www.alphadekade.de

- Informationstechnikzentrum Bund (ITZBund) -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 77:aa:26:0f:97:ec:30:7c:f9:d0:77:45:f9:7d:70:3d was issued on by GEANT Vereniging.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Informationstechnikzentrum Bund (ITZBund)

Organization: Informationstechnikzentrum Bund (ITZBund)
State / Province: Nordrhein-Westfalen
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 77:aa:26:0f:97:ec:30:7c:f9:d0:77:45:f9:7d:70:3d
Serial Number (int): 159061593931361058005285018046685868093
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: fb:ec:52:e6:4f:e6:5f:78:2a:a6:5d:1e:7c:a4:8f:f5:a2:bf:7e:6d
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 19:7d:97:c5:56:33:80:da:da:f5:b6:17:23:03:dd:d4:b0:01:07:7e
Fingerprint (sha256): c0:73:ad:76:ce:9b:64:ea:45:bd:bf:d4:d5:97:e3:73:fa:29:f9:6b:cf:05:37:ae:3d:21:5b:6c:04:09:00:ef

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.alphadekade.de

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.alphadekade.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.alphadekade.de
alphadekade.de
arcticscienceministerial.org
ascot-vet.net
berufsorientierungsprogramm.de
bildung-forschung.digital
buendnisse-fuer-bildung.de
deutschlandstipendium.de
digitalpaktschule.de
dqr.de
innovation-strukturwandel.de
innovationsplattform-zukunftsstadt.de
jobstarter.de
praktisch-unschlagbar.de
qualifizierungdigital.de
qualitaetsoffensive-lehrerbildung.de
sifo.de
stipendienlotse.de
studienabbruch-und-dann.de
wihoforschung.de
www.arcticscienceministerial.org
www.ascot-vet.net
www.berufsorientierungsprogramm.de
www.bildung-forschung.digital
www.buendnisse-fuer-bildung.de
www.deutschlandstipendium.de
www.digitalpaktschule.de
www.dqr.de
www.innovation-strukturwandel.de
www.innovationsplattform-zukunftsstadt.de
www.jobstarter.de
www.praktisch-unschlagbar.de
www.qualifizierungdigital.de
www.qualitaetsoffensive-lehrerbildung.de
www.sifo.de
www.stipendienlotse.de
www.studienabbruch-und-dann.de
www.wihoforschung.de
www.xn--bafg-7qa.de
xn--bafg-7qa.de

Other certificates including the domain name alphadekade.de

(limited to 100 certificates)
www.alphadekade.de
www.alphadekade.de
www.alphadekade.de
www.alphadekade.de
www.alphadekade.de
www.alphadekade.de
www.alphadekade.de
www.alphadekade.de

Certificate

The complete raw certificate details for www.alphadekade.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMXzCCCkegAwIBAgIQd6omD5fsMHz50HdF+X1wPTANBgkqhkiG9w0BAQwFADBE
MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE
AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjMwNjIzMDAwMDAwWhcNMjQwNjIyMjM1
OTU5WjB8MQswCQYDVQQGEwJERTEcMBoGA1UECBMTTm9yZHJoZWluLVdlc3RmYWxl
bjEyMDAGA1UEChMpSW5mb3JtYXRpb25zdGVjaG5pa3plbnRydW0gQnVuZCAoSVRa
QnVuZCkxGzAZBgNVBAMTEnd3dy5hbHBoYWRla2FkZS5kZTCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBAPJhKOpJ9wktPfl6iL9By52JJeaiqjFTDV3wK5nM
pnQcIcqB4Vyw+OTwu3J2VK8+NLonz+uKf3qPKlkXL2IoYGq2E+WiPcL8V+PI55Kv
qoEO0NQ5NHSeKCXxZ5V/s+v6E5VxyFmUINlCV8+HfQNacNaeGSKQVVgdIzF00Ul+
oqvbfkfUzd/cWtBitxHBT8EYGCqU3fRAGWUjzzsev1BKU3h9HiGz0t+B8D2Ow+Vd
LTEVQ0dK/S1gfd9uo07cdU9uh+LOtk8F8MtKCl12C08YCHX0xtjEpqZ89/LnI3nE
uD8CTpTJO9XHYA5RnekmJ0UAUKNsxf79hbuwFxSa7e9AFswWVDPUea61bNoCbvhK
ySOD+vqwA+ax3eAex9pQnmPsfW7E5HHCIed3uk1whmyc17fYjocFTCU7Fyrbez1J
hvw5q8fkX6a38YtQ/QK09/0li3DhTTL90yzkyP+lBqQeHm15LnNE33RHtL2finCf
h0D8u+4zU8jL+mzOOAMXox7YPFKHzeNN2TpU+0mo/79AzfO1IZvxEgcLqbvsvRKr
QROpyKyXgl5yW3A3YC1eWVqLPBLqTABB72KLvmU3vqHWwbZBdxMVz2AATd8zruZc
/ARCM+mrPkeGWfqmR9diKNS1iML88tDRqUgj3pu65naVdui6bTXcfKjQqiTzANkj
FIOdAgMBAAGjggcTMIIHDzAfBgNVHSMEGDAWgBRvHTVJEGwy+lmgnryK6B+VvnF6
DDAdBgNVHQ4EFgQU++xS5k/mX3gqpl0efKSP9aK/fm0wDgYDVR0PAQH/BAQDAgWg
MAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkG
A1UdIARCMEAwNAYLKwYBBAGyMQECAk8wJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9z
ZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQICMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6
Ly9HRUFOVC5jcmwuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcmwwdQYIKwYB
BQUHAQEEaTBnMDoGCCsGAQUFBzAChi5odHRwOi8vR0VBTlQuY3J0LnNlY3RpZ28u
Y29tL0dFQU5UT1ZSU0FDQTQuY3J0MCkGCCsGAQUFBzABhh1odHRwOi8vR0VBTlQu
b2NzcC5zZWN0aWdvLmNvbTCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHcAdv+I
Pwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGI6Y09OQAABAMASDBGAiEA
mSgOFFxNkB58T0+D+2TzBgLVCAy+y+9wi6Oz1rzeUHYCIQCVnSxNK6E89p+LLmf5
OfaEvrcyxsvluHIZ9dUEswfSvgB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2k
PTBI1/urAAABiOmNPyUAAAQDAEcwRQIhAKEdp+LwLDfcqTP7HTvN0W095b8i8dVF
npoQPxsPF9+gAiANw0TdZjnxmszkRDpw/9LpqXfV9xUF/3zqogW0Sw39JQB1AO7N
0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABiOmNPWQAAAQDAEYwRAIg
GxpLF2yWNPqj9y/VhVThr+OP2oydyaHJLE1Dlb8ZciECIBWjVXaNCFmh+I8v+1Gx
Paq0kCjLgQBEnn1Vnw5iCiriMIIECQYDVR0RBIIEADCCA/yCEnd3dy5hbHBoYWRl
a2FkZS5kZYIOYWxwaGFkZWthZGUuZGWCHGFyY3RpY3NjaWVuY2VtaW5pc3Rlcmlh
bC5vcmeCDWFzY290LXZldC5uZXSCHmJlcnVmc29yaWVudGllcnVuZ3Nwcm9ncmFt
bS5kZYIZYmlsZHVuZy1mb3JzY2h1bmcuZGlnaXRhbIIaYnVlbmRuaXNzZS1mdWVy
LWJpbGR1bmcuZGWCGGRldXRzY2hsYW5kc3RpcGVuZGl1bS5kZYIUZGlnaXRhbHBh
a3RzY2h1bGUuZGWCBmRxci5kZYIcaW5ub3ZhdGlvbi1zdHJ1a3R1cndhbmRlbC5k
ZYIlaW5ub3ZhdGlvbnNwbGF0dGZvcm0tenVrdW5mdHNzdGFkdC5kZYINam9ic3Rh
cnRlci5kZYIYcHJha3Rpc2NoLXVuc2NobGFnYmFyLmRlghhxdWFsaWZpemllcnVu
Z2RpZ2l0YWwuZGWCJHF1YWxpdGFldHNvZmZlbnNpdmUtbGVocmVyYmlsZHVuZy5k
ZYIHc2lmby5kZYISc3RpcGVuZGllbmxvdHNlLmRlghpzdHVkaWVuYWJicnVjaC11
bmQtZGFubi5kZYIQd2lob2ZvcnNjaHVuZy5kZYIgd3d3LmFyY3RpY3NjaWVuY2Vt
aW5pc3RlcmlhbC5vcmeCEXd3dy5hc2NvdC12ZXQubmV0giJ3d3cuYmVydWZzb3Jp
ZW50aWVydW5nc3Byb2dyYW1tLmRlgh13d3cuYmlsZHVuZy1mb3JzY2h1bmcuZGln
aXRhbIIed3d3LmJ1ZW5kbmlzc2UtZnVlci1iaWxkdW5nLmRlghx3d3cuZGV1dHNj
aGxhbmRzdGlwZW5kaXVtLmRlghh3d3cuZGlnaXRhbHBha3RzY2h1bGUuZGWCCnd3
dy5kcXIuZGWCIHd3dy5pbm5vdmF0aW9uLXN0cnVrdHVyd2FuZGVsLmRlgil3d3cu
aW5ub3ZhdGlvbnNwbGF0dGZvcm0tenVrdW5mdHNzdGFkdC5kZYIRd3d3LmpvYnN0
YXJ0ZXIuZGWCHHd3dy5wcmFrdGlzY2gtdW5zY2hsYWdiYXIuZGWCHHd3dy5xdWFs
aWZpemllcnVuZ2RpZ2l0YWwuZGWCKHd3dy5xdWFsaXRhZXRzb2ZmZW5zaXZlLWxl
aHJlcmJpbGR1bmcuZGWCC3d3dy5zaWZvLmRlghZ3d3cuc3RpcGVuZGllbmxvdHNl
LmRlgh53d3cuc3R1ZGllbmFiYnJ1Y2gtdW5kLWRhbm4uZGWCFHd3dy53aWhvZm9y
c2NodW5nLmRlghN3d3cueG4tLWJhZmctN3FhLmRlgg94bi0tYmFmZy03cWEuZGUw
DQYJKoZIhvcNAQEMBQADggIBAJ6pc9sigbgTslDlo1Z7O5pbrpr08B63t4wKtMgO
4cX481fgwZ4CF/sGXfePV9vEB8ZvD25ZDS44tKXrn61GE0WM0yO/wXSY8GL3ruPW
xGFvx5Ax8PKoA7GGNdzFyBYHNzlOk/vGUAcS4Iq/Jx3digYAhH3kYxU0hPgpm2Lp
ryMpnm49oikDNgjU4dU8flgNmlCRhPzZ3HV5rspsDNEn6YPbjSfs39R2VJbdcavE
mP047cwRJCD8TCpMux1MkO9yPi8ovu+nJLpi/vGIls02tfROuEjy0O6CSoam/0NN
kr+ied6GwmxVODLvQedyKZyhDPiPy85JuwD9cFJiXV/3lw89RoCNrB1x/HGONdsE
xDum8FM18w53l9VAR+bFs3cbEHW819HCZA9K6hp+dgrXMStb2zPVGlULhXQnyxD5
+n42SKKoqE6F8V0nkF9/oqjIOMiauRYQ+h251PuwWXL0+rcMOApWuyoyGMo8bZN8
hOKH9iaB8XunoRcElv3ntJUvFp+dxaV6lhIQTnF6RSccFehXRjCK5SBsjqFT3KHY
42gynih1nvYhJm+CnTntJTONuNzTQ7TNKywgnTBu5kEBJ9bG5CEi5FKmPjVYR7oL
ANUVgInyQIcyeoxAwRnYWAykghDOtP1o5i6ckYmS9kqfIsOozE1yDERD3fhlbU9W
wVuD
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 159061593931361058005285018046685868093
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Informationstechnikzentrum Bund (ITZBund)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.alphadekade.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 988822214084189278190641441748384052878308623394156759282704772144089012026325043952051724649789266764559369315566972003257313279519014616999815724383080308882583095225344978834807390932920266213651735797654200819966556290536648977506365171946685291146732206252499758035968157926339482722783713936322306383405426274271560484759693654260087871310165286762714198869190561090292190925147324238542776643951550845677858194208617898126903495998720425448877384795554644282969904192998491919603485228839895159004604914218025125749911695712769575570013201929253891127378264276144639391393119832776898871421548819508954485883227281897475580060361869726654855961475370124678258700092547933104856352119319414037855973762604336939802095869055172553164208575372068477727702384717335533526468057889415115988791162419992900703607439514995562440185521962757079785377178770636385914713733037049002599374346843277820104218572426095471006240211053415398358505920228418247508554867430094302243042962596065092684267745658271163823674204320046549405000567158389817186466089813046541927595014887393518549838809570335177420636413485742300841074679701801396990190391672192429871876762832838056637704380531759576389743281010875994684298816841297165827232269213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fbec52e64fe65f782aa65d1e7ca48ff5a2bf7e6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1024 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alphadekade.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alphadekade.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcticscienceministerial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascot-vet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berufsorientierungsprogramm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bildung-forschung.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buendnisse-fuer-bildung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutschlandstipendium.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalpaktschule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dqr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovation-strukturwandel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovationsplattform-zukunftsstadt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobstarter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praktisch-unschlagbar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualifizierungdigital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualitaetsoffensive-lehrerbildung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sifo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stipendienlotse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studienabbruch-und-dann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wihoforschung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcticscienceministerial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ascot-vet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berufsorientierungsprogramm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bildung-forschung.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buendnisse-fuer-bildung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutschlandstipendium.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalpaktschule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dqr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovation-strukturwandel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovationsplattform-zukunftsstadt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobstarter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.praktisch-unschlagbar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualifizierungdigital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualitaetsoffensive-lehrerbildung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sifo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stipendienlotse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studienabbruch-und-dann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wihoforschung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--bafg-7qa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bafg-7qa.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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