pia-dev.dai-labor.de

- Technische Universitaet Berlin -

Issued by TUB-CA

About this certificate

This digital certificate with serial number 15:bd:8a:d3:70:d4:d8 was issued on by Technische Universitaet Berlin.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • KeyUsage [DigitalSignature KeyEncipherment ContentCommitment DataEncipherment] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Technische Universitaet Berlin

Organization: Technische Universitaet Berlin
Organization unit: DAI-Labor
State / Province: Berlin
Locality: Berlin
Country: DE

Technische Universitaet Berlin

Organization: Technische Universitaet Berlin
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 15:bd:8a:d3:70:d4:d8
Serial Number (int): 6119378461447384
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: 11:55:41:bc:7e:f3:64:c2:7b:08:c1:29:95:c3:84:e5:8e:19:5f:5d
AuthorityKeyId: 23:32:42:9e:fe:62:42:4e:fb:4e:d0:17:9b:78:e7:ed:8a:8c:3e:78

Fingerprint (sha1): df:73:99:74:71:b8:64:5b:bf:f4:9a:6b:8f:ca:35:b0:fa:c9:85:5a
Fingerprint (sha256): c6:1d:ad:57:bc:dd:32:ea:90:7f:0b:11:82:f5:91:a2:39:7e:e1:42:fb:d2:8d:da:92:5c:39:db:ba:fc:3f:ab

Issuing Certificate URL: http://cdp1.pca.dfn.de/tu-berlin-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/tu-berlin-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/tu-berlin-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/tu-berlin-ca/pub/crl/cacrl.crl

Check the revocation status for certificate pia-dev.dai-labor.de

2

DNS Names

1

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pia-dev.dai-labor.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pia-dev.aot.tu-berlin.de
pia-dev.dai-labor.de
[email protected]

Other certificates including the domain name dai-labor.de

(limited to 100 certificates)
dms.dai-labor.de
www.dai-labor.de
dai-labor.de
winterser.dai-lab.de
jenkins.dai-labor.de
edu.dai-labor.de
gitlab-edu.dai-labor.de
gitlab.dai-labor.de
aot2018.aot.tu-berlin.de
115bot.irml.dai-labor.de
lists.dai-labor.de
dai-labor.de
intern.dai-labor.de
daiknow.dai-labor.de
ia.dailab.de
daiccm1.dai-lab.de
redmine.dai-labor.de
berlinsuche.dai-labor.de
imp-pub-ms.cm.dai-lab.de
dainas.dai-labor.de
pia-test-intern.dai-labor.de
cvs.dai-labor.de
gitlab.dai-labor.de
intern.dai-labor.de
flexnet.dai-labor.de
lists.dai-labor.de
www.dai-labor.de
daitool.dai-labor.de
dai-labor.de
berlinsuche.dai-labor.de
mail.dai-labor.de
gitlab.dai-labor.de
diginet-ps.dai-lab.de
dainas.dai-labor.de
mail.dai-labor.de
daiwordpress-neu.dai-lab.de
daibasi.dai-lab.de
imp-pub-ms.cm.dai-lab.de
va-hamburg.irml.dai-labor.de
registry.gitlab.dai-labor.de
ssds2.aot.tu-berlin.de
repositories.dai-labor.de
git.dai-labor.de
daiknow.dai-labor.de
va-hamburg.irml.dai-labor.de
wlc-5508.mgmt.dai-lab.de
berlinsuche.dai-labor.de
diginetdataint.dai-labor.de
pia-demo.dai-labor.de
cms.cm.dai-lab.de
pia-dev-intern.dai-labor.de
www.dai-labor.de
mail.dai-labor.de
va-hamburg.irml.dai-labor.de
gitlab.dai-labor.de
www.redmine.dai-labor.de
www.dai-labor.de
exp-e-1.dai-labor.de
cvs.dai-labor.de
www2.dai-labor.de
dainas.dai-labor.de
berlinsuche.dai-labor.de
registry.gitlab.dai-labor.de
repositories.dai-labor.de
mail.dai-labor.de
mail.dai-labor.de
tuleap.dai-labor.de
exp-e-2.dai-labor.de
edu.dai-labor.de
www.dai-lab.de
gitlab-edu.dai-labor.de
newsreel-edu.aot.tu-berlin.de
exp-e-1.dai-labor.de
mail.dai-labor.de
edu.dai-labor.de
dainas.dai-labor.de
dc3.dai-lab.de
dms.dai-labor.de
dai-labor.de
va-hamburg.irml.dai-labor.de
pia-dev.dai-labor.de
cvs.dai-labor.de
ima.dai-labor.de
gitlab.dai-labor.de
daneser.dai-lab.de
cluster.gc.dai-lab.de
diginet-services.aot.tu-berlin.de
teampass.dai-labor.de
ima.dai-labor.de
intern.dai-labor.de
gitlab.dai-labor.de
www.dai-labor.de
scb-erp.aot.tu-berlin.de
dc3.dai-lab.de
windnode.aot.tu-berlin.de
jenkins.dai-labor.de
cms.cm.dai-lab.de
dai-labor.de
va-hamburg.irml.dai-labor.de
www.dai-labor.de

Certificate

The complete raw certificate details for pia-dev.dai-labor.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6caROqVVeEboySqhIwy7
ge5xwhQq7OI+6Yb/ynC5VEZr/tkB/g3nrkD9cBtscIbKxbsnpdbnOWnXETa784W1
a3x9bT6XxiUdp2/t1UhcKgkgkS1j3hJwFT9STTuZw8w2005JmS6h2Uc/01m519uw
uTdi/eruiIn7SAAslclkIf5Td4q3jvUDOxZDNUl5aH+rxYleIokN9QNyCugjgiGJ
wY4psmP/uKbik3L31XoWX+9uoNRg4LKNrIr38xvOmFa0K/O99wfSfHzCM4jxT7T3
RSKgN79vIxSq8t+TWoo4kO4hjym2sYPCXA6pPDbqzyj1S7XjCcOynNVlDXWvAzjP
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6119378461447384
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technische Universitaet Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TUB-CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-05-23 12:36:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-22 12:36:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technische Universitaet Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DAI-Labor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pia-dev.dai-labor.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29511442242694670160703002695313806872684356396111118823868171153035175459059984919869166551773815974661362022089593042378303903285081408639840202991580932170529452072494709516411839908695774262283208859165298906254664171566367655002649077032591986124420525511031242412837699087197089626548541952912790439452513334735480483882449324371419545719627732810164503956425543419652694756764177569338851192624694229179437109091655093884304882327741488544624998730759355815446933975120234111147346280224823295628332749538699930259515687628810168937386078933500048498917968419545599001535265227908454743746916296358819127676761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							115541bc7ef364c27b08c12995c384e58e195f5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2332429efe62424efb4ed0179b78e7ed8a8c3e78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pia-dev.aot.tu-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pia-dev.dai-labor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/tu-berlin-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/tu-berlin-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (198 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/tu-berlin-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/tu-berlin-ca/pub/cacert/cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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