1.exchange.1and1.eu

- 1&1 IONOS SE -

Issued by TeleSec ServerPass Class 2 CA

About this certificate

This digital certificate with serial number 17:e5:f5:c4:50:66:2c:9a:ad:df:c1:96:b9:55:ef:d3 was issued on by T-Systems International GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

1&1 IONOS SE

Organization: 1&1 IONOS SE
Organization unit: IT
State / Province: Rheinland-Pfalz
Locality: Montabaur
Country: DE

T-Systems International GmbH

Organization: T-Systems International GmbH
Organization unit: T-Systems Trust Center
Address: Untere Industriestr. 20
Postal code: 57250
State / Province: Nordrhein Westfalen
Locality: Netphen
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 17:e5:f5:c4:50:66:2c:9a:ad:df:c1:96:b9:55:ef:d3
Serial Number (int): 31766264627612609915546158287948214227
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 4f:c1:d7:ef:4e:d6:0d:07:6e:da:5a:1f:1f:ba:7a:72:70:16:44:e4
AuthorityKeyId: 94:c8:74:46:f5:3a:b4:46:48:26:f8:2b:ca:34:1e:56:26:04:12:00

Fingerprint (sha1): fe:9f:52:83:41:b8:5a:f1:09:25:fd:0d:d7:a1:06:ee:42:6b:7c:cd
Fingerprint (sha256): 1a:58:92:f5:af:2e:cd:ed:16:53:58:be:b1:dc:1d:59:f1:5b:b8:71:f3:14:f8:8e:8d:70:71:42:1a:63:0f:f1

Issuing Certificate URL: http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_Class_2_CA.cer

Revocation information

OCSP Server: http://ocsp.serverpass.telesec.de/ocspr
CRL Distribution Point: http://crl.serverpass.telesec.de/rl/ServerPass_Class_2.crl

Check the revocation status for certificate 1.exchange.1and1.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 1.exchange.1and1.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1.exchange.1and1.eu

Other certificates including the domain name 1and1.eu

(limited to 100 certificates)

Certificate

The complete raw certificate details for 1.exchange.1and1.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIQDCCByigAwIBAgIQF+X1xFBmLJqt38GWuVXv0zANBgkqhkiG9w0BAQsFADCB
3zELMAkGA1UEBhMCREUxJTAjBgNVBAoMHFQtU3lzdGVtcyBJbnRlcm5hdGlvbmFs
IEdtYkgxHzAdBgNVBAsMFlQtU3lzdGVtcyBUcnVzdCBDZW50ZXIxHDAaBgNVBAgM
E05vcmRyaGVpbiBXZXN0ZmFsZW4xDjAMBgNVBBEMBTU3MjUwMRAwDgYDVQQHDAdO
ZXRwaGVuMSAwHgYDVQQJDBdVbnRlcmUgSW5kdXN0cmllc3RyLiAyMDEmMCQGA1UE
AwwdVGVsZVNlYyBTZXJ2ZXJQYXNzIENsYXNzIDIgQ0EwHhcNMTkwNDI0MTA1MTUx
WhcNMjEwNDI5MjM1OTU5WjB9MQswCQYDVQQGEwJERTEVMBMGA1UECgwMMSYxIElP
Tk9TIFNFMQswCQYDVQQLEwJJVDEYMBYGA1UECBMPUmhlaW5sYW5kLVBmYWx6MRIw
EAYDVQQHEwlNb250YWJhdXIxHDAaBgNVBAMTEzEuZXhjaGFuZ2UuMWFuZDEuZXUw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVZlkkHN/EptqkRnyvCFK3
zAU4B//1MoJr88WyoD18izCy5i0dtRZHsdV/D+RtbN9kqG/dap4dmBneY13XT6+i
pOZ+eFjosAkMPsCnjsSVyRbhBciVAwj6WG4hDi1SN+3YrCwbJaI3gM2Q/0lsKTsm
5E65uldsagQdrdIL9oVczz98jZ7RmtGEHcyKWLJ2ovxNm3ZPnd+2baBMVIqR520F
I8mme8aCQMNZeCfL40f+C/EpAoNt8JBaRTngCqx/iJ6IdTeEPNQ1WpxeaJlugOcp
LysxNO7XAL/A3+2wp6TycNzllEeP3XdjNjAmZnNXLPX1Nr+mUJwGqc6o/C5tWZb3
AgMBAAGjggRXMIIEUzAfBgNVHSMEGDAWgBSUyHRG9Tq0Rkgm+CvKNB5WJgQSADAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMB0G
A1UdDgQWBBRPwdfvTtYNB27aWh8funpycBZE5DBaBgNVHSAEUzBRMEUGCisGAQQB
vUcNFwEwNzA1BggrBgEFBQcCARYpaHR0cDovL3d3dy50ZWxlc2VjLmRlL3NlcnZl
cnBhc3MvY3BzLmh0bWwwCAYGZ4EMAQICMEsGA1UdHwREMEIwQKA+oDyGOmh0dHA6
Ly9jcmwuc2VydmVycGFzcy50ZWxlc2VjLmRlL3JsL1NlcnZlclBhc3NfQ2xhc3Nf
Mi5jcmwwgZkGCCsGAQUFBwEBBIGMMIGJMDMGCCsGAQUFBzABhidodHRwOi8vb2Nz
cC5zZXJ2ZXJwYXNzLnRlbGVzZWMuZGUvb2NzcHIwUgYIKwYBBQUHMAKGRmh0dHA6
Ly9jcmwuc2VydmVycGFzcy50ZWxlc2VjLmRlL2NydC9UZWxlU2VjX1NlcnZlclBh
c3NfQ2xhc3NfMl9DQS5jZXIwDAYDVR0TAQH/BAIwADAeBgNVHREEFzAVghMxLmV4
Y2hhbmdlLjFhbmQxLmV1MIICbQYKKwYBBAHWeQIEAgSCAl0EggJZAlcAdgBvU3as
MfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWpO+SUOAAAEAwBHMEUCIQCi
0tLG+75t/9QTTo7p0PVMipFaZDsJLk95/b9AOO7M/gIgPHdfoEXopIKL8UyF9c6o
npeAjsuHGOFmZnZbFvmrj1MAdgBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6od
BxPTDAAAAWpO+SZEAAAEAwBHMEUCIQCXWei1Ed2zt3B1L4drGEp20vQtSoshlWyz
qzc9r2T+1wIgA1A/Jyb84i+XhvMgAtg4RyfKzb15D/mzNl1thj381zcAdQC72d+8
H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWpO+STrAAAEAwBGMEQCIAv/
VejwAQhsDV5mv5TQsIWDzbdcJYsbr9CgzrtHwBphAiBWtQuqRf0+rF1Bf72UWQuK
HSl5U+2c5MeiIp7l/GaNgwB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7I
DdwQAAABak75JOwAAAQDAEcwRQIgLqE8epckJy6rMS3fidYb3A/gj7FuFUoApFvV
CrRz7uUCIQDJ/Cp4E/Mz0t83klV7pbbBH8xiDhF9KxVLoMNRZq7YzQB2AO5Lvbd1
zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABak75JRQAAAQDAEcwRQIhALfw
WLNA3HcqBvszXwp+CDQHgAPsqkESGnUMySoYZgGrAiAR4yNWQzJf/+4C39jsRRFx
S7EuTknmhS5QZrJEr7yT/TANBgkqhkiG9w0BAQsFAAOCAQEAgQtK785aN4vKBV9u
jphD2thgjCnYe1zTsju1cp79Vk9oGBLLelbbFllO4L/wBjS5rW5hMffI/7mrTxEC
G7Fsfp64NfJssFbIgVeNLhgLwhkgj/6NMHumNDnCiMerCayZa0D4Yjz5JAq2uwBE
wRHjI/sZCUa0LEN34jftJWzQHEQlPyy14X5sK2gtro/mLkJHKCn+rC+BZVK3U9fT
BuI18luR4snsam8H+QOiJAnUYs5rtLCfjHHvrVbiMG7tGMKurRlLdUpCTTbG9vBW
nquU4cT1rfr4s+XhKTe18iFozuSlf291ykv7XLQnRG0HhL1C/hKFHxYTRRMARnxS
pDgB5Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WZZJBzfxKbapEZ8rwhS
t8wFOAf/9TKCa/PFsqA9fIswsuYtHbUWR7HVfw/kbWzfZKhv3WqeHZgZ3mNd10+v
oqTmfnhY6LAJDD7Ap47ElckW4QXIlQMI+lhuIQ4tUjft2KwsGyWiN4DNkP9JbCk7
JuROubpXbGoEHa3SC/aFXM8/fI2e0ZrRhB3MiliydqL8TZt2T53ftm2gTFSKkedt
BSPJpnvGgkDDWXgny+NH/gvxKQKDbfCQWkU54Aqsf4ieiHU3hDzUNVqcXmiZboDn
KS8rMTTu1wC/wN/tsKek8nDc5ZRHj913YzYwJmZzVyz19Ta/plCcBqnOqPwubVmW
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 31766264627612609915546158287948214227
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'T-Systems International GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'T-Systems Trust Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '57250'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Netphen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Untere Industriestr. 20'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeleSec ServerPass Class 2 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-24 10:51:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '1&1 IONOS SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rheinland-Pfalz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montabaur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1.exchange.1and1.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26939228739818458334698151968626061272176368900679610878342607199836000326040403303316312031293771178451460487800638661681667832775433755957150473698436809441093806657447179687195645976464271701871757342208516863766395472020653029536209583356717112501866367864323026922583099626409556671896930141294232305122207276204070772376710722770871045324459771883707501873374308386587211999913817445012868631604446382802728758829060506288146810986050080538383360389008209893164086786078040656606351789883441588229416219586664703025397028559667403671987884074357866454119556147718528428319029920050857549193385678018601614415607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 94c87446f53ab4464826f82bca341e5626041200
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4fc1d7ef4ed60d076eda5a1f1fba7a72701644e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.7879.13.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.telesec.de/serverpass/cps.html'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/rl/ServerPass_Class_2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.serverpass.telesec.de/ocspr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_Class_2_CA.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1.exchange.1and1.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes)
							02570076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016a4ef9250e0000040300473045022100a2d2d2c6fbbe6dffd4134e8ee9d0f54c8a915a643b092e4f79fdbf4038eeccfe02203c775fa045e8a4828bf14c85f5cea89e97808ecb8718e16666765b16f9ab8f530076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016a4ef9264400000403004730450221009759e8b511ddb3b770752f876b184a76d2f42d4a8b21956cb3ab373daf64fed7022003503f2726fce22f9786f32002d8384727cacdbd790ff9b3365d6d863dfcd737007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016a4ef924eb000004030046304402200bff55e8f001086c0d5e66bf94d0b08583cdb75c258b1bafd0a0cebb47c01a61022056b50baa45fd3eac5d417fbd94590b8a1d297953ed9ce4c7a2229ee5fc668d83007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016a4ef924ec000004030047304502202ea13c7a9724272eab312ddf89d61bdc0fe08fb16e154a00a45bd50ab473eee5022100c9fc2a7813f333d2df3792557ba5b6c11fcc620e117d2b154ba0c35166aed8cd007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016a4ef925140000040300473045022100b7f058b340dc772a06fb335f0a7e0834078003ecaa41121a750cc92a186601ab022011e3235643325fffee02dfd8ec4511714bb12e4e49e6852e5066b244afbc93fd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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