edda04dd58a4db15e63cc3cbb350284ee959800441dd36fe0e530a3bc4cfda730ac2805c9648bdb9a2ac8175597de735993525d4576aad29160e0e3f19ba03e37b679d3f3c355cfc721a2016aa44d8024aca9e852006415bd492bd64847dda49d1aec133a385498ae8ba6a3daaf04bb6893ad092ed0672735b544d28a2989c6296e988fd3aeada4