dicare.helmholtz-berlin.de

- Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH -

Issued by HZB CA

About this certificate

This digital certificate with serial number 16:f7:37:a5:04:bf:23 was issued on by Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • KeyUsage [DigitalSignature ContentCommitment KeyEncipherment DataEncipherment] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH

Organization: Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH
State / Province: Berlin
Locality: Berlin
Country: DE

Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH

Organization: Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH
State / Province: Berlin
Locality: Berlin
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 16:f7:37:a5:04:bf:23
Serial Number (int): 6464267851448099
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: 28:70:88:05:03:bf:8b:3c:7d:a6:53:ea:fc:40:a9:0f:ee:94:b9:87
AuthorityKeyId: 5e:42:2c:b7:51:36:03:8a:c4:08:9c:81:94:bd:be:db:e3:4b:7c:dc

Fingerprint (sha1): 97:71:03:3b:a7:6b:8a:9f:46:4d:1d:b9:a2:e0:14:da:f1:5e:df:19
Fingerprint (sha256): d5:cb:96:28:43:78:58:5d:c8:a2:2f:f8:cf:21:cd:14:dc:b2:63:3e:0b:7f:9f:21:af:bc:72:06:1f:ba:8a:85

Issuing Certificate URL: http://cdp1.pca.dfn.de/hzb-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/hzb-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/hzb-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/hzb-ca/pub/crl/cacrl.crl

Check the revocation status for certificate dicare.helmholtz-berlin.de

3

DNS Names

1

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dicare.helmholtz-berlin.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dicare.helmholtz-berlin.de
dicare1.hmi.de
dicare2.hmi.de
[email protected]

Other certificates including the domain name helmholtz-berlin.de

(limited to 100 certificates)
gate.helmholtz-berlin.de
portal.helmholtz-berlin.de
webapp.basisit.de
ise-psn-a-1.helmholtz-berlin.de
imap.helmholtz-berlin.de
ess.helmholtz-berlin.de
divuwiki.basisit.de
dms.helmholtz-berlin.de
nc.helmholtz-berlin.de
workadventure.helmholtz-berlin.de
collab.helmholtz-berlin.de
rica.helmholtz-berlin.de
rica.helmholtz-berlin.de
nc.basisit.de
kanboard.helmholtz-berlin.de
ebisscatent.helmholtz-berlin.de
imap.helmholtz-berlin.de
ebisscatprod.helmholtz-berlin.de
mail.helmholtz-berlin.de
ifolder.helmholtz-berlin.de
lyncpool.basisit.de
idp.helmholtz-berlin.de
www.helmholtz-berlin.de
ebisscattest.helmholtz-berlin.de
nubes.helmholtz-berlin.de
divlog.helmholtz-berlin.de
indico.helmholtz-berlin.de
imap.helmholtz-berlin.de
hzb-intern.helmholtz-berlin.de
sbc-gw-01-int.voip.helmholtz-berlin.de
mail.helmholtz-berlin.de
sbc-lync-01-int.voip.helmholtz-berlin.de
www.helmholtz-berlin.de
sas.helmholtz-berlin.de
sbc-user-01-int.voip.helmholtz-berlin.de
sbc-lync-01-int.voip.helmholtz-berlin.de
dect-controller-01.voip.helmholtz-berlin.de
wssadmin-intern.helmholtz-berlin.de
smtp.helmholtz-berlin.de
sbc-user-01-int.voip.helmholtz-berlin.de
radius.helmholtz-berlin.de
www.helmholtz-berlin.de
hc-awx.basisit.de
ebisscatprod.helmholtz-berlin.de
f-intern.helmholtz-berlin.de
e-intern.helmholtz-berlin.de
ifolder.helmholtz-berlin.de
nc.basisit.de
onlyoffice.helmholtz-berlin.de
ebisscatprod.helmholtz-berlin.de
sbc-gw-01.voip.helmholtz-berlin.de
webapp.basisit.de
mapi.helmholtz-berlin.de
portal.helmholtz-berlin.de
sbc-gw-01-int.voip.helmholtz-berlin.de
radius.helmholtz-berlin.de
office.helmholtz-berlin.de
icat.helmholtz-berlin.de
dirac-meister.basisit.de
sbc-gw-02-int.voip.helmholtz-berlin.de
ebisscatprod.helmholtz-berlin.de
ise-psn-w-2.helmholtz-berlin.de
indico.helmholtz-berlin.de
rica.helmholtz-berlin.de
idp.helmholtz-berlin.de
www.helmholtz-berlin.de
rica.helmholtz-berlin.de
portal-hzb.helmholtz-berlin.de
voip.helmholtz-berlin.de
icat.helmholtz-berlin.de
pyweb1.basisit.de
sbc-user-01-int.voip.helmholtz-berlin.de
voip.helmholtz-berlin.de
ncoffice.basisit.de
autodiscover.helmholtz-berlin.de
divwiki.basisit.de
sbc-gw-02-int.voip.helmholtz-berlin.de
nc.basisit.de
ebissprod.helmholtz-berlin.de
gw-ibz-h2.helmholtz-berlin.de
jitsi1.basisit.de
ise-psn-a-1.helmholtz-berlin.de
dits.helmholtz-berlin.de
sip.helmholtz-berlin.de
indico.helmholtz-berlin.de
evetest.helmholtz-berlin.de
sharetex.helmholtz-berlin.de
divwiki.basisit.de
g-intern.helmholtz-berlin.de
nubes.helmholtz-berlin.de
ebisscatent.helmholtz-berlin.de
nubes.helmholtz-berlin.de
lyncpool.basisit.de
ise-psn-w-2.helmholtz-berlin.de
radius.hmi.de
voip.helmholtz-berlin.de
ise-psn-w-1.helmholtz-berlin.de
dits1.helmholtz-berlin.de
divlog.helmholtz-berlin.de
nubes-test.helmholtz-berlin.de

Certificate

The complete raw certificate details for dicare.helmholtz-berlin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6464267851448099
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HZB CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-16 10:53:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-15 10:53:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dicare.helmholtz-berlin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 684352625260054331481979896375556542341989173368812807051321705413006748269791522878683616022610447157259770672951995586022021306285704964323688666487427132849488414513886936309738107629388886662047992606293495684239868123271005483135542376580952587893051606825592969571529093348855064932545634143534526533266271454808380497739557706066887951012860687554425219128727824707919443810565494675790368816934424051636527639864030929155195071083700355602019813320277146086417782747269942617050770255028945849152240246017421613532602255812570774756015527408748021826388302078329635319226682053935570994838533823415321743554159886450989204091536736662016602729497308026861461591980830281177584714982621081681792768202858176263842598784683119863571164904184109456569111991903632645944350081553911874513131981795411239844599687268828495556861855276076563273951315571951640536026064265392294547378267851698069768088342468652183585697734038141539284049203375226605066871026947697272191694449392325384372828251755462919615645477406479756177209349866402801067264144227244260133595358013136590754903662962884875365267775740802666479573710747231755402261796296087741103401006380108281793016635352400441796713413980213782764816795263948127020626658343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2870880503bf8b3c7da653eafc40a90fee94b987
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5e422cb75136038ac4089c8194bdbedbe34b7cdc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dicare.helmholtz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dicare1.hmi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dicare2.hmi.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/hzb-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/hzb-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/hzb-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/hzb-ca/pub/cacert/cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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