sec21-dmz1b.gfz-potsdam.de

- GeoForschungsZentrum Potsdam -

Issued by GeoForschungsZentrum Potsdam CA - G01

About this certificate

This digital certificate with serial number 17:14:23:52:b9:cc:b8 was issued on by GeoForschungsZentrum Potsdam.

With 47 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • KeyUsage [DigitalSignature KeyEncipherment ContentCommitment DataEncipherment] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

GeoForschungsZentrum Potsdam

Organization: GeoForschungsZentrum Potsdam
Organization unit: Section 2.1, GEM Testing and Evaluation Group
State / Province: Brandenburg
Locality: Potsdam
Country: DE

GeoForschungsZentrum Potsdam

Organization: GeoForschungsZentrum Potsdam
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 17:14:23:52:b9:cc:b8
Serial Number (int): 6496066408664248
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: 8c:13:2d:7e:42:79:19:d6:e9:25:e5:61:73:65:1d:c9:9d:73:fa:e4
AuthorityKeyId: 9c:c8:a2:e5:9b:00:6c:cb:0e:a2:88:eb:a4:ba:6b:9f:b3:39:59:84

Fingerprint (sha1): 5c:84:0f:12:63:13:22:d6:e5:25:c5:67:23:df:19:87:f0:83:c4:42
Fingerprint (sha256): e7:09:5e:5d:f8:d7:58:f0:fc:8e:7d:7a:de:6a:7f:34:62:ee:f0:3d:fe:71:82:ee:3c:a7:2a:60:36:9c:fa:cf

Issuing Certificate URL: http://cdp1.pca.dfn.de/gfz-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/gfz-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/gfz-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/gfz-ca/pub/crl/cacrl.crl

Check the revocation status for certificate sec21-dmz1b.gfz-potsdam.de

47

DNS Names

1

Email Addresses

2

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sec21-dmz1b.gfz-potsdam.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

12oder3.gem.gfz-potsdam.de
12oder3.quake.gfz-potsdam.de
admin.completenessweb.gfz-potsdam.de
admin.quake.gfz-potsdam.de
bugs.completenessweb.gfz-potsdam.de
bugs.gem.gfz-potsdam.de
bugs.quake.gfz-potsdam.de
cloud.gem.gfz-potsdam.de
cloud.quake.gfz-potsdam.de
cloud.volcano.gfz-potsdam.de
completenessweb.gfz-potsdam.de
data.completenessweb.gfz-potsdam.de
data.gem.gfz-potsdam.de
data.quake.gfz-potsdam.de
data.volcano.gfz-potsdam.de
devel.quake.gfz-potsdam.de
docs.quake.gfz-potsdam.de
docs.volcano.gfz-potsdam.de
eval.gem.gfz-potsdam.de
gem.gfz-potsdam.de
html5.gem.gfz-potsdam.de
html5.quake.gfz-potsdam.de
html6.gem.gfz-potsdam.de
html6.quake.gfz-potsdam.de
ipe.gem.gfz-potsdam.de
ipe.quake.gfz-potsdam.de
nicky.volcano.gfz-potsdam.de
obmwiki.gem.gfz-potsdam.de
quake.gfz-potsdam.de
sec21-dmz1.gfz-potsdam.de
sec21-dmz1b.gfz-potsdam.de
statsei9.quake.gfz-potsdam.de
svn.completenessweb.gfz-potsdam.de
svn.quake.gfz-potsdam.de
tb.gem.gfz-potsdam.de
tb.quake.gfz-potsdam.de
tb.volcano.gfz-potsdam.de
test.quake.gfz-potsdam.de
tracker.completenessweb.gfz-potsdam.de
tracker.gem.gfz-potsdam.de
tracker.quake.gfz-potsdam.de
tracker.volcano.gfz-potsdam.de
websvn.quake.gfz-potsdam.de
www.completenessweb.gfz-potsdam.de
xsampls.gem.gfz-potsdam.de
xyz.gem.gfz-potsdam.de
xyz.volcano.gfz-potsdam.de
[email protected]
139.17.3.231
139.17.3.232

Other certificates including the domain name gfz-potsdam.de

(limited to 100 certificates)
geofon.gfz-potsdam.de
rz-vcs1.gfz-potsdam.de
d3m.gfz-potsdam.de
rz-vm140.gfz-potsdam.de
hydro.gfz-potsdam.de
gisasaprouter.gfz-potsdam.de
sec21-dmz1b.gfz-potsdam.de
hydro.gfz-potsdam.de
sec21-dmz1b.gfz-potsdam.de
wol.gfz-potsdam.de
webstats.gfz-potsdam.de
email.gwdg.de
mobilehub.gfz-potsdam.de
intranet.gfz-potsdam.de
dokuwiki.gfz-potsdam.de
sec21-dmz2b.gfz-potsdam.de
moses-dmp.gfz-potsdam.de
spaceweather.gfz-potsdam.de
events.gfz-potsdam.de
rbm9.gfz-potsdam.de
wlc.gfz-potsdam.de
ebissiq.gfz-potsdam.de
exportcontrol.gfz-potsdam.de
rz-support.gfz-potsdam.de
sec21-dmz1b.gfz-potsdam.de
email.gwdg.de
git.gfz-potsdam.de
rz-vm175.gfz-potsdam.de
hydro.gfz-potsdam.de
varve.gfz-potsdam.de
idp-dev.gfz-potsdam.de
webstats.gfz-potsdam.de
geomagia.gfz-potsdam.de
www.gfz-potsdam.de
fw-ext.gfz-potsdam.de
rz-vm213.gfz-potsdam.de
fw-ext.gfz-potsdam.de
geofon.gfz-potsdam.de
gfzpublic.gfz-potsdam.de
eismassendynamik.gfz-potsdam.de
rz-vm174.gfz-potsdam.de
rz-vm112.gfz-potsdam.de
simultan.gfz-potsdam.de
events.gfz-potsdam.de
rz-vm234.gfz-potsdam.de
gfzock.gfz-potsdam.de
collabora.gfz-potsdam.de
www-app5.gfz-potsdam.de
enhsp.gfz-potsdam.de
timeseries.gfz-potsdam.de
printer-core.gfz-potsdam.de
rz-vm457.gfz-potsdam.de
nextcloud.gfz-potsdam.de
geomagia.gfz-potsdam.de
escidoc.gfz-potsdam.de
idp-test.gfz-potsdam.de
sec21-bbb.gfz-potsdam.de
rz-vm62.gfz-potsdam.de
rz-vm119.gfz-potsdam.de
gfz-potsdam.de
moses-dmp.gfz-potsdam.de
wlantickets.gfz-potsdam.de
aschera.gfz-potsdam.de
dep1doc.gfz-potsdam.de
varve.gfz-potsdam.de
index-search-prod.gfz-potsdam.de
ebiss.gfz-potsdam.de
rz-vm89.gfz-potsdam.de
gisasaprouter.gfz-potsdam.de
www.gfz-potsdam.de
forms.gfz-potsdam.de
asip.gfz-potsdam.de
bscw.gfz-potsdam.de
nextcloud.gfz-potsdam.de
benno.gfz-potsdam.de
ad.gfz-potsdam.de
rz-vm278.gfz-potsdam.de
intranet-test.gfz-potsdam.de
rz-ftp1.gfz-potsdam.de
s3ceph.gfz-potsdam.de
ssl.gfz-potsdam.de
moses-data.gfz-potsdam.de
egsim.gfz-potsdam.de
systemerde.gfz-potsdam.de
itsm.gfz-potsdam.de
dataservices.gfz-potsdam.de
rz-monstor3.gfz-potsdam.de
geso122.gfz-potsdam.de
d3m.gfz-potsdam.de
v4-server3.gfz-potsdam.de
trideccloud.gfz-potsdam.de
rz-vm65-dev.gfz-potsdam.de
otms.gfz-potsdam.de
kg3-dmz.gfz-potsdam.de
benno.gfz-potsdam.de
ldapext.gfz-potsdam.de
rz-vm121.gfz-potsdam.de
collabora-dev.gfz-potsdam.de
rz-vm133.gfz-potsdam.de
index-search-prod.gfz-potsdam.de

Certificate

The complete raw certificate details for sec21-dmz1b.gfz-potsdam.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILIzCCCgugAwIBAgIHFxQjUrnMuDANBgkqhkiG9w0BAQUFADCBhzELMAkGA1UE
BhMCREUxJTAjBgNVBAoTHEdlb0ZvcnNjaHVuZ3NaZW50cnVtIFBvdHNkYW0xLjAs
BgNVBAMTJUdlb0ZvcnNjaHVuZ3NaZW50cnVtIFBvdHNkYW0gQ0EgLSBHMDExITAf
BgkqhkiG9w0BCQEWEnBraUBnZnotcG90c2RhbS5kZTAeFw0xNDAyMDcwOTIyMTJa
Fw0xOTAyMDYwOTIyMTJaMIG5MQswCQYDVQQGEwJERTEUMBIGA1UECBMLQnJhbmRl
bmJ1cmcxEDAOBgNVBAcTB1BvdHNkYW0xJTAjBgNVBAoTHEdlb0ZvcnNjaHVuZ3Na
ZW50cnVtIFBvdHNkYW0xNjA0BgNVBAsTLVNlY3Rpb24gMi4xLCBHRU0gVGVzdGlu
ZyBhbmQgRXZhbHVhdGlvbiBHcm91cDEjMCEGA1UEAxMac2VjMjEtZG16MWIuZ2Z6
LXBvdHNkYW0uZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9jdB5
FtlK8UePQybi7SPShqDpTPF6/Nw2dTPoQlWDN+q1sGPT6XzYawXoHK6Rgwgvzmda
5O8vAtkSnZqoCc5Et8sj2USxwqV9DG8+iZlpQfoXC6vZWiPsSXZ9/F6OI2l3grTg
oM3gpy0HAueM2cioNVzU7PnLnzqT3VKMpHiaxEOpoja6PLvFHwFgXcZEBZ8mQIR3
/EGJTMEQIjMrOyceaYp4uUZfbdiJYC0KA2xVEAEFxl9Hk40DTlrSCVyp+sblFvmZ
DhtQoauvAbXyI4jkwcZYneMUdIhcsrbZhnp7SAO55An9p3EJrnLZpjKcCD4O6xcE
WWndEel1M6jlelW5AgMBAAGjggdeMIIHWjA5BgNVHSAEMjAwMBEGDysGAQQBga0h
giwBAQQDATARBg8rBgEEAYGtIYIsAgEEAwEwCAYGZ4EMAQICMAkGA1UdEwQCMAAw
CwYDVR0PBAQDAgTwMBMGA1UdJQQMMAoGCCsGAQUFBwMBMB0GA1UdDgQWBBSMEy1+
QnkZ1ukl5WFzZR3JnXP65DAfBgNVHSMEGDAWgBScyKLlmwBsyw6iiOukumufszlZ
hDCCBWsGA1UdEQSCBWIwggVeghoxMm9kZXIzLmdlbS5nZnotcG90c2RhbS5kZYIc
MTJvZGVyMy5xdWFrZS5nZnotcG90c2RhbS5kZYIkYWRtaW4uY29tcGxldGVuZXNz
d2ViLmdmei1wb3RzZGFtLmRlghphZG1pbi5xdWFrZS5nZnotcG90c2RhbS5kZYIj
YnVncy5jb21wbGV0ZW5lc3N3ZWIuZ2Z6LXBvdHNkYW0uZGWCF2J1Z3MuZ2VtLmdm
ei1wb3RzZGFtLmRlghlidWdzLnF1YWtlLmdmei1wb3RzZGFtLmRlghhjbG91ZC5n
ZW0uZ2Z6LXBvdHNkYW0uZGWCGmNsb3VkLnF1YWtlLmdmei1wb3RzZGFtLmRlghxj
bG91ZC52b2xjYW5vLmdmei1wb3RzZGFtLmRlgh5jb21wbGV0ZW5lc3N3ZWIuZ2Z6
LXBvdHNkYW0uZGWCI2RhdGEuY29tcGxldGVuZXNzd2ViLmdmei1wb3RzZGFtLmRl
ghdkYXRhLmdlbS5nZnotcG90c2RhbS5kZYIZZGF0YS5xdWFrZS5nZnotcG90c2Rh
bS5kZYIbZGF0YS52b2xjYW5vLmdmei1wb3RzZGFtLmRlghpkZXZlbC5xdWFrZS5n
ZnotcG90c2RhbS5kZYIZZG9jcy5xdWFrZS5nZnotcG90c2RhbS5kZYIbZG9jcy52
b2xjYW5vLmdmei1wb3RzZGFtLmRlghdldmFsLmdlbS5nZnotcG90c2RhbS5kZYIS
Z2VtLmdmei1wb3RzZGFtLmRlghhodG1sNS5nZW0uZ2Z6LXBvdHNkYW0uZGWCGmh0
bWw1LnF1YWtlLmdmei1wb3RzZGFtLmRlghhodG1sNi5nZW0uZ2Z6LXBvdHNkYW0u
ZGWCGmh0bWw2LnF1YWtlLmdmei1wb3RzZGFtLmRlghZpcGUuZ2VtLmdmei1wb3Rz
ZGFtLmRlghhpcGUucXVha2UuZ2Z6LXBvdHNkYW0uZGWCHG5pY2t5LnZvbGNhbm8u
Z2Z6LXBvdHNkYW0uZGWCGm9ibXdpa2kuZ2VtLmdmei1wb3RzZGFtLmRlghRxdWFr
ZS5nZnotcG90c2RhbS5kZYIZc2VjMjEtZG16MS5nZnotcG90c2RhbS5kZYIac2Vj
MjEtZG16MWIuZ2Z6LXBvdHNkYW0uZGWCHXN0YXRzZWk5LnF1YWtlLmdmei1wb3Rz
ZGFtLmRlgiJzdm4uY29tcGxldGVuZXNzd2ViLmdmei1wb3RzZGFtLmRlghhzdm4u
cXVha2UuZ2Z6LXBvdHNkYW0uZGWCFXRiLmdlbS5nZnotcG90c2RhbS5kZYIXdGIu
cXVha2UuZ2Z6LXBvdHNkYW0uZGWCGXRiLnZvbGNhbm8uZ2Z6LXBvdHNkYW0uZGWC
GXRlc3QucXVha2UuZ2Z6LXBvdHNkYW0uZGWCJnRyYWNrZXIuY29tcGxldGVuZXNz
d2ViLmdmei1wb3RzZGFtLmRlghp0cmFja2VyLmdlbS5nZnotcG90c2RhbS5kZYIc
dHJhY2tlci5xdWFrZS5nZnotcG90c2RhbS5kZYIedHJhY2tlci52b2xjYW5vLmdm
ei1wb3RzZGFtLmRlght3ZWJzdm4ucXVha2UuZ2Z6LXBvdHNkYW0uZGWCInd3dy5j
b21wbGV0ZW5lc3N3ZWIuZ2Z6LXBvdHNkYW0uZGWCGnhzYW1wbHMuZ2VtLmdmei1w
b3RzZGFtLmRlghZ4eXouZ2VtLmdmei1wb3RzZGFtLmRlghp4eXoudm9sY2Fuby5n
ZnotcG90c2RhbS5kZYcEixED54cEixED6IEVYmV1dGluQGdmei1wb3RzZGFtLmRl
MHcGA1UdHwRwMG4wNaAzoDGGL2h0dHA6Ly9jZHAxLnBjYS5kZm4uZGUvZ2Z6LWNh
L3B1Yi9jcmwvY2FjcmwuY3JsMDWgM6Axhi9odHRwOi8vY2RwMi5wY2EuZGZuLmRl
L2dmei1jYS9wdWIvY3JsL2NhY3JsLmNybDCBxwYIKwYBBQUHAQEEgbowgbcwMwYI
KwYBBQUHMAGGJ2h0dHA6Ly9vY3NwLnBjYS5kZm4uZGUvT0NTUC1TZXJ2ZXIvT0NT
UDA/BggrBgEFBQcwAoYzaHR0cDovL2NkcDEucGNhLmRmbi5kZS9nZnotY2EvcHVi
L2NhY2VydC9jYWNlcnQuY3J0MD8GCCsGAQUFBzAChjNodHRwOi8vY2RwMi5wY2Eu
ZGZuLmRlL2dmei1jYS9wdWIvY2FjZXJ0L2NhY2VydC5jcnQwDQYJKoZIhvcNAQEF
BQADggEBAHXAsFS6khBOXjpyla9+fPHuXJIqzQQo4yN4Wj8QWh9Ih5E+nG+KR/E2
VtQ+hh9yP8Spuo9jrhexcIErVGFoAHAZykeaLiEpwYfYiETvm9irmfciJmEgwN5U
Xs/HlKuTaSvQX/qrP84Gh+THChj5jGGi7WvWSI4C1JRZyapd3Z9RUNjJNj4DiUzC
oSDYzpwP8k9jqxGefxT6s4bYtScR4wopJ3wxBlexAduAvS0abUtskM3fiFTCwV5t
+XvYLaSmYNFNMILvV3f1tTKFffaP9cqvNl922ygIlUfd2SXAe1BhjFCM+E/wsz1N
RpS8jnR9blSYg2XPyR/6n6oH4/QWD4k=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY3QeRbZSvFHj0Mm4u0j
0oag6UzxevzcNnUz6EJVgzfqtbBj0+l82GsF6ByukYMIL85nWuTvLwLZEp2aqAnO
RLfLI9lEscKlfQxvPomZaUH6Fwur2Voj7El2ffxejiNpd4K04KDN4KctBwLnjNnI
qDVc1Oz5y586k91SjKR4msRDqaI2ujy7xR8BYF3GRAWfJkCEd/xBiUzBECIzKzsn
HmmKeLlGX23YiWAtCgNsVRABBcZfR5ONA05a0glcqfrG5Rb5mQ4bUKGrrwG18iOI
5MHGWJ3jFHSIXLK22YZ6e0gDueQJ/adxCa5y2aYynAg+DusXBFlp3RHpdTOo5XpV
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6496066408664248
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoForschungsZentrum Potsdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoForschungsZentrum Potsdam CA - G01'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-02-07 09:22:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-06 09:22:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brandenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Potsdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoForschungsZentrum Potsdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Section 2.1, GEM Testing and Evaluation Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sec21-dmz1b.gfz-potsdam.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23928970899797603713293283557865148465647723006913855519861960975378979533846965629852292836187298505715688747223211452394242369681216548239240309951272986533726555659586186159357395722304041409257509009582221435742297202742457751688314504145501182423222188788138772782612516847492170689559926593882146048107503858091268640116447381998456982373327986633088651209419570076569930536623847350946904806917936599943864957915815765980720399995809544810100531734328167865460519135928972294269417555736780864688048937476707933127697682020033550404302348981986552923053820205543896317383025142593115643903550392238992705344953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c132d7e427919d6e925e56173651dc99d73fae4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9cc8a2e59b006ccb0ea288eba4ba6b9fb3395984
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1378 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12oder3.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12oder3.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.completenessweb.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugs.completenessweb.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugs.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugs.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'completenessweb.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.completenessweb.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devel.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eval.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'html5.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'html5.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'html6.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'html6.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipe.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipe.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicky.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obmwiki.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec21-dmz1.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec21-dmz1b.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statsei9.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svn.completenessweb.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svn.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tb.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tb.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tb.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracker.completenessweb.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracker.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracker.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracker.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websvn.quake.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.completenessweb.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xsampls.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xyz.gem.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xyz.volcano.gfz-potsdam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:7|false] OCTET STRING '139.17.3.231'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:7|false] OCTET STRING '139.17.3.232'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/gfz-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/gfz-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/gfz-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/gfz-ca/pub/cacert/cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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