*.chip.de
Issued by R3
About this certificate
This digital certificate with serial number 03:1a:18:bd:ee:da:eb:3f:cd:f9:11:4c:5f:1c:00:70:ef:24 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.chip.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:1a:18:bd:ee:da:eb:3f:cd:f9:11:4c:5f:1c:00:70:ef:24Serial Number (int): 270217086995788272262812374980105321115428
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 67:57:d1:9f:f8:b8:e7:0e:8d:24:21:55:7a:2a:f1:31:f6:12:af:80
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 37:70:7c:13:b3:c8:ec:cc:39:22:1e:e0:76:e8:c3:ef:00:7b:02:5f
Fingerprint (sha256): 0b:c6:2a:29:05:ff:e6:60:0a:17:00:14:fc:e8:b6:61:0c:8b:e6:05:47:1e:33:a3:30:6e:3f:1d:a8:3f:57:8c
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate *.chip.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.chip.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.chip.de
chip.de
chip.de
Other certificates including the domain name chip.de
(limited to 100 certificates)
ssl.1.damoh.chip.de
prd-log-elasticsearch-ber-46.int.chip.de
suche.chip.de
testcenter.chip.de
pub.chip.de
asus-t300-chi-testblog.chip.de
data-6314dfb442.chip.de
bfops.io
*.chip.de
www.tarife.chip.de
testcenter.chip.de
api.docker1.chdi-server.de
bfops.io
np-develop.gutscheine.chip.de
forum.chip.de
kzsicw.chip.de
behave.chip.de
ops-infra-prometheus-ber-12.int.chip.de
mms.burda-forward.de
data-45ccb8748c.chip.de
nokia-8-testblog.chip.de
api.docker1.chdi-server.de
api.docker1.chdi-server.de
consent.planetradio.co.uk
dl.cdn.chip.de
handy-software.chip.de
branded-stories.chip.de
asus-t300-chi-testblog.chip.de
dl.cdn.chip.de
prospekte.chip.de
branded-stories.chip.de
api.docker1.chdi-server.de
api.docker1.chdi-server.de
jobs.chip.de
info.chip.de
kuendigen.chip.de
branded-stories.chip.de
branded-stories.chip.de
tags.fitforfun.de
api.docker1.chdi-server.de
branded-stories.chip.de
stg-log-elasticsearch-fra-26.int.chip.de
*.chip.de
stage.contentlounge.net
*.stg.int.chip.de
damoh.chip.de
gutscheine.chip.de
digito.chip.de
branded-story.chip.de
gopro-max-testblog.chip.de
autodiscover.chip.de
api.docker1.chdi-server.de
ops-log-elasticsearch-fra-75.int.chip.de
huawei-p9-testblog.chip.de
data-c66a1ae096.chip.de
testcenter.chip.de
www.tarife.chip.de
testcenter.chip.de
ops-log-elasticsearch-ber-b6.int.chip.de
mms.chip.de
acer-switch-alpha-12-testblog.chip.de
fsm.chip.de
*.chip.de
ssl.1.damoh.chip.de
kzsicw.chip.de
*.chip.de
bfops.io
pub.chip.de
acer-aspire-5-testblog.chip.de
data-c66a1ae096.chip.de
suche.chip.de
nokia-8-testblog.chip.de
data-1818d50639.chip.de
rt.chip.de
prd-infra-haproxy-ber-7b.int.chip.de
api.docker1.chdi-server.de
s.burda-forward.com
cmp.bestcheck.de
acer-aspire-5-testblog.chip.de
tags.fitforfun.de
mms.chip.de
api.docker1.chdi-server.de
damoh.chip.de
*.chip.de
np-staging.gutscheine.chip.de
forum.chip.de
ssl.1.damoh.chip.de
ssl.1.damoh.chip.de
bfops.io
cmp.bestcheck.de
info.chip.de
testcenter.chip.de
branded-stories.chip.de
api.docker1.chdi-server.de
nokia-8-testblog.chip.de
promo.chip.de
*.chip.de
forum.chip.de
sparalarm.chip.de
lumeo.chip.de
prd-log-elasticsearch-ber-46.int.chip.de
suche.chip.de
testcenter.chip.de
pub.chip.de
asus-t300-chi-testblog.chip.de
data-6314dfb442.chip.de
bfops.io
*.chip.de
www.tarife.chip.de
testcenter.chip.de
api.docker1.chdi-server.de
bfops.io
np-develop.gutscheine.chip.de
forum.chip.de
kzsicw.chip.de
behave.chip.de
ops-infra-prometheus-ber-12.int.chip.de
mms.burda-forward.de
data-45ccb8748c.chip.de
nokia-8-testblog.chip.de
api.docker1.chdi-server.de
api.docker1.chdi-server.de
consent.planetradio.co.uk
dl.cdn.chip.de
handy-software.chip.de
branded-stories.chip.de
asus-t300-chi-testblog.chip.de
dl.cdn.chip.de
prospekte.chip.de
branded-stories.chip.de
api.docker1.chdi-server.de
api.docker1.chdi-server.de
jobs.chip.de
info.chip.de
kuendigen.chip.de
branded-stories.chip.de
branded-stories.chip.de
tags.fitforfun.de
api.docker1.chdi-server.de
branded-stories.chip.de
stg-log-elasticsearch-fra-26.int.chip.de
*.chip.de
stage.contentlounge.net
*.stg.int.chip.de
damoh.chip.de
gutscheine.chip.de
digito.chip.de
branded-story.chip.de
gopro-max-testblog.chip.de
autodiscover.chip.de
api.docker1.chdi-server.de
ops-log-elasticsearch-fra-75.int.chip.de
huawei-p9-testblog.chip.de
data-c66a1ae096.chip.de
testcenter.chip.de
www.tarife.chip.de
testcenter.chip.de
ops-log-elasticsearch-ber-b6.int.chip.de
mms.chip.de
acer-switch-alpha-12-testblog.chip.de
fsm.chip.de
*.chip.de
ssl.1.damoh.chip.de
kzsicw.chip.de
*.chip.de
bfops.io
pub.chip.de
acer-aspire-5-testblog.chip.de
data-c66a1ae096.chip.de
suche.chip.de
nokia-8-testblog.chip.de
data-1818d50639.chip.de
rt.chip.de
prd-infra-haproxy-ber-7b.int.chip.de
api.docker1.chdi-server.de
s.burda-forward.com
cmp.bestcheck.de
acer-aspire-5-testblog.chip.de
tags.fitforfun.de
mms.chip.de
api.docker1.chdi-server.de
damoh.chip.de
*.chip.de
np-staging.gutscheine.chip.de
forum.chip.de
ssl.1.damoh.chip.de
ssl.1.damoh.chip.de
bfops.io
cmp.bestcheck.de
info.chip.de
testcenter.chip.de
branded-stories.chip.de
api.docker1.chdi-server.de
nokia-8-testblog.chip.de
promo.chip.de
*.chip.de
forum.chip.de
sparalarm.chip.de
lumeo.chip.de
Certificate
The complete raw certificate details for *.chip.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgISAxoYve7a6z/N+RFMXxwAcO8kMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTAzMDgwNzM5NDNaFw0yMTA2MDYwNzM5NDNaMBQxEjAQBgNVBAMM CSouY2hpcC5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK3qmJCd QwOTOpyE1jdAGhNgdhYsG4EBsoRLjGYDXPED0nrruz6FWV1/LnPl4KZ8rZiI7n4d oKRDiwT/sHN6TM0tPoDGGjKjYWfPkmaEHRuJ7nR3Bl0ldV8zjvvesV5UJZTqOLHr QifhDa9hif8ibQ4ezk19fF2SAeRGmZXv215xL2fDilDN8uF3743+lccOBC4bFH3J prAwgQMgQbV+OZvJZcyztKeDR+iWpRpzsYmCYDhcunx35C21Ll5vESGu6J29iUmf FAFnBNBHuk7GL+O0iIKD+vJXNCZdYXj+EHD5/4jvsyxTcHEpK1/sPRjydVZrcmSe MxaXCmcIv46YZI19yLeK2L3sN2LqAetynTNNFCI/8qd3KmHOpyYR0ogTYeQvc8dt WSzJJi/XgEihaBprBgb9G8tnztTtdHC28fgzZ9QyRG/9rWTnuNvR25jorbo1P4Z0 W9ArTX0MHJWcJdePthp5x7vHroOu5LT0dcfqvCrG0ztl7VP3/7XbS02G9VQfUImc LTGN+Nn9rF7KqkBYukKM5LQ3pOjtTyPFQ3zXjrMHETfDHsNJyIF50FatIsE8WCuy gMbLVtk0CnIjwywePhRmFIcutX/3AzjhOyCBNp3iYOG9w2aXAptYcV4WOVaup1a/ MxnCMiFgMAdouG7zrIzCY9pzyNS95ka0xXSzAgMBAAGjggJMMIICSDAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB /wQCMAAwHQYDVR0OBBYEFGdX0Z/4uOcOjSQhVXoq8TH2Eq+AMB8GA1UdIwQYMBaA FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu aS5sZW5jci5vcmcvMB0GA1UdEQQWMBSCCSouY2hpcC5kZYIHY2hpcC5kZTBMBgNV HSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpo dHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA 7wB2AJQgvB6O1Y1siHMfgosiLA3R2k1ebE+UPWHbTi9YTaLCAAABeBD9+kEAAAQD AEcwRQIgTNX6MPS6CsTMpe5vT1yBpbrWjhtX5a8taRA/eabeRoMCIQDLavGRccSO EbOjfbZxBOSoAJb3bd++RwHMEDczaj7wVQB1APZclC/RdzAiFFQYCDCUVo7jTRMZ M7/fDC8gC8xO8WTjAAABeBD9+tkAAAQDAEYwRAIgXDItX4VuCnXWC6ZoSo0g8CO3 pOWPQJTLnrGat7PR6T8CIGGs/Z2wqJ5L2s/vIMqq+fKrIflsHyDHgOk+SQdzrWhF MA0GCSqGSIb3DQEBCwUAA4IBAQACRQjCqAEc9TKZGPgIiJYKXXoBDPaLJZg2RghX 2NeWXk1tHcuZbrZF62seFmc4zxZsk4uLhyjJBJGnl6htj0ajFBe5XafY9lpB1byy 47HzenwF4i7E1VMyWJ0MMefvwmqC8fTmXnXWtlMXiRahVmeiteV9wMPvqFybGMdf H6Tgehy/W/kD4P2cSWTnwLKMkK0RR/TWsyaDkn4egsry5t/oy/jaViMYXfkeXPr+ /8mPSmMItCchMWByENp3lKfSn6ds0yZjEjybzbWT1UEXznX7DHse76gqd+oogqmc SeDv5RJ/3zUely8ljfpRj50BJNVwUeQLGu0xdvQ2SOvT0zof -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAreqYkJ1DA5M6nITWN0Aa E2B2FiwbgQGyhEuMZgNc8QPSeuu7PoVZXX8uc+XgpnytmIjufh2gpEOLBP+wc3pM zS0+gMYaMqNhZ8+SZoQdG4nudHcGXSV1XzOO+96xXlQllOo4setCJ+ENr2GJ/yJt Dh7OTX18XZIB5EaZle/bXnEvZ8OKUM3y4Xfvjf6Vxw4ELhsUfcmmsDCBAyBBtX45 m8llzLO0p4NH6JalGnOxiYJgOFy6fHfkLbUuXm8RIa7onb2JSZ8UAWcE0Ee6TsYv 47SIgoP68lc0Jl1heP4QcPn/iO+zLFNwcSkrX+w9GPJ1VmtyZJ4zFpcKZwi/jphk jX3It4rYvew3YuoB63KdM00UIj/yp3cqYc6nJhHSiBNh5C9zx21ZLMkmL9eASKFo GmsGBv0by2fO1O10cLbx+DNn1DJEb/2tZOe429HbmOitujU/hnRb0CtNfQwclZwl 14+2GnnHu8eug67ktPR1x+q8KsbTO2XtU/f/tdtLTYb1VB9QiZwtMY342f2sXsqq QFi6QozktDek6O1PI8VDfNeOswcRN8Mew0nIgXnQVq0iwTxYK7KAxstW2TQKciPD LB4+FGYUhy61f/cDOOE7IIE2neJg4b3DZpcCm1hxXhY5Vq6nVr8zGcIyIWAwB2i4 bvOsjMJj2nPI1L3mRrTFdLMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 270217086995788272262812374980105321115428 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-08 07:39:43 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-06 07:39:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.chip.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 709516970653749328068491048998283307941666072022923626499843900236507569698887943876227631862316054372619298956384785054044067005002847294537003757011674026975224682028013110729611658991886342889800760436726549464237382897904863608061771271043197748110564243202023229976586646354846428091183190480715468570947146689748645079515913854242953301093164951401261300287761559766016888171715890880339485208686685570611209355583737543598009414360961773062548394493742763262141312895006445179973983527473321721797644522049551603833634278665914873424577622321343952463852978435678122355983362721706844060718343697807060723124942035715167447706488905109214211195419594011965948860866204005917258230558829149622196622176953110416780024297162595081229015446344819209263821846853594193800466168538726897770451787906941391855906075214107341989080776544115170493287414071485064003084094845422623677506051019146452566046068125704613535083247468229441798285852626864361554988909138093168844846256339097403154821958480740714700597840154975386358102266924401412359508253834494794941683954736380779439591785198272257154988798504378762950688072555156789902850026330991641679813872189989830405355530702180391621373987431549899838363932870605916161425372339 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6757d19ff8b8e70e8d2421557a2af131f612af80 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chip.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chip.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017810fdfa41000004030047304502204cd5fa30f4ba0ac4cca5ee6f4f5c81a5bad68e1b57e5af2d69103f79a6de4683022100cb6af19171c48e11b3a37db67104e4a80096f76ddfbe4701cc1037336a3ef055007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017810fdfad9000004030046304402205c322d5f856e0a75d60ba6684a8d20f023b7a4e58f4094cb9eb19ab7b3d1e93f022061acfd9db0a89e4bdacfef20caaaf9f2ab21f96c1f20c780e93e490773ad6845 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00024508c2a8011cf5329918f80888960a5d7a010cf68b259836460857d8d7965e4d6d1dcb996eb645eb6b1e166738cf166c938b8b8728c90491a797a86d8f46a31417b95da7d8f65a41d5bcb2e3b1f37a7c05e22ec4d55332589d0c31e7efc26a82f1f4e65e75d6b653178916a15667a2b5e57dc0c3efa85c9b18c75f1fa4e07a1cbf5bf903e0fd9c4964e7c0b28c90ad1147f4d6b32683927e1e82caf2e6dfe8cbf8da5623185df91e5cfafeffc98f4a6308b4272131607210da7794a7d29fa76cd32663123c9bcdb593d54117ce75fb0c7b1eefa82a77ea2882a99c49e0efe5127fdf351e972f258dfa518f9d0124d57051e40b1aed3176f43648ebd3d33a1f