inp-ad1.intranet.inp-greifswald.de

- Leibniz-Institut fuer Plasmaforschung und Technologie e.V. -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 25:e1:1d:a5:c8:cd:ef:fe:43:b4:ec:ca was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Leibniz-Institut fuer Plasmaforschung und Technologie e.V.

Organization: Leibniz-Institut fuer Plasmaforschung und Technologie e.V.
State / Province: Mecklenburg-Vorpommern
Locality: Greifswald
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 25:e1:1d:a5:c8:cd:ef:fe:43:b4:ec:ca
Serial Number (int): 11723093679613319542060936394
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 8c:5e:0c:e1:37:c7:d8:91:b6:2d:fb:bb:d4:f3:c5:9b:f1:9e:8e:79
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 38:d8:c3:cc:48:20:23:b0:38:6b:fc:00:c6:9e:dd:8b:d6:26:89:ab
Fingerprint (sha256): 8a:1c:2c:3a:bc:6b:9c:7d:03:7c:fd:39:1d:f2:12:c5:70:d5:e9:e6:b7:f7:d9:34:56:28:c1:b9:e2:c3:61:d6

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate inp-ad1.intranet.inp-greifswald.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for inp-ad1.intranet.inp-greifswald.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

inp-ad1.intranet.inp-greifswald.de
inp-ad1.svr.inp-greifswald.de

Other certificates including the domain name inp-greifswald.de

(limited to 100 certificates)
inp-ad2.intranet.inp-greifswald.de
inp-ad2.intranet.inp-greifswald.de
inp-cewe-01.inp-greifswald.de
it-lizenz-04.svr.inp-greifswald.de
zeitaufschreibung.inp-greifswald.de
pm-omero.intranet.inp-greifswald.de
inp-usv-u06-32.intranet.inp-greifswald.de
inp-cuc-01.intranet.inp-greifswald.de
pan.inp-greifswald.de
inptdat.de
inp-esrs-02.intranet.inp-greifswald.de
inp-syslog-02.inp-greifswald.de
adfs4.inp-greifswald.de
wlan-inp-public.inp-greifswald.de
inp-kvm-02.intranet.inp-greifswald.de
inp-cucm-01-ms.intranet.inp-greifswald.de
inp-syslog-02.inp-greifswald.de
inp-tsm-03.intranet.inp-greifswald.de
inp-cube-02.inp-greifswald.de
inp-cewc-01.intranet.inp-greifswald.de
inp-eduroam-01.inp-greifswald.de
fs.inp-greifswald.de
wlan-gaeste.intranet.inp-greifswald.de
inp-mssql-03.intranet.inp-greifswald.de
it-esetpro-01.svr.inp-greifswald.de
inp-eduroam-01.inp-greifswald.de
inp-cucm-01.intranet.inp-greifswald.de
inp-syslog-02.inp-greifswald.de
inp-syslog-02.inp-greifswald.de
leibniz-inp.de
www.inp-greifswald.de
inp-kvm-02.intranet.inp-greifswald.de
inp-jet-01.intranet.inp-greifswald.de
inp-opsi-02.intranet.inp-greifswald.de
inp-syslog-02.inp-greifswald.de
inp-cewc-01.intranet.inp-greifswald.de
pan.inp-greifswald.de
inp-cewe-01.inp-greifswald.de
inp-cucm-02.intranet.inp-greifswald.de
inp-cube-02.inp-greifswald.de
pm-adamant.intranet.inp-greifswald.de
pm-gitlab.intranet.inp-greifswald.de
inp-ad1.intranet.inp-greifswald.de
inp-mfc-e13.print.inp-greifswald.de
leibniz-inp.de
inp-syslog-02.inp-greifswald.de
leibniz-inp.de
inptdat.de
inp-cube-01.inp-greifswald.de
inp-drucker-02.intranet.inp-greifswald.de
plasmact.inp-greifswald.de
inp-damaris-01.intranet.inp-greifswald.de
inp-izytron-01.intranet.inp-greifswald.de
adfs.inp-greifswald.de
travel.inp-greifswald.de
pst-server-03.intranet.inp-greifswald.de
iwpct2018.conferences.inp-greifswald.de
pan.inp-greifswald.de
inp-hgw.de
inp-artnerrm-01.intranet.inp-greifswald.de
www.leibniz-inp.de
adfs.inp-greifswald.de
leibniz-inp.de
pm-labbook.intranet.inp-greifswald.de
inp-cup-01.intranet.inp-greifswald.de
zeitaufschreibung.inp-greifswald.de
adfs3.inp-greifswald.de
leibniz-inp.de
projektplanung.inp-greifswald.de
pre-spotfire-01.intranet.inp-greifswald.de
zeitaufschreibung.intranet.inp-greifswald.de
service-vpn.inp-greifswald.de
inp-cuc-01.intranet.inp-greifswald.de
inp-cup-01.intranet.inp-greifswald.de
inp-ad1.intranet.inp-greifswald.de
inp-cup-01.intranet.inp-greifswald.de
fs.inp-greifswald.de
inp-usv-u06-32.intranet.inp-greifswald.de
adfs.inp-greifswald.de
inp-hgw.de
obi-wan.inp-greifswald.de
inp-insightiq-02.intranet.inp-greifswald.de
www.leibniz-inp.de
it-kvm-03.mgt.inp-greifswald.de
isdeiv2018.conferences.inp-greifswald.de
irmc4de7de.intranet.inp-greifswald.de
inp-mssql-02.intranet.inp-greifswald.de
leibniz-inp.de
inp-esrs-04.intranet.inp-greifswald.de
inp-cs-220.gaeste.inp-greifswald.de
idp.inp-greifswald.de
ips2020.inp-greifswald.de
inp-syslog-02.inp-greifswald.de
inp-insightiq-02.svr.inp-greifswald.de
public.inp-greifswald.de
inp-cube-01.inp-greifswald.de
inp-nlb-ha.intranet.inp-greifswald.de
inp-eduroam-01.inp-greifswald.de
irmc3b7d00.mgt.inp-greifswald.de
ips2020.inp-greifswald.de

Certificate

The complete raw certificate details for inp-ad1.intranet.inp-greifswald.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11723093679613319542060936394
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-21 09:36:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-21 09:36:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mecklenburg-Vorpommern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Greifswald'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Leibniz-Institut fuer Plasmaforschung und Technologie e.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'inp-ad1.intranet.inp-greifswald.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 684049679709461536223082714090793338722473163883051535855773731671898308815067808194120304536187668023351694161625550850852476875972546070402232622505956175349012399550056055846628004479696541553536544206083096261382647741958573639086054235183705597338069606450700279567311931583800621414880768035877923458538462912900359425848833014917916308306440515844854730191527324081819179677797917167119360819756409727901044545022408188703277549914992051913429706123527099929137324361255946047532966829672562130001513312329869310149595196739855969137783987057808775562283151689633729164018768007939630212774790633899574664196818947898308724394744765609074580654710964006178279376340865768658617064739621445946678572815702552432417758186746310027477928844599540091866140909602308663529632214975306113585817977366002439775660940634411820477149098953842135076778661522174714970918794455373899759278529271355220539219695837321724404267592181654825547487043783530613041293500230165033005599961116813385558313528392909362602013587533109623887475543302327449472319375644431780136412038906365220581727605755590677280171108555428656402356439258665331236582568119913908139438845794648898430142605446404775784512340446222636465918367956615933580867546403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.10
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2 (enrollCerttypeExtension)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 68 0 111 0 109 0 97 0 105 0 110 0 67 0 111 0 110 0 116 0 114 0 111 0 108 0 108 0 101 0 114]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c5e0ce137c7d891b62dfbbbd4f3c59bf19e8e79
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inp-ad1.intranet.inp-greifswald.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inp-ad1.svr.inp-greifswald.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009022d62155608cfd614b8855b93c0d8369d93f6f4a28517d3ac97a44d918289f4bc989b8aa0cc3cad1b52d9712c4e8ade245b8fa6cd6c803d8fe49c803eba1fe45b2615d6b353cb1cd13500ddb0c26d6234c882b8d13b8378e1424114d415e7bbc44b1553f3647b5b59c32577e25f452c035885d8155d3357542d4a5dbf71b766fc4c7dd8628ec6ac3c8ab6eab47d99a424544f240db6d4556dce901fb126e28273c5bfb07b4bd875038b18b8bf3d7471737cbe9094caac6e82f8ebc43eebe5d034a2ed5d1955a93bb18ee65028fe538dfd7112611b7efac55458aa7e6d35509b1ff48fabbb5808f47cc1a2e589b80cdbe355f5842fade142aadff5d18055b3f