www.bhkw.norbertd.de

Issued by R3

About this certificate

This digital certificate with serial number 04:49:78:a5:3b:93:88:39:91:99:21:7a:b8:cc:95:4e:68:91 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.bhkw.norbertd.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:49:78:a5:3b:93:88:39:91:99:21:7a:b8:cc:95:4e:68:91
Serial Number (int): 373450121809096208633349846637241351170193
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fd:c3:d6:82:b1:d8:fa:28:f6:6b:b4:13:39:dc:f2:25:d6:33:07:92
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 56:4b:8e:be:f9:65:e7:df:bd:7d:7e:6c:b4:9d:c2:bd:b7:72:92:b1
Fingerprint (sha256): 10:94:86:94:2a:0a:20:a9:37:c0:fa:0c:af:49:ed:49:1e:d3:c5:50:54:7f:8c:61:4c:dd:af:6b:2b:56:27:53

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.bhkw.norbertd.de

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bhkw.norbertd.de

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ankejacoby.com
*.derbeutenmacher.de
*.empor-richtenberg.de
*.erik-kuechler.de
*.hamburg-wandsbek.de
*.joe-cramer.de
*.katedi.de
*.kevinscholzphotography.de
*.klammrodt-adhs.de
*.laserworker.de
*.madame-secondhand.de
*.schach-senftenberg.de
*.thesmalldisaster.com
*.vitabox.de
*.wetzelshome.de
*.xn--sngerin-annika-nrw-ltb.de
2017.sidbrowser.com
2www.sidbrowser.com
access.fliesen-keil.de
ankejacoby.com
antifax.com
antimarder.com
derbeutenmacher.de
empor-richtenberg.de
erik-kuechler.de
hamburg-wandsbek.de
helfende-antworten.de
joe-cramer.de
jugendtreff-holdorf.de
katedi.de
kevinscholzphotography.de
klammrodt-adhs.de
laserworker.de
madame-secondhand.de
picjost.tom-lindemann.eu
pma.view-point.eu
ppp.thy.lv
schach-senftenberg.de
speedycrm.sidbrowser.com
thesmalldisaster.com
vitabox.de
wetzelshome.de
www.adventgemeinde-bamberg.de
www.bhkw.norbertd.de
www.flyinghirsch.ch
www.irmgard-lb.de
www.jack-point-service.de
www.massatelier-boehme.de
www.ostsee.tomtorte.de
www.usagowest.de
xn--sngerin-annika-nrw-ltb.de

Other certificates including the domain name norbertd.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.bhkw.norbertd.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIRzCCBy+gAwIBAgISBEl4pTuTiDmRmSF6uMyVTmiRMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMTAxMjI2NDFaFw0yNDA0MDkxMjI2NDBaMB8xHTAbBgNVBAMT
FHd3dy5iaGt3Lm5vcmJlcnRkLmRlMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE
RgC86u8REu+siCAYds+wxrw0yHGpUDKBoFj5NTfdMk90DkpAhNMoAIebDMWHGKxM
ZLc/VtETY8LXhU5mw/1NTKOCBjMwggYvMA4GA1UdDwEB/wQEAwIHgDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
/cPWgrHY+ij2a7QTOdzyJdYzB5IwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v
nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s
ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggQ5
BgNVHREEggQwMIIELIIQKi5hbmtlamFjb2J5LmNvbYIUKi5kZXJiZXV0ZW5tYWNo
ZXIuZGWCFiouZW1wb3ItcmljaHRlbmJlcmcuZGWCEiouZXJpay1rdWVjaGxlci5k
ZYIVKi5oYW1idXJnLXdhbmRzYmVrLmRlgg8qLmpvZS1jcmFtZXIuZGWCCyoua2F0
ZWRpLmRlghsqLmtldmluc2Nob2x6cGhvdG9ncmFwaHkuZGWCEyoua2xhbW1yb2R0
LWFkaHMuZGWCECoubGFzZXJ3b3JrZXIuZGWCFioubWFkYW1lLXNlY29uZGhhbmQu
ZGWCFyouc2NoYWNoLXNlbmZ0ZW5iZXJnLmRlghYqLnRoZXNtYWxsZGlzYXN0ZXIu
Y29tggwqLnZpdGFib3guZGWCECoud2V0emVsc2hvbWUuZGWCHyoueG4tLXNuZ2Vy
aW4tYW5uaWthLW5ydy1sdGIuZGWCEzIwMTcuc2lkYnJvd3Nlci5jb22CEzJ3d3cu
c2lkYnJvd3Nlci5jb22CFmFjY2Vzcy5mbGllc2VuLWtlaWwuZGWCDmFua2VqYWNv
YnkuY29tggthbnRpZmF4LmNvbYIOYW50aW1hcmRlci5jb22CEmRlcmJldXRlbm1h
Y2hlci5kZYIUZW1wb3ItcmljaHRlbmJlcmcuZGWCEGVyaWsta3VlY2hsZXIuZGWC
E2hhbWJ1cmctd2FuZHNiZWsuZGWCFWhlbGZlbmRlLWFudHdvcnRlbi5kZYINam9l
LWNyYW1lci5kZYIWanVnZW5kdHJlZmYtaG9sZG9yZi5kZYIJa2F0ZWRpLmRlghlr
ZXZpbnNjaG9senBob3RvZ3JhcGh5LmRlghFrbGFtbXJvZHQtYWRocy5kZYIObGFz
ZXJ3b3JrZXIuZGWCFG1hZGFtZS1zZWNvbmRoYW5kLmRlghhwaWNqb3N0LnRvbS1s
aW5kZW1hbm4uZXWCEXBtYS52aWV3LXBvaW50LmV1ggpwcHAudGh5Lmx2ghVzY2hh
Y2gtc2VuZnRlbmJlcmcuZGWCGHNwZWVkeWNybS5zaWRicm93c2VyLmNvbYIUdGhl
c21hbGxkaXNhc3Rlci5jb22CCnZpdGFib3guZGWCDndldHplbHNob21lLmRlgh13
d3cuYWR2ZW50Z2VtZWluZGUtYmFtYmVyZy5kZYIUd3d3LmJoa3cubm9yYmVydGQu
ZGWCE3d3dy5mbHlpbmdoaXJzY2guY2iCEXd3dy5pcm1nYXJkLWxiLmRlghl3d3cu
amFjay1wb2ludC1zZXJ2aWNlLmRlghl3d3cubWFzc2F0ZWxpZXItYm9laG1lLmRl
ghZ3d3cub3N0c2VlLnRvbXRvcnRlLmRlghB3d3cudXNhZ293ZXN0LmRlgh14bi0t
c25nZXJpbi1hbm5pa2EtbnJ3LWx0Yi5kZTATBgNVHSAEDDAKMAgGBmeBDAECATCC
AQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0s
gdm7v6s52IRzAAABjPONvMMAAAQDAEgwRgIhAOmO5wNF1Pv/FVmOxcnwtqTffMqW
N3rgsQ9lRB10LVhnAiEAtaZ8Ye5S2pAZXH2RRUpx9UUDVjgyLzrCfbSrrx2FB4MA
dgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYzzjbz9AAAEAwBH
MEUCIG0MeFPaLRwjCiVNdMJCOqiOk9I0VIe5AE9xE9CygLT6AiEAm3F2MFmwC8b8
xfj8dMZx03FUGGuXLoJePnjT431MYv8wDQYJKoZIhvcNAQELBQADggEBAIEEegVS
4K72xPvZyvny2unR6ZHAbWrF7brmm1p9HsW/vEfrESYb5j7CHLqv0XZfuKZoUcjs
8ycfiMZkFAahFF/IKJp5PjpRlroaC6hH5WdXbeFxouedYivv72KiTL1hDZzWBmrG
mhROosDGYXZKRSIEDMjnKfcJvCHmf6qu3ede8UNNOErJK0nCDNJEsVpaLZfN1GF0
dzCmugWuYhR4/6b8UZ41UwwY/qsqBUnKTEjPd3xu6wvAjEmiZ5cYFm57oQdRfL7t
a9mDA3HYOUT1xbIUWYgS6LeVk/zXr5bCY1AvEJyVJxbLum4ciRcs3guuYaGiqD/H
kUWFjTZaNUKoJhQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAERgC86u8REu+siCAYds+wxrw0yHGp
UDKBoFj5NTfdMk90DkpAhNMoAIebDMWHGKxMZLc/VtETY8LXhU5mw/1NTA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373450121809096208633349846637241351170193
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 12:26:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 12:26:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bhkw.norbertd.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00044600bceaef1112efac88201876cfb0c6bc34c871a9503281a058f93537dd324f740e4a4084d32800879b0cc58718ac4c64b73f56d11363c2d7854e66c3fd4d4c
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fdc3d682b1d8fa28f66bb41339dcf225d6330792
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1072 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ankejacoby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.derbeutenmacher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.empor-richtenberg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erik-kuechler.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hamburg-wandsbek.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joe-cramer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.katedi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kevinscholzphotography.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klammrodt-adhs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laserworker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.madame-secondhand.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schach-senftenberg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesmalldisaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vitabox.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wetzelshome.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sngerin-annika-nrw-ltb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2017.sidbrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2www.sidbrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.fliesen-keil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ankejacoby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antifax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antimarder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derbeutenmacher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empor-richtenberg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erik-kuechler.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamburg-wandsbek.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helfende-antworten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joe-cramer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jugendtreff-holdorf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katedi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kevinscholzphotography.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klammrodt-adhs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laserworker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madame-secondhand.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picjost.tom-lindemann.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pma.view-point.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppp.thy.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schach-senftenberg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speedycrm.sidbrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesmalldisaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitabox.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wetzelshome.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adventgemeinde-bamberg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhkw.norbertd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyinghirsch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irmgard-lb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jack-point-service.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.massatelier-boehme.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ostsee.tomtorte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usagowest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sngerin-annika-nrw-ltb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cf38dbcc30000040300483046022100e98ee70345d4fbff15598ec5c9f0b6a4df7cca96377ae0b10f65441d742d5867022100b5a67c61ee52da90195c7d91454a71f545035638322f3ac27db4abaf1d850783007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cf38dbcfd000004030047304502206d0c7853da2d1c230a254d74c2423aa88e93d2345487b9004f7113d0b280b4fa0221009b71763059b00bc6fcc5f8fc74c671d37154186b972e825e3e78d3e37d4c62ff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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