cid3212q1338.hd106.hosting.punkt.de

Issued by R3

About this certificate

This digital certificate with serial number 04:45:43:25:e6:e4:3c:7f:55:62:2c:bf:b7:8b:88:b1:30:b0 was issued on by Let's Encrypt.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cid3212q1338.hd106.hosting.punkt.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:45:43:25:e6:e4:3c:7f:55:62:2c:bf:b7:8b:88:b1:30:b0
Serial Number (int): 372017882118324048648092251326361631797424
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bb:f4:d7:e8:9c:f5:ca:81:71:ac:a6:88:85:a5:2c:97:63:30:a6:5c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ea:48:68:af:54:3e:81:d9:98:f9:ca:2f:d5:b2:9e:66:92:0a:1a:58
Fingerprint (sha256): 02:65:0b:e1:14:f8:ce:03:bb:e4:c9:8e:93:3c:c8:3b:45:88:a4:09:62:8b:60:e6:5f:99:b1:71:ce:b9:8b:6f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cid3212q1338.hd106.hosting.punkt.de

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cid3212q1338.hd106.hosting.punkt.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amb.heidenhain.de
bimu.heidenhain.it
cid3212q1338.hd106.hosting.punkt.de
control.heidenhain.de
elevator.heidenhain.com
emo.heidenhain.de
foeps.heidenhain.de
imts.heidenhain.com
klartext-portal.com
klartext-portal.de
klartext-portal.fr
klartext-portal.it
klartext-portal.nl
mecspe.heidenhain.it
metav.heidenhain.de
metrology.heidenhain.com
novinky.heidenhain.cz
relaunch.klartext-portal.de
semiconductor.heidenhain.com
structural-monitoring.heidenhain.com
tnc-club.co.uk
tnc-club.de
tnc-club.fr
tnc-club.it
tnc-club.nl
tnc-club.uk
training.heidenhain.com
training.heidenhain.de
training.heidenhain.it
www.amb.heidenhain.de
www.bimu.heidenhain.it
www.control.heidenhain.de
www.elevator.heidenhain.com
www.emo.heidenhain.de
www.foeps.heidenhain.de
www.imts.heidenhain.com
www.klartext-portal.com
www.klartext-portal.de
www.klartext-portal.fr
www.klartext-portal.it
www.klartext-portal.nl
www.mecspe.heidenhain.it
www.metav.heidenhain.de
www.metrology.heidenhain.com
www.novinky.heidenhain.cz
www.relaunch.klartext-portal.de
www.semiconductor.heidenhain.com
www.structural-monitoring.heidenhain.com
www.tnc-club.co.uk
www.tnc-club.de
www.tnc-club.fr
www.tnc-club.it
www.tnc-club.nl
www.tnc-club.uk
www.training.heidenhain.com
www.training.heidenhain.de
www.training.heidenhain.it

Other certificates including the domain name punkt.de

(limited to 100 certificates)
vpro1127.proserver.punkt.de
vpro0128.proserver.punkt.de
vpro1563.proserver.punkt.de
vpro0037.proserver.punkt.de
vpro0063.proserver.punkt.de
vpro0171.proserver.punkt.de
vpro1125.proserver.punkt.de
vpro1506.proserver.punkt.de
hs15.hosting.punkt.de
cid3465j1450.hs15.hosting.punkt.de
vpro0404.proserver.punkt.de
vpro1824.proserver.punkt.de
vpro1510.proserver.punkt.de
cid1531e1485.hd71.hosting.punkt.de
cid3252p1515.hd80.hosting.punkt.de
vpro0257.proserver.punkt.de
vpro1029.proserver.punkt.de
cid3207u1219.hd116.hosting.punkt.de
vpro1011.proserver.punkt.de
vpro0027.proserver.punkt.de
cid3330u974.hd43.hosting.punkt.de
vpro0121.proserver.punkt.de
vpro1103.proserver.punkt.de
vpro0164.proserver.punkt.de
chat-madein.punkt.de
vpro1035.proserver.punkt.de
cid453r974.hd43.hosting.punkt.de
pl001.proserver.punkt.de
vpro0025.proserver.punkt.de
vpro0131.proserver.punkt.de
cid3212q1338.hd106.hosting.punkt.de
vpro0155.proserver.punkt.de
vpro1093.proserver.punkt.de
cid3341z974.hd43.hosting.punkt.de
hs13.hosting.punkt.de
vpro1146.proserver.punkt.de
cid532i974.hd43.hosting.punkt.de
vpro0031.proserver.punkt.de
vpro1020.proserver.punkt.de
vpro0043.proserver.punkt.de
cid1531e1485.hd71.hosting.punkt.de
vpro0202.proserver.punkt.de
vpro0022.proserver.punkt.de
cid2983x974.hd43.hosting.punkt.de
cid305x974.hd43.hosting.punkt.de
cid305x974.hd43.hosting.punkt.de
vpro0085.proserver.punkt.de
vpro1033.proserver.punkt.de
hs14.hosting.punkt.de
cid649v974.hd43.hosting.punkt.de
vpro0112.proserver.punkt.de
vpro0616.proserver.punkt.de
cid735b974.hd43.hosting.punkt.de
vpro1035.proserver.punkt.de
vpro0155.proserver.punkt.de
vpro0321.proserver.punkt.de
vpro0031.proserver.punkt.de
cid2612i974.hd43.hosting.punkt.de
vpro0335.proserver.punkt.de
vpro1523.proserver.punkt.de
vpro0326.proserver.punkt.de
nphi.hs14.hosting.punkt.de
cid3207u1219.hd116.hosting.punkt.de
vpro0163.proserver.punkt.de
cid3206a1450.hs15.hosting.punkt.de
vpro0036.proserver.punkt.de
hs15.hosting.punkt.de
vpro1559.proserver.punkt.de
vpro0023.proserver.punkt.de
cid3412v1219.hd116.hosting.punkt.de
vpro0326.proserver.punkt.de
piwik.vpro0050.proserver.punkt.de
cid3243x974.hd43.hosting.punkt.de
piwik.vpro0050.proserver.punkt.de
vpro0243.proserver.punkt.de
fusionpen.punkt.de
vpro0077.proserver.punkt.de
vpro1075.proserver.punkt.de
vpro1079.proserver.punkt.de
vpro0042.proserver.punkt.de
vpro0057.proserver.punkt.de
vpro1800.proserver.punkt.de
vpro0036.proserver.punkt.de
fusionpen.punkt.de
vpro1154.proserver.punkt.de
cid2749i1219.hd116.hosting.punkt.de
vpro1066.proserver.punkt.de
cid3207u1219.hd116.hosting.punkt.de
vpro1098.proserver.punkt.de
vpro0258.proserver.punkt.de
cid453r974.hd43.hosting.punkt.de
vpro1095.proserver.punkt.de
cid3354u1450.hs15.hosting.punkt.de
vpro0047.proserver.punkt.de
vpro1150.proserver.punkt.de
vpro1013.proserver.punkt.de
vpro1063.proserver.punkt.de
vpro1117.proserver.punkt.de
vpro0033.proserver.punkt.de
cid3236q1450.hs15.hosting.punkt.de

Certificate

The complete raw certificate details for cid3212q1338.hd106.hosting.punkt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 372017882118324048648092251326361631797424
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-18 22:07:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-18 22:07:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cid3212q1338.hd106.hosting.punkt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 692009758078024910713834423673722332977286170534306238533223061189937578811462047067750075251448514277483335545727010811096192833852359682633058947965654297513741144466901993169702514370449546244873671719079451330343457152234431351679822778922755861331360656732358514583614232721863501143652200909566302351184310232307757853793134304681569276251038671882107727380833058407203461143731710022127740635422007960172627390754794970130921687227156447604385489394492694245541256610225993249130296081368232925252110928444938927593517636162119213015678663689709932036750645936748740267251691077683649107987187207486128651797870062551928019306603167288893961266839066674562848836814454493373261887229799448614298474496230292310199369371373885372951192098132070999368938663493727357307900985887714096379833316972260068724193044579298345324039693149682456942966102113488068313816303324439931373779971455262262390783969461494977598713026278389268651221624349941348141490795905053496297634652263659620288928261752057631326132209613540869837373217879349940521899958741052749732466015755682851102673784932785072132067910367276988477901660890474654148877905727079844034250594896789610393192711604888172572795177686366975186206883345201819674358550877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bbf4d7e89cf5ca8171aca68885a52c976330a65c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1337 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amb.heidenhain.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bimu.heidenhain.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cid3212q1338.hd106.hosting.punkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'control.heidenhain.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elevator.heidenhain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emo.heidenhain.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foeps.heidenhain.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imts.heidenhain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klartext-portal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klartext-portal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klartext-portal.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klartext-portal.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klartext-portal.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mecspe.heidenhain.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metav.heidenhain.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrology.heidenhain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novinky.heidenhain.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relaunch.klartext-portal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semiconductor.heidenhain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'structural-monitoring.heidenhain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnc-club.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnc-club.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnc-club.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnc-club.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnc-club.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnc-club.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.heidenhain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.heidenhain.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.heidenhain.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amb.heidenhain.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bimu.heidenhain.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.control.heidenhain.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elevator.heidenhain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emo.heidenhain.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foeps.heidenhain.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imts.heidenhain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klartext-portal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klartext-portal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klartext-portal.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klartext-portal.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klartext-portal.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mecspe.heidenhain.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metav.heidenhain.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metrology.heidenhain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novinky.heidenhain.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.relaunch.klartext-portal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semiconductor.heidenhain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.structural-monitoring.heidenhain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tnc-club.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tnc-club.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tnc-club.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tnc-club.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tnc-club.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tnc-club.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.training.heidenhain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.training.heidenhain.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.training.heidenhain.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017717c101460000040300473045022100dad8075ffd3e1d735a27139f12eb96fa664c4a1d39f01364485877e599626fdd0220702ed682bcd61b8f44ba00be01fa1ea0514dd737fc20ad646efeacafd80646500075009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017717c10345000004030046304402203f224a1859720cccada185260e1cb95c2f8d80d79bd0947c421b56bce73a166c0220461d49ace45eab46afb230994fcba4bdd3e375dabf174a37c33d01db7802a3ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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