bachweb3.rz.uni-leipzig.de

- Universitaet Leipzig -

Issued by UNIVERSITAET LEIPZIG CA

About this certificate

This digital certificate with serial number 1d:ed:c9:b5:66:a2:8b:fc:81:f3:9c:f0 was issued on by Universitaet Leipzig.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universitaet Leipzig

Organization: Universitaet Leipzig
Organization unit: Bach
State / Province: Sachsen
Locality: Leipzig
Country: DE

Universitaet Leipzig

Organization: Universitaet Leipzig
Organization unit: URZ
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1d:ed:c9:b5:66:a2:8b:fc:81:f3:9c:f0
Serial Number (int): 9262533245987035702264831216
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 3f:69:56:82:0e:9f:4b:59:76:7c:bc:56:7e:43:f8:3d:a5:d3:d6:e9
AuthorityKeyId: 36:8c:dd:1e:9c:d1:ba:90:80:f8:a7:8a:b7:74:6a:4d:c9:37:da:0e

Fingerprint (sha1): 1a:71:64:d9:fc:a2:84:fa:9b:26:a8:b9:fa:b8:1e:f3:d2:02:e4:31
Fingerprint (sha256): 80:1d:1e:45:48:60:e9:f7:64:92:04:43:53:cf:5d:e5:bb:04:a5:7b:73:cb:7f:ec:83:c0:da:af:18:15:46:3d

Issuing Certificate URL: http://cdp1.pca.dfn.de/unilei-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/unilei-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/unilei-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/unilei-ca/pub/crl/cacrl.crl

Check the revocation status for certificate bachweb3.rz.uni-leipzig.de

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bachweb3.rz.uni-leipzig.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bachweb3.rz.uni-leipzig.de
www.bach-leipzig.de
www.bach-magazin.de
www.bacharchivleipzig.de
www.bachfestleipzig.de
www.bachmuseumleipzig.de
www.bachwettbewerbleipzig.de

Other certificates including the domain name uni-leipzig.de

(limited to 100 certificates)
misun102.mathematik.uni-leipzig.de
vobtest.uni-leipzig.de
vmcollection.rz.uni-leipzig.de
umfrage.uni-leipzig.de
folio-demo.ub.uni-leipzig.de
www.uni-leipzig.de
lldevelopment.wifa.uni-leipzig.de
exchange.ads.uni-leipzig.de
project.medizin.uni-leipzig.de
sport.uni-leipzig.de
urzdomscom01.dom.uni-leipzig.de
v1.rz.uni-leipzig.de
budgeford.imise.uni-leipzig.de
ldap.ad.uni-leipzig.de
foblive.uni-leipzig.de
ldap2.informatik.uni-leipzig.de
smee.life.uni-leipzig.de
urzubvdicon01.dom.uni-leipzig.de
katalog.ub.uni-leipzig.de
hobbitdata.informatik.uni-leipzig.de
urzaddc1.ad.uni-leipzig.de
bbb.sc.uni-leipzig.de
ub.uni-leipzig.de
pcai017.informatik.uni-leipzig.de
www.uni-leipzig.de
mail.stura.uni-leipzig.de
vmtoxiportal.rz.uni-leipzig.de
urzsfboos.uni-leipzig.de
www.uniklinikum-leipzig.de
nagios.rz.uni-leipzig.de
rzbupvss.dom.uni-leipzig.de
clarinws.informatik.uni-leipzig.de
olat.informatik.uni-leipzig.de
lyncpool.dom.uni-leipzig.de
urzdomrdgw01.dom.uni-leipzig.de
rstudio02.sc.uni-leipzig.de
vmcollection.rz.uni-leipzig.de
srvterminal06.swl.uni-leipzig.de
vdi.wifa.uni-leipzig.de
home.uni-leipzig.de
zugangsproxy.ub.uni-leipzig.de
bsvgit.informatik.uni-leipzig.de
lldevelopment.wifa.uni-leipzig.de
rvs.informatik.uni-leipzig.de
www.uniklinikum-leipzig.de
videocampustest.rz.uni-leipzig.de
lldevelopment.wifa.uni-leipzig.de
ucanmdm.vetmed.uni-leipzig.de
www.uni-leipzig.de
v2.rz.uni-leipzig.de
katalog.ub.uni-leipzig.de
www.uni-leipzig.de
vdi02.wifa.uni-leipzig.de
nikolaus.imise.uni-leipzig.de
pfadi.wifa.uni-leipzig.de
vmtima2.rz.uni-leipzig.de
zvappdam.dom.uni-leipzig.de
kait.health
lex.sozphil.uni-leipzig.de
vpn.medizin.uni-leipzig.de
home.uni-leipzig.de
lb.life.uni-leipzig.de
milab7.mathematik.uni-leipzig.de
kommunikation.uni-leipzig.de
auth.life.uni-leipzig.de
bierfass.bioinf.uni-leipzig.de
exchange.bach-leipzig.de
osa.wifa.uni-leipzig.de
home.uni-leipzig.de
urzdomdc23.dom.uni-leipzig.de
ilias.wifa.uni-leipzig.de
zugangsproxy.ub.uni-leipzig.de
www.hds.uni-leipzig.de
mail.stura.uni-leipzig.de
iis10.imise.uni-leipzig.de
vcs51.wifa.uni-leipzig.de
pvz.uni-leipzig.de
www.uni-leipzig.de
leia.informatik.uni-leipzig.de
domdc1.idmdom.rz.intern.uni-leipzig.de
bachweb3.rz.uni-leipzig.de
alpha.ub.uni-leipzig.de
izbifs3.izbi.uni-leipzig.de
mail.stura.uni-leipzig.de
moodletest.rz.uni-leipzig.de
portal2.medizin.uni-leipzig.de
zvts01.dom.uni-leipzig.de
register.sc.uni-leipzig.de
lldevelopment.wifa.uni-leipzig.de
www.uni-leipzig.de
home.uni-leipzig.de
awts.intern.uni-leipzig.de
lha-dev.imise.uni-leipzig.de
studserv.uni-leipzig.de
qnapnas4.wifa.intern.uni-leipzig.de
clarinoai.informatik.uni-leipzig.de
mail.stura.uni-leipzig.de
intern.finc.info
cloud.kleintierklinik.uni-leipzig.de
fob.uni-leipzig.de

Certificate

The complete raw certificate details for bachweb3.rz.uni-leipzig.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9262533245987035702264831216
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universitaet Leipzig'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'URZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UNIVERSITAET LEIPZIG CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-29 13:35:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 23:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Leipzig'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Universitaet Leipzig'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bach'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'bachweb3.rz.uni-leipzig.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 675999733603769968761119012745944074905833419658551152199637980732722859373237967850379684501117842316484233413441174732187287842877308787966207873781282322423537649068956867297050593099628800418244545731840567787403474802339690992220685263865294741102931527109753154416010535498112546665358037288819285376088151095261095219420471146872506512760044522743772556192468586048842153574763578556773659301234511606884093489725963655074968318078841496338699933374262891560586123206754014758809862485256943890869595440747374092339555978790358427335715034518547733869694174232582161427023492997666830756672882438972064244966454831770899851815964759612727226357234221068370022364694100557852333589500282100111526316230219736688679564277129490280236671993403826622574336323938319632885050351082932617052710320974669845094126030592497734543319731761321980904033132787394954850239254849060645294524381287546850770908348066133018548531169866621751444531522067070912673862600901607912574142312333234682067762173540351180255565349976087643537416921656154880391682718107190369546029872432910514707828658448364919975668494685046531423709296453870379668990474265092043654164333291374620212088245788041801061929066140027097562652140464532568907196204403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f6956820e9f4b59767cbc567e43f83da5d3d6e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 368cdd1e9cd1ba9080f8a78ab7746a4dc937da0e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (179 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bachweb3.rz.uni-leipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bach-leipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bach-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bacharchivleipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bachfestleipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bachmuseumleipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bachwettbewerbleipzig.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/unilei-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/unilei-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (192 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/unilei-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/unilei-ca/pub/cacert/cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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