idp.hs-schmalkalden.de

- Hochschule Schmalkalden -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 27:bb:d1:bf:29:ff:b1:a6:d1:85:1f:a9 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Hochschule Schmalkalden

Organization: Hochschule Schmalkalden
State / Province: Thueringen
Locality: Schmalkalden
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 27:bb:d1:bf:29:ff:b1:a6:d1:85:1f:a9
Serial Number (int): 12296975012249763974964649897
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 78:81:52:2b:7c:b0:61:20:33:07:18:18:fc:c3:eb:0a:da:fe:57:43
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 1a:ff:11:91:bd:81:3c:42:d2:43:49:3e:03:6e:f5:27:f6:50:f8:05
Fingerprint (sha256): 8a:72:83:7f:e0:66:f8:4a:c1:e1:04:9d:75:3a:c3:ea:42:82:4a:c8:f9:8b:10:ac:8e:b0:19:3f:c8:73:19:03

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate idp.hs-schmalkalden.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for idp.hs-schmalkalden.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

idp.hs-schmalkalden.de
idp.fh-schmalkalden.de

Other certificates including the domain name hs-schmalkalden.de

(limited to 100 certificates)
EXP-E.hs-schmalkalden.de
rzhs935cm01-ms.hs-schmalkalden.de
wdb.hs-schmalkalden.de
owa.hs-schmalkalden.de
webmail.hs-schmalkalden.de
exp-e.hs-schmalkalden.de
owa.hs-schmalkalden.de
moodle-sm.hs-schmalkalden.de
evaluation.hs-schmalkalden.de
wiki.rz.hs-schmalkalden.de
stura.hs-schmalkalden.de
erpinfo.hs-schmalkalden.de
rzhs935im01-ms.hs-schmalkalden.de
stura.hs-schmalkalden.de
alf.hs-schmalkalden.de
rzhs935im02.hs-schmalkalden.de
wiki.hs-schmalkalden.de
rz.hs-schmalkalden.de
npr.hs-schmalkalden.de
webdavinf.hs-schmalkalden.de
vpn.hs-schmalkalden.de
owa.hs-schmalkalden.de
owa.hs-schmalkalden.de
rzhs935uc01-ms.hs-schmalkalden.de
qis.hs-schmalkalden.de
webtime.hs-schmalkalden.de
metacoon.fh-schmalkalden.de
vpn.hs-schmalkalden.de
webmail.hs-schmalkalden.de
802-1x.hs-schmalkalden.de
gil.hs-schmalkalden.de
webtime.hs-schmalkalden.de
wdb.hs-schmalkalden.de
owa.hs-schmalkalden.de
pwm.hs-schmalkalden.de
moodle-sm.hs-schmalkalden.de
wiki.rz.hs-schmalkalden.de
cucm-01-ms.fh-schmalkalden.de
cube.hs-schmalkalden.de
qis.hs-schmalkalden.de
webdavinf.fh-schmalkalden.de
cube.hs-schmalkalden.de
rzhs935im01-ms.hs-schmalkalden.de
webmail.hs-schmalkalden.de
webdavwr.fh-schmalkalden.de
qis.hs-schmalkalden.de
ml.hs-schmalkalden.de
apps.hs-schmalkalden.de
smtp.fh-schmalkalden.de
rzhs935im01.hs-schmalkalden.de
rzhs935uc01-ms.hs-schmalkalden.de
greenlight.hs-schmalkalden.de
helpdesk.hs-schmalkalden.de
vpn5.hs-schmalkalden.de
imap.hs-schmalkalden.de
vpn4.hs-schmalkalden.de
webdavinf.hs-schmalkalden.de
webprint.hs-schmalkalden.de
webdavinf.hs-schmalkalden.de
alf.hs-schmalkalden.de
idp.hs-schmalkalden.de
nm.hs-schmalkalden.de
vpn.hs-schmalkalden.de
imap-hs.hs-schmalkalden.de
alf.hs-schmalkalden.de
bc4sb03.hs-schmalkalden.de
studip.hs-schmalkalden.de
zwin.informatik.fh-schmalkalden.de
ci.hs-schmalkalden.de
moodle.hs-schmalkalden.de
helpdesk.hs-schmalkalden.de
studmail.hs-schmalkalden.de
studip.hs-schmalkalden.de
www.hs-schmalkalden.de
rz.hs-schmalkalden.de
webmail.hs-schmalkalden.de
webauth.hs-schmalkalden.de
evaluation.hs-schmalkalden.de
idp.hs-schmalkalden.de
idp.hs-schmalkalden.de
ci.hs-schmalkalden.de
webtime.hs-schmalkalden.de
alf.hs-schmalkalden.de
cups.fh-schmalkalden.de
dokus.hs-schmalkalden.de
moodle.hs-schmalkalden.de
qis.hs-schmalkalden.de
post.hs-schmalkalden.de
apps.hs-schmalkalden.de
wiki.rz.hs-schmalkalden.de
stura.hs-schmalkalden.de
qis.hs-schmalkalden.de
tfs.hs-schmalkalden.de
rzhs935cm01-ms.hs-schmalkalden.de
802-1x.hs-schmalkalden.de
cups.fh-schmalkalden.de
bbb.hs-schmalkalden.de
evaluation.hs-schmalkalden.de
cucn.fh-schmalkalden.de
smtp.fh-schmalkalden.de

Certificate

The complete raw certificate details for idp.hs-schmalkalden.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12296975012249763974964649897
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-16 11:19:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 11:19:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Thueringen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Schmalkalden'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hochschule Schmalkalden'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'idp.hs-schmalkalden.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 682091878122835474485823958910626697083919691554407695792037619894784036234019551697451093943268022632562303224726184379266874998911485945035472684608041579499380989792291026012691232887837829444644572363804467678624558786167521199083455140060278131225782795051917074427648499999579984772208856300197891845362818112341156366773372630496432336599487001389945304275378811072676589960583900792249888223823082258255623492869327772250496459453696437366410391511780419621602720072957993172180976748833789961813006726061540458371058877386828123136021226095235701617588514804426214649873510731321743520467849961949532637989653633273005491365075566080970919204753410142626688762977892222757262074213427246915591911572715488415393076367114325081477126494295105694707038738678016424419473194187026320182776968682274604523823088251136257873718400371705719591718736585216750403033997349358483480017697507384085818309233132871273495560589637896359681222336738265737046964677038562045758261927042362274130886578563990701613732115653652929065494862979870440264707771667281747342473005218327099814868106797643866904993424396524532914552341283714864202074500678630042240739565689525067986427325681632949686970700749562944117214194420123454458814168481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7881522b7cb0612033071818fcc3eb0adafe5743
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp.hs-schmalkalden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp.fh-schmalkalden.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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