registry.gitlab.dai-labor.de

- Technische Universitaet Berlin -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 20:13:4f:36:e5:0a:fa:b4:aa:6c:19:8f was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Technische Universitaet Berlin

Organization: Technische Universitaet Berlin
Organization unit: DAI-Labor
State / Province: Berlin
Locality: Berlin
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 20:13:4f:36:e5:0a:fa:b4:aa:6c:19:8f
Serial Number (int): 9926863984436326274112952719
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 1f:1d:1e:74:39:f3:57:05:81:b3:bf:58:b2:9d:b6:ee:be:fe:1b:0c
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 60:58:b9:1b:33:7e:9a:58:b2:68:cc:0c:82:54:4e:ff:1b:d9:dc:c2
Fingerprint (sha256): 9f:61:b4:c2:ac:45:9a:e0:56:02:28:6c:e8:90:e4:08:dc:d9:db:f5:64:b4:cf:5d:e3:db:d6:86:3e:2e:15:23

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate registry.gitlab.dai-labor.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for registry.gitlab.dai-labor.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

registry.gitlab.aot.tu-berlin.de
registry.gitlab.dai-lab.de
registry.gitlab.dai-labor.de

Other certificates including the domain name dai-labor.de

(limited to 100 certificates)
dms.dai-labor.de
www.dai-labor.de
dai-labor.de
winterser.dai-lab.de
jenkins.dai-labor.de
edu.dai-labor.de
gitlab-edu.dai-labor.de
gitlab.dai-labor.de
aot2018.aot.tu-berlin.de
115bot.irml.dai-labor.de
lists.dai-labor.de
dai-labor.de
intern.dai-labor.de
daiknow.dai-labor.de
ia.dailab.de
daiccm1.dai-lab.de
redmine.dai-labor.de
berlinsuche.dai-labor.de
imp-pub-ms.cm.dai-lab.de
dainas.dai-labor.de
pia-test-intern.dai-labor.de
cvs.dai-labor.de
gitlab.dai-labor.de
intern.dai-labor.de
flexnet.dai-labor.de
lists.dai-labor.de
www.dai-labor.de
daitool.dai-labor.de
dai-labor.de
berlinsuche.dai-labor.de
mail.dai-labor.de
gitlab.dai-labor.de
diginet-ps.dai-lab.de
dainas.dai-labor.de
mail.dai-labor.de
daiwordpress-neu.dai-lab.de
daibasi.dai-lab.de
imp-pub-ms.cm.dai-lab.de
va-hamburg.irml.dai-labor.de
registry.gitlab.dai-labor.de
ssds2.aot.tu-berlin.de
repositories.dai-labor.de
git.dai-labor.de
daiknow.dai-labor.de
va-hamburg.irml.dai-labor.de
wlc-5508.mgmt.dai-lab.de
berlinsuche.dai-labor.de
diginetdataint.dai-labor.de
pia-demo.dai-labor.de
cms.cm.dai-lab.de
pia-dev-intern.dai-labor.de
www.dai-labor.de
mail.dai-labor.de
va-hamburg.irml.dai-labor.de
gitlab.dai-labor.de
www.redmine.dai-labor.de
www.dai-labor.de
exp-e-1.dai-labor.de
cvs.dai-labor.de
www2.dai-labor.de
dainas.dai-labor.de
berlinsuche.dai-labor.de
registry.gitlab.dai-labor.de
repositories.dai-labor.de
mail.dai-labor.de
mail.dai-labor.de
tuleap.dai-labor.de
exp-e-2.dai-labor.de
edu.dai-labor.de
www.dai-lab.de
gitlab-edu.dai-labor.de
newsreel-edu.aot.tu-berlin.de
exp-e-1.dai-labor.de
mail.dai-labor.de
edu.dai-labor.de
dainas.dai-labor.de
dc3.dai-lab.de
dms.dai-labor.de
dai-labor.de
va-hamburg.irml.dai-labor.de
pia-dev.dai-labor.de
cvs.dai-labor.de
ima.dai-labor.de
gitlab.dai-labor.de
daneser.dai-lab.de
cluster.gc.dai-lab.de
diginet-services.aot.tu-berlin.de
teampass.dai-labor.de
ima.dai-labor.de
intern.dai-labor.de
gitlab.dai-labor.de
www.dai-labor.de
scb-erp.aot.tu-berlin.de
dc3.dai-lab.de
windnode.aot.tu-berlin.de
jenkins.dai-labor.de
cms.cm.dai-lab.de
dai-labor.de
va-hamburg.irml.dai-labor.de
www.dai-labor.de

Certificate

The complete raw certificate details for registry.gitlab.dai-labor.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9926863984436326274112952719
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-20 09:19:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-21 09:19:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Technische Universitaet Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DAI-Labor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'registry.gitlab.dai-labor.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 844669998720478624395473246069737259658723065486853490029800727366772261146965994676047297803321290367184813210400081649210751511419124842960258695323469560180990208285639488612992956609879197318702914674045781015157605661907901587712521304229182840730743058913292754751498384346370161154689274473983820384472650216674030100846438877740841919099857237261942253090183345324017092168391516106132595467481439507985095778544206205264273329736255803901194588093710761017325058118057536504023474667295366329467396380707141920571780327562902126917438819533710582085534052606461941411040019220027313617405450133360757420276507167923866277987750262058784131757403324960179028842465850791969169475296026181232510113908774829585720203149517343742707274467647355019109530281035688123163308153468961898223772634858357203583056276978356881574164354136518446772515109461028804719002742911111254699917490323160299095938998297077727435527052557283774927433344192091772133424993936979752857091392828995260629896122843933920165222935339372610995654580181321545233461267708105221487775995809910475755785535161153923135495293302190505488415095120069888068683167940842705353179852839310847594237557530634864655355391843292935749569919495116681034148833681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f1d1e7439f3570581b3bf58b29db6eebefe1b0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry.gitlab.aot.tu-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry.gitlab.dai-lab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry.gitlab.dai-labor.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (844 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (840 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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