ditsch.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c5:21:4a:0a:21:33:1f:53:91:f9:dd:81:bf:2b:3e:42:65 was issued on by Let's Encrypt.

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ditsch.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c5:21:4a:0a:21:33:1f:53:91:f9:dd:81:bf:2b:3e:42:65
Serial Number (int): 328416733037988498049544757751854579728997
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ce:d3:a6:ce:66:fd:52:02:91:b5:98:6d:ad:0e:bf:24:82:c2:4b:f4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f7:2b:bc:e4:a0:fa:fa:bb:d9:dd:fa:17:f6:b1:0d:80:3c:d6:9a:83
Fingerprint (sha256): 17:23:79:6b:a6:46:a5:60:38:5f:cd:cf:a9:d9:e9:05:e9:70:fd:33:4d:b5:14:2f:20:52:4c:8d:74:9b:69:4a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ditsch.de

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ditsch.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bretzel.ch
bretzelkoenig.ch
bretzelkoenig.de
brezelbaeckerei-ditsch.at
brezelbaeckerei-ditsch.ch
brezelbaeckerei-ditsch.de
brezelkoenig.ch
brezelkoenig.com
croissants.de
dev.ditsch.de
ditsch-brezelbaeckerei.com
ditsch-brezelbaeckerei.de
ditsch.at
ditsch.biz
ditsch.ch
ditsch.de
ditsch.info
laugenprodukte.de
oktoberfest-bretzel.de
oktoberfest-brezel.de
pretzel-king.us
pretzelking.us
srv20.tryit.ch
swissbretzel.ch
swissbrezel.ch
swisspretzel.ch
swissprezel.ch
www.bretzel.ch
www.bretzelkoenig.ch
www.bretzelkoenig.de
www.brezelbaeckerei-ditsch.at
www.brezelbaeckerei-ditsch.ch
www.brezelbaeckerei-ditsch.de
www.brezelkoenig.ch
www.brezelkoenig.com
www.croissants.de
www.ditsch-brezelbaeckerei.com
www.ditsch-brezelbaeckerei.de
www.ditsch.at
www.ditsch.biz
www.ditsch.ch
www.ditsch.de
www.ditsch.info
www.laugenprodukte.de
www.oktoberfest-bretzel.de
www.oktoberfest-brezel.de
www.pretzel-king.us
www.pretzelking.us
www.swissbretzel.ch
www.swissbrezel.ch
www.swisspretzel.ch
www.swissprezel.ch
www.xn--bretzelknig-yfb.ch
www.xn--brezelbckerei-ditsch-hzb.de
www.xn--brezelbckerei-hfb.de
www.xn--brezelknig-kcb.at
www.xn--brezelknig-kcb.com
xn--bretzelknig-yfb.ch
xn--brezelbckerei-ditsch-hzb.de
xn--brezelbckerei-hfb.de
xn--brezelknig-kcb.at
xn--brezelknig-kcb.com

Other certificates including the domain name ditsch.de

(limited to 100 certificates)
owa.ditsch.de
*.ditsch.de
mzvc02.corp.ditsch.de
filialemonitoring.intranet.ditsch.de
ditsch.de
ditsch.de
citrix.ditsch.de
filialemonitoring.intranet.ditsch.de
*.ditsch.de
ditsch.de
intranet.ditsch.de
monitoring.intranet.ditsch.de
ditsch.de
ticketsystem.intranet.ditsch.de
ditsch.de
ditsch.de
ditsch.de
ditsch.de
ditsch.de
ticketsystem.intranet.ditsch.de
owa.ditsch.de
ditsch.de
ctxlogon.corp.ditsch.de
ditsch.de
ditsch.de
owa.ditsch.de
citrix.ditsch.de
*.ditsch.de
ditsch.de
intranet.ditsch.de
intranet.ditsch.de
ditsch.de
ticketsystem.intranet.ditsch.de
monitoring.intranet.ditsch.de
citrix.ditsch.de
ctxlogon.corp.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
citrix.ditsch.de
mzctxnz01.corp.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
mzvc02.corp.ditsch.de
ditsch.de
adfs.ditsch.de
intranet.ditsch.de
ditsch.de
www.ditsch.de
www.ditsch.de
ditsch.de
monitoring.intranet.ditsch.de
ditsch.de
ditsch.de
ditsch.de
mzvc02.corp.ditsch.de
ditsch.de
filialemonitoring.intranet.ditsch.de
*.ditsch.de
ditsch.de
ditsch.de
ditsch.de
ditsch.de
*.ditsch.de
mzvc02.corp.ditsch.de
intranet.ditsch.de
intranet.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
mzvc02.corp.ditsch.de
filialemonitoring.intranet.ditsch.de
ditsch.de
ditsch.de
ditsch.de
*.ditsch.de
intranet.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
ctxlogon.corp.ditsch.de
citrix.ditsch.de
ditsch.de
intranet.ditsch.de
ditsch.de
ditsch.de
intranet.ditsch.de
www.ditsch.de
intranet.ditsch.de
owa.ditsch.de
intranet.ditsch.de
*.ditsch.de
intranet.ditsch.de
intranet.ditsch.de
intranet.ditsch.de

Certificate

The complete raw certificate details for ditsch.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+R8myamsMtv49kuaQaJ3
3B8C54pY4VRGx1mzroq4wFnpghXj9mcx2S9tYHgg7ZlMvdbqsywwD1sEG0IpY8BH
AvFjffNghMmOMJNo3gWUG6g2t+4U/apFvlgy2vWrgQtai/MMtxeDNMlzyqLQYYAq
4rwsu5TAYGV4yMX09L4bLrgKu4E2VlcbpWJUjV3+5MZtsoQs3/J345VXDrN9oej+
gDAdAXrMCbsKIHcM71CVMSkS8UXMD/Np4FhOTLbxloMR32hn5p2fdrzosfACrtoq
MTyd2AHJN2Z5B4mA3P2F7qeq1A6IS5EbicJKXQ4hAaY4bXSqPUuK2soz0sO/lCq3
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328416733037988498049544757751854579728997
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-28 09:27:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-26 09:27:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ditsch.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31448699320939227354459185585262140476181787573580000228616772454920626369463773052366467576097070335834191710271364344282453573568589549214059385217567400686070829279789913331879543382083182059252221893781346096166338202513098979714342899587827931673910449795582746539296892498950120988729953402904520559279874919318574918671006114755345701467813505067072064314097405400989355144781484968943602975729638536052253848155300960273103220394147219458353382028567680443180989562225166594101346854005512785871642729978384433015901996533634455985156541654875824601712708716956142140035068771036933374359259717007545345947637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ced3a6ce66fd520291b5986dad0ebf2482c24bf4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1329 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bretzelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bretzelkoenig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brezelbaeckerei-ditsch.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brezelbaeckerei-ditsch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brezelbaeckerei-ditsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brezelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brezelkoenig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'croissants.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ditsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditsch-brezelbaeckerei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditsch-brezelbaeckerei.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditsch.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditsch.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditsch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditsch.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laugenprodukte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oktoberfest-bretzel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oktoberfest-brezel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pretzel-king.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pretzelking.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv20.tryit.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swissbretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swissbrezel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swisspretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swissprezel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bretzelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bretzelkoenig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brezelbaeckerei-ditsch.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brezelbaeckerei-ditsch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brezelbaeckerei-ditsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brezelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brezelkoenig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.croissants.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditsch-brezelbaeckerei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditsch-brezelbaeckerei.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditsch.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditsch.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditsch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditsch.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laugenprodukte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oktoberfest-bretzel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oktoberfest-brezel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pretzel-king.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pretzelking.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swissbretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swissbrezel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swisspretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swissprezel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--bretzelknig-yfb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--brezelbckerei-ditsch-hzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--brezelbckerei-hfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--brezelknig-kcb.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--brezelknig-kcb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bretzelknig-yfb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brezelbckerei-ditsch-hzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brezelbckerei-hfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brezelknig-kcb.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brezelknig-kcb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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