*.liftstar.de

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 6b:aa:df:f3:78:7f:85:f8:ab:76:71:bc:5d:e8:0d:bb was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.liftstar.de,OU=Domain Control Validated+OU=PositiveSSL Wildcard

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 6b:aa:df:f3:78:7f:85:f8:ab:76:71:bc:5d:e8:0d:bb
Serial Number (int): 143114628282014391805838521070705446331
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: b1:bd:f6:a2:29:76:10:b7:94:da:92:6e:01:3b:66:8d:06:bb:5a:b5
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): be:46:69:c8:40:b3:25:d3:da:4e:bc:80:75:08:08:16:f3:ae:6f:1e
Fingerprint (sha256): 25:fc:63:63:7c:84:d7:39:d3:fe:fa:3d:5a:7d:f5:a9:68:74:1d:f7:0e:54:1a:8d:e2:f5:ab:20:45:84:d8:bd

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.liftstar.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.liftstar.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.liftstar.de
liftstar.de

Other certificates including the domain name liftstar.de

(limited to 100 certificates)
mitteilungsblatt.seifert-medien.de
start.andernach-wirtschaft.de
kiosk.am-weststrand.com
kiosk.am-weststrand.com
media.hirschmann-automotive.com
publications.cwgc.org
downloads.yspi.ie
sip.lifta.de
www.digital.britishtraveljournal.com
www.liftstar.de
publications.cwgc.org
flyer.aqua-dome.at
kundenmagazin.derpart.com
*.liftstar.de
news.vdmno.de
mitteilungsblatt.seifert-medien.de
publikationen.contipark.de
flyer.aqua-dome.at
kiosk.antalis-verpackungen.de
brochures.waterrower.co.uk
magazine.elektropraktiker.de
publications.cwgc.org
sip.lifta.de
www.liftstar.de
brochure.ntpwarranty.com
mitteilungsblatt.seifert-medien.de
kataloge.weilermoebel.at
downloads.yspi.ie
www.liftstar.de
katalog.erima.de
publikationen.jugend-bildung.landkreis.gr
katalog.gartenmode.de
dokumente.zettlerelectronics.com
flyer.aqua-dome.at
brochure.ntpwarranty.com
brochures.waterrower.co.uk
www.liftstar.de
lifta.de
flyer.aqua-dome.at
publications.cwgc.org
*.liftstar.de
mitteilungsblatt.seifert-medien.de
mitteilungsblatt.seifert-medien.de
wirbeicontipark.contipark.de
magazine.elektropraktiker.de
sip.lifta.de
magazine.ausemergencyservices.com.au
kataloge.teppich-stark.de
ebooks.royalafricansafaris.com
lifta.de
publications.cwgc.org
onlinekatalog.cultous.de
tagesspiegel.kiosk.plus
kiosk.am-weststrand.com
kiosk.am-weststrand.com
kundenmagazin.derpart.com
news.vdmno.de
kiosk.am-weststrand.com
downloads.yspi.ie
kiosk.antalis-verpackungen.de
publications.cwgc.org
kiosk.antalis-verpackungen.de
wirbeicontipark.contipark.de
*.liftstar.de
info.independenceaustralia.com.au
brochures.waterrower.co.uk
www.liftstar.de
magazine.elektropraktiker.de
mitteilungsblatt.seifert-medien.de
produktkatalog.mwf-technik.de
www.liftstar.de
brochure.ntpwarranty.com
kiosk.am-weststrand.com
welt-am-sonntag-kompakt.kiosk.plus
brochures.waterrower.co.uk
yumpu.testact.de
brochure.ntpwarranty.com
produktkatalog.mwf-technik.de
kundenmagazin.derpart.com
mitteilungsblatt.seifert-medien.de
info.independenceaustralia.com.au
*.liftstar.de
wirbeicontipark.contipark.de

Certificate

The complete raw certificate details for *.liftstar.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGcTCCBVmgAwIBAgIQa6rf83h/hfirdnG8XegNuzANBgkqhkiG9w0BAQsFADCB
jzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD
Ey5TZWN0aWdvIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENB
MB4XDTE5MTAyNDAwMDAwMFoXDTIxMTAyNDIzNTk1OVowWjEhMB8GA1UECxMYRG9t
YWluIENvbnRyb2wgVmFsaWRhdGVkMR0wGwYDVQQLExRQb3NpdGl2ZVNTTCBXaWxk
Y2FyZDEWMBQGA1UEAwwNKi5saWZ0c3Rhci5kZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANI9rCVKclQJBwplryJii7PqvQ8492/zlR8dQ2avfc3giDZK
ktUVUjLPl9HK0aSGjdPc2z7o4wljN7ry98K3diBctlc6qDdofAw/8NQehOCUMZg5
H+gdQZTkTfueW2NPUm2AtMEt6M8v7/l2iD570pR+I0SPDexPtCnujLCaqWgtWlDL
g0SsHbABPXWH8JIndEL2rurGXUtWYp+2CqFA9DaLlnk7+6xPA9zTAOQa04VXE9rx
nabZoXOFdrgUtGCXbXYiHuYj1PO/NFnm8VdvW+J8YQ1KoHfoDLUjXheAMSV/Jgm+
bxu9S/sENYpo2/iGfImF2o4mDgVOoMeJCJLMv+MCAwEAAaOCAvswggL3MB8GA1Ud
IwQYMBaAFI2MXsRUrYrhd+mb+ZsF4bgBjWHhMB0GA1UdDgQWBBSxvfaiKXYQt5Ta
km4BO2aNBrtatTAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQIC
BzAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwB
AgEwgYQGCCsGAQUFBwEBBHgwdjBPBggrBgEFBQcwAoZDaHR0cDovL2NydC5zZWN0
aWdvLmNvbS9TZWN0aWdvUlNBRG9tYWluVmFsaWRhdGlvblNlY3VyZVNlcnZlckNB
LmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wJQYDVR0R
BB4wHIINKi5saWZ0c3Rhci5kZYILbGlmdHN0YXIuZGUwggF9BgorBgEEAdZ5AgQC
BIIBbQSCAWkBZwB2AH0+8viP/4hVaCTCwMqeUol5K8UOeAl/LmqXaJl+IvDXAAAB
bf38i/kAAAQDAEcwRQIgLY22hoSVEw3l4FRaAfr19WBqtH8f6e2a69d0KQ4cWkQC
IQCOTb0WduqdbBsttZwg+rPeWYfw3KR2wH9UmkrAqYGpbgB1AESUZS6w7s6vxEAH
2Kj+KMDa5oK+2MsxtT/TM5a1toGoAAABbf38i90AAAQDAEYwRAIgAsDLO0tBira4
3R8Ulkk3ofh5lGPuP2IlT6k3YA2ik9gCIC5E/CPudZB23cFXW4uf2plHcKwQpRmk
dAv6ZIWUUF64AHYAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFt
/fyMGwAABAMARzBFAiA550NApoxzRgDZeSqSIDnAs5szcxHDVrBqS1OGOvFnzgIh
ALZve1/vsyickZooQk+FIXp3TKzzp3PKSDcQTuxNCgFSMA0GCSqGSIb3DQEBCwUA
A4IBAQCk4oE2whew6ldg4NNAKt3Hjr6S68ZgxOh+OMz1e7/GZoh4+XPWsm1QhAta
zU/ARdROGue911dnb+sPcLmhLVj9ZlBb7BOr0ly7n/1TTe0jENpZ6heJhfsG7l8r
yQMMxEfGCfa5+Rfhxqa6sM+2HnyXcllHN1HYokN6mU7CApb/x0hka+3y2dC3BVkn
ekQdnVieZ0I7CVb0eCd9fDN4+/BF0dyNaHZsWbsOV4TaD9tKi2+AcTEOvf38dssp
PCtgYNgAijzvwkxLCjMpbfjBpUkmwvDNPcZ2qLSE0OacrEycLPdyStP0+AxggXmn
oFlYr/d8sOC2gPvZ4YTCp1YOJMZ9
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j2sJUpyVAkHCmWvImKL
s+q9Dzj3b/OVHx1DZq99zeCINkqS1RVSMs+X0crRpIaN09zbPujjCWM3uvL3wrd2
IFy2VzqoN2h8DD/w1B6E4JQxmDkf6B1BlORN+55bY09SbYC0wS3ozy/v+XaIPnvS
lH4jRI8N7E+0Ke6MsJqpaC1aUMuDRKwdsAE9dYfwkid0Qvau6sZdS1Zin7YKoUD0
NouWeTv7rE8D3NMA5BrThVcT2vGdptmhc4V2uBS0YJdtdiIe5iPU8780WebxV29b
4nxhDUqgd+gMtSNeF4AxJX8mCb5vG71L+wQ1imjb+IZ8iYXajiYOBU6gx4kIksy/
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 143114628282014391805838521070705446331
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL Wildcard'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.liftstar.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26540455858478793065863796558094470675923526394976394757340274004839443973886766900275329735899656914040382104635490850206408789826733699410020814638488714062546735199229070569701320091561170011649673313673203716619306326058290635378263051985706914961269009875242852357420130413914502286202088212403555490507281929786373442640473800029404995636689226167308938084819704301760746627802950209993153870716087164174041243039965743039091585849751853288434356139886615463352867367981722129414362388251307911226651915290093573134415107301689373449083404155646298005521750047904537197851844246804345952552546033370062585118691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1bdf6a2297610b794da926e013b668d06bb5ab5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liftstar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liftstar.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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