www.hmi.de
- Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH -
Issued by HMI CA - G02
About this certificate
This digital certificate with serial number 0c:ed:94:4c was issued on by Hahn-Meitner-Institut Berlin GmbH.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DigitalSignature ContentCommitment KeyEncipherment DataEncipherment] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH
Organization:
Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH
Organization unit: Zentrale DV-Systeme und Netze
Organization unit: Zentrale DV-Systeme und Netze
Country:
DE
Hahn-Meitner-Institut Berlin GmbH
Organization:
Hahn-Meitner-Institut Berlin GmbH
Organization unit: Abteilung DV-Systeme und Netze
Organization unit: Abteilung DV-Systeme und Netze
Country:
DE
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:ed:94:4cSerial Number (int): 216896588
Serial Number lenght: 28 bits, 4 octets
SubjectKeyId: b6:dd:ef:85:03:9f:27:69:77:cd:ea:32:3a:9c:31:d0:3b:46:02:41
AuthorityKeyId: f0:be:7f:8a:55:23:b1:f7:f0:07:8d:ee:0d:a2:22:fb:7e:ca:81:b8
Fingerprint (sha1): 19:c6:e8:17:5b:9c:ec:9f:26:31:c2:a5:e2:fe:12:d7:c8:6e:5b:92
Fingerprint (sha256): ba:05:37:c3:a2:3c:e8:79:a6:41:cd:33:e8:89:61:ca:9a:da:40:64:3a:08:a0:fc:aa:b3:da:b4:6d:a2:c6:d6
Issuing Certificate URL: http://cdp1.pca.dfn.de/hmi-ca/pub/cacert/g_cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/hmi-ca/pub/cacert/g_cacert.crt
Revocation information
CRL Distribution Point: http://cdp1.pca.dfn.de/hmi-ca/pub/crl/g_cacrl.crlCRL Distribution Point: http://cdp2.pca.dfn.de/hmi-ca/pub/crl/g_cacrl.crl
Check the revocation status for certificate www.hmi.de
0
DNS Names
1
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.hmi.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Content Commitment
Key Encipherment
Data Encipherment
Extended Key Usages
Server Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
[email protected]
Other certificates including the domain name hmi.de
(limited to 100 certificates)
portal.helmholtz-berlin.de
ldap.basisit.de
dicom12.hmi.de
mail.helmholtz-berlin.de
hzb-intern.helmholtz-berlin.de
mail.helmholtz-berlin.de
wssadmin-intern.helmholtz-berlin.de
f-intern.helmholtz-berlin.de
e-intern.helmholtz-berlin.de
ifolder.helmholtz-berlin.de
ldap.basisit.de
hmi-domain.hmi.de
g-intern.helmholtz-berlin.de
radius.hmi.de
mail.helmholtz-berlin.de
site-intern.helmholtz-berlin.de
sf-intern.helmholtz-berlin.de
wiki.hmi.de
a-intern.helmholtz-berlin.de
mail.helmholtz-berlin.de
np-intern.helmholtz-berlin.de
gf-v-intern.helmholtz-berlin.de
mssb-intern.helmholtz-berlin.de
gf-extern.helmholtz-berlin.de
www.hmi.de
mail.helmholtz-berlin.de
dicare.helmholtz-berlin.de
gf-v-extern.helmholtz-berlin.de
e-extern.helmholtz-berlin.de
mail.helmholtz-berlin.de
gf-intern.helmholtz-berlin.de
diprint.hmi.de
test-intern.helmholtz-berlin.de
radius.hmi.de
mail.helmholtz-berlin.de
ldap.basisit.de
dicom12.hmi.de
mail.helmholtz-berlin.de
hzb-intern.helmholtz-berlin.de
mail.helmholtz-berlin.de
wssadmin-intern.helmholtz-berlin.de
f-intern.helmholtz-berlin.de
e-intern.helmholtz-berlin.de
ifolder.helmholtz-berlin.de
ldap.basisit.de
hmi-domain.hmi.de
g-intern.helmholtz-berlin.de
radius.hmi.de
mail.helmholtz-berlin.de
site-intern.helmholtz-berlin.de
sf-intern.helmholtz-berlin.de
wiki.hmi.de
a-intern.helmholtz-berlin.de
mail.helmholtz-berlin.de
np-intern.helmholtz-berlin.de
gf-v-intern.helmholtz-berlin.de
mssb-intern.helmholtz-berlin.de
gf-extern.helmholtz-berlin.de
www.hmi.de
mail.helmholtz-berlin.de
dicare.helmholtz-berlin.de
gf-v-extern.helmholtz-berlin.de
e-extern.helmholtz-berlin.de
mail.helmholtz-berlin.de
gf-intern.helmholtz-berlin.de
diprint.hmi.de
test-intern.helmholtz-berlin.de
radius.hmi.de
mail.helmholtz-berlin.de
Certificate
The complete raw certificate details for www.hmi.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIEDO2UTDANBgkqhkiG9w0BAQUFADCBljELMAkGA1UEBhMC REUxKjAoBgNVBAoTIUhhaG4tTWVpdG5lci1JbnN0aXR1dCBCZXJsaW4gR21iSDEn MCUGA1UECxMeQWJ0ZWlsdW5nIERWLVN5c3RlbWUgdW5kIE5ldHplMRUwEwYDVQQD EwxITUkgQ0EgLSBHMDIxGzAZBgkqhkiG9w0BCQEWDGhtaWNhQGhtaS5kZTAeFw0w ODA5MTUwODAzMDhaFw0xMzA5MTQwODAzMDhaMIGPMQswCQYDVQQGEwJERTFDMEEG A1UEChM6SGVsbWhvbHR6LVplbnRydW0gQmVybGluIGZ1ZXIgTWF0ZXJpYWxpZW4g dW5kIEVuZXJnaWUgR21iSDEmMCQGA1UECxMdWmVudHJhbGUgRFYtU3lzdGVtZSB1 bmQgTmV0emUxEzARBgNVBAMTCnd3dy5obWkuZGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVDq6NM5xST/M2AgYbipnahk0i8AjIT92M0hitXlnIWlv7 qZYs1wVkbru7v++BPPy3RLV3KOE2GrhX1lk4AfIODPtmaeCOlQg2WeXqBg3EEOxL Zc//yXekhmd/2By0qR7xv2CMV7omoxAy9sEEv+kGiuBWtP4ecMIhWd5KMglkSDiL SVAO8SypITOT8GIjfc5oGhb4Z2XgNcDbAdNNFLPVZRyCoPKM2Qyhy/rW1+PL5jHF GLsBAHurwiJpE6NrC2fqMKPdmnKWpdvWB5+QI7vRpKYlHhQsWPWPP0JWR9pCuRHi JAfahrrYNxU/ndkWhl2XSPAY1LWpZxKMBURsHN2BAgMBAAGjggGxMIIBrTAJBgNV HRMEAjAAMAsGA1UdDwQEAwIE8DATBgNVHSUEDDAKBggrBgEFBQcDATAdBgNVHQ4E FgQUtt3vhQOfJ2l3zeoyOpwx0DtGAkEwHwYDVR0jBBgwFoAU8L5/ilUjsffwB43u DaIi+37KgbgwKAYDVR0RBCEwH4Edd2VibWFzdGVyQGhlbG1ob2x0ei1iZXJsaW4u ZGUwewYDVR0fBHQwcjA3oDWgM4YxaHR0cDovL2NkcDEucGNhLmRmbi5kZS9obWkt Y2EvcHViL2NybC9nX2NhY3JsLmNybDA3oDWgM4YxaHR0cDovL2NkcDIucGNhLmRm bi5kZS9obWktY2EvcHViL2NybC9nX2NhY3JsLmNybDCBlgYIKwYBBQUHAQEEgYkw gYYwQQYIKwYBBQUHMAKGNWh0dHA6Ly9jZHAxLnBjYS5kZm4uZGUvaG1pLWNhL3B1 Yi9jYWNlcnQvZ19jYWNlcnQuY3J0MEEGCCsGAQUFBzAChjVodHRwOi8vY2RwMi5w Y2EuZGZuLmRlL2htaS1jYS9wdWIvY2FjZXJ0L2dfY2FjZXJ0LmNydDANBgkqhkiG 9w0BAQUFAAOCAQEAD+du7YwmPBWdc1xDJkBBq/jr2brpw8A49zk9jKt841x5EtWt bFwAnpDg7+Vm36eCQUrKWRaEyURXBwoj/PqHOOeoBaXy1q2MltJ+e3hhdmslWx7l 5Df9SEeBQw2TPWj/tLag3WNjLoUy8/uHlxkohyKxCF2tzq5nL2zrg0/8YLeeBtio CaK63gNV27aApQAP5uq+8ZV4di910jeqbHKRtHU9/bz76g5To46Aui3MWUiamrZz JJhrvE0AuNusAVHBxn9rw8D9Z1oJ4kPFNPc1kfTPCqT4NUXQC/sQN9kXsliKO0tY 91Fy9hgFLxWil1usCZjO6DvT1G/lhK11b6bDTA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q6ujTOcUk/zNgIGG4qZ 2oZNIvAIyE/djNIYrV5ZyFpb+6mWLNcFZG67u7/vgTz8t0S1dyjhNhq4V9ZZOAHy Dgz7ZmngjpUINlnl6gYNxBDsS2XP/8l3pIZnf9gctKke8b9gjFe6JqMQMvbBBL/p BorgVrT+HnDCIVneSjIJZEg4i0lQDvEsqSEzk/BiI33OaBoW+Gdl4DXA2wHTTRSz 1WUcgqDyjNkMocv61tfjy+YxxRi7AQB7q8IiaROjawtn6jCj3ZpylqXb1gefkCO7 0aSmJR4ULFj1jz9CVkfaQrkR4iQH2oa62DcVP53ZFoZdl0jwGNS1qWcSjAVEbBzd gQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 216896588 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hahn-Meitner-Institut Berlin GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abteilung DV-Systeme und Netze' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HMI CA - G02' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2008-09-15 08:03:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-09-14 08:03:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zentrale DV-Systeme und Netze' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hmi.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26895998843927232552704658109938486075639765561356481486267158280318950024054998911972606483411959470568892702425446339401323215432950565398573021473979599061761170115896962682081871433126059121967075595052911455279155842489981646911448829568397986251139774736512373927496847800480775047196599134625285539588945937239037721534762391427259608512466671405885097920311655000549073245646058133465079560452059925308455372361601823856029190534482672080164007564168252274101126738833122389226118350098527479491145110161706135282226262541393323317717835557761987625009157782922238977136205760692663805988833536138759414537601 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04f0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b6ddef85039f276977cdea323a9c31d03b460241 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f0be7f8a5523b1f7f0078dee0da222fb7eca81b8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/hmi-ca/pub/crl/g_cacrl.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/hmi-ca/pub/crl/g_cacrl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/hmi-ca/pub/cacert/g_cacert.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/hmi-ca/pub/cacert/g_cacert.crt' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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