gfn.isp-vhost04.domservice.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:21:96:ac:81:6b:75:57:1a:50:0a:2f:93:de:94:4c:63:14 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=gfn.isp-vhost04.domservice.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:21:96:ac:81:6b:75:57:1a:50:0a:2f:93:de:94:4c:63:14Serial Number (int): 272766455803043681912495913563096636744468
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 3e:a3:7f:d2:0c:4e:68:c5:9b:59:b3:bd:91:6e:42:29:0c:26:d4:25
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 13:78:c9:f0:19:c6:60:50:65:6b:2a:92:7c:21:95:0d:b4:7a:21:31
Fingerprint (sha256): 02:4d:7b:d0:33:cc:d2:e9:bf:67:94:c5:5a:ac:20:ee:78:b3:01:64:54:7f:ce:7b:f8:0b:df:e9:fc:e5:cb:85
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate gfn.isp-vhost04.domservice.de
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gfn.isp-vhost04.domservice.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gfn-leipzig.de
gfn.isp-vhost04.domservice.de
www.gfn-leipzig.de
www.gfn.isp-vhost04.domservice.de
gfn.isp-vhost04.domservice.de
www.gfn-leipzig.de
www.gfn.isp-vhost04.domservice.de
Other certificates including the domain name domservice.de
(limited to 100 certificates)
reichelttv.isp-vhost04.domservice.de
reichelttv.isp-vhost04.domservice.de
handballpost.de
hypos-eastgermany.isp-vhost04.domservice.de
cd-lab.isp-vhost04.domservice.de
schwihag.isp-vhost04.domservice.de
gerling.isp-vhost04.domservice.de
itns.de
aka-verlag-neu.isp-vhost04.domservice.de
bleilaus-verlag.de
job199.isp-vhost04.domservice.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
gfn.isp-vhost04.domservice.de
uap.isp-vhost04.domservice.de
gfn.isp-vhost04.domservice.de
hypos-piwik.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
wendt.isp-vhost04.domservice.de
tzoleipzig.de
samija.isp-vhost04.domservice.de
schwihag.isp-vhost04.domservice.de
hvs-handball.de
uap.isp-vhost04.domservice.de
laendernotar.isp-vhost04.domservice.de
hommage-leipzig.de
nobitz.isp-vhost04.domservice.de
peterbruns.de
toro-pflegegruppe.isp-vhost04.domservice.de
itns.de
hypos-eastgermany.isp-vhost04.domservice.de
concerto-magazin.de
vs-mtl.isp-vhost04.domservice.de
engo.isp-vhost04.domservice.de
radierung.isp-vhost04.domservice.de
hypos-eastgermany.isp-vhost04.domservice.de
job199.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
vs-aph-grimma.isp-vhost04.domservice.de
blumenhaus-brehmer.de
gerling.isp-vhost04.domservice.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
itns.de
gym-borsdorf.isp-vhost04.domservice.de
mitteldeutschland.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
peterbruns.de
kanzlei-kratz.isp-vhost04.domservice.de
vs-aph-schkeuditz.isp-vhost04.domservice.de
steinstrasse.isp-vhost04.domservice.de
toro-pflegegruppe.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
limes.isp-vhost04.domservice.de
aka-verlag-neu.isp-vhost04.domservice.de
zappendorfer.isp-vhost04.domservice.de
tzoleipzig.de
gfn.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
mitteldeutschland.isp-vhost04.domservice.de
lehmann.isp-vhost04.domservice.de
handballpost.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
tzoleipzig.de
revierpionier.de
ytong-massivhaus.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
reichelttv.isp-vhost04.domservice.de
kunstglaserei.isp-vhost04.domservice.de
lbw.isp-vhost04.domservice.de
aka-verlag-neu.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
isp-vhost04.domservice.de
handballpost.de
nato-leipzig.isp-vhost04.domservice.de
blumenhaus-brehmer.de
itns.de
steinstrasse.isp-vhost04.domservice.de
kuecheaktiv.isp-vhost04.domservice.de
tzoleipzig.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
ecb.isp-vhost04.domservice.de
hvs-handball.de
engo.isp-vhost04.domservice.de
hypos-eastgermany.isp-vhost04.domservice.de
esgero.ch
hessler.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
blumenhaus-brehmer.de
cd-lab.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
engo.isp-vhost04.domservice.de
lbw.isp-vhost04.domservice.de
hms-schubert.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
hommage-leipzig.de
engo.isp-vhost04.domservice.de
kuecheaktiv.isp-vhost04.domservice.de
gerling.isp-vhost04.domservice.de
reichelttv.isp-vhost04.domservice.de
handballpost.de
hypos-eastgermany.isp-vhost04.domservice.de
cd-lab.isp-vhost04.domservice.de
schwihag.isp-vhost04.domservice.de
gerling.isp-vhost04.domservice.de
itns.de
aka-verlag-neu.isp-vhost04.domservice.de
bleilaus-verlag.de
job199.isp-vhost04.domservice.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
gfn.isp-vhost04.domservice.de
uap.isp-vhost04.domservice.de
gfn.isp-vhost04.domservice.de
hypos-piwik.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
wendt.isp-vhost04.domservice.de
tzoleipzig.de
samija.isp-vhost04.domservice.de
schwihag.isp-vhost04.domservice.de
hvs-handball.de
uap.isp-vhost04.domservice.de
laendernotar.isp-vhost04.domservice.de
hommage-leipzig.de
nobitz.isp-vhost04.domservice.de
peterbruns.de
toro-pflegegruppe.isp-vhost04.domservice.de
itns.de
hypos-eastgermany.isp-vhost04.domservice.de
concerto-magazin.de
vs-mtl.isp-vhost04.domservice.de
engo.isp-vhost04.domservice.de
radierung.isp-vhost04.domservice.de
hypos-eastgermany.isp-vhost04.domservice.de
job199.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
vs-aph-grimma.isp-vhost04.domservice.de
blumenhaus-brehmer.de
gerling.isp-vhost04.domservice.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
itns.de
gym-borsdorf.isp-vhost04.domservice.de
mitteldeutschland.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
peterbruns.de
kanzlei-kratz.isp-vhost04.domservice.de
vs-aph-schkeuditz.isp-vhost04.domservice.de
steinstrasse.isp-vhost04.domservice.de
toro-pflegegruppe.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
limes.isp-vhost04.domservice.de
aka-verlag-neu.isp-vhost04.domservice.de
zappendorfer.isp-vhost04.domservice.de
tzoleipzig.de
gfn.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
mitteldeutschland.isp-vhost04.domservice.de
lehmann.isp-vhost04.domservice.de
handballpost.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
tzoleipzig.de
revierpionier.de
ytong-massivhaus.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
reichelttv.isp-vhost04.domservice.de
kunstglaserei.isp-vhost04.domservice.de
lbw.isp-vhost04.domservice.de
aka-verlag-neu.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
isp-vhost04.domservice.de
handballpost.de
nato-leipzig.isp-vhost04.domservice.de
blumenhaus-brehmer.de
itns.de
steinstrasse.isp-vhost04.domservice.de
kuecheaktiv.isp-vhost04.domservice.de
tzoleipzig.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
ecb.isp-vhost04.domservice.de
hvs-handball.de
engo.isp-vhost04.domservice.de
hypos-eastgermany.isp-vhost04.domservice.de
esgero.ch
hessler.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
blumenhaus-brehmer.de
cd-lab.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
engo.isp-vhost04.domservice.de
lbw.isp-vhost04.domservice.de
hms-schubert.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
hommage-leipzig.de
engo.isp-vhost04.domservice.de
kuecheaktiv.isp-vhost04.domservice.de
gerling.isp-vhost04.domservice.de
Certificate
The complete raw certificate details for gfn.isp-vhost04.domservice.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGuTCCBaGgAwIBAgISAyGWrIFrdVcaUAovk96UTGMUMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTUwMTA5NTZaFw0y MDA2MTMwMTA5NTZaMCgxJjAkBgNVBAMTHWdmbi5pc3Atdmhvc3QwNC5kb21zZXJ2 aWNlLmRlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAy58VddBUHsdA tHqOGA+iU4o6TkNCrYegZkXqk3JV1+DM20DMkoDxnnY0QPvtzuUfgRYnnWFFUkA8 WL93SutuCmvpJo44Flmy3+DnkeYoijnyrO4Ws3O2mC1lL50tDAC6RQ4cfm28tO/6 W6FewVyc7+B4oYtOupgVReHReXH4v4cRfqXJ4mSuaGc7Lbw4f88ib3TZrV9ynlys 0Ng27VqsBPxTiSrqsDQJe4zZBeJPMshU6kTGa6c3t+Syoa01VuSnSrboa19HU6I3 htnVv5dUhKc/wFCNEOwDvmk3A0uihJIyMy9jVVHlDc2+VuhAOKUPAFMBeOeAG6hZ JNLrLLAB827H+0Kr86uUKWhewp3dMcjgoVGR4giVSvILsInBZky9Cw7MP+C6jYYH 5XsS7YPZ7/pSucga725zGHgROCg9R6leSaD9zEE4YQ8nrhIayzYrxJpfW5lp9Ktl 4Q8+qFxWP4oUA4+Prnk6SqEKNlp0qADKYadMBHsDgMl9s7PIZd5j1eQUm/mF/qnn FKwK4Z+4WPO+GeAmt1AEN/eoYcel2kdUHfnLzYzZaZX+ULGzDYIqgZ4Sf1kUR+rP TNc16Z2YkRe3dLBHI0AYD3nlmkFgBaLidRavnmEGRo3hZheNLB7E8YAKMU0+fyM8 2sRshkOaPv8r45g8MlUbghi4AuWI8r8CAwEAAaOCArkwggK1MA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw ADAdBgNVHQ4EFgQUPqN/0gxOaMWbWbO9kW5CKQwm1CUwHwYDVR0jBBgwFoAUqEpq YwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJo dHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNo dHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzBvBgNVHREEaDBmgg5n Zm4tbGVpcHppZy5kZYIdZ2ZuLmlzcC12aG9zdDA0LmRvbXNlcnZpY2UuZGWCEnd3 dy5nZm4tbGVpcHppZy5kZYIhd3d3Lmdmbi5pc3Atdmhvc3QwNC5kb21zZXJ2aWNl LmRlMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIE AgSB9QSB8gDwAHYAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFw 2/R2OwAABAMARzBFAiBLgehF/69MpR+kb33IU/HHAO9uO8BPns8VAfjIg9n5QgIh AKJDaC5uQh29xCTpJSO10p98L27El7eJTZ0vDwwsBuCZAHYA8JWkWfIA0YJAEC0v k4iOrUv+HUfjmeHQNKawqKqOsnMAAAFw2/R4BQAABAMARzBFAiAMfm3Isi83VnPF 8u2hHmt0iP4H9G0W1+8JgKa2cu4tMAIhAO7f8PzZjuaeDlwNpi6AnSNhGl/frBYW 0uGlaauWRawJMA0GCSqGSIb3DQEBCwUAA4IBAQBcsqa+fWbCPNuFwg19Wd9Kn9r1 0dWlK3tWqfs5IgoZ79sYxTqsvafHTUhFeiKkSh8lLleFHWmFTzjgxznLRRAoKfqr da55dbgVLqbcrJle3zUuz9xPxTq4BRDGSVW8gi2sV1Z2c+dos4jIqJaFdxFcmc5R qNor141/Y+mmlVpwh/eMsyeIfNDwh4Bhisdc2yQv3BhFO91+tzI5GbvTdZjIIJPn GOcYFmjKY5cgVRydwoVE+apmUm/VxaLr+dm9ZLQWK0DdRI17AsEAbgjJmxwpopI+ cBvcwHlrOwDD5YH301vIvGTNQR6l8nrFTFKA3UEO5XpPxaRVx7C5IcWYaJba -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAy58VddBUHsdAtHqOGA+i U4o6TkNCrYegZkXqk3JV1+DM20DMkoDxnnY0QPvtzuUfgRYnnWFFUkA8WL93Sutu CmvpJo44Flmy3+DnkeYoijnyrO4Ws3O2mC1lL50tDAC6RQ4cfm28tO/6W6FewVyc 7+B4oYtOupgVReHReXH4v4cRfqXJ4mSuaGc7Lbw4f88ib3TZrV9ynlys0Ng27Vqs BPxTiSrqsDQJe4zZBeJPMshU6kTGa6c3t+Syoa01VuSnSrboa19HU6I3htnVv5dU hKc/wFCNEOwDvmk3A0uihJIyMy9jVVHlDc2+VuhAOKUPAFMBeOeAG6hZJNLrLLAB 827H+0Kr86uUKWhewp3dMcjgoVGR4giVSvILsInBZky9Cw7MP+C6jYYH5XsS7YPZ 7/pSucga725zGHgROCg9R6leSaD9zEE4YQ8nrhIayzYrxJpfW5lp9Ktl4Q8+qFxW P4oUA4+Prnk6SqEKNlp0qADKYadMBHsDgMl9s7PIZd5j1eQUm/mF/qnnFKwK4Z+4 WPO+GeAmt1AEN/eoYcel2kdUHfnLzYzZaZX+ULGzDYIqgZ4Sf1kUR+rPTNc16Z2Y kRe3dLBHI0AYD3nlmkFgBaLidRavnmEGRo3hZheNLB7E8YAKMU0+fyM82sRshkOa Pv8r45g8MlUbghi4AuWI8r8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 272766455803043681912495913563096636744468 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 01:09:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-13 01:09:56 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gfn.isp-vhost04.domservice.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 830702923148226949179970746205125207063632123992535664611711064625592065683473961740532942620244597357873866944671724876815272282224733292522243483367129728023301926771977156539255894433986321329027821229065388132700344380489225654012766043260911336824397914410122461227378247908896055736654527926485036290797374533800657222617698849505900113945573693434820475801626345767067486545088656018882351643720171738310482482761433168848461022600221423939943648144653036668545763366272573117277049675721267761561315197383216200513980798998938443425186484599874356788871254877232975329944134589987773878850438649025800509421439570389559555738190426197087558852700065858360322573895333111829674771624988060083087051084937371601005040706420356698153782613264023851706738245906717918873084479012633394577077828617418040744883369435169098706983701545066733410349406384346082592561938948250227481864134135770056992334542755214704520344078472692883214813977687602282068898413897636572668097519895310077706233803844289535554710325303374274793167459164371942651927957611601198575100529512610381590168306580578880701646067186639139731267563123280126029645643558140918181307732875239458919221183589160830201124730182042496518372647154726672110272967359 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3ea37fd20c4e68c59b59b3bd916e42290c26d425 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfn-leipzig.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfn.isp-vhost04.domservice.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfn-leipzig.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfn.isp-vhost04.domservice.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170dbf4763b000004030047304502204b81e845ffaf4ca51fa46f7dc853f1c700ef6e3bc04f9ecf1501f8c883d9f942022100a243682e6e421dbdc424e92523b5d29f7c2f6ec497b7894d9d2f0f0c2c06e099007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170dbf47805000004030047304502200c7e6dc8b22f375673c5f2eda11e6b7488fe07f46d16d7ef0980a6b672ee2d30022100eedff0fcd98ee69e0e5c0da62e809d23611a5fdfac1616d2e1a569ab9645ac09 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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