cmp.bestcheck.de

Issued by R3

About this certificate

This digital certificate with serial number 04:f0:7d:0e:8b:94:58:45:e5:fa:12:22:86:ae:ef:00:8a:b5 was issued on by Let's Encrypt.

With 67 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cmp.bestcheck.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f0:7d:0e:8b:94:58:45:e5:fa:12:22:86:ae:ef:00:8a:b5
Serial Number (int): 430283140810703373931879339121715865225909
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 29:eb:93:ed:e4:aa:c2:81:bf:7e:75:fd:38:79:b1:20:75:3d:d3:6e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 38:f5:2f:d6:6d:64:aa:ad:a1:13:ce:1e:97:c6:6b:9b:19:e0:bf:23
Fingerprint (sha256): 1b:2c:89:76:a4:5d:63:d1:63:9d:3e:b1:99:84:28:f0:06:ad:62:f7:4b:5a:ee:e9:6c:86:81:08:35:89:60:5e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cmp.bestcheck.de

67

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmp.bestcheck.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmp.bestcheck.de
cmp.bunte.de
cmp.burda-forward.de
cmp.burda-vergleicht.de
cmp.burda-versichert.de
cmp.cardscout.de
cmp.chip.de
cmp.cinema.de
cmp.daskochrezept.de
cmp.dasprodukt.de
cmp.eatbetter.de
cmp.einfachbacken.de
cmp.einfachkochen.de
cmp.federiko.de
cmp.finanzen100.de
cmp.finanzfreunde.info
cmp.fitforfun.de
cmp.focus.de
cmp.gewinnspiel-gratis.com
cmp.guter-rat.de
cmp.holidaycheck.de
cmp.jameda.de
cmp.lust-auf-genuss.de
cmp.med1.de
cmp.meine-familie-und-ich.de
cmp.netmoms.de
cmp.publisher.einfachbacken.de
cmp.slowlyveggie.de
cmp.so-stadt.de
cmp.streampicker.de
cmp.superillu.de
cmp.tvspielfilm.de
cmp.tvtoday.de
cmpv2.gesundheitsportal-privat.de
cmpv2.mylife.de
cmpv2.netdoktor.at
cmpv2.netdoktor.ch
cmpv2.netdoktor.de
consent-amp-sp.mein-schoener-garten.de
consent.bunte-aboshop.de
consent.burda-foodshop.de
consent.burdadirect-abo.com
consent.burdastyle-abo.de
consent.cinema-abo.de
consent.focus-abo.de
consent.freizeitrevue-abo.de
consent.freundin-abo.de
consent.guter-rat-abo.de
consent.heftnichterhalten.de
consent.instyle-abo.de
consent.m.burda.de
consent.magazinnichterhalten.de
consent.meinschoenergarten-abo.de
consent.mio-vorteilsclub.de
consent.mirabo.at
consent.mirabo.ch
consent.shop-at.motorpresse.de
consent.shop-ch.motorpresse.de
consent.shop.motorpresse.de
consent.superillu-abo.de
consent.tvspielfilm-abo.de
consent.tvtoday-abo.de
consent.wohnen-abo.de
consent.women-abo.de
consent.zeitschriften-abo.de
consent.zeitschriften-abo.shop
consent.zeitschriften.burda.com

Other certificates including the domain name bestcheck.de

(limited to 100 certificates)
*.bestcheck.de
bfops.io
prospekte.bestcheck.de
bfops.io
data-2f2ec12966.bestcheck.de
mms.bestcheck.de
data-45ccb8748c.bestcheck.de
tags.fitforfun.de
bf-tools.net
mms.bestcheck.de
mms.bestcheck.de
*.sp.bestcheck.de
mms.bestcheck.de
somniture.bestcheck.de
bfops.io
data-2f2ec12966.bestcheck.de
s.burda-forward.com
goalfacts.com
cmp.bestcheck.de
tags.fitforfun.de
data-2f2ec12966.bestcheck.de
mms.bestcheck.de
bfops.io
cmp.bestcheck.de
mms.bestcheck.de
bfops.io
*.bestcheck.de
bfops.io
bfops.io
bf-tools.net
bfops.io
bfops.io
cmp.bestcheck.de
cmp.bestcheck.de
bfops.io
bfops.io
bf-tools.net
cmp.bestcheck.de
data-45ccb8748c.bestcheck.de
cmp.bestcheck.de
somniture.bestcheck.de
cmp.bestcheck.de
tags.fitforfun.de
*.sp.bestcheck.de
tags.fitforfun.de
mms.bestcheck.de
tags.fitforfun.de
cmp.bestcheck.de
cmp.bestcheck.de
data-2f2ec12966.bestcheck.de
bf-tools.net
bfops.io
data-45ccb8748c.bestcheck.de
cmp.bestcheck.de
cmp.bestcheck.de
data-45ccb8748c.bestcheck.de
cmp.bestcheck.de
data-2f2ec12966.bestcheck.de
bfops.io
bfops.io
mms.bestcheck.de
newsletter.bestcheck.de
cmp.bestcheck.de
bf-tools.net
sportwetten.bestcheck.de
*.sandbox-sp.bestcheck.de
bfops.io
data-2f2ec12966.bestcheck.de
data-2f2ec12966.bestcheck.de
data-1818d50639.bestcheck.de
bfops.io
data-2f2ec12966.bestcheck.de
bf-tools.net
cmp.bestcheck.de
cmp.bestcheck.de
bf-tools.net
bfops.io
bfops.io
mms.bestcheck.de
cmp.bestcheck.de
mms.bestcheck.de
data-45ccb8748c.bestcheck.de
data-2f2ec12966.bestcheck.de
somniture.bestcheck.de
bf-tools.net
cmp.bestcheck.de
data-2f2ec12966.bestcheck.de
*.sandbox-sp.bestcheck.de
somniture.bestcheck.de
bfops.io
mms.bestcheck.de
data-45ccb8748c.bestcheck.de
mms.bestcheck.de
bfops.io
cmp.bestcheck.de
data-45ccb8748c.bestcheck.de
bfops.io
bfops.io
bfops.io
newsletter.bestcheck.de

Certificate

The complete raw certificate details for cmp.bestcheck.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw0DBfJWMtvOENYgl7eK
F6jAWz3HvQirstdPbz9znc8+M99mh+FBE99INWYXkHMLq4AcGh/JGhYrZjCXnunj
3rJpA2c+LaSWoflWjpxj1J1oo6hL/HM2V3zCJsS2d4foeWQGDmy8MFRdqovC7JxT
epZllf3gVE8SdlVff315W09WtLQCDOFG1W+CoVmOAR3oP4JrQpv08/nIfkIZfDr+
HJ2z/Aio2xl8xBBXHTBcv5mrEhGufiAbLFt4yDdw90hSpQXHd5qy7uhe9ewn5NRQ
gqyXQu302HHXr9b7ET74oCrf3JarfhxbIJ5oaOAzu18fkgmuiQFrZ1mDYSq4XRUU
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 430283140810703373931879339121715865225909
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 17:22:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 17:22:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmp.bestcheck.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23108026171188529433031650919177035722824256256896154686676929370202011020490406133392792066237741621328762015742740709741845830678317420952711925116768524338940759393101375143329317239427027806743084501970189242912651662451037820360700482594380926493265892490621046984510691749489114315964694284854092591344119973416942396637603222824717274819141627639429640339442326342968817992163118820852145883758696337386022568131745049863913571964607235265635210448003402001412026224604619362103746434896625446819958722131286951463781485290035044520725525273034532417955013073595776964530672207033883582767340699802521667179677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29eb93ede4aac281bf7e75fd3879b120753dd36e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1567 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.bunte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.burda-vergleicht.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.burda-versichert.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.chip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.cinema.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.daskochrezept.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.dasprodukt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.eatbetter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.einfachbacken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.einfachkochen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.federiko.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.finanzfreunde.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.focus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.gewinnspiel-gratis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.guter-rat.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.holidaycheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.jameda.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.lust-auf-genuss.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.med1.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.meine-familie-und-ich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.publisher.einfachbacken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.slowlyveggie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.so-stadt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.streampicker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.superillu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tvspielfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tvtoday.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmpv2.gesundheitsportal-privat.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmpv2.mylife.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmpv2.netdoktor.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmpv2.netdoktor.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmpv2.netdoktor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent-amp-sp.mein-schoener-garten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.bunte-aboshop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.burda-foodshop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.burdadirect-abo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.burdastyle-abo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.cinema-abo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.focus-abo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.freizeitrevue-abo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.freundin-abo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.guter-rat-abo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.heftnichterhalten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.instyle-abo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.m.burda.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.magazinnichterhalten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.meinschoenergarten-abo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.mio-vorteilsclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.mirabo.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.mirabo.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.shop-at.motorpresse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.shop-ch.motorpresse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.shop.motorpresse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.superillu-abo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.tvspielfilm-abo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.tvtoday-abo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.wohnen-abo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.women-abo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.zeitschriften-abo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.zeitschriften-abo.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.zeitschriften.burda.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bedf80076000004030046304402207e1c9ec1f6c02500a19283be114b3095e3445331a744dae299e596ae61dac679022034d5e2a8a2559367fc4c298f8f8fadec92ce4e9bc258da27b27320a9e1838a81007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bedf8009e00000403004730450221009abf4ec40f66a9d443462f8ec8c98c516793866f8f9f1aa8a7af46ee3f25b3e802203b06df42163178a08296cdd88e86df86c8ff0b46821f1b48babdb2b9e5d69a17
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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