shop.galaxa.de

Issued by PositiveSSL CA 2

About this certificate

This digital certificate with serial number 80:38:93:b2:a7:cb:f9:ac:bb:8d:5b:19:e8:f3:63:ff was issued on by COMODO CA Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shop.galaxa.de,OU=Domain Control Validated+OU=PositiveSSL Multi-Domain

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 80:38:93:b2:a7:cb:f9:ac:bb:8d:5b:19:e8:f3:63:ff
Serial Number (int): 170434947753302434050644593049936815103
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 78:0e:86:01:eb:7a:ef:ae:12:45:fa:73:88:c9:56:8f:a3:7d:19:b6
AuthorityKeyId: 99:e4:40:5f:6b:14:5e:3e:05:d9:dd:d3:63:54:fc:62:b8:f7:00:ac

Fingerprint (sha1): 10:e5:22:d3:69:72:2d:6d:75:37:b7:47:85:5f:d5:45:aa:4e:c7:04
Fingerprint (sha256): 27:e8:64:77:7f:49:41:a9:b6:f9:90:1b:50:74:8b:0d:62:64:de:9f:b6:3c:d7:03:00:8d:9d:28:43:36:dc:9f

Issuing Certificate URL: http://crt.comodoca.com/PositiveSSLCA2.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/PositiveSSLCA2.crl

Check the revocation status for certificate shop.galaxa.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.galaxa.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop.galaxa.de

Other certificates including the domain name galaxa.de

(limited to 100 certificates)
webshop.galaxa.de
webshop.galaxa.de
vistan.galaxa.de
servicecenter.galaxa.de
vistan.galaxa.de
webshop.galaxa.de
visea.galaxa.de
blexonglas.de
ess.galaxa.de
blexonglas.de
staging.galaxa.de
servicecenter.galaxa.de
visea.galaxa.de
blexonglas.de
ess.galaxa.de
visea.galaxa.de
webshop.galaxa.de
visea.galaxa.de
shop.galaxa.de
svc.galaxa.de
webshop.galaxa.de
svc.galaxa.de
shop.galaxa.de
produkte.galaxa.de
svc.galaxa.de
shop.galaxa.de
backend.galaxa.de
webshop.galaxa.de
visea.galaxa.de
webshop.galaxa.de
ess.galaxa.de
webshop.galaxa.de
galaxa.de
*.galaxa.de
backend.galaxa.de
vistan.galaxa.de
backend.galaxa.de
backend.galaxa.de
webshop.galaxa.de
blexonglas.de
shop.galaxa.de
ess.galaxa.de
blexonglas.de
webshop.galaxa.de
vistan.galaxa.de
webshop.galaxa.de
blexonglas.de
shapemanager.galaxa.de
shape.galaxa.de
blexonglas.de
webshop.galaxa.de
webshop.galaxa.de
backend.galaxa.de
blexonglas.de
ess.galaxa.de
visea.galaxa.de
vistan.galaxa.de
webshop.galaxa.de
ess.galaxa.de
shape.galaxa.de
webshop.galaxa.de
*.galaxa.de
vistan.galaxa.de
webshop.galaxa.de
visea.galaxa.de
backend.galaxa.de
produkte.galaxa.de
ess.galaxa.de
webshop.galaxa.de
webshop.galaxa.de
ess.galaxa.de
blexonglas.de
svc.galaxa.de
blexonglas.de
svc.galaxa.de
blexonglas.de
produkte.galaxa.de
galaxa.de
webshop.galaxa.de
produkte.galaxa.de
webshop.galaxa.de
produkte.galaxa.de
glx-backend.galaxa.de
vistan.galaxa.de
blexonglas.de
produkte.galaxa.de
vistan.galaxa.de
backend.galaxa.de
webshop.galaxa.de
vistan.galaxa.de
backend.galaxa.de
webshop.galaxa.de
visea.galaxa.de
staging.galaxa.de
ess.galaxa.de
vistan.galaxa.de
galaxa.de
shop.galaxa.de
webshop.galaxa.de
webshop.galaxa.de

Certificate

The complete raw certificate details for shop.galaxa.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIRAIA4k7Kny/msu41bGejzY/8wDQYJKoZIhvcNAQEFBQAw
czELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxGTAXBgNV
BAMTEFBvc2l0aXZlU1NMIENBIDIwHhcNMTMxMTIxMDAwMDAwWhcNMTUwMjE5MjM1
OTU5WjBfMSEwHwYDVQQLExhEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQxITAfBgNV
BAsTGFBvc2l0aXZlU1NMIE11bHRpLURvbWFpbjEXMBUGA1UEAxMOc2hvcC5nYWxh
eGEuZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCgvW+e0Al4w1vH
HmL2ovWQq82cC84wkJ60L8sPd4bZAESYRQNVfZsbXQTV3MqDmm+cS8/P5aWTP9x/
OZgEb8uvcV1ynk7SJ6PKZHdRWngqM5PHmf4OpFAqi4SauLUIElr7aDlXMtr3X84D
PDPBo5GcolQwEO7nRY08R5XfpcxYSz84DNyQwcVkyVMzgMmHk6TPJ6HHgFZA4P8i
dFgXPdQcOig74Bc1m+GcdZAJyV1AEuG4IoHndbsCK8t0NqvffSvU2+BuTlYVnU7F
bkHH6y9dUMSh5KpJZxVDZF0tsmhuB/V+GLiB7xPVktnPuXm/126OIpEAfDGCoFGI
G/nlBzRG4/TiqC4gqmVPBsYwDAw6fbXchA9rCuZCLYDnZF+Ar+vhbjdVRq5VZ6WP
s6WE3fkaha3hWshC81KVX/QEdq8i2kOq4Q6k6lV8OeuN3IJ3uKGxdJDaQ+7dypIe
MLOiJ+joJjqg3jsTmI8MiYNcffWEiBGfnZLBS1xbr1sQalLjczk7/Gfxr7gOFJCH
+o8lSuUgRhSkqxygiDRsPIgRKGAyyQ25HIlK1HrSNkRPqKWZsBMrk+//3xHc3nvN
8tbE1pV32til5IzXaLJh7Yp1mCF6kvmJyGzCFRXx34PoIfNwd2d46N9TENcqCPTr
fM5aPslqF31RqPtJseAt0NLB4q7bdQIDAQABo4IBmTCCAZUwHwYDVR0jBBgwFoAU
meRAX2sUXj4F2d3TY1T8Yrj3AKwwHQYDVR0OBBYEFHgOhgHreu+uEkX6c4jJVo+j
fRm2MA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjBQBgNVHSAESTBHMDsGCysGAQQBsjEBAgIHMCwwKgYI
KwYBBQUHAgEWHmh0dHA6Ly93d3cucG9zaXRpdmVzc2wuY29tL0NQUzAIBgZngQwB
AgEwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5jb21vZG9jYS5jb20vUG9z
aXRpdmVTU0xDQTIuY3JsMGwGCCsGAQUFBwEBBGAwXjA2BggrBgEFBQcwAoYqaHR0
cDovL2NydC5jb21vZG9jYS5jb20vUG9zaXRpdmVTU0xDQTIuY3J0MCQGCCsGAQUF
BzABhhhodHRwOi8vb2NzcC5jb21vZG9jYS5jb20wGQYDVR0RBBIwEIIOc2hvcC5n
YWxheGEuZGUwDQYJKoZIhvcNAQEFBQADggEBAF9PaTLg01+nuGcdIl8ozkVp+iAy
GJtX6lpHFfxFzs42oQoRfJRtxUUHb0OEb/VDSSi4ifvJrZ7k8EXJxyrcsqkxtqJe
9Q9cB4ChsozCOrmLlwNlL1JWUQNT00GRiqXvwR6YPMpe/ATXvSwgKrl0f/nhH/kT
/FiucsVyjNFsvvETvG5KLrFTEQ9Pbgjan3j7BuTNkoE6eKRsm+H8zk+NrSAy998Y
GxwztRwDMsmdIq3tVEHONeWjGkCURPyoDHgO6Pt3xF3MQKf1/buzqKwZKcx4NRTW
oXU7Ce90SQxiH5e9g9c1c+cu+qXcC/2HfdQiNAKKKu6xn4l81vGOjrWW6bA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 170434947753302434050644593049936815103
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-11-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL Multi-Domain'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.galaxa.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 655761924020646335550176695323485074853287322108009016765004501592702298328098217741447399736756573900260802965159700629726164951283549582763464040992397374953447337861076826024409662140243239015221049058396936403292346676658190705188623314683339209074640169395546077253457766470468201802189000318282331836067988604847132302410460811573519112818631601559387320121655262232777894569610329018344810314461850799575110920547059694338233340719913075579912252900121387039552492970026791165539464503977135312243703894022143383904368088985227735122035818638340571787385196874000539294983618518050047184231648959831078354589030201123480685545554357500139386185464831216015250500078457621509425477000569522610023041254722024001154554973376408758418930102825851421843879830444842300020267812002105584832457471403465334128712170534605151242934933682342437080471043523379765113775397238831520565155909362099341406458455673053784714523586081027235056701045715563966077503831706731312814347663718681608404716484968746413753834590669356900129173974244461165187962060199746672290390589124286879698850145257160516940024959854350112379137886173145236856000686395335086898311635671126822447842271121576134157755765888556631592708329758127028088591014773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 99e4405f6b145e3e05d9ddd36354fc62b8f700ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							780e8601eb7aefae1245fa7388c9568fa37d19b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.positivessl.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/PositiveSSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/PositiveSSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.galaxa.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005f4f6932e0d35fa7b8671d225f28ce4569fa2032189b57ea5a4715fc45cece36a10a117c946dc545076f43846ff5434928b889fbc9ad9ee4f045c9c72adcb2a931b6a25ef50f5c0780a1b28cc23ab98b9703652f5256510353d341918aa5efc11e983cca5efc04d7bd2c202ab9747ff9e11ff913fc58ae72c5728cd16cbef113bc6e4a2eb153110f4f6e08da9f78fb06e4cd92813a78a46c9be1fcce4f8dad2032f7df181b1c33b51c0332c99d22aded5441ce35e5a31a409444fca80c780ee8fb77c45dcc40a7f5fdbbb3a8ac1929cc783514d6a1753b09ef74490c621f97bd83d73573e72efaa5dc0bfd877dd42234028a2aeeb19f897cd6f18e8eb596e9b0