ebmtool.de

- Bibliotheksservice-Zentrum Baden-Wuerttemberg -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 1f:0f:99:b2:99:c7:11:6b:28:33:27:32 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bibliotheksservice-Zentrum Baden-Wuerttemberg

Organization: Bibliotheksservice-Zentrum Baden-Wuerttemberg
Organization unit: Verbund
Organization unit: eBook-Management
State / Province: Baden-Wuerttemberg
Locality: Konstanz
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:0f:99:b2:99:c7:11:6b:28:33:27:32
Serial Number (int): 9612895008429085304208697138
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: be:f4:5e:b7:32:ea:a7:74:53:e9:00:83:2a:9f:49:f9:d7:22:cb:8a
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): d9:c4:04:1b:b6:0a:47:d8:0d:87:43:40:7a:aa:ca:43:1b:43:8b:f6
Fingerprint (sha256): 84:d1:bf:9f:51:ee:60:67:e4:a9:f9:72:73:e9:64:a5:26:50:58:a2:75:2f:d2:e4:7a:cc:9d:01:c1:ab:4d:bd

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate ebmtool.de

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ebmtool.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.ebmtool.de
ebmtool.de
nufenen.bsz-bw.de
test.ebmtool.de
www.ebmtool.de

Other certificates including the domain name ebmtool.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for ebmtool.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILQjCCCiqgAwIBAgIMHw+ZspnHEWsoMycyMA0GCSqGSIb3DQEBCwUAMIGNMQsw
CQYDVQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVz
IERldXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4t
UEtJMSUwIwYDVQQDDBxERk4tVmVyZWluIEdsb2JhbCBJc3N1aW5nIENBMB4XDTE4
MDUwNzA5MjgwNloXDTIwMDgwOTA5MjgwNlowgbcxCzAJBgNVBAYTAkRFMRswGQYD
VQQIDBJCYWRlbi1XdWVydHRlbWJlcmcxETAPBgNVBAcMCEtvbnN0YW56MTYwNAYD
VQQKDC1CaWJsaW90aGVrc3NlcnZpY2UtWmVudHJ1bSBCYWRlbi1XdWVydHRlbWJl
cmcxEDAOBgNVBAsMB1ZlcmJ1bmQxGTAXBgNVBAsMEGVCb29rLU1hbmFnZW1lbnQx
EzARBgNVBAMMCmVibXRvb2wuZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
AoICAQC2YaeoF3P0bG/m2l70zGrtPViGqifI1vlaDU+F931aa5eJO1qLBA/wPiZd
NPv4s1+7BCyNR/oNB6vRWOv7EKPghPm1MPJcji+aiNX3p5bdLmkvq8AeM3KwCHrv
aw3mBwFEY0tbHr8PS7/qVvhuy001N8Rk4UrZJhp6+jmQQS/EjCFo3lqXnUYvkRRc
Zc1uFqP4hjbvxeRWV/6ZWwJBb3d8NKwSQq2neT1ZxYre7yKEVklj1R6LmJnXdewD
gEGApeXlifeT/Q4Sv35J4u+ba1bEzsDWEcczF5XSAdby/AiJ3rx5+/N/vd9i7i5d
iIfQzWMg8puLSj0MF+H34ODWizmrrellJ7jraLfE+PkXNEuyJMxkokZYWOnZRPxZ
1Ay3yiNr9qKh4LvsD+baUpjzWvLEAdxuiQiUe7O07Jssyf1aC5U1SxjYS0DNik8J
jX5nqF572QV+UwTZIZSG9sIff+ruO5xdUEJ0GRcUiVatounxL/MoSEfmEI6JRSaY
CG1ru3qLF62uEPawm9rG9SZlY1aCyo4r1P2gk5EzAJiONdk3sEnQ5yPzZmCkFAA0
nQCIru/87ko+9mV5TsBBjxLhKnZvBkRvtQmwF27EpQzQ82J3oEyrEPh3bLf8qLir
up8KPdQGFhbxT7TyYNodj6mRKAHKVZQfpCK6l2dj0e3/F08jpwIDAQABo4IGdDCC
BnAwWQYDVR0gBFIwUDAIBgZngQwBAgIwDQYLKwYBBAGBrSGCLB4wDwYNKwYBBAGB
rSGCLAEBBDARBg8rBgEEAYGtIYIsAQEEAwgwEQYPKwYBBAGBrSGCLAIBBAMIMAkG
A1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMB0G
A1UdDgQWBBS+9F63MuqndFPpAIMqn0n51yLLijAfBgNVHSMEGDAWgBRrOpiL+fJT
idrgrbIyHgkf6Ko7dDBZBgNVHREEUjBQgg5kZXYuZWJtdG9vbC5kZYIKZWJtdG9v
bC5kZYIRbnVmZW5lbi5ic3otYncuZGWCD3Rlc3QuZWJtdG9vbC5kZYIOd3d3LmVi
bXRvb2wuZGUwgY0GA1UdHwSBhTCBgjA/oD2gO4Y5aHR0cDovL2NkcDEucGNhLmRm
bi5kZS9kZm4tY2EtZ2xvYmFsLWcyL3B1Yi9jcmwvY2FjcmwuY3JsMD+gPaA7hjlo
dHRwOi8vY2RwMi5wY2EuZGZuLmRlL2Rmbi1jYS1nbG9iYWwtZzIvcHViL2NybC9j
YWNybC5jcmwwgdsGCCsGAQUFBwEBBIHOMIHLMDMGCCsGAQUFBzABhidodHRwOi8v
b2NzcC5wY2EuZGZuLmRlL09DU1AtU2VydmVyL09DU1AwSQYIKwYBBQUHMAKGPWh0
dHA6Ly9jZHAxLnBjYS5kZm4uZGUvZGZuLWNhLWdsb2JhbC1nMi9wdWIvY2FjZXJ0
L2NhY2VydC5jcnQwSQYIKwYBBQUHMAKGPWh0dHA6Ly9jZHAyLnBjYS5kZm4uZGUv
ZGZuLWNhLWdsb2JhbC1nMi9wdWIvY2FjZXJ0L2NhY2VydC5jcnQwggPYBgorBgEE
AdZ5AgQCBIIDyASCA8QDwgB3AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgia
N9kTAAABYznuACwAAAQDAEgwRgIhAIhu4LUTrW4lXvah9uRceeOBGTbX95YuZnJW
8Ni3DOysAiEA1laQqj2t/V/zF/spAG96JjYAbZ+4TIb1DtsZ7dQjf5QAdgDuS723
dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWM57gALAAAEAwBHMEUCIQDJ
/5t+CMZopU/fs+Lx8uc9U7bg8A6ulTQY3br+ZPbxRQIgM4kHTDfWQkVGBpYT68TC
5hohNeXekncob4lvz7wAC6QAdgCq5wt/PLjVZshsLxaXnJ9EX2mrDrRTVYmy93oD
AQTzzQAAAWM57f/aAAAEAwBHMEUCIERwQeRU7HR3/txRGy6chvqV4f3cjFXfVFA/
ehhfZ6jUAiEAuLAJMhantQoBSQYvSti/5sNqNOf728MAs+sCwzyxfCoAdQBVgdTC
FpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWM57gEpAAAEAwBGMEQCIEnQ
REiECHrW0pDuFGOb5633TVXDEIUMdMSu7Sv+G+3iAiA3qr1Z9VCfUAk406N9XW+c
NW7MuCTn/GQqnRoT2PwdlwB3AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7I
DdwQAAABYznuAmUAAAQDAEgwRgIhAMRzHWGD3p3fggeoTrXqMrREpNDQKdJlZ90v
oI3y6ni9AiEA8AaJ7GkBBDbTGkWIprEnc9nlw6ufarmgqiV0mDIJ8KoAdgC72d+8
H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWM57gJcAAAEAwBHMEUCIQDN
waTPR9Y0jpWkZvpqHzzTjsMDXAUNV0XXgyT8qEDvRAIgfcG/SmH1SxI5ygZMY2nR
OHwZRWGLrtg8+Hsz19mRh+AAdwBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWW
gXFFWAAAAWM57gTBAAAEAwBIMEYCIQCzXTyU1t4c0JxEbr1vemZhkJzFdC0F2N3D
8IVdwcTGYgIhAL/F33NhYrbROK6EJmHlAaX/Spe31edu15A2KvDkri/PAHYAsh4F
zIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFjOe4BHwAABAMARzBFAiEA
wHbktxjETBn1eqN2yUE6KSkkvKrUAgSvdyE+GBZ6F/0CIAfDybpHYpsM5F8uuTx4
3A5mqtDlHBA4zehxky+KRd4MMA0GCSqGSIb3DQEBCwUAA4IBAQB/QIwSwQ+foXhD
1dTtVjSV84yNGtVIyX2KjFmbfU9HA9apZ+8bxc79firrRvhUDlFfqhIR+5SaKc15
LixDQdVbnTmSppIt8z5OJ3hI9Eev8NrQWBMdskM7g4STALrsuYyzHeZJK2sHWYOv
F6ZPz4bmZhI9QVpBMKVQNjRGXicXMFfgobS+YAJxLhTVZ/HJNECG1Q62Rw1SVEeE
Sbilw9b1wqQ9sLDjEF3XGbHdkh18fCR8/UpBaen+g28yGDKhfP+FqMHGKKobtqL0
xsYpejRuoY9/pRY9RnHT2FAZnCybh4OD0drR1C6FpfaOBbz419+uqMIJ1ZMlszGr
fX2iNgiX
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9612895008429085304208697138
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-07 09:28:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-09 09:28:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Konstanz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bibliotheksservice-Zentrum Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verbund'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'eBook-Management'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ebmtool.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744051459710455512453400849948265474403838537021341925270749077547710111731358880832907681067815984376475905930851650977615909576310262007423981876647783755056496423291255995115199554250047280222944805260736222155595293449189510820471174247591681387527159817587079534282204783464564686676872391523333791694609296913956731320509072964843169881210387657180835856711231815696223928425012390138307812168616545416498104381664559306454776412155713875900582553731493151987355391643506822285965502953867409560054803958336208830820854492171918571224961467147239304886202833651927316233927078837234558083047580238337540362909620885397198181018100329046050437585772659508847408619720541885235775233716994291845478073896406103422857196177182918354637710504804919290744904538845244118356665115074656368066412945672869664648107487540765946739256086086568005860692184030056929257875779840155575668811856821288788781188002381998261475911412059845610792790289839865701583493665921971567307007443605669774933130005919121957488473105814232217315952068387757358472746339626161559709971014763088280278055670157657585793778814642843573955494073370945019600616541277029374535084852406238921235380161889567003944051763006834791326031560891794357889987978151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bef45eb732eaa77453e900832a9f49f9d722cb8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ebmtool.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebmtool.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nufenen.bsz-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ebmtool.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebmtool.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (968 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (964 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007f408c12c10f9fa17843d5d4ed563495f38c8d1ad548c97d8a8c599b7d4f4703d6a967ef1bc5cefd7e2aeb46f8540e515faa1211fb949a29cd792e2c4341d55b9d3992a6922df33e4e277848f447aff0dad058131db2433b83849300baecb98cb31de6492b6b075983af17a64fcf86e666123d415a4130a5503634465e27173057e0a1b4be6002712e14d567f1c9344086d50eb6470d5254478449b8a5c3d6f5c2a43db0b0e3105dd719b1dd921d7c7c247cfd4a4169e9fe836f321832a17cff85a8c1c628aa1bb6a2f4c6c6297a346ea18f7fa5163d4671d3d850199c2c9b878383d1dad1d42e85a5f68e05bcf8d7dfaea8c209d59325b331ab7d7da2360897