www.stern.de
- Gruner + Jahr AG & Co KG -
Issued by USERTrust Legacy Secure Server CA
About this certificate
This digital certificate with serial number f2:1e:91:41:71:51:b6:32:7f:ff:af:57:49:51:f9:61 was issued on by The USERTRUST Network.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Gruner + Jahr AG & Co KG
Organization:
Gruner + Jahr AG & Co KG
Organization unit: IT Betrieb, Onlinebetrieb
Organization unit: Issued through Gruner+Jahr AG & Co KG E-PKI Manager
Organization unit: PremiumSSL Legacy
Organization unit: IT Betrieb, Onlinebetrieb
Organization unit: Issued through Gruner+Jahr AG & Co KG E-PKI Manager
Organization unit: PremiumSSL Legacy
Address:
Am Baumwall 11
Postal code: 20459
State / Province: Hamburg
Locality: Hamburg
Country: DE
Postal code: 20459
State / Province: Hamburg
Locality: Hamburg
Country: DE
The USERTRUST Network
Organization:
The USERTRUST Network
State / Province:
UT
Locality: Salt Lake City
Country: US
Locality: Salt Lake City
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): f2:1e:91:41:71:51:b6:32:7f:ff:af:57:49:51:f9:61Serial Number (int): 321831890019999368494431786450776357217
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 73:54:a8:67:ab:92:83:27:a0:2d:77:29:74:a5:7f:ce:b8:b5:04:bc
AuthorityKeyId: af:a4:40:af:9f:16:fe:ab:31:fd:fb:d5:97:8b:f5:91:a3:24:86:16
Fingerprint (sha1): 67:1e:cc:8c:d3:61:05:df:1e:b2:e9:eb:09:9a:5d:77:d7:16:ca:89
Fingerprint (sha256): 06:a6:fe:42:bc:cd:b5:4b:b2:e6:c8:b2:61:92:60:23:bb:85:b1:45:23:72:6c:d0:74:aa:1b:2d:03:8c:7b:85
Issuing Certificate URL: http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.usertrust.comCRL Distribution Point: http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl
Check the revocation status for certificate www.stern.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.stern.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.stern.de
stern.de
stern.de
Other certificates including the domain name stern.de
(limited to 100 certificates)
abo.stern.de
commsvc.stern.de
static.stern.de
secure.stern.de
static.stern.de
static.stern.de
www.guj.digital
secure.stern.de
getsomelorem.com
wefind.stern.de
ssl.1.damoh.aws.stern.de
andreyneto.com.br
static.stern.de
serviceportal.dpv.de
quizbattle.stern.de
www.stern.de
stern.de
gutscheine.stern.de
www.stage.stern.de
mobile.stern.de
commsvc.stern.de
wap.stern.de
blog.stern.de
static.stern.de
*.stage.mobile-toolkit.guj.digital
tausendreporter.stern.de
neon.stern.de
www.guj.digital
www.view.stern.de
ssgtm.stern.de
view-s3.stern.de
www.stage.stern.de
*.gws.stern.de
ssl.1.damoh.aws.stern.de
*.aws.stern.de
static.stern.de
blogs.stern.de
krankenkassenvergleich.stern.de
serviceportal.dpv.de
aktion.art-magazin.de
serviceportal.dpv.de
www.guj.digital
serviceportal.dpv.de
*.brigitte.de
jungefotografie.stern.de
static.stern.de
static.stern.de
hheezd.stern.de
lbm.stern.de
newsletter.stern.de
www.guj.digital
www.stage.stern.de
*.coremedia-dev.guj.digital
*.aws.stern.de
insider.stern.de
www.guj.digital
www.stage.stern.de
augenzeuge.stern.de
static.stern.de
view-s3.stern.de
baeume.stern.de
www.guj.digital
secure.stern.de
stern.de
neon.stern.de
*.stern.de
commsvc.stern.de
oc.stern.de
static.stern.de
*.stern.de
www.guj.digital
tausendreporter.stern.de
static.stern.de
abo.stern.de
static.stern.de
static.stern.de
static.stern.de
*.coremedia.guj.digital
gewinnspiele.stern.de
neon.stern.de
stage.serviceportal.dpv.de
ssl.1.damoh.aws.stern.de
commsvc.stern.de
quizbattle.stern.de
secure.stern.de
dev.serviceportal.dpv.de
serviceportal.dpv.de
dev.serviceportal.dpv.de
reisewelten.stern.de
commsvc.stern.de
picturedesk-new.stern.de
commsvc.stern.de
form.ipstar.app
static.stern.de
serviceportal.dpv.de
wetter.stern.de
view.stern.de
*.stern.de
static.stern.de
stern.de
commsvc.stern.de
static.stern.de
secure.stern.de
static.stern.de
static.stern.de
www.guj.digital
secure.stern.de
getsomelorem.com
wefind.stern.de
ssl.1.damoh.aws.stern.de
andreyneto.com.br
static.stern.de
serviceportal.dpv.de
quizbattle.stern.de
www.stern.de
stern.de
gutscheine.stern.de
www.stage.stern.de
mobile.stern.de
commsvc.stern.de
wap.stern.de
blog.stern.de
static.stern.de
*.stage.mobile-toolkit.guj.digital
tausendreporter.stern.de
neon.stern.de
www.guj.digital
www.view.stern.de
ssgtm.stern.de
view-s3.stern.de
www.stage.stern.de
*.gws.stern.de
ssl.1.damoh.aws.stern.de
*.aws.stern.de
static.stern.de
blogs.stern.de
krankenkassenvergleich.stern.de
serviceportal.dpv.de
aktion.art-magazin.de
serviceportal.dpv.de
www.guj.digital
serviceportal.dpv.de
*.brigitte.de
jungefotografie.stern.de
static.stern.de
static.stern.de
hheezd.stern.de
lbm.stern.de
newsletter.stern.de
www.guj.digital
www.stage.stern.de
*.coremedia-dev.guj.digital
*.aws.stern.de
insider.stern.de
www.guj.digital
www.stage.stern.de
augenzeuge.stern.de
static.stern.de
view-s3.stern.de
baeume.stern.de
www.guj.digital
secure.stern.de
stern.de
neon.stern.de
*.stern.de
commsvc.stern.de
oc.stern.de
static.stern.de
*.stern.de
www.guj.digital
tausendreporter.stern.de
static.stern.de
abo.stern.de
static.stern.de
static.stern.de
static.stern.de
*.coremedia.guj.digital
gewinnspiele.stern.de
neon.stern.de
stage.serviceportal.dpv.de
ssl.1.damoh.aws.stern.de
commsvc.stern.de
quizbattle.stern.de
secure.stern.de
dev.serviceportal.dpv.de
serviceportal.dpv.de
dev.serviceportal.dpv.de
reisewelten.stern.de
commsvc.stern.de
picturedesk-new.stern.de
commsvc.stern.de
form.ipstar.app
static.stern.de
serviceportal.dpv.de
wetter.stern.de
view.stern.de
*.stern.de
static.stern.de
stern.de
Certificate
The complete raw certificate details for www.stern.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIRAPIekUFxUbYyf/+vV0lR+WEwDQYJKoZIhvcNAQEFBQAw fzELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAlVUMRcwFQYDVQQHEw5TYWx0IExha2Ug Q2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMSowKAYDVQQDEyFV U0VSVHJ1c3QgTGVnYWN5IFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTIwODA5MDAwMDAw WhcNMTQwODA5MjM1OTU5WjCCARIxCzAJBgNVBAYTAkRFMQ4wDAYDVQQREwUyMDQ1 OTEQMA4GA1UECBMHSGFtYnVyZzEQMA4GA1UEBxMHSGFtYnVyZzEXMBUGA1UECRMO QW0gQmF1bXdhbGwgMTExITAfBgNVBAoUGEdydW5lciArIEphaHIgQUcgJiBDbyBL RzEiMCAGA1UECxMZSVQgQmV0cmllYiwgT25saW5lYmV0cmllYjE8MDoGA1UECxQz SXNzdWVkIHRocm91Z2ggR3J1bmVyK0phaHIgQUcgJiBDbyBLRyBFLVBLSSBNYW5h Z2VyMRowGAYDVQQLExFQcmVtaXVtU1NMIExlZ2FjeTEVMBMGA1UEAxMMd3d3LnN0 ZXJuLmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscsIXiZu+wyD 5hN33cdwTUdi4syf5vMUq3rsJsGRf1sO2BIy158k7WaXDULLBZyN7CStMmIMeSU9 cy9Q91IjmuvgTFeqO3VT4umiqbCREUIvCvVN/hNl/Gj9A+st42wS5ScQqr+d1u0k 6oJRYaCfsS3AYO9DwlU4VLruBnCTv77EFkPDnBmSSSmG+7SdtDXmQxa5Mfi9/nvT aEVHDbRQq2nVBHY0OoAbJThn0YTB+VLMNO12P9ZhVihlJwOf9/nMcI3Hishc23ni 1yUCsWLht1j/lmJoL7GZASbzPxpEOdrmabmgSrJXPVPMrvCOGkCnyC9YelYXpjed HL3KatyCpwIDAQABo4IBtDCCAbAwHwYDVR0jBBgwFoAUr6RAr58W/qsx/fvVl4v1 kaMkhhYwHQYDVR0OBBYEFHNUqGerkoMnoC13KXSlf864tQS8MA4GA1UdDwEB/wQE AwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjBCBgNVHSAEOzA5MDcGDCsGAQQBsjEBAgEDBDAnMCUGCCsGAQUFBwIBFhlodHRw czovL2Nwcy51c2VydHJ1c3QuY29tMEsGA1UdHwREMEIwQKA+oDyGOmh0dHA6Ly9j cmwudXNlcnRydXN0LmNvbS9VU0VSVHJ1c3RMZWdhY3lTZWN1cmVTZXJ2ZXJDQS5j cmwwfQYIKwYBBQUHAQEEcTBvMEYGCCsGAQUFBzAChjpodHRwOi8vY3J0LnVzZXJ0 cnVzdC5jb20vVVNFUlRydXN0TGVnYWN5U2VjdXJlU2VydmVyQ0EuY3J0MCUGCCsG AQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMCEGA1UdEQQaMBiCDHd3 dy5zdGVybi5kZYIIc3Rlcm4uZGUwDQYJKoZIhvcNAQEFBQADggEBAMfwCFYgkqM4 oX2TVYoLsEW3TwRz3uZhe4b6p6B+Cr3DDWCxwASGp46tvvptKe3XkdcU3aiAFB+l hqwsi9NlK2I5gHV27vSO89KgPOA8Dv51JqC6voHiUJEXiYOFGHB8N1WAjaXeUaSY 1xuW3QMV2MX7EaoukqWjHAnTlNamvMqxBVPT4BtZlSx4V/Ydr4brPgS2lrYcLn06 PzQGxbp0qOu8hhbtFwohSv63v5RX1wMURaw46Drd4TcsHSKFHtXIq1+O3S83lZJz KLSGUNcP7l+rq9ukE2cReEG6Akoc2Czn4hn+ryB6cORevtLWENxGtsgSJrsq+xZ3 sUQszzEJ/Jo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscsIXiZu+wyD5hN33cdw TUdi4syf5vMUq3rsJsGRf1sO2BIy158k7WaXDULLBZyN7CStMmIMeSU9cy9Q91Ij muvgTFeqO3VT4umiqbCREUIvCvVN/hNl/Gj9A+st42wS5ScQqr+d1u0k6oJRYaCf sS3AYO9DwlU4VLruBnCTv77EFkPDnBmSSSmG+7SdtDXmQxa5Mfi9/nvTaEVHDbRQ q2nVBHY0OoAbJThn0YTB+VLMNO12P9ZhVihlJwOf9/nMcI3Hishc23ni1yUCsWLh t1j/lmJoL7GZASbzPxpEOdrmabmgSrJXPVPMrvCOGkCnyC9YelYXpjedHL3KatyC pwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 321831890019999368494431786450776357217 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salt Lake City' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The USERTRUST Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USERTrust Legacy Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-08-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-09 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '20459' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamburg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamburg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Am Baumwall 11' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Gruner + Jahr AG & Co KG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Betrieb, Onlinebetrieb' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Issued through Gruner+Jahr AG & Co KG E-PKI Manager' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PremiumSSL Legacy' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.stern.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22444299128255007194917146823922767098148228286791381512324288394966503093804162394570909407716846127291730562503586647355651874410720622722081278779021808626060176531632515613870952624168888002048529345181546826233408500100620166777984480334558474233008468243262819407090444365062831088829923955666921193062844707315511998032606919918422551546215616836679396215613586909264065112995884953839632224107385982416520531706210002493418377945381395376315970420217372112558535430880689861846994839597676414464324717822953470333623780059927598029679448102644835794094444270845358861613830885375442247791659787767555464921767 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName afa440af9f16feab31fdfbd5978bf591a3248616 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7354a867ab928327a02d772974a57fceb8b504bc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stern.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stern.de' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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