gitlab-edu.dai-labor.de

- Technische Universitaet Berlin -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 20:25:e9:e3:88:c7:d3:be:e0:ce:5f:a4 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Technische Universitaet Berlin

Organization: Technische Universitaet Berlin
Organization unit: DAI-Labor
State / Province: Berlin
Locality: Berlin
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 20:25:e9:e3:88:c7:d3:be:e0:ce:5f:a4
Serial Number (int): 9949355078266275964352618404
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 0a:4b:8b:bb:34:3d:38:f5:2a:e6:4d:d3:9b:f8:71:4e:60:5f:11:af
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): a0:82:25:73:82:fa:f4:35:d1:59:82:95:cf:c2:4f:42:94:17:64:6d
Fingerprint (sha256): b5:be:9e:7c:9a:f2:19:81:35:4e:89:60:48:f7:8e:14:78:61:a3:93:bc:80:9b:e8:0c:ef:46:74:a1:28:67:99

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate gitlab-edu.dai-labor.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gitlab-edu.dai-labor.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gitlab-edu.aot.tu-berlin.de
gitlab-edu.dai-lab.de
gitlab-edu.dai-labor.de

Other certificates including the domain name dai-labor.de

(limited to 100 certificates)
dms.dai-labor.de
www.dai-labor.de
dai-labor.de
winterser.dai-lab.de
jenkins.dai-labor.de
edu.dai-labor.de
gitlab-edu.dai-labor.de
gitlab.dai-labor.de
aot2018.aot.tu-berlin.de
115bot.irml.dai-labor.de
lists.dai-labor.de
dai-labor.de
intern.dai-labor.de
daiknow.dai-labor.de
ia.dailab.de
daiccm1.dai-lab.de
redmine.dai-labor.de
berlinsuche.dai-labor.de
imp-pub-ms.cm.dai-lab.de
dainas.dai-labor.de
pia-test-intern.dai-labor.de
cvs.dai-labor.de
gitlab.dai-labor.de
intern.dai-labor.de
flexnet.dai-labor.de
lists.dai-labor.de
www.dai-labor.de
daitool.dai-labor.de
dai-labor.de
berlinsuche.dai-labor.de
mail.dai-labor.de
gitlab.dai-labor.de
diginet-ps.dai-lab.de
dainas.dai-labor.de
mail.dai-labor.de
daiwordpress-neu.dai-lab.de
daibasi.dai-lab.de
imp-pub-ms.cm.dai-lab.de
va-hamburg.irml.dai-labor.de
registry.gitlab.dai-labor.de
ssds2.aot.tu-berlin.de
repositories.dai-labor.de
git.dai-labor.de
daiknow.dai-labor.de
va-hamburg.irml.dai-labor.de
wlc-5508.mgmt.dai-lab.de
berlinsuche.dai-labor.de
diginetdataint.dai-labor.de
pia-demo.dai-labor.de
cms.cm.dai-lab.de
pia-dev-intern.dai-labor.de
www.dai-labor.de
mail.dai-labor.de
va-hamburg.irml.dai-labor.de
gitlab.dai-labor.de
www.redmine.dai-labor.de
www.dai-labor.de
exp-e-1.dai-labor.de
cvs.dai-labor.de
www2.dai-labor.de
dainas.dai-labor.de
berlinsuche.dai-labor.de
registry.gitlab.dai-labor.de
repositories.dai-labor.de
mail.dai-labor.de
mail.dai-labor.de
tuleap.dai-labor.de
exp-e-2.dai-labor.de
edu.dai-labor.de
www.dai-lab.de
gitlab-edu.dai-labor.de
newsreel-edu.aot.tu-berlin.de
exp-e-1.dai-labor.de
mail.dai-labor.de
edu.dai-labor.de
dainas.dai-labor.de
dc3.dai-lab.de
dms.dai-labor.de
dai-labor.de
va-hamburg.irml.dai-labor.de
pia-dev.dai-labor.de
cvs.dai-labor.de
ima.dai-labor.de
gitlab.dai-labor.de
daneser.dai-lab.de
cluster.gc.dai-lab.de
diginet-services.aot.tu-berlin.de
teampass.dai-labor.de
ima.dai-labor.de
intern.dai-labor.de
gitlab.dai-labor.de
www.dai-labor.de
scb-erp.aot.tu-berlin.de
dc3.dai-lab.de
windnode.aot.tu-berlin.de
jenkins.dai-labor.de
cms.cm.dai-lab.de
dai-labor.de
va-hamburg.irml.dai-labor.de
www.dai-labor.de

Certificate

The complete raw certificate details for gitlab-edu.dai-labor.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9949355078266275964352618404
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-04 12:00:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-07 12:00:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Technische Universitaet Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DAI-Labor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'gitlab-edu.dai-labor.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 948890322672266981719516853973129198024528282420415517622469196836268692543425431706228591047536094908681273737093486795493934467299514658753547862995554937099282526951883394018869895435265945187556605903440345267544902144522326390987986295440058183708384231045141370645227938712685284008314658704434721031816205097338900434826283157555957578870828617246361166300130253503613568569597818105175696105251095963488377001208029428722822224739808041132967733368872315317829121101179762569507301607245144942111825469128249573967809157011668734061543697949335729198000059914620568996371404470707630114788412857430594663158154897095246109456215009400539717361564880948529163710011876188813629643832230628705726958177731571104754476994726776430736798148619394710761137031801803498244407455519067437643384512342900036383447298499762419264387875112529095368119269907616188852445420490602890256573767972184870588787743957449219824764241279437206218468985212811005001990397618785716825808270562985312873023641300348101716752789920400146449462307098623766737917827594853573197501128832604753498384651383296699555292931090253995615007988185947031907092257525782686463888588010416331057453403633252212740781974433931303038886613234246781326734354471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a4b8bbb343d38f52ae64dd39bf8714e605f11af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab-edu.aot.tu-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab-edu.dai-lab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab-edu.dai-labor.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (849 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (845 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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