concerto-magazin.de
Issued by R3
About this certificate
This digital certificate with serial number 04:65:aa:f2:ec:04:18:98:62:c6:ec:ee:a3:21:aa:ae:a4:e0 was issued on by Let's Encrypt.
With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=concerto-magazin.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:65:aa:f2:ec:04:18:98:62:c6:ec:ee:a3:21:aa:ae:a4:e0Serial Number (int): 383044892868152163498249199458730120226016
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: b0:7f:3d:0b:ac:80:a3:84:ec:3f:8e:79:7d:52:df:b4:92:30:b5:d1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): e0:87:2d:57:ba:18:cf:31:d7:6d:a6:94:5c:71:08:da:de:d2:ac:4e
Fingerprint (sha256): 16:6f:bc:a5:65:19:a7:ed:cb:9f:38:74:30:ff:8e:d8:4d:5b:c6:b3:a5:4e:48:c8:10:1f:88:36:aa:2a:4d:76
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate concerto-magazin.de
29
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for concerto-magazin.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
altenburg-1180.de
altenburger-musikfestival.com
altenburger-musikfestival.de
backup.kamprad.isp-vhost04.domservice.de
backup.wege-zum-mittelalter.de
barbarossa-festspiele.de
barbarossa-museum.de
barbarossamuseum.de
concerto-magazin.de
frech-ab.de
frechab.de
gewandhausmagazin.de
kamprad.isp-vhost04.domservice.de
orgelforum-sachsen.de
satt-statt-platt.de
sattstattplatt.de
www.altenburg-1180.de
www.altenburger-musikfestival.com
www.altenburger-musikfestival.de
www.barbarossa-festspiele.de
www.barbarossa-museum.de
www.barbarossamuseum.de
www.concerto-magazin.de
www.frech-ab.de
www.frechab.de
www.gewandhausmagazin.de
www.orgelforum-sachsen.de
www.satt-statt-platt.de
www.sattstattplatt.de
altenburger-musikfestival.com
altenburger-musikfestival.de
backup.kamprad.isp-vhost04.domservice.de
backup.wege-zum-mittelalter.de
barbarossa-festspiele.de
barbarossa-museum.de
barbarossamuseum.de
concerto-magazin.de
frech-ab.de
frechab.de
gewandhausmagazin.de
kamprad.isp-vhost04.domservice.de
orgelforum-sachsen.de
satt-statt-platt.de
sattstattplatt.de
www.altenburg-1180.de
www.altenburger-musikfestival.com
www.altenburger-musikfestival.de
www.barbarossa-festspiele.de
www.barbarossa-museum.de
www.barbarossamuseum.de
www.concerto-magazin.de
www.frech-ab.de
www.frechab.de
www.gewandhausmagazin.de
www.orgelforum-sachsen.de
www.satt-statt-platt.de
www.sattstattplatt.de
Other certificates including the domain name concerto-magazin.de
(limited to 100 certificates)
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
altenburg-1180.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
altenburg-1180.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
concerto-magazin.de
Certificate
The complete raw certificate details for concerto-magazin.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIItDCCB5ygAwIBAgISBGWq8uwEGJhixuzuoyGqrqTgMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEwMTAxMzA4MDVaFw0yNDAxMDgxMzA4MDRaMB4xHDAaBgNVBAMT E2NvbmNlcnRvLW1hZ2F6aW4uZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK AoICAQDJQeuqgjhSe7rJmtEQEXRts/BKvDkGbmjiSFekAKsnr+KkaCUvky16FaAP 4ozWTTBwhCuVF81DBGrizzXi8t8X7+dRvw9+sxzRvaUkwKQbl2wOuhxuQqgHr8cd lzkbZ/vmjRgWvPrJcg2hAXjdr+xX0j50gesnQUTCQNjPwE1btbcRdy0vcrd8qk92 MnKECqRhy7wjvPDc1X2l3RhM+uo1eSuCqVOAKd5mn6xaFRtR+6mXLrJ8kvlRnqVA QJ0LsSkAYWM5ynEnU7ZvN9+JgE/3H/eITUdR9iDHFfjA7JDYogTGlHV0tKKsQsk4 sTIqitQL3ADv3pMqIRQCLiA9lKHlKpBeJjEPIg6NVnS0z6M747CjoN+s2z6Yd7Tq yV5MZuK4MAoW7oUb1DSO4GCGk6KxlPlPWG88hAYWF7p2R4r6dDy2v/Bl7ElwZAHy A0qM9rC+XvUAhk8Vf7aBEtDRo84v5Y7+2IFPhgsIDivUqLMmnA9vLrrOYYqanWYi lWp7oBJhq1AXqv5k52nrHf7q24QQgJmS4zuoZC30KXFo867O3wGzCVpdGlZ7ajvr EGH6HmbHSpez4iCtaTPLgB9qE9g46vTgVkcpUyYHjDRy83NkJ16hPeBps1l0VUVi vZirNTpM7yXrf8ZaXChsGTXNJx3tO4v5mWrqU/bPYBFbjrgDyQIDAQABo4IE1jCC BNIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSwfz0LrICjhOw/jnl9Ut+0kjC10TAf BgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcw IQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYW aHR0cDovL3IzLmkubGVuY3Iub3JnLzCCAt4GA1UdEQSCAtUwggLRghFhbHRlbmJ1 cmctMTE4MC5kZYIdYWx0ZW5idXJnZXItbXVzaWtmZXN0aXZhbC5jb22CHGFsdGVu YnVyZ2VyLW11c2lrZmVzdGl2YWwuZGWCKGJhY2t1cC5rYW1wcmFkLmlzcC12aG9z dDA0LmRvbXNlcnZpY2UuZGWCHmJhY2t1cC53ZWdlLXp1bS1taXR0ZWxhbHRlci5k ZYIYYmFyYmFyb3NzYS1mZXN0c3BpZWxlLmRlghRiYXJiYXJvc3NhLW11c2V1bS5k ZYITYmFyYmFyb3NzYW11c2V1bS5kZYITY29uY2VydG8tbWFnYXppbi5kZYILZnJl Y2gtYWIuZGWCCmZyZWNoYWIuZGWCFGdld2FuZGhhdXNtYWdhemluLmRlgiFrYW1w cmFkLmlzcC12aG9zdDA0LmRvbXNlcnZpY2UuZGWCFW9yZ2VsZm9ydW0tc2FjaHNl bi5kZYITc2F0dC1zdGF0dC1wbGF0dC5kZYIRc2F0dHN0YXR0cGxhdHQuZGWCFXd3 dy5hbHRlbmJ1cmctMTE4MC5kZYIhd3d3LmFsdGVuYnVyZ2VyLW11c2lrZmVzdGl2 YWwuY29tgiB3d3cuYWx0ZW5idXJnZXItbXVzaWtmZXN0aXZhbC5kZYIcd3d3LmJh cmJhcm9zc2EtZmVzdHNwaWVsZS5kZYIYd3d3LmJhcmJhcm9zc2EtbXVzZXVtLmRl ghd3d3cuYmFyYmFyb3NzYW11c2V1bS5kZYIXd3d3LmNvbmNlcnRvLW1hZ2F6aW4u ZGWCD3d3dy5mcmVjaC1hYi5kZYIOd3d3LmZyZWNoYWIuZGWCGHd3dy5nZXdhbmRo YXVzbWFnYXppbi5kZYIZd3d3Lm9yZ2VsZm9ydW0tc2FjaHNlbi5kZYIXd3d3LnNh dHQtc3RhdHQtcGxhdHQuZGWCFXd3dy5zYXR0c3RhdHRwbGF0dC5kZTATBgNVHSAE DDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2ANq2v2s/tbYi n5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABixnqla0AAAQDAEcwRQIhAPawEN6T 4sjthz5b7wMbRiq3JtSIJ1/n157vX+XY3/4OAiAMTfL0WV7z7J/ES6uSpExVbKgt nQ0c77TiBG2BxKV9KAB1AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7Wb AAABixnqlagAAAQDAEYwRAIgG0VIWx22eRxuEvLqIopupPLwwFeKJJvTi1C4U9Wu nxgCIGmtyJvS1A3fOViPfgYZxnZt27s1MPBo5n+YMID+MyFMMA0GCSqGSIb3DQEB CwUAA4IBAQC03eCI8iBlpcrZgcOR0NQkvgpafoqJz3NKWrIWaj7DD09fBjCZaMrs Pkjq74PV9SXhyx+Daqdm/kDbEt4HxGxgfvjjEX4eiOozkbBZ6mqkEwoJgwlYdstV VwN/UWQRih0GQkpvMxovCNb1TBAnGkXz/WoipddyqmA0Fg33b5wOkXt+IbMQZO0q 9j0dKWfiDwJJLsZufrI8i9PqXEIut7yH8lOfD/6hrVnOCDV6f1kHMHKTL3r4mLQh Ym8eDof/WOaFQQayAjBWXa28yNLmitRh1SuAmwzsNed/oycOoofjpYBnbDDuiqmv Pq6O6UP6pkzoBcUve4w1KIWL1rPw6gtw -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyUHrqoI4Unu6yZrREBF0 bbPwSrw5Bm5o4khXpACrJ6/ipGglL5MtehWgD+KM1k0wcIQrlRfNQwRq4s814vLf F+/nUb8PfrMc0b2lJMCkG5dsDrocbkKoB6/HHZc5G2f75o0YFrz6yXINoQF43a/s V9I+dIHrJ0FEwkDYz8BNW7W3EXctL3K3fKpPdjJyhAqkYcu8I7zw3NV9pd0YTPrq NXkrgqlTgCneZp+sWhUbUfuply6yfJL5UZ6lQECdC7EpAGFjOcpxJ1O2bzffiYBP 9x/3iE1HUfYgxxX4wOyQ2KIExpR1dLSirELJOLEyKorUC9wA796TKiEUAi4gPZSh 5SqQXiYxDyIOjVZ0tM+jO+Owo6DfrNs+mHe06sleTGbiuDAKFu6FG9Q0juBghpOi sZT5T1hvPIQGFhe6dkeK+nQ8tr/wZexJcGQB8gNKjPawvl71AIZPFX+2gRLQ0aPO L+WO/tiBT4YLCA4r1KizJpwPby66zmGKmp1mIpVqe6ASYatQF6r+ZOdp6x3+6tuE EICZkuM7qGQt9ClxaPOuzt8BswlaXRpWe2o76xBh+h5mx0qXs+IgrWkzy4AfahPY OOr04FZHKVMmB4w0cvNzZCdeoT3gabNZdFVFYr2YqzU6TO8l63/GWlwobBk1zScd 7TuL+Zlq6lP2z2ARW464A8kCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 383044892868152163498249199458730120226016 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-10 13:08:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 13:08:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'concerto-magazin.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 821058975111204608962117560129978841208593872494948876463271153208010748580371337404254822064308022912201042054380400658954797859523948168407783542498794178517071815999475685087199695957937531594194050877608854882003226928872468234796439206633254365346607068769727906982889520515183188138380909557727638659135386582972285304642900863839234861946435095657233687168221564384432954399182422777788972006307714861057387166729407216503007602126897436837733654966410306762362894134396172779012647850105028558511052150122652988496955360083350640555422967379628064595773938824355562234966271422754895792080847525291820599614067379865740926955998470811900904868545943432490787267609757432925575604722862013003185613143060397255883980413169830519921971575583417187759871618233354818762900532247954833729426428738837376008621279863434204208878963565822240144735376194025680530410658768329757138918396004697151290505237187259623285910195759849944469652632640336466310791950321071956745551743619399649858789305699456427875014472777757457873469750530793387523850086564790968708203169061684989148919034579085991815757286575137110549504253137970323761071809602825429467466434309154324414273586118150165102275983083169047326314251063520699919564800969 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b07f3d0bac80a384ec3f8e797d52dfb49230b5d1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (725 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburg-1180.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburger-musikfestival.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburger-musikfestival.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup.kamprad.isp-vhost04.domservice.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup.wege-zum-mittelalter.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbarossa-festspiele.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbarossa-museum.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbarossamuseum.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concerto-magazin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frech-ab.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frechab.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gewandhausmagazin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamprad.isp-vhost04.domservice.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgelforum-sachsen.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satt-statt-platt.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sattstattplatt.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburg-1180.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburger-musikfestival.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburger-musikfestival.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarossa-festspiele.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarossa-museum.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarossamuseum.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.concerto-magazin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frech-ab.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frechab.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gewandhausmagazin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orgelforum-sachsen.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.satt-statt-platt.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sattstattplatt.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b19ea95ad0000040300473045022100f6b010de93e2c8ed873e5bef031b462ab726d488275fe7d79eef5fe5d8dffe0e02200c4df2f4595ef3ec9fc44bab92a44c556ca82d9d0d1cefb4e2046d81c4a57d28007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b19ea95a8000004030046304402201b45485b1db6791c6e12f2ea228a6ea4f2f0c0578a249bd38b50b853d5ae9f18022069adc89bd2d40ddf39588f7e0619c6766ddbbb3530f068e67f983080fe33214c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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