code.zmaw.de

- Max-Planck-Gesellschaft -

Issued by MPG CA

About this certificate

This digital certificate with serial number 18:6d:9d:3d:20:35:5f was issued on by Max-Planck-Gesellschaft.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment KeyEncipherment ContentCommitment DigitalSignature] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Max-Planck-Gesellschaft

Organization: Max-Planck-Gesellschaft
Organization unit: Max-Planck-Institut fuer Meteorologie
State / Province: Hamburg
Locality: Hamburg
Country: DE

Max-Planck-Gesellschaft

Organization: Max-Planck-Gesellschaft
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 18:6d:9d:3d:20:35:5f
Serial Number (int): 6875921543869791
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: 36:87:f1:cb:2b:00:e9:22:a0:66:13:9f:26:bd:bc:0e:d9:be:27:a1
AuthorityKeyId: 02:d6:1e:6e:09:ab:bf:58:65:a7:0a:3c:48:33:61:d1:ce:7d:c3:5b

Fingerprint (sha1): 92:d3:e8:9a:a6:25:f5:3e:f4:a8:27:f4:6b:55:77:a3:fc:70:24:66
Fingerprint (sha256): b5:42:0c:7d:08:b6:4e:ba:e2:41:3f:b1:42:6c:79:80:e5:a3:a4:27:e6:d2:24:3b:92:4a:93:af:c4:f0:a0:be

Issuing Certificate URL: http://cdp1.pca.dfn.de/mpg-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/mpg-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/mpg-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/mpg-ca/pub/crl/cacrl.crl

Check the revocation status for certificate code.zmaw.de

1

DNS Names

0

Email Addresses

1

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for code.zmaw.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

code.zmaw.de 136.172.65.81

Other certificates including the domain name zmaw.de

(limited to 100 certificates)
ds11g-dps2.zmaw.de
www.ifm.zmaw.de
nagios.mpimet.mpg.de
wts.mpimet.mpg.de
webgis.zmaw.de
dc-dev.adtest.zmaw.de
wera.ifm.zmaw.de
www.zmaw.de
ds4.zmaw.de
code.mpimet.mpg.de
t3projects.mpimet.mpg.de
dc4.zmaw.zmaw.de
lists.zmaw.de
vpngate.zmaw.de
cis.zmaw.de
ldapadmin.mpimet.mpg.de
www.mi.zmaw.de
ds6.zmaw.de
t3projects.zmaw.de
code.mpimet.mpg.de
mailer.zmaw.de
code.zmaw.de
calendar.zmaw.de
www.mi.zmaw.de
ds5.zmaw.de
svn-zmk.zmaw.de
mad-rt.zmaw.de
dps5.zmaw.de
wiki.zmaw.de
t3projects.mpimet.mpg.de
svn.zmaw.de
www.ifm.zmaw.de
lists.zmaw.de
ds11g-ds1.zmaw.de
mail2.zmaw.de
ftp-projects.mpimet.mpg.de
dc-dev2.adtest.zmaw.de
caldav.zmaw.de
webgis.zmaw.de
ftp.mpimet.mpg.de
dps5.zmaw.de
ftp-projects.mpimet.mpg.de
wiki.zmaw.de
www.geophysics.zmaw.de
t3projects.mpimet.mpg.de
t3projects.mpimet.mpg.de
mailer.zmaw.de
wera.ifm.zmaw.de
ds5.zmaw.de
cis.zmaw.de
buildbot.zmaw.de
wettermast-hamburg.zmaw.de
hwdb.mpimet.mpg.de
isw.zmaw.de
ds5-dmz.zmaw.de
ds11g-ds2.zmaw.de
wiki.zmaw.de
ds11g-ds2.zmaw.de
www.geophysics.zmaw.de
mailer.zmaw.de
calendar.zmaw.de
ds11g-ds3.zmaw.de
www.geophysics.zmaw.de
ds4.zmaw.de
t3projects.zmaw.de
lidargate.mpimet.mpg.de
hwdb.mpimet.mpg.de
ds11g-dps2.zmaw.de
barbados.mpimet.mpg.de
solaris-isw.zmaw.de
www.zmaw.de
isw.zmaw.de
ds7.zmaw.de
code.mpimet.mpg.de
www.geophysics.zmaw.de
ftp.mpimet.mpg.de
webstat.zmaw.de
icdc.zmaw.de
t3projects.mpimet.mpg.de
buildbot.mpimet.mpg.de
svn.mpimet.mpg.de
svn.mpimet.mpg.de
svn-zmk.zmaw.de
ds4-dmz.zmaw.de
svn.zmaw.de
code.zmaw.de
dc3.zmaw.zmaw.de
mail1.zmaw.de
dps4.zmaw.de
svn-mad.zmaw.de
code.mpimet.mpg.de
ds6.zmaw.de
www.zmaw.de
cumulus.zmaw.de
cis.zmaw.de
dc4.zmaw.zmaw.de
ds11g-ds1.zmaw.de
t3projects.mpimet.mpg.de
lists.zmaw.de
t3projects.mpimet.mpg.de

Certificate

The complete raw certificate details for code.zmaw.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyH0ccS6ztoJ12tncLgG
aM1o/PM9rTm3yDwCo36VFKerIqFTtLUZJd8e2G6Y2/KhrSAXasNwqCLR+Vp97lb1
4EqwBe4Hml6QSsw0eC6oc0N/yeLTqln8OA2ac7PyTPpdiquN3uLIXOCE4cdduYRy
TTp8Ft8hE/beIwZYsOVp+41k96KRrzmN8GSt7YVZ9trEcafTjNhdQDwKa9mo9gRP
vjxFu7FclgMgU6kR0q28cEKGwh7E8a5Yr83Hjf6BzNV4Bt7sMjhZSTRi9pKhS2mT
eXAXiupoeTxB61aOdDPBke80y9dX64bDUpqZF1zDSibRYKDSYgeMmmISucwLb8ne
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6875921543869791
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Max-Planck-Gesellschaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MPG CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-27 10:34:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 23:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Max-Planck-Gesellschaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Max-Planck-Institut fuer Meteorologie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'code.zmaw.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26148072893966736706958094823347623219925758215733239412433335210116347604432448069436021601405406440492629240548159261729583609305629701790321755164101291396357878605809006362698645993802331469661916561773637710636882996336209762608094907135252479583662237185932271640678187623788166732279755189548065204841762614759425209286581003796109383831880328331544208890169417480931588569125134209568699377132615891726444694923240731536103030560788585984226498579225613111969032294272422355139019132905874230889990828640603156118735065565959913435541242461459907428317897476506942071637423793309928544343186348371455261662759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3687f1cb2b00e922a066139f26bdbc0ed9be27a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 02d61e6e09abbf5865a70a3c483361d1ce7dc35b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'code.zmaw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:7|false] OCTET STRING '136.172.65.81'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/mpg-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/mpg-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/mpg-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/mpg-ca/pub/cacert/cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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