portal.mytum.de

- Technische Universitaet Muenchen -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 21:1f:05:bc:ef:90:32:12:f3:e4:cb:21 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Technische Universitaet Muenchen

Organization: Technische Universitaet Muenchen
State / Province: Bayern
Locality: Muenchen
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 21:1f:05:bc:ef:90:32:12:f3:e4:cb:21
Serial Number (int): 10250509121595093406649207585
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: ff:0f:da:74:fd:9b:dd:c0:f3:a3:7b:9c:48:10:1f:9b:21:27:2b:a2
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): e9:ce:90:ca:59:0d:e3:2b:bf:a0:ae:c4:ee:a9:9d:0a:ba:bb:39:39
Fingerprint (sha256): ea:62:c3:cc:a6:dc:23:f7:c2:2d:a3:ee:88:3c:9c:e5:f9:e2:f6:37:e6:f3:2f:9b:de:37:dc:67:68:b4:0d:49

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate portal.mytum.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.mytum.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.mytum.de

Other certificates including the domain name mytum.de

(limited to 100 certificates)
go.mytum.de
xmpp.mytum.de
go.mytum.de
portal.mytum.de
ers.mytum.de
portal.mytum.de
portal.mytum.de
jobscreen.mytum.de
portal.mytum.de
portal.mytum.de
xmpp.mytum.de
roundcube.lrz.de
BALZ00SW-CAS.ads.mwn.de
portal.mytum.de
xmpp.mytum.de
roundcube.lrz.de
portal.mytum.de
xmail.mwn.de
portal.mytum.de
testing211.mytum.de
portalmail.mytum.de
xmpp.mytum.de
rdtest101.mytum.de
portal.mytum.de
mail.mytum.de
portalmail.mytum.de
portal.mytum.de
portal.mytum.de
portal.mytum.de
ers.mytum.de
portalmail.mytum.de
sap.mytum.de

Certificate

The complete raw certificate details for portal.mytum.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKRjCCCS6gAwIBAgIMIR8FvO+QMhLz5MshMA0GCSqGSIb3DQEBCwUAMIGNMQsw
CQYDVQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVz
IERldXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4t
UEtJMSUwIwYDVQQDDBxERk4tVmVyZWluIEdsb2JhbCBJc3N1aW5nIENBMB4XDTE5
MDYxMTEwNTMzOFoXDTIxMDkxMjEwNTMzOFowdjELMAkGA1UEBhMCREUxDzANBgNV
BAgMBkJheWVybjERMA8GA1UEBwwITXVlbmNoZW4xKTAnBgNVBAoMIFRlY2huaXNj
aGUgVW5pdmVyc2l0YWV0IE11ZW5jaGVuMRgwFgYDVQQDDA9wb3J0YWwubXl0dW0u
ZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDoDwNAXQTC0Pi/RvQc
MFD0BHCDUpFx02EvjzZu1Eyt4gpSq6+4SL6lmDp/NONIb8cJCxNvZcct5x4siHlk
SaEv2Y6AhPc/JkODFba5UV2knGWR1ruElm9pTPR5uuEf+hsnjkT/4LkZ16Z2aqTy
V5HNEmminDrT9TMyEoLwTAShuaWHxoEXADEc5SNzTtAx1hHG2fA5wwKOlcZBVBkd
erL50gRgpNift5HLHBYTC0107zUsoh6FpfJWNTl8sS/j+rAh1tujGitmBcPu0JXq
3PQpJVa12EkQn4AeJXvD9tVhZXxknETW0CvQ4bJWBEwakYeoDI/qKauoE85+Y9Hg
QJL3UqjmhVjx1LnuZR63JrBYz+ghk/35Q02rkmJaMm/FGhUILKNtsM+4Zn8omXxC
53jT0ShkizrIPMnRGCMtJSHpKMl+JJDGoQc5Fl7ovmcQvBrMLkY9hpnqQOrXxKDH
3NytBUG6489C56bT4NWogo3F3Vwl0LPchuS469JEkng/qaNc0y6wgcyYJr4bWwH/
NyveTyXXUOpHuem2qBQi07taKULs4ugZya03OaTCA/Qv03RglajCx20YdJ9a3DQr
o5MWlwxEdA0ZbczSrzo+PH/UoWbvzAWVDjoZeNmF96homaU0nyTdTGAsLNMYD1P5
y1uL9LBR+IEqlPWNa/LBIau1nwIDAQABo4IFujCCBbYwVwYDVR0gBFAwTjAIBgZn
gQwBAgIwDQYLKwYBBAGBrSGCLB4wDwYNKwYBBAGBrSGCLAEBBDAQBg4rBgEEAYGt
IYIsAQEEBDAQBg4rBgEEAYGtIYIsAgEEBDAJBgNVHRMEAjAAMA4GA1UdDwEB/wQE
AwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAdBgNVHQ4EFgQU/w/adP2b3cDzo3uc
SBAfmyEnK6IwHwYDVR0jBBgwFoAUazqYi/nyU4na4K2yMh4JH+iqO3QwGgYDVR0R
BBMwEYIPcG9ydGFsLm15dHVtLmRlMIGNBgNVHR8EgYUwgYIwP6A9oDuGOWh0dHA6
Ly9jZHAxLnBjYS5kZm4uZGUvZGZuLWNhLWdsb2JhbC1nMi9wdWIvY3JsL2NhY3Js
LmNybDA/oD2gO4Y5aHR0cDovL2NkcDIucGNhLmRmbi5kZS9kZm4tY2EtZ2xvYmFs
LWcyL3B1Yi9jcmwvY2FjcmwuY3JsMIHbBggrBgEFBQcBAQSBzjCByzAzBggrBgEF
BQcwAYYnaHR0cDovL29jc3AucGNhLmRmbi5kZS9PQ1NQLVNlcnZlci9PQ1NQMEkG
CCsGAQUFBzAChj1odHRwOi8vY2RwMS5wY2EuZGZuLmRlL2Rmbi1jYS1nbG9iYWwt
ZzIvcHViL2NhY2VydC9jYWNlcnQuY3J0MEkGCCsGAQUFBzAChj1odHRwOi8vY2Rw
Mi5wY2EuZGZuLmRlL2Rmbi1jYS1nbG9iYWwtZzIvcHViL2NhY2VydC9jYWNlcnQu
Y3J0MIIDXwYKKwYBBAHWeQIEAgSCA08EggNLA0kAdgBvU3asMfAxGdiZAKRRFf93
FRwR2QLBACkGjbIImjfZEwAAAWtGLBkjAAAEAwBHMEUCIQClhQ3IQsMmIpWhMUe/
unL9CYciadhgp5oKjDg0kSTWCQIgaWPD9Cap6CNJeDB0egJv/cZQOMRoxNyphsCw
pUIu73YAdgCq5wt/PLjVZshsLxaXnJ9EX2mrDrRTVYmy93oDAQTzzQAAAWtGLBj6
AAAEAwBHMEUCIHKzuHpHLSaSCT9BzYHVrD4AF9kItS3ay8wg5SgHk1tOAiEAu9ga
zuv7sWlpZhFhw9/ZcoSFUjr6n6lVUcWwHQV9Qd4AdwBVgdTCFpA2AUrqC5tXPFPw
wOQ4eHAlCBcvo6odBxPTDAAAAWtGLBogAAAEAwBIMEYCIQDsCnKrfGjV3Bw/30zw
klmDjM9EZnkxUGyuxNh9mINeewIhAPjNUPC1Q9A7z8+3yahyw394z8xj4Z3tUYAo
LUZwkJ6CAHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFrRiwZ
ZgAABAMARzBFAiAP3AbeBsI7zWyQT6f0uzSE8MK//GmCmJbpyWi0JV0zfAIhAOQj
T/c9TRFPrLhwpl/W1LeIqCdigOoIiqXws2lKHU9oAHUA7ku9t3XOYLrhQmkfq+Ge
ZqMPfl+wctiDAMR7iXqo/csAAAFrRiwZXQAABAMARjBEAiAbya6r7v9aD22qm2Xq
0LM4r3K5000rgbsl1KUidEUgwgIgWmbBLk/jawIcIu8IZhN6OAFHBfAX4yI7sBts
/jSzKBIAdgBElGUusO7Or8RAB9io/ijA2uaCvtjLMbU/0zOWtbaBqAAAAWtGLB2n
AAAEAwBHMEUCIFmDuITqMjjhWwql6vt/zJQcWeFHt6grA1bF2PpuLO6OAiEArYSj
ZVBV3OVDNNLGt050lCdTbrWlNmmBZ6keW0ktuGcAdwCkuQmQtBhYFIe7E6LMZ3AK
PDWYBPkb37jjd80OyA3cEAAAAWtGLBlnAAAEAwBIMEYCIQDt46kFw2qgWYcjdEC1
QCe+N9KMYLKB+H0hUGRGDLf2FgIhALGAWv09SSsbfUp4r+qhLxOpx0fCTzc+8/QB
m6MaGuYrMA0GCSqGSIb3DQEBCwUAA4IBAQAYi4HPNS4s9UKqNdn11MgXKuYIKa1E
65Tsfvr9wVM3h0ksnYtuQpJmEtXcCn1SlarU4W2LP5FQA2TjwHoy+Lmr9YSa0+iz
kawBnXKhKkkorWLbdlxXHDZIpNKy66mHEQjj9AgSzpoMGydCD3O1owvm+1ZYfQvA
3pHhFqSOGkjk6tV8uEENtNC3nPUujW02oIS+n5FLQJgKohuR8Cx6FBySHrnFaDJo
eG+t/0jd4mknLRKMdLaCjhpxV+Z1MgldVc0Vn5rrbdjYYU90vmmMYu0lC+OFNole
9zNZQh6nU5CMDKlglZsjyrsoh/aUosOKHcUH6jidoLFxvlY8iy8VFQgw
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10250509121595093406649207585
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-11 10:53:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-12 10:53:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Technische Universitaet Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'portal.mytum.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 946716667827527154132215902655263858887973112137887669997805800199230929075029573354930228057525608207387433428307988661002408541293743205069778899197270916606982250357054054092015263516178605738034121690448758420312713509955827249389058724372323624500822136633167167001027303872803827270689351754713000566651036469961177625966250016337723190013709238747513418525240160383877574397651956251701202969537955779461108284607519391167425496578288360727845625075652559568573818103917160245253391531939427784655232860816578635253589373508237891509108079771046955982905277225027727927989778683932913104081642027800115220911387743792726027922659630628769125840590245454517959025993170127273108946891642386602097653950441451490866260435816259403774518301481264383944019810283076368013778022180974101665717377557003504289571017692509992698137892075407754950334186070943587815807572257800009054222485090905105112008481166614625524496001423095630928797263947817724073677154965291530957112363960294158722733710942054307592577280930972666414283223734303327038628632810185750147274232334985202612497037794269754559436477016120370709668012897067853497137507715620618516053984105643071511288086196847030334889416352209591795893645607655687413367027103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff0fda74fd9bddc0f3a37b9c48101f9b21272ba2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.mytum.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (847 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (843 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00188b81cf352e2cf542aa35d9f5d4c8172ae60829ad44eb94ec7efafdc1533787492c9d8b6e42926612d5dc0a7d5295aad4e16d8b3f91500364e3c07a32f8b9abf5849ad3e8b391ac019d72a12a4928ad62db765c571c3648a4d2b2eba9871108e3f40812ce9a0c1b27420f73b5a30be6fb56587d0bc0de91e116a48e1a48e4ead57cb8410db4d0b79cf52e8d6d36a084be9f914b40980aa21b91f02c7a141c921eb9c5683268786fadff48dde269272d128c74b6828e1a7157e67532095d55cd159f9aeb6dd8d8614f74be698c62ed250be38536895ef73359421ea753908c0ca960959b23cabb2887f694a2c38a1dc507ea389da0b171be563c8b2f15150830