www.sikla.de
Issued by R3
About this certificate
This digital certificate with serial number 03:4c:ec:78:90:ce:8a:be:e9:b5:bc:1a:8c:81:6a:05:94:ea was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.sikla.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:4c:ec:78:90:ce:8a:be:e9:b5:bc:1a:8c:81:6a:05:94:eaSerial Number (int): 287512641500931251623112763276384237098218
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 0c:23:3f:44:23:9a:17:14:5a:91:0f:08:40:29:00:36:a0:f9:7c:59
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ce:89:c2:11:59:15:0c:42:da:df:18:0b:ad:67:51:cc:4d:c9:99:db
Fingerprint (sha256): 18:64:6d:71:67:bd:bc:b8:08:75:0a:73:d8:d8:e6:f7:5a:1b:b0:ef:ab:02:95:85:a5:b5:b1:46:a7:09:51:b3
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.sikla.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.sikla.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sikla.de
www.sikla.de
www.sikla.de
Other certificates including the domain name sikla.de
(limited to 100 certificates)
sklint43ww.sikla.de
sklint43ww.sikla.de
webmail.sikla.com
www.sikla.de
webmailer.sikla.com
webmail.sikla.com
www.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
webmail.sikla.com
webmail.sikla.com
www.sikla.de
www.sikla.de
webmailer.sikla.com
webmail.sikla.de
www.sikla.de
sklint43ww.sikla.de
industrie.sikla.de
www.sikla.de
www.sikla.de
www.sikla.de
www.sikla.de
www.sikla.de
webmail.sikla.de
webmailer.sikla.com
webmailer.sikla.com
www.sikla.de
webmail.sikla.com
industrie.sikla.de
www.sikla.de
industrie.sikla.de
sklint43ww.sikla.de
webmailer.sikla.com
sklint43ww.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
webmail.sikla.de
sklint43ww.sikla.de
blog.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
www.sikla.de
webmail.sikla.com
www.sikla.de
sklint43ww.sikla.de
webmail.sikla.com
webmail.sikla.com
industrie.sikla.de
www.sikla.de
sklint43ww.sikla.de
industrie.sikla.de
industrie.sikla.de
www.sikla.de
webmail.sikla.com
www.sikla.de
webmail.sikla.com
webmail.sikla.de
webmailer.sikla.com
webmailer.sikla.com
sklint43ww.sikla.de
webmailer.sikla.com
www.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
webmailer.sikla.com
industrie.sikla.de
industrie.sikla.de
www.sikla.de
sklint43ww.sikla.de
industrie.sikla.de
de-neu.sikla.de
industrie.sikla.de
industrie.sikla.de
webmail.sikla.de
industrie.sikla.de
webmail.sikla.com
webmail.sikla.de
sklint43ww.sikla.de
www.sikla.de
webmailer.sikla.com
www.sikla.de
industrie.sikla.de
webmail.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
smart2biz.sikla.de
industrie.sikla.de
webmail.sikla.com
www.sikla.de
webmailer.sikla.com
www.sikla.de
www.sikla.de
webmail.sikla.com
webmail.sikla.com
webmail.sikla.com
industrie.sikla.de
sklint43ww.sikla.de
webmail.sikla.com
www.sikla.de
webmailer.sikla.com
webmail.sikla.com
www.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
webmail.sikla.com
webmail.sikla.com
www.sikla.de
www.sikla.de
webmailer.sikla.com
webmail.sikla.de
www.sikla.de
sklint43ww.sikla.de
industrie.sikla.de
www.sikla.de
www.sikla.de
www.sikla.de
www.sikla.de
www.sikla.de
webmail.sikla.de
webmailer.sikla.com
webmailer.sikla.com
www.sikla.de
webmail.sikla.com
industrie.sikla.de
www.sikla.de
industrie.sikla.de
sklint43ww.sikla.de
webmailer.sikla.com
sklint43ww.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
webmail.sikla.de
sklint43ww.sikla.de
blog.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
www.sikla.de
webmail.sikla.com
www.sikla.de
sklint43ww.sikla.de
webmail.sikla.com
webmail.sikla.com
industrie.sikla.de
www.sikla.de
sklint43ww.sikla.de
industrie.sikla.de
industrie.sikla.de
www.sikla.de
webmail.sikla.com
www.sikla.de
webmail.sikla.com
webmail.sikla.de
webmailer.sikla.com
webmailer.sikla.com
sklint43ww.sikla.de
webmailer.sikla.com
www.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
webmailer.sikla.com
industrie.sikla.de
industrie.sikla.de
www.sikla.de
sklint43ww.sikla.de
industrie.sikla.de
de-neu.sikla.de
industrie.sikla.de
industrie.sikla.de
webmail.sikla.de
industrie.sikla.de
webmail.sikla.com
webmail.sikla.de
sklint43ww.sikla.de
www.sikla.de
webmailer.sikla.com
www.sikla.de
industrie.sikla.de
webmail.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
smart2biz.sikla.de
industrie.sikla.de
webmail.sikla.com
www.sikla.de
webmailer.sikla.com
www.sikla.de
www.sikla.de
webmail.sikla.com
webmail.sikla.com
webmail.sikla.com
industrie.sikla.de
Certificate
The complete raw certificate details for www.sikla.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF8DCCBNigAwIBAgISA0zseJDOir7ptbwajIFqBZTqMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMDQwMTIxMjdaFw0yNDA0MDMwMTIxMjZaMBcxFTATBgNVBAMT DHd3dy5zaWtsYS5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALTi ozS1h18i0t6kHtBUFXnhorPSuQDTyHMYkBdD8HTi3p/Db7fOYv2+6yzXU6xCEbs6 dYQHafZi15dPJ65C0mIfjRcAsbqHHN+Wun9pXT48cgjnki8KN4dCTrGcq+K4V0GL 42W2NwbYZtYPKC3tfMllEFzIfrpHQ1/Ur790emhVzGpMLYjtqWGEIE01ErJ+p66g uNNWr9J4IaV4/bkeDHhjQQSQb2MPRHOhI3RmD6muYyubucBbxW6BZuwj3EETHIhE 2CWqoMZiaQkZzuKAhN3HZzePsOR/fAuE4PMvoamozjfPCCEDoDG3RTQuAJyFx9Ke nRe81BHXCNw/uWI/p6ip99By45u4wxaX3nS+QitRM+nqGlqhKbQ20oT8R8Sr37JP tb/XQH85lLw2CM9GH9SsdLmPZvFD7xKmL09iM9dhwRWFxKzOSs4H/z+Dgk05D+5i zcYLT4NkK8kjcPkQsoL6VLC3U5lbX89MbOvDehGzEcqAyAyc4H6AmdqnjVprTZDB 6AcecunOX1Po6aW/jeYbEW4JkVMBaseTTfolS+qHws+G50Teg+LDGsDgrWWctgJL BhyRl4Hg11/IjAwZ5RmHUi3d8H42WAcyb9SkDIsrt8a/bnSUOTXRGnpeghXDhA9M nA8rMXd2hkMf99WoOh8ySgcdd5d48O1MuOPPUHAvAgMBAAGjggIZMIICFTAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFAwjP0QjmhcUWpEPCEApADag+XxZMB8GA1UdIwQY MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v cjMuaS5sZW5jci5vcmcvMCEGA1UdEQQaMBiCCHNpa2xhLmRlggx3d3cuc2lrbGEu ZGUwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEA dwBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYzSRouhAAAEAwBI MEYCIQDb45PQP5ZbfFrf+hBkAvRhJp2Xvb62ZYnnYUh/Srp+mgIhAJr+5iQV8Ht+ ePGnUxW5jnjJK1zcA086gSn28+CuX+EiAHYA7s3QZNXbGs7FXLedtM0TojKHRny8 7N7DUUhZRnEftZsAAAGM0kaLowAABAMARzBFAiEAtxugsbukH0NEGitjKsY2Tfe2 U+/ft0isDflu2a0An3MCIGIdD/nH5DMhbla0uASsl2Faank8ZCLhwLLbPI2lcsPz MA0GCSqGSIb3DQEBCwUAA4IBAQC2mgRMYYU44gZE+lUuV2VitbJNpXTDMDBb3NFs mmpUVFHfsXX2aE4MOj4i7UXtaI9O4TSgEv373vRNIRCRREOwQ9g5hPqGwg5Ri8dS DNGB/sy9ultbJHbgFgeKDpCeJ0G9hyGhc/RT46lPogPOtIx2bBdSxHorspy4SHx4 njp2zgfirY32FhwTCBsp4i5L2xzakkzyJ3h1607hMCeLPMsi7Mr6sn9xMgzuGN+V 9lWC0k30ZjYdL9AeU6hpAvshbQk203hu/8pvPpDudPzftPEd9cv6qjTjjTwnEkR7 H9f8T+otJZ7GfSCIMWVWHV25O/4JJ7GdHZ7qz4w73JbDvvEJ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtOKjNLWHXyLS3qQe0FQV eeGis9K5ANPIcxiQF0PwdOLen8Nvt85i/b7rLNdTrEIRuzp1hAdp9mLXl08nrkLS Yh+NFwCxuocc35a6f2ldPjxyCOeSLwo3h0JOsZyr4rhXQYvjZbY3Bthm1g8oLe18 yWUQXMh+ukdDX9Svv3R6aFXMakwtiO2pYYQgTTUSsn6nrqC401av0nghpXj9uR4M eGNBBJBvYw9Ec6EjdGYPqa5jK5u5wFvFboFm7CPcQRMciETYJaqgxmJpCRnO4oCE 3cdnN4+w5H98C4Tg8y+hqajON88IIQOgMbdFNC4AnIXH0p6dF7zUEdcI3D+5Yj+n qKn30HLjm7jDFpfedL5CK1Ez6eoaWqEptDbShPxHxKvfsk+1v9dAfzmUvDYIz0Yf 1Kx0uY9m8UPvEqYvT2Iz12HBFYXErM5Kzgf/P4OCTTkP7mLNxgtPg2QrySNw+RCy gvpUsLdTmVtfz0xs68N6EbMRyoDIDJzgfoCZ2qeNWmtNkMHoBx5y6c5fU+jppb+N 5hsRbgmRUwFqx5NN+iVL6ofCz4bnRN6D4sMawOCtZZy2AksGHJGXgeDXX8iMDBnl GYdSLd3wfjZYBzJv1KQMiyu3xr9udJQ5NdEael6CFcOED0ycDysxd3aGQx/31ag6 HzJKBx13l3jw7Uy4489QcC8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 287512641500931251623112763276384237098218 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-04 01:21:27 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 01:21:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sikla.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 737947652659278470342153799445552761219003611437393605981778672906577926814753731811875308143592203824299761712694719335425229784214280256267960390560799403412150648977073160476231006159438080840387310525880439840265575806605611283457538097504020577646834384204463495534616335211930830610090540181198942045010341148563747500225789270867513231299800721846548556504056827904336117571784770939793946847238169169739632981087677200309818479858293854647503855524520715722359534668992880207646821818251688808387889411405932992975321956755999064951803887663246062387048656590778550897953641858177455398385461710018279120732866426878519712503420425867216745249247882882312877923147834313411420700773321325388749715873210605139548225344130060530893552087227452657962767474918846149855545095705705628825766349119955217571199541459866076831023452317884613708024401837391836445771133005935668332922315057889331824550798672839943155879484683018900483593104461865450646019070733561179292722779947008795017835231577819303830600549699226356111066736101478765411085132774179403422340913197790413082988993681856482850170561903164471695234997999285152884808753205487202842281901193268488461941956804476915412215487075189959434673597544950961708240760879 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0c233f44239a17145a910f0840290036a0f97c59 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sikla.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sikla.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cd2468ba10000040300483046022100dbe393d03f965b7c5adffa106402f461269d97bdbeb66589e761487f4aba7e9a0221009afee62415f07b7e78f1a75315b98e78c92b5cdc034f3a8129f6f3e0ae5fe122007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cd2468ba30000040300473045022100b71ba0b1bba41f43441a2b632ac6364df7b653efdfb748ac0df96ed9ad009f730220621d0ff9c7e433216e56b4b804ac97615a6a793c6422e1c0b2db3c8da572c3f3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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