mail.frey-raum.net

Issued by StartCom Class 2 IV Server CA

About this certificate

This digital certificate with serial number 37:ea:1d:6b:46:b4:6c:f5:cf:69:fb:7d:3d:f9:fd:2a was issued on by StartCom Ltd..

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail.frey-raum.net,L=Karlsruhe,ST=Baden-Wuerttemberg,C=DE,2.5.4.42=#13064d61726b7573,2.5.4.4=#130446726579

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 37:ea:1d:6b:46:b4:6c:f5:cf:69:fb:7d:3d:f9:fd:2a
Serial Number (int): 74323133922241489484514930832386424106
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: e1:4a:65:60:0f:53:73:4f:54:d4:10:28:8f:fa:7d:8d:18:f0:7e:98
AuthorityKeyId: 94:de:85:41:2a:a5:d9:45:f6:60:2c:2e:4c:93:09:a6:2c:23:7e:3e

Fingerprint (sha1): 05:6c:e9:7d:41:3a:5e:65:77:5d:4b:e8:da:da:01:65:0a:0e:3c:8d
Fingerprint (sha256): 12:b3:c5:f6:71:e7:2b:ec:b9:91:fa:87:5a:32:e5:14:99:bf:fc:a2:14:f0:66:d5:11:a7:a2:8f:5b:3e:e8:4c

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server2.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server2.crl

Check the revocation status for certificate mail.frey-raum.net

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.frey-raum.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.frey-raum.net
ex20131.frey-raum.net
mail.knye.org
ex20131.knye.org
mail.tec.frey-raum.net
ex20131.tec.frey-raum.net
*.frey-raum.net
*.frey.im
*.knye.org

Other certificates including the domain name frey-raum.net

(limited to 100 certificates)
dev2.frey-raum.net
chat.frey-raum.net
www.frey-raum.net
*.frey-raum.net
mail.frey-raum.net
conf.frey-raum.net
git.frey-raum.net
www.frey-raum.net
frey-raum.net
chat.frey-raum.net
www.frey-raum.net
chat.frey-raum.net
jira.frey-raum.net
bitbucket.frey-raum.net
mail.frey-raum.net
conf.frey-raum.net
conf.frey-raum.net
chat.frey-raum.net
vpn.frey-raum.net
www.frey-raum.net
*.frey-raum.net
crm.frey-raum.net
jira.frey-raum.net
mail.frey-raum.net
vpn.frey-raum.net
cloud.frey-raum.net
dev2.frey-raum.net
www.frey-raum.net
conf.frey-raum.net
jira.frey-raum.net
mail.frey-raum.net
www.frey-raum.net
dev2.frey-raum.net
dev2.frey-raum.net
www.frey-raum.net
dev2.frey-raum.net
www.frey-raum.net
dev2.frey-raum.net
mail.frey-raum.net
dev2.frey-raum.net
frey-raum.net
www.frey-raum.net
www.frey-raum.net
mail.frey-raum.net
frey-raum.net
frey-raum.net
frey-raum.net
mail.frey-raum.net
conf.frey-raum.net
www.frey-raum.net
www.frey-raum.net
frey-raum.net
www.frey-raum.net
secure.frey-raum.net
chat.frey-raum.net
mail.frey-raum.net
frey-raum.net
chat.frey-raum.net
crm.frey-raum.net

Certificate

The complete raw certificate details for mail.frey-raum.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG3TCCBcWgAwIBAgIQN+oda0a0bPXPaft9Pfn9KjANBgkqhkiG9w0BAQsFADB4
MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMg
U3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxJjAkBgNVBAMTHVN0YXJ0
Q29tIENsYXNzIDIgSVYgU2VydmVyIENBMB4XDTE2MDYwOTEyMTkyMloXDTE4MDYw
OTEyMTkyMlowezELMAkGA1UEBhMCREUxGzAZBgNVBAgMEkJhZGVuLVd1ZXJ0dGVt
YmVyZzESMBAGA1UEBwwJS2FybHNydWhlMQ0wCwYDVQQEDARGcmV5MQ8wDQYDVQQq
DAZNYXJrdXMxGzAZBgNVBAMMEm1haWwuZnJleS1yYXVtLm5ldDCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAIldzcP1PMYw+2j/e0h0w+OOyAqYi0dfuZWr
G+JTnqT8sfL6kd9IrdWoxuWONY+hIUtof/EMZhs81Ikx6ZM8H7tvrIwBb/NAjoVJ
uX3Hp/hQqrztboNP2bARLGbeBg/JwMgWYnXujqzpQh3oepQFaydpa05SFTxfy7pm
qkO9JC8g83ZsQkjmy9NJ2k06xoNtIpa8sqaUC6ejy8+iSPfU1igPnfehkaY8c5v3
1eEwpOev2W6tX7Hc5aEschB5IrRo/x+7qKeJ6/V3XWSxljlhkom98CWJ7KFzkOdJ
T/JFUFbvLJiMT3unaRxz2UcfP16VkH370p6UXQYVBu0kq6UZ6AUCAwEAAaOCA14w
ggNaMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUH
AwEwCQYDVR0TBAIwADAdBgNVHQ4EFgQU4UplYA9Tc09U1BAoj/p9jRjwfpgwHwYD
VR0jBBgwFoAUlN6FQSql2UX2YCwuTJMJpiwjfj4wbwYIKwYBBQUHAQEEYzBhMCQG
CCsGAQUFBzABhhhodHRwOi8vb2NzcC5zdGFydHNzbC5jb20wOQYIKwYBBQUHMAKG
LWh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL3NjYS5zZXJ2ZXIyLmNydDA4
BgNVHR8EMTAvMC2gK6AphidodHRwOi8vY3JsLnN0YXJ0c3NsLmNvbS9zY2Etc2Vy
dmVyMi5jcmwwgbIGA1UdEQSBqjCBp4ISbWFpbC5mcmV5LXJhdW0ubmV0ghVleDIw
MTMxLmZyZXktcmF1bS5uZXSCDW1haWwua255ZS5vcmeCEGV4MjAxMzEua255ZS5v
cmeCFm1haWwudGVjLmZyZXktcmF1bS5uZXSCGWV4MjAxMzEudGVjLmZyZXktcmF1
bS5uZXSCDyouZnJleS1yYXVtLm5ldIIJKi5mcmV5LmltggoqLmtueWUub3JnMCMG
A1UdEgQcMBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBRBgNVHSAESjBIMAgG
BmeBDAECAzA8BgsrBgEEAYG1NwECBTAtMCsGCCsGAQUFBwIBFh9odHRwczovL3d3
dy5zdGFydHNzbC5jb20vcG9saWN5MIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA
pLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFVNU7b6gAABAMARzBF
AiAqMTqOjv0JdDDG4J++RH5MCrAR4yBMpb2hHIFKW+YkdQIhAJ+6MSAZxMbt83cu
nQGzSlt98IsHNNwGJTtpTAW5ijmrAHYAaPaY+B9kgr46jO65KB1M/HFRXWeT1ETR
Cmesu09P+8QAAAFVNU7dPAAABAMARzBFAiEAi66cuNLkrIWP/DtZg0mBjpP2a526
uWY349hvpxdKzPsCIHHnmnrd9Dq3+J5gig9u+VnSYInWKjzgGQcH92ao8RhMMA0G
CSqGSIb3DQEBCwUAA4IBAQBpsTFvi8obR7UPGKQxCg8XNBkI6qFXzygLvZDxhRDm
Cg+qWcE2dm8amFkj/c+yEzAp1UUStrUBgm2Gu8+MQtoG35bEKMbWw0hvqhRWpUsa
Q+6r2xQLRDf3WY8KjV9H2zVV1jsewpOJzj7ASfVCmHvbNHOqJPTSVK95fVBYcJyw
jDmjiUoPN4ZdOc0hUJq0v0SfwgFfoyrhKFHDAN+XiRIwHz9yVXexeQTChX5K62Iw
kbXDi+B6vqwlKlhtKOveyeoiZUWNXOmempg7U5pxCeXMAS3FWVBvdE/Gv1h94OIs
ahZ1vXbFdz3XAMIOewX63I8EKHEx2v2fxni9SdQSjqil
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiV3Nw/U8xjD7aP97SHTD
447ICpiLR1+5lasb4lOepPyx8vqR30it1ajG5Y41j6EhS2h/8QxmGzzUiTHpkzwf
u2+sjAFv80COhUm5fcen+FCqvO1ug0/ZsBEsZt4GD8nAyBZide6OrOlCHeh6lAVr
J2lrTlIVPF/LumaqQ70kLyDzdmxCSObL00naTTrGg20ilryyppQLp6PLz6JI99TW
KA+d96GRpjxzm/fV4TCk56/Zbq1fsdzloSxyEHkitGj/H7uop4nr9XddZLGWOWGS
ib3wJYnsoXOQ50lP8kVQVu8smIxPe6dpHHPZRx8/XpWQffvSnpRdBhUG7SSrpRno
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 74323133922241489484514930832386424106
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 2 IV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-09 12:19:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-09 12:19:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.4 (surname)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Frey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.42 (givenName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Markus'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail.frey-raum.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17340904143991706263367133099228137426427492497824759258235717156575000695061567611427190264361847929807298249949627074466967491754568781091184940147455464225353580047242608987894357312018919148848424626604332654928990820029431658787276146974263852385983596175610467601561561292386777599264672875276288771886677998427905558557173088135511816301283996503604243655713947275735072823727180999844717433789875249950198298048042313321172086620756698984356150796894411527977186482569101678990314600007483375343230245949591882344064303363909565607017862664320154002013626187218160606270188358765466392840168686177758672971781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e14a65600f53734f54d410288ffa7d8d18f07e98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 94de85412aa5d945f6602c2e4c9309a62c237e3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (170 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.frey-raum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ex20131.frey-raum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.knye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ex20131.knye.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tec.frey-raum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ex20131.tec.frey-raum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frey-raum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frey.im'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knye.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000155354edbea000004030047304502202a313a8e8efd097430c6e09fbe447e4c0ab011e3204ca5bda11c814a5be624750221009fba312019c4c6edf3772e9d01b34a5b7df08b0734dc06253b694c05b98a39ab00760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc400000155354edd3c00000403004730450221008bae9cb8d2e4ac858ffc3b598349818e93f66b9dbab96637e3d86fa7174accfb022071e79a7addf43ab7f89e608a0f6ef959d26089d62a3ce0190707f766a8f1184c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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