m.rallyefokus.de
Issued by R3
About this certificate
This digital certificate with serial number 03:7c:3f:e2:7c:49:33:fc:d4:74:57:c4:df:f4:43:96:1c:f1 was issued on by Let's Encrypt.
With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=m.rallyefokus.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:7c:3f:e2:7c:49:33:fc:d4:74:57:c4:df:f4:43:96:1c:f1Serial Number (int): 303616788637120124084810839371882194935025
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b0:79:90:91:b9:bd:cd:48:5e:ef:19:e8:26:c1:66:3c:de:bd:41:9d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ab:f4:e3:ae:96:af:c4:a6:43:bb:65:f7:6a:7f:fc:5e:fb:41:5c:42
Fingerprint (sha256): 15:84:ac:14:65:c4:3d:5c:04:77:fa:4b:da:32:60:24:0b:a8:e2:82:52:d3:90:11:9d:91:c5:1b:2b:48:4a:05
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate m.rallyefokus.de
50
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for m.rallyefokus.de
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.alex-klauser.de
*.coachingclubberlin.de
*.hans-rieder.de
*.in-den-tiefen.de
*.jungewelle.de
*.makleragentur-torsten-kunert.de
*.martinskantorat.de
*.pauluspizza.de
*.tktech-esens.de
*.wolfeye.es
*.yvonnewienke.berlin
*.zombie-soft.de
alex-klauser.de
bilkfamilie.de
coachingclubberlin.de
comatriserver.kevinkoziol.de
comblockchainjoblist.hypnobirthing-vinschgau.it
edrich.cloud
edrich.codes
emjhbhwissdpzt.tjark.pro
etter.moin-alex.de
gautengcarfcbf7a.rotglut.net
glampingzelt.at
hans-rieder.de
in-den-tiefen.de
jungewelle.de
m.rallyefokus.de
makleragentur-torsten-kunert.de
martinskantorat.de
mhbmfj2djsffyzuq.cms.loox.tools
nxfkklgliocbdc.tjark.pro
pauluspizza.de
photography.woeschka.com
qubvxisfqppkwz.tjark.pro
robot-procurement-navsocial.albertus-dienste.de
sandbox.kevinroebert.de
snowremovalst2018.kevinkoziol.com
staging-api.woeschka.com
stiftung-sport.de
tktech-esens.de
wolfeye.es
www.edrich.cloud
www.fewo.wolfmanuel.de
www.maps.perspective-consulting.at
www.save-the-date.helena-und-cedric.de
www.test.danijelg.de
www.web.chris-eberle.com
yvonnewienke.berlin
zombie-soft.de
ztdcstnaxwgdbvky.cms.loox.tools
*.coachingclubberlin.de
*.hans-rieder.de
*.in-den-tiefen.de
*.jungewelle.de
*.makleragentur-torsten-kunert.de
*.martinskantorat.de
*.pauluspizza.de
*.tktech-esens.de
*.wolfeye.es
*.yvonnewienke.berlin
*.zombie-soft.de
alex-klauser.de
bilkfamilie.de
coachingclubberlin.de
comatriserver.kevinkoziol.de
comblockchainjoblist.hypnobirthing-vinschgau.it
edrich.cloud
edrich.codes
emjhbhwissdpzt.tjark.pro
etter.moin-alex.de
gautengcarfcbf7a.rotglut.net
glampingzelt.at
hans-rieder.de
in-den-tiefen.de
jungewelle.de
m.rallyefokus.de
makleragentur-torsten-kunert.de
martinskantorat.de
mhbmfj2djsffyzuq.cms.loox.tools
nxfkklgliocbdc.tjark.pro
pauluspizza.de
photography.woeschka.com
qubvxisfqppkwz.tjark.pro
robot-procurement-navsocial.albertus-dienste.de
sandbox.kevinroebert.de
snowremovalst2018.kevinkoziol.com
staging-api.woeschka.com
stiftung-sport.de
tktech-esens.de
wolfeye.es
www.edrich.cloud
www.fewo.wolfmanuel.de
www.maps.perspective-consulting.at
www.save-the-date.helena-und-cedric.de
www.test.danijelg.de
www.web.chris-eberle.com
yvonnewienke.berlin
zombie-soft.de
ztdcstnaxwgdbvky.cms.loox.tools
Other certificates including the domain name rallyefokus.de
(limited to 100 certificates)
n2017.witzepedia.de
cloud.mengqianhonglou.eu.org
pma.gaestehaus-kicker.at
test.antimarder.com
stormp.lima-city.de
*.diecrew.at
www.updates.slashadmincms.de
app.icekey.org
*.zolongo.de
akhpwdikycsdnb.tjark.pro
*.altschottenball.at
2015.p-s-soft.de
www.beste.xhokola.de
hlspam.tjark.pro
*.buchsbaum-atrops.de
*.kleine-raupe-tagesmutter.de
www.rallyefokus.de
dev-api.dlrg-jugend-rn.de
*.meine-schutzfolie.de
exchaanger.lima-city.de
*.gpsfreyzeit.de
www.steinbergprojekte.lima-city.de
zimmer-frei-berlin.de
018.icekey.org
*.medicaverlag.de
iddtiedwoebxkt.tjark.pro
sistema.enjoi-sailing.com
sistema.kevinkoziol.de
*.wunderzeitmerken.de
www.triplefly.de
*.pixelspielemagazin.de
nate.moinalex.de
agrabbe.lima-city.de
*.thomas-gail.de
*.dr-heil-berlin.de
*.kevinkupilas.de
www.hneubacher.lima-city.de
nkorz.eu
mail01.p-s-soft.de
www.ilonas-cottage.de
kos.lima-city.net
2020.woeschka.com
sunshop.lima-city.net
mailgate.icekey.org
*.physio-millat.de
*.schneele-lengerer.de
agento.rotglut.net
aargauer-jugendradio.ch
*.braut-perle-schneiderei.de
mail.moinalex.de
*.musikschule-adlershof.de
*.ccdb.eu
*.novus-ordo-mundus.org
punkomatisch.lima-city.de
*.mepent.de
www.colorfog.cf
2016.dsl-berater-wst.de
*.lernbluete.at
sql.morningstar-online.de
*.citymusicfm.de
davdi.2icecube.de
*.vitabowl.de
*.family-talk.at
www.merchandise.fabiansimon.info
2015.kevinkoziol.com
*.pss-technik.de
zqddggwwuscvkfw.lima-city.eu
m.rallyefokus.de
www.user60.lima-city.de
*.arameo-security.com
mailgw.bigpicture.at
www.trunstadt.fridaybar.eu
*.braut-perle-schneiderei.de
www.tofukeule.lima-city.de
lingclwww1.kevinkoziol.de
licht2002.lima-city.de
*.betriebsumzug.ch
lobeta.p-s-soft.de
staging.lb-systems.at
www.mygus.apis.schoolshare.de
*.langeoog-fotos.de
alkh.lima-city.de
o69iay0p.rallyefokus.de
dpgvlidcdfzgakd.infinite-web.de
www.addition100.bdithmar.de
news.dubistdeingym.de
forum.woeschka.com
*.diekleinewilde.de
www.nc.beenaural.de
twentyseventeen.wp-testarea.de
crrozckzrhbphvf.immo-look.eu
ingenieurbuero-scharbach.de
nightowlproductionsw.dt80.net
acms.kevinkoziol.de
projects.tjark.pro
old.beautyled.com
*.b-h-gartenservice.de
p.gullshock.com
fe.vidpxxel.de
vire-waggis.de
cloud.mengqianhonglou.eu.org
pma.gaestehaus-kicker.at
test.antimarder.com
stormp.lima-city.de
*.diecrew.at
www.updates.slashadmincms.de
app.icekey.org
*.zolongo.de
akhpwdikycsdnb.tjark.pro
*.altschottenball.at
2015.p-s-soft.de
www.beste.xhokola.de
hlspam.tjark.pro
*.buchsbaum-atrops.de
*.kleine-raupe-tagesmutter.de
www.rallyefokus.de
dev-api.dlrg-jugend-rn.de
*.meine-schutzfolie.de
exchaanger.lima-city.de
*.gpsfreyzeit.de
www.steinbergprojekte.lima-city.de
zimmer-frei-berlin.de
018.icekey.org
*.medicaverlag.de
iddtiedwoebxkt.tjark.pro
sistema.enjoi-sailing.com
sistema.kevinkoziol.de
*.wunderzeitmerken.de
www.triplefly.de
*.pixelspielemagazin.de
nate.moinalex.de
agrabbe.lima-city.de
*.thomas-gail.de
*.dr-heil-berlin.de
*.kevinkupilas.de
www.hneubacher.lima-city.de
nkorz.eu
mail01.p-s-soft.de
www.ilonas-cottage.de
kos.lima-city.net
2020.woeschka.com
sunshop.lima-city.net
mailgate.icekey.org
*.physio-millat.de
*.schneele-lengerer.de
agento.rotglut.net
aargauer-jugendradio.ch
*.braut-perle-schneiderei.de
mail.moinalex.de
*.musikschule-adlershof.de
*.ccdb.eu
*.novus-ordo-mundus.org
punkomatisch.lima-city.de
*.mepent.de
www.colorfog.cf
2016.dsl-berater-wst.de
*.lernbluete.at
sql.morningstar-online.de
*.citymusicfm.de
davdi.2icecube.de
*.vitabowl.de
*.family-talk.at
www.merchandise.fabiansimon.info
2015.kevinkoziol.com
*.pss-technik.de
zqddggwwuscvkfw.lima-city.eu
m.rallyefokus.de
www.user60.lima-city.de
*.arameo-security.com
mailgw.bigpicture.at
www.trunstadt.fridaybar.eu
*.braut-perle-schneiderei.de
www.tofukeule.lima-city.de
lingclwww1.kevinkoziol.de
licht2002.lima-city.de
*.betriebsumzug.ch
lobeta.p-s-soft.de
staging.lb-systems.at
www.mygus.apis.schoolshare.de
*.langeoog-fotos.de
alkh.lima-city.de
o69iay0p.rallyefokus.de
dpgvlidcdfzgakd.infinite-web.de
www.addition100.bdithmar.de
news.dubistdeingym.de
forum.woeschka.com
*.diekleinewilde.de
www.nc.beenaural.de
twentyseventeen.wp-testarea.de
crrozckzrhbphvf.immo-look.eu
ingenieurbuero-scharbach.de
nightowlproductionsw.dt80.net
acms.kevinkoziol.de
projects.tjark.pro
old.beautyled.com
*.b-h-gartenservice.de
p.gullshock.com
fe.vidpxxel.de
vire-waggis.de
Certificate
The complete raw certificate details for m.rallyefokus.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIqDCCB5CgAwIBAgISA3w/4nxJM/zUdFfE3/RDlhzxMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MjgwODEwNThaFw0yNDA3MjcwODEwNTdaMBsxGTAXBgNVBAMT EG0ucmFsbHllZm9rdXMuZGUwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAATAEYLF bHaBwKQoFSlstKcLR0XEd1F6UKGeJrcWj4XZ9AJmgvBMQpe63Xszn2gMcFos0lVX 8kZETjC0Wwz6yAQfo4IGmDCCBpQwDgYDVR0PAQH/BAQDAgeAMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSweZCR ub3NSF7vGegmwWY83r1BnTAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTC xjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNy Lm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCCBJ8GA1Ud EQSCBJYwggSSghEqLmFsZXgta2xhdXNlci5kZYIXKi5jb2FjaGluZ2NsdWJiZXJs aW4uZGWCECouaGFucy1yaWVkZXIuZGWCEiouaW4tZGVuLXRpZWZlbi5kZYIPKi5q dW5nZXdlbGxlLmRlgiEqLm1ha2xlcmFnZW50dXItdG9yc3Rlbi1rdW5lcnQuZGWC FCoubWFydGluc2thbnRvcmF0LmRlghAqLnBhdWx1c3BpenphLmRlghEqLnRrdGVj aC1lc2Vucy5kZYIMKi53b2xmZXllLmVzghUqLnl2b25uZXdpZW5rZS5iZXJsaW6C ECouem9tYmllLXNvZnQuZGWCD2FsZXgta2xhdXNlci5kZYIOYmlsa2ZhbWlsaWUu ZGWCFWNvYWNoaW5nY2x1YmJlcmxpbi5kZYIcY29tYXRyaXNlcnZlci5rZXZpbmtv emlvbC5kZYIvY29tYmxvY2tjaGFpbmpvYmxpc3QuaHlwbm9iaXJ0aGluZy12aW5z Y2hnYXUuaXSCDGVkcmljaC5jbG91ZIIMZWRyaWNoLmNvZGVzghhlbWpoYmh3aXNz ZHB6dC50amFyay5wcm+CEmV0dGVyLm1vaW4tYWxleC5kZYIcZ2F1dGVuZ2NhcmZj YmY3YS5yb3RnbHV0Lm5ldIIPZ2xhbXBpbmd6ZWx0LmF0gg5oYW5zLXJpZWRlci5k ZYIQaW4tZGVuLXRpZWZlbi5kZYINanVuZ2V3ZWxsZS5kZYIQbS5yYWxseWVmb2t1 cy5kZYIfbWFrbGVyYWdlbnR1ci10b3JzdGVuLWt1bmVydC5kZYISbWFydGluc2th bnRvcmF0LmRlgh9taGJtZmoyZGpzZmZ5enVxLmNtcy5sb294LnRvb2xzghhueGZr a2xnbGlvY2JkYy50amFyay5wcm+CDnBhdWx1c3BpenphLmRlghhwaG90b2dyYXBo eS53b2VzY2hrYS5jb22CGHF1YnZ4aXNmcXBwa3d6LnRqYXJrLnByb4Ivcm9ib3Qt cHJvY3VyZW1lbnQtbmF2c29jaWFsLmFsYmVydHVzLWRpZW5zdGUuZGWCF3NhbmRi b3gua2V2aW5yb2ViZXJ0LmRlgiFzbm93cmVtb3ZhbHN0MjAxOC5rZXZpbmtvemlv bC5jb22CGHN0YWdpbmctYXBpLndvZXNjaGthLmNvbYIRc3RpZnR1bmctc3BvcnQu ZGWCD3RrdGVjaC1lc2Vucy5kZYIKd29sZmV5ZS5lc4IQd3d3LmVkcmljaC5jbG91 ZIIWd3d3LmZld28ud29sZm1hbnVlbC5kZYIid3d3Lm1hcHMucGVyc3BlY3RpdmUt Y29uc3VsdGluZy5hdIImd3d3LnNhdmUtdGhlLWRhdGUuaGVsZW5hLXVuZC1jZWRy aWMuZGWCFHd3dy50ZXN0LmRhbmlqZWxnLmRlghh3d3cud2ViLmNocmlzLWViZXJs ZS5jb22CE3l2b25uZXdpZW5rZS5iZXJsaW6CDnpvbWJpZS1zb2Z0LmRlgh96dGRj c3RuYXh3Z2Ridmt5LmNtcy5sb294LnRvb2xzMBMGA1UdIAQMMAowCAYGZ4EMAQIB MIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAPxdLT9ciR1iUHWUchL4NEu2QN38f hWrrwb8ohez4ZG4AAAGPI/jMIQAABAMARzBFAiBVSvyIscb2lxBCM7G2NWWtsOSV /AAG+lP4gxRiKYLkUgIhAJEmG7uFjlzw4cUsCE5G/RC4oExNLAcwupr/iffsZk+f AHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGPI/jL9AAABAMA RzBFAiBVvBqyvGdqBicKemYK1DWhtZGrvH1PoQTWmoITX0ldPAIhAMOvEkNQxhtx RjOE4psKXS0l4akrYksrHFwG8+3Py+7ZMA0GCSqGSIb3DQEBCwUAA4IBAQB3bH9c /bXe2EjwIAfjna5fRljHsiqE/wZzamWRuHXfjThkiOmHK5kYdFIg/sjmwlrzS7Sx 1SDNKfSPPQF85V7DPfHdeRn/v/VlA4y09D1zEFZqbeN/usD5uhfeP9O/zxGyn/vQ TF30KsLLUzkIufQZbnkIGxZShCA0MQdzYpPcLdk4N7dvhJ7B532MD8KkOcaNmanZ axrvu8BJ5jHNwQxBCEPz9V0LYjjIhPeXcB5iKYv1FIpozFiNrsV5QyPamy864Ado aB2JLTLjR2gkdfmu2762tI1qR6z2bauWP+jkN5O4LfCJ0ZC2g68yj9nU9mQwfV08 fvKgitselnFXrHY8 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEwBGCxWx2gcCkKBUpbLSnC0dFxHdR elChnia3Fo+F2fQCZoLwTEKXut17M59oDHBaLNJVV/JGRE4wtFsM+sgEHw== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 303616788637120124084810839371882194935025 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-28 08:10:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-27 08:10:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'm.rallyefokus.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 0004c01182c56c7681c0a42815296cb4a70b4745c477517a50a19e26b7168f85d9f4026682f04c4297badd7b339f680c705a2cd25557f246444e30b45b0cfac8041f . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b0799091b9bdcd485eef19e826c1663cdebd419d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1174 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alex-klauser.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coachingclubberlin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hans-rieder.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.in-den-tiefen.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jungewelle.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makleragentur-torsten-kunert.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.martinskantorat.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pauluspizza.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tktech-esens.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wolfeye.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yvonnewienke.berlin' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zombie-soft.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alex-klauser.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bilkfamilie.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coachingclubberlin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comatriserver.kevinkoziol.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comblockchainjoblist.hypnobirthing-vinschgau.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edrich.cloud' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edrich.codes' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emjhbhwissdpzt.tjark.pro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etter.moin-alex.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gautengcarfcbf7a.rotglut.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glampingzelt.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hans-rieder.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in-den-tiefen.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jungewelle.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.rallyefokus.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makleragentur-torsten-kunert.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martinskantorat.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhbmfj2djsffyzuq.cms.loox.tools' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nxfkklgliocbdc.tjark.pro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pauluspizza.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photography.woeschka.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qubvxisfqppkwz.tjark.pro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robot-procurement-navsocial.albertus-dienste.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.kevinroebert.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snowremovalst2018.kevinkoziol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-api.woeschka.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stiftung-sport.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tktech-esens.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolfeye.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edrich.cloud' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fewo.wolfmanuel.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maps.perspective-consulting.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.save-the-date.helena-und-cedric.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.danijelg.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.web.chris-eberle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yvonnewienke.berlin' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zombie-soft.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ztdcstnaxwgdbvky.cms.loox.tools' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f23f8cc2100000403004730450220554afc88b1c6f697104233b1b63565adb0e495fc0006fa53f88314622982e45202210091261bbb858e5cf0e1c52c084e46fd10b8a04c4d2c0730ba9aff89f7ec664f9f00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f23f8cbf40000040300473045022055bc1ab2bc676a06270a7a660ad435a1b591abbc7d4fa104d69a82135f495d3c022100c3af124350c61b71463384e29b0a5d2d25e1a92b624b2b1c5c06f3edcfcbeed9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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