publikationen.sachsen-anhalt.de

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 84:bc:d2:a2:6d:e3:dc:76:a5:41:45:2d:90:fd:d9:24 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=publikationen.sachsen-anhalt.de

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 84:bc:d2:a2:6d:e3:dc:76:a5:41:45:2d:90:fd:d9:24
Serial Number (int): 176438519428001870319907024628875122980
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9d:25:e4:34:86:ad:75:14:1a:9e:c9:b7:e0:28:58:2d:a5:17:d5:9c
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): f8:70:76:d8:eb:24:6b:63:2d:70:e2:ef:05:61:e6:77:51:1d:71:c4
Fingerprint (sha256): 0b:4f:b9:59:fa:76:c2:8d:76:7a:ac:63:76:58:4e:c9:39:5a:40:39:2c:20:2f:88:4c:ba:9e:12:96:37:46:9e

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate publikationen.sachsen-anhalt.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for publikationen.sachsen-anhalt.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

publikationen.sachsen-anhalt.de
www.publikationen.sachsen-anhalt.de

Other certificates including the domain name sachsen-anhalt.de

(limited to 100 certificates)
www.handelsregister.sachsen-anhalt.de
*.serviceportal-stage.sachsen-anhalt.de
stage.onlineservice.sachsen-anhalt.de
portal.llg.sachsen-anhalt.de
eduklifd.sachsen-anhalt.de
www.erv.justiz.sachsen-anhalt.de
topqw.sachsen-anhalt.de
*.sachsen-anhalt.de
www.eshop.sachsen-anhalt.de
www.eshop.sachsen-anhalt.de
www.erv.justiz.sachsen-anhalt.de
publikationen.sachsen-anhalt.de
www.rechtsprechung-im-internet.de
efoerderung.sachsen-anhalt.de
www.polizei.sachsen-anhalt.de
stage.onlineservice.sachsen-anhalt.de
www.efoerderung.sachsen-anhalt.de
*.sachsen-anhalt.de
*.sachsen-anhalt.de
www.erv.justiz.sachsen-anhalt.de
www.rechtsprechung-im-internet.de
www.polizei.sachsen-anhalt.de
sibbw.lsbb.sachsen-anhalt.de
recherche.lha.sachsen-anhalt.de
www.service.sachsen-anhalt.de
www.inet17.sachsen-anhalt.de
www.umwelt.sachsen-anhalt.de
*.sachsen-anhalt.de
www.geodatenportal.sachsen-anhalt.de
www.eshop.sachsen-anhalt.de
sibbw-qs.lsbb.sachsen-anhalt.de
www.statistik.sachsen-anhalt.de
www.eshop.sachsen-anhalt.de
www.evaluation.sachsen-anhalt.de
*.sachsen-anhalt.de
idp.serviceportal.sachsen-anhalt.de
efoerderung.sachsen-anhalt.de
idev.sachsen-anhalt.de
lasaap.sachsen-anhalt.de
stage.onlineservice.sachsen-anhalt.de
www.invekos.sachsen-anhalt.de
www.stala.sachsen-anhalt.de
wahlergebnisse.sachsen-anhalt.de
mail.lt.sachsen-anhalt.de
www.eshop.sachsen-anhalt.de
www.kassenshop.sachsen-anhalt.de
portal.mlu.sachsen-anhalt.de
recherche.landesarchiv.sachsen-anhalt.de
afm.sachsen-anhalt.de
erv.justiz.sachsen-anhalt.de
*.sachsen-anhalt.de
www.erv.justiz.sachsen-anhalt.de
www.lvermgeo.sachsen-anhalt.de
www.eshop.sachsen-anhalt.de
stage.afm.sachsen-anhalt.de
buerger.sachsen-anhalt.de
stage.afm.sachsen-anhalt.de
www.vdi-stk.sachsen-anhalt.de
www.lvermgeo.sachsen-anhalt.de
www.luesa.sachsen-anhalt.de
mx06.sachsen-anhalt.de
www.polizei.sachsen-anhalt.de
serviceportal-Stage.sachsen-anhalt.de
mx07.sachsen-anhalt.de
www.evaluation.sachsen-anhalt.de
sps.sachsen-anhalt.de
intern.lvermgeo.sachsen-anhalt.de
klifd.sachsen-anhalt.de
*.sachsen-anhalt.de
www.fortbildung.sachsen-anhalt.de
www.landesrecht.sachsen-anhalt.de
sapos-gpps.sachsen-anhalt.de
lst3-sen2.sachsen-anhalt.de
www.statistik.sachsen-anhalt.de
*.serviceportal-stage.sachsen-anhalt.de
intern.lvermgeo.sachsen-anhalt.de
www.statistik.sachsen-anhalt.de
www.samson.sachsen-anhalt.de
efoerderung.sachsen-anhalt.de
www.landesrecht.sachsen-anhalt.de
fischerpruefung.sachsen-anhalt.de
idp.serviceportal.sachsen-anhalt.de
www.eshop.sachsen-anhalt.de
fischerpruefung.sachsen-anhalt.de
onlineservice.sachsen-anhalt.de
www.efoerderung.sachsen-anhalt.de
www.samson.sachsen-anhalt.de
www.invekos.sachsen-anhalt.de
stage.afm.sachsen-anhalt.de
lst3-sen1.sachsen-anhalt.de
portal.mlu.sachsen-anhalt.de
www.landesforstbetrieb.sachsen-anhalt.de
onlineservice.sachsen-anhalt.de
www.handelsregister.sachsen-anhalt.de
www.gfds.sachsen-anhalt.de
www.eshop.sachsen-anhalt.de
*.serviceportal.sachsen-anhalt.de
*.serviceportal.sachsen-anhalt.de
www.service.sachsen-anhalt.de
bafoeg-qs.sachsen-anhalt.de

Certificate

The complete raw certificate details for publikationen.sachsen-anhalt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHbjCCBlagAwIBAgIRAIS80qJt49x2pUFFLZD92SQwDQYJKoZIhvcNAQELBQAw
gY8xCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE3MDUGA1UE
AxMuU2VjdGlnbyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD
QTAeFw0yMzEyMDcwMDAwMDBaFw0yNTAxMDUyMzU5NTlaMCoxKDAmBgNVBAMTH3B1
Ymxpa2F0aW9uZW4uc2FjaHNlbi1hbmhhbHQuZGUwggIiMA0GCSqGSIb3DQEBAQUA
A4ICDwAwggIKAoICAQCeV3ISHLviW3VGxgX+ajJXmCRwp9Zk2gGXSxtHoxLvGqRw
0IcCW31RqdqPvb2apqNwysDxxscqIe8djxqiePlklwBDez/OV2u+CZkgvwuKiBz1
hv2qXIBHlfKM/eexGygcGQVc0qsVENP2KytgvjOZ4QE9HAnKnUXb2TN2BBVfGw5b
XTLdLXzuyl6ob3tYCVmGbGoFXPUC+WONRnAGYh4G6w2p/VaMenVgRG2IEA+u6xJ4
vgTHEQN6hn/yemWMYnB0g3qxm8Urs7EbH2eIoZHtWES2UyqWQJSxZQALJ2js/USO
RUvQ+dG5TROjcTWrw3rzWjUvi9JeonbffS2pT2cqJsuar6fmyV9rhYRtjvT0nwTc
apaz6kx21VdEYsZcLcdvIYJ9nh6BwlYzNGjYE6SMUya/d5BUsqGtf4Mv+OAqEfLj
iXTFNdtTKWBQQM7ky8fjWDHYrOt24Ge+lNssGCK7u3oP+LyWB5+Bajv1p9/FLBQA
OU9gxqBPVUbpell+drR+ncuGF0h35RkB8nCeYv7gyGd9m2qmgMrHVO4rObQdEDGv
GoMehfmOzKbCMnftC/Dy+A1J/Ou+OOZMjfl1GtASqJL6TP2qMg6UcMq/nc5qdLGi
mmkPY4uj9USZEzD0shSMUDRmYHf+Tn/BOcUzFpttXTv7Ookf4oorDD3D9N3jRwID
AQABo4IDJzCCAyMwHwYDVR0jBBgwFoAUjYxexFStiuF36Zv5mwXhuAGNYeEwHQYD
VR0OBBYEFJ0l5DSGrXUUGp7Jt+AoWC2lF9WcMA4GA1UdDwEB/wQEAwIFoDAMBgNV
HRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNVHSAE
QjBAMDQGCysGAQQBsjEBAgIHMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGln
by5jb20vQ1BTMAgGBmeBDAECATCBhAYIKwYBBQUHAQEEeDB2ME8GCCsGAQUFBzAC
hkNodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3RpZ29SU0FEb21haW5WYWxpZGF0
aW9uU2VjdXJlU2VydmVyQ0EuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5z
ZWN0aWdvLmNvbTBPBgNVHREESDBGgh9wdWJsaWthdGlvbmVuLnNhY2hzZW4tYW5o
YWx0LmRlgiN3d3cucHVibGlrYXRpb25lbi5zYWNoc2VuLWFuaGFsdC5kZTCCAX8G
CisGAQQB1nkCBAIEggFvBIIBawFpAHcAzxFW7tUufK/zh1vZaS6b6RpxZ0qwF+ys
AdJbd87MOwgAAAGMQ8EDGwAABAMASDBGAiEAhRlmcWCU6QleIU1j25IjjEU/xRVS
bbWUgRWEflfjd9YCIQCeu5WsxJgeVWdpGTdpwaUtpNZoY5ZvH+ikqMqT0fmbDgB1
AKLjCuRF772tm3447Udnd1PXgluElNcrXhssxLlQpEfnAAABjEPBAuEAAAQDAEYw
RAIgQ/7tWrLuGnM9sWNkLRudr6H/m3pKIr9Iz6VnACppNCoCICal5t+zVRR4hLV6
DLh99SIGqy3Qwu2PbHqD6QSVkooFAHcATnWjJ1yaEMM4W2zU3z9S6x3w4I4bjWnA
sfpksWKaOd8AAAGMQ8ECwgAABAMASDBGAiEA7pXVr2V7ajGY5bMUkmffsLGNE3fb
5HdRP5Napj3oYAMCIQDmeQg/J6IvVj3c4PBqlPxftRIn2BKrRwLqhe0exHHpKjAN
BgkqhkiG9w0BAQsFAAOCAQEAOW0586pCwOuM/rW8a5VQyvXR1p/AYpgDtE/7l0vc
wUDGLMn5UmKvKoSyLKiPbp2YI4mXb7kk6nywaqEjQ10YeqR2rdeZDbRpNnKR/Wau
O5LEeUyMmWfA59ge+fUGlIlH/N4ZrB6azgyuybw4X/b+YBUEnAWGjFcY+gs9Ly/S
Wjd7CApTZXKHyndGPuwa+wV1CcINTPTEWTSCQ7WEDFAQ0D9EP9k7bAXwBfiiB+kf
nBv3QiBjIiuabzwVXLJcY48pi0OhW5ihXmebZw7YjRYhNmVNrm1EkV7aichKyGJO
sLh//qgBF3rS6INq8sGGuXhjMnjOpzgaQybOUufWc5VfnQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 176438519428001870319907024628875122980
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'publikationen.sachsen-anhalt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 645977305239022272941237187605186156306843373404749726801173339809658082943065647818092329464576592980262725999001833155186995305706702979135636272149313361030723989813770579019415252498066156603180472650765494798258224350075523437137224945649148986769742301559354059884352032597979516847915069909922330005830111838654653058160226844290956071182085043108998011922276694089553914262143938099216975340134929591132770078866823634873821880202801885417032375404788759368909679641448346702643435640614444540285486107405336453136404490647533346884430794406105582284453627824782109859707887583458644486809723596684713541141006981592523466942513098092065890327762855960080821357144036384250118039464957594290832245990348861593214089422504281671740801764825120582216034738627031798350421291982773290274468946262093676924400374059014668757117730275381052585706050768649020567007668653788753253519179914408044927355480841797037196766398368289454697329953407762552112349465934512708536144108208880987188246855822622516912033222990647168581990697685850481740223953594777353780684927657191125830886798294509611671804312070745282426707121040835605536326922341922965188452716818206421964275817110447651304158668664194771973569181614982845467021140807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d25e43486ad75141a9ec9b7e028582da517d59c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publikationen.sachsen-anhalt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publikationen.sachsen-anhalt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00396d39f3aa42c0eb8cfeb5bc6b9550caf5d1d69fc0629803b44ffb974bdcc140c62cc9f95262af2a84b22ca88f6e9d982389976fb924ea7cb06aa123435d187aa476add7990db469367291fd66ae3b92c4794c8c9967c0e7d81ef9f506948947fcde19ac1e9ace0caec9bc385ff6fe6015049c05868c5718fa0b3d2f2fd25a377b080a53657287ca77463eec1afb057509c20d4cf4c459348243b5840c5010d03f443fd93b6c05f005f8a207e91f9c1bf7422063222b9a6f3c155cb25c638f298b43a15b98a15e679b670ed88d162136654dae6d44915eda89c84ac8624eb0b87ffea801177ad2e8836af2c186b978633278cea7381a4326ce52e7d673955f9d