www.dai-lab.de

- Technische Universitaet Berlin -

Issued by TUB-CA

About this certificate

This digital certificate with serial number 1b:24:7f:38:e7:df:f9 was issued on by Technische Universitaet Berlin.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Technische Universitaet Berlin

Organization: Technische Universitaet Berlin
Organization unit: DAI-Labor
State / Province: Berlin
Locality: Berlin
Country: DE

Technische Universitaet Berlin

Organization: Technische Universitaet Berlin
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1b:24:7f:38:e7:df:f9
Serial Number (int): 7639953205354489
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: 84:0d:8c:44:4d:4a:df:36:59:ff:a1:6a:0a:a9:e6:d7:c2:ea:19:4d
AuthorityKeyId: 23:32:42:9e:fe:62:42:4e:fb:4e:d0:17:9b:78:e7:ed:8a:8c:3e:78

Fingerprint (sha1): 37:79:e2:79:0c:6e:76:f3:86:55:8d:2f:3c:20:6b:a9:8d:49:ec:b0
Fingerprint (sha256): b1:e5:dc:1a:21:a8:8a:df:c0:67:7c:9c:dd:a0:0d:6d:08:6f:b5:4e:8d:ab:e8:b2:dc:b4:fc:5d:c1:5e:e9:4b

Issuing Certificate URL: http://cdp1.pca.dfn.de/tu-berlin-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/tu-berlin-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/tu-berlin-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/tu-berlin-ca/pub/crl/cacrl.crl

Check the revocation status for certificate www.dai-lab.de

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dai-lab.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

daiccm1.dai-lab.de
daiccm2.dai-lab.de
daiextern.dai-lab.de
dainet-guest-gw.dai-lab.de
derrick.dai-lab.de
infoboard.irml.dai-labor.de
pia-admin.irml.dai-labor.de
pia-dev-intern.irml.dai-labor.de
pia-dev.irml.dai-labor.de
pia-intern.irml.dai-labor.de
pia-test-intern.irml.dai-labor.de
pia-test.irml.dai-labor.de
pia.irml.dai-labor.de
sharepoint.dai-lab.de
www.dai-lab.de

Other certificates including the domain name dai-lab.de

(limited to 100 certificates)
www.dai-labor.de
dai-labor.de
winterser.dai-lab.de
jenkins.dai-labor.de
edu.dai-labor.de
gitlab-edu.dai-labor.de
aot2018.aot.tu-berlin.de
115bot.irml.dai-labor.de
dai-labor.de
intern.dai-labor.de
cucm-pub-ms.cm.dai-lab.de
vcenter.dai-lab.de
cucm-pub-ms.cm.dai-lab.de
ia.dailab.de
daiccm1.dai-lab.de
imp-pub-ms.cm.dai-lab.de
exp-c-1.cm.dai-lab.de
cvs.dai-labor.de
imp-pub.cm.dai-lab.de
intern.dai-labor.de
flexnet.dai-labor.de
www.dai-labor.de
daitool.dai-labor.de
dai-labor.de
mail.dai-labor.de
diginet-ps.dai-lab.de
dainas.dai-labor.de
mail.dai-labor.de
old-diginet-ps.dai-lab.de
dai-lab.de
daiwordpress-neu.dai-lab.de
imp-sub.cm.dai-lab.de
exp-c-1.cm.dai-lab.de
daibasi.dai-lab.de
imp-pub-ms.cm.dai-lab.de
daibasi.dai-lab.de
registry.gitlab.dai-labor.de
ssds2.aot.tu-berlin.de
repositories.dai-labor.de
wlc-5508.mgmt.dai-lab.de
exp-c-2.cm.dai-lab.de
diginetdataint.dai-labor.de
cms.cm.dai-lab.de
www.dai-labor.de
mail.dai-labor.de
www.redmine.dai-labor.de
www.dai-labor.de
dainet-guest-gw.dai-lab.de
registry.gitlab.dai-labor.de
repositories.dai-labor.de
mail.dai-labor.de
tuleap.dai-labor.de
cuc-pub-ms.cm.dai-lab.de
www.dai-lab.de
gitlab-edu.dai-labor.de
newsreel-edu.aot.tu-berlin.de
mail.dai-labor.de
dainas.dai-labor.de
dc3.dai-lab.de
dai-labor.de
cvs.dai-labor.de
daneser.dai-lab.de
cluster.gc.dai-lab.de
diginet-services.aot.tu-berlin.de
teampass.dai-labor.de
daneser.dai-lab.de
www.dai-labor.de
scb-erp.aot.tu-berlin.de
dc3.dai-lab.de
windnode.aot.tu-berlin.de
cucm-pub-ms.cm.dai-lab.de
jenkins.dai-labor.de
cms.cm.dai-lab.de
dai-labor.de

Certificate

The complete raw certificate details for www.dai-lab.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7639953205354489
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technische Universitaet Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TUB-CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-06 12:31:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-04 12:31:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Technische Universitaet Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DAI-Labor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.dai-lab.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 694732585441974302012911262686438262379558692777735052682157664844120469932598965016382862947855745291527165223144502401290283766738582320976022308714786715074573070246831199421355463273789915133870232137635617007739199011825114443208350896147930987315909950565109381298351929906927324711604297794918301851946295001985969855842900383366379083397644933459294488149585574624318695250994369095401449933001483352189845445124039095237712448685183372380740458615936126065905639286180892803293171101517641350741275866566961006137922102236306170629838431719966504372435050267869746263715787567484897546059383913639866993072609475465776450806607611718249553768110225519006104200607578232347028222034746636701099903948376739316687035288010268440104288611547893345326258878162051545898491478890966975426714239894320320552546877729624337820272019133772588776872781048095459148109551108464473945914322202866413322416237515538028434911317275460972153558441980863173180248812836015645080394013083824551309332667282216505416659684104081182912530359929963507260658542508666883532683486327413847375134593082573839478182852543708537570303308635597125510981864962520942201602271587180302011012907121127415360332799149595685096188794613162976175304485071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							840d8c444d4adf3659ffa16a0aa9e6d7c2ea194d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2332429efe62424efb4ed0179b78e7ed8a8c3e78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (388 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daiccm1.dai-lab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daiccm2.dai-lab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daiextern.dai-lab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dainet-guest-gw.dai-lab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derrick.dai-lab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infoboard.irml.dai-labor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pia-admin.irml.dai-labor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pia-dev-intern.irml.dai-labor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pia-dev.irml.dai-labor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pia-intern.irml.dai-labor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pia-test-intern.irml.dai-labor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pia-test.irml.dai-labor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pia.irml.dai-labor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharepoint.dai-lab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dai-lab.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/tu-berlin-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/tu-berlin-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (198 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/tu-berlin-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/tu-berlin-ca/pub/cacert/cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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