www.tchibo.de

- Tchibo GmbH -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 08:45:83:12:7d:d4:b8:66:e7:2b:b9:90:df:93:26:ee was issued on by DigiCert Inc.

With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tchibo GmbH

Organization: Tchibo GmbH
State / Province: Hamburg
Locality: Hamburg
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:45:83:12:7d:d4:b8:66:e7:2b:b9:90:df:93:26:ee
Serial Number (int): 10994750910226023030267464690034747118
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 51:b7:ae:5c:d2:71:59:ca:b8:bc:92:18:1e:c8:97:c2:37:21:08:43
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): d4:95:84:07:61:1f:5f:d9:97:dc:1f:8a:c0:ad:6a:4c:9b:8e:30:22
Fingerprint (sha256): 29:c5:be:44:3e:81:f1:ec:38:f3:ce:6f:11:2f:46:eb:19:93:bc:6b:5a:ea:50:30:bf:12:30:b0:41:79:c0:d9

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.tchibo.de

54

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tchibo.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tchibo.de
tchibo.de
www.tchibo.pl
cdn.tchibo.se
reisen-de.tchibo-content.de
cdn.eduscho.at
prelive-reisen.tchibo.de
dev-reisen.eduscho.at
cdn.tchibo.com.tr
media5.tchibo-content.de
reisen-at.tchibo-content.de
cdn.tchibo.at
dev-reisen.tchibo.ch
www.tchibo.sk
www.tchibo.ch
www.tchibo.cz
reisen.eduscho.at
abnahme.reisedeals.tchibo.de
cdn.tchibo.cz
dev.reisedeals.tchibo.de
www.tchibo.com.tr
media1.tchibo-content.de
prelive-reisen.eduscho.at
cdn.tchibo.pl
media9.tchibo-content.de
cdn.tchibo.de
media2.tchibo-content.de
www.tchibo.se
reisedeals.tchibo.de
www.fr.tchibo.ch
reisen-test-de.tchibo-content.de
cdn.tchibo.ch
www.tchibo.at
www.tchibo.hu
cdn.tchibo.dk
media3.tchibo-content.de
cdn.tchibo.hu
reisen-ch.tchibo-content.de
reisen.tchibo.ch
reisen-test-ch.tchibo-content.de
media6.tchibo-content.de
prelive-reisen.tchibo.ch
www.eduscho.at
dev-reisen.tchibo.de
media8.tchibo-content.de
reisen.tchibo.at
media4.tchibo-content.de
www.tchibo.dk
reisen.tchibo.de
prev.reisedeals.tchibo.de
media7.tchibo-content.de
media.tchibo-content.de
cdn.tchibo.sk
reisen-test-at.tchibo-content.de

Other certificates including the domain name tchibo.de

(limited to 100 certificates)
tschibo.de
news.tchibo.de
news2.tchibo.de
buchung-reisen.tchibo.de
news2.tchibo.de
www.tchibo.de
contractmanagement.tchibo.de
tschibo.de
news.tchibo.de
*.tchibo.de
gewinnen.tchibo.de
news.tchibo.de
news.tchibo.de
blumen.tchibo.de
ihreurlaubsbuchung.tchibo.de
images.tchibo.de
tracking.tchibo.de
news.tchibo.de
fitness.tchibo.de
*.tchibo.de
news.tchibo.de
tagm.tchibo.de
*.reisedeals.tchibo.de
news.tchibo.de
black-n-white.tchibo.de
tracking.tchibo.de
www.strom.tchibo.de
fitness.tchibo.de
gewinnen.tchibo.de
community.tchibo.de
www.tchibo.de
tagm.tchibo.de
blumen.tchibo.de
news.tchibo.de
news.tchibo.de
access.tchibo.com
tschibo.de
access.tchibo.com
news.tchibo.de
tschibo.de
service.tchibo.de
sip.tchibo.com
ltur.tchibo.de
www.tchibo.de
mobilfunk.tchibo.de
ctagm.tchibo.de
reisen.tchibo.de
foto.tchibo.de
fitness.tchibo.de
fitness.tchibo.de
order-reisen.tchibo.de
tschibo.de
70.tchibo.de
tschibo.de
gas.tchibo.de
www.tchibo.de
blumen.tchibo.de
fitness.tchibo.de
smartman-test.tchibo.de
www.tchibo.de
b2bt.tchibo.de
tschibo.de
fitness.tchibo.de
service.tchibo.de
news.tchibo.de
order-reisen.tchibo.de
tschibo.de
www.tchibo.de
www.tchibo.de
*.tchibo.de
tschibo.de
images.tchibo.de
service.tchibo.de
*.tchibo.de
ctagm.tchibo.de
*.tchibo.de
tschibo.de
service.tchibo.de
news.tchibo.de
community.tchibo.de
news.tchibo.de
fitness.tchibo.de
blumen.tchibo.de
www.tchibo.de
dsx.tchibo.de
reisen.tchibo.de
tschibo.de
tracking.tchibo.de
reisebuchung.tchibo.de
www.tchibo.de
reisebuchung.tchibo.de
community.tchibo.de
service.tchibo.de
www.tchibo.de
order-reisen.tchibo.de
news.tchibo.de
fitness.tchibo.de
tracking.tchibo.de
*.tchibo.de
fitness.tchibo.de

Certificate

The complete raw certificate details for www.tchibo.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIK9jCCCd6gAwIBAgIQCEWDEn3UuGbnK7mQ35Mm7jANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkxMjA1MDAwMDAwWhcN
MjEwMzA1MTIwMDAwWjBfMQswCQYDVQQGEwJERTEQMA4GA1UECBMHSGFtYnVyZzEQ
MA4GA1UEBxMHSGFtYnVyZzEUMBIGA1UEChMLVGNoaWJvIEdtYkgxFjAUBgNVBAMT
DXd3dy50Y2hpYm8uZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU
rjqrSb0taOADTIJoNA8xbDJ4AEMLV0OEXGU0pcgiUmtAMKtoeClDhQgbAj88+c01
g1RsXj8WM9JTuW7Xlc84yvTSMTbZ70sfDuylutAcW12NpVuY2vWKjE417nHphhbc
tdCUrTgxPb0ylWB/o1kt3d7T8oHk+FvnrtN5bPpIlP09yeTe59y7NB9iNeP2WrqZ
nepOtNXbTCBQiTNuQeg3LMXy0xzsxixQa+GRd2pAC4TQ/FI5J2rILMLQUvqglhMq
zt19QIXl8PSuloesvNMggTaB+ZHIPNGD9IFAEhstbGc98oL1ePNqnjNNepRsdYyP
Oh2M27eiKrEkuDaLpE5nAgMBAAGjgge+MIIHujAfBgNVHSMEGDAWgBQPgGEcgjFh
1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUUbeuXNJxWcq4vJIYHsiXwjchCEMwggSC
BgNVHREEggR5MIIEdYINd3d3LnRjaGliby5kZYIJdGNoaWJvLmRlgg13d3cudGNo
aWJvLnBsgg1jZG4udGNoaWJvLnNlghtyZWlzZW4tZGUudGNoaWJvLWNvbnRlbnQu
ZGWCDmNkbi5lZHVzY2hvLmF0ghhwcmVsaXZlLXJlaXNlbi50Y2hpYm8uZGWCFWRl
di1yZWlzZW4uZWR1c2Noby5hdIIRY2RuLnRjaGliby5jb20udHKCGG1lZGlhNS50
Y2hpYm8tY29udGVudC5kZYIbcmVpc2VuLWF0LnRjaGliby1jb250ZW50LmRlgg1j
ZG4udGNoaWJvLmF0ghRkZXYtcmVpc2VuLnRjaGliby5jaIINd3d3LnRjaGliby5z
a4INd3d3LnRjaGliby5jaIINd3d3LnRjaGliby5jeoIRcmVpc2VuLmVkdXNjaG8u
YXSCHGFibmFobWUucmVpc2VkZWFscy50Y2hpYm8uZGWCDWNkbi50Y2hpYm8uY3qC
GGRldi5yZWlzZWRlYWxzLnRjaGliby5kZYIRd3d3LnRjaGliby5jb20udHKCGG1l
ZGlhMS50Y2hpYm8tY29udGVudC5kZYIZcHJlbGl2ZS1yZWlzZW4uZWR1c2Noby5h
dIINY2RuLnRjaGliby5wbIIYbWVkaWE5LnRjaGliby1jb250ZW50LmRlgg1jZG4u
dGNoaWJvLmRlghhtZWRpYTIudGNoaWJvLWNvbnRlbnQuZGWCDXd3dy50Y2hpYm8u
c2WCFHJlaXNlZGVhbHMudGNoaWJvLmRlghB3d3cuZnIudGNoaWJvLmNogiByZWlz
ZW4tdGVzdC1kZS50Y2hpYm8tY29udGVudC5kZYINY2RuLnRjaGliby5jaIINd3d3
LnRjaGliby5hdIINd3d3LnRjaGliby5odYINY2RuLnRjaGliby5ka4IYbWVkaWEz
LnRjaGliby1jb250ZW50LmRlgg1jZG4udGNoaWJvLmh1ghtyZWlzZW4tY2gudGNo
aWJvLWNvbnRlbnQuZGWCEHJlaXNlbi50Y2hpYm8uY2iCIHJlaXNlbi10ZXN0LWNo
LnRjaGliby1jb250ZW50LmRlghhtZWRpYTYudGNoaWJvLWNvbnRlbnQuZGWCGHBy
ZWxpdmUtcmVpc2VuLnRjaGliby5jaIIOd3d3LmVkdXNjaG8uYXSCFGRldi1yZWlz
ZW4udGNoaWJvLmRlghhtZWRpYTgudGNoaWJvLWNvbnRlbnQuZGWCEHJlaXNlbi50
Y2hpYm8uYXSCGG1lZGlhNC50Y2hpYm8tY29udGVudC5kZYINd3d3LnRjaGliby5k
a4IQcmVpc2VuLnRjaGliby5kZYIZcHJldi5yZWlzZWRlYWxzLnRjaGliby5kZYIY
bWVkaWE3LnRjaGliby1jb250ZW50LmRlghdtZWRpYS50Y2hpYm8tY29udGVudC5k
ZYINY2RuLnRjaGliby5za4IgcmVpc2VuLXRlc3QtYXQudGNoaWJvLWNvbnRlbnQu
ZGUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc3Nj
YS1zaGEyLWc2LmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3Nz
Y2Etc2hhMi1nNi5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEF
BQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwfAYI
KwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5j
b20wRgYIKwYBBQUHMAKGOmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdp
Q2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS5jcnQwCQYDVR0TBAIwADCCAX0GCisGAQQB
1nkCBAIEggFtBIIBaQFnAHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e
0YUAAAFu1uB0fwAABAMARzBFAiBiiBL7k2VKHEd4XBvE6ACZm2nZ5O8k4QSrKsTn
ME600QIhAINNQ7ByIMHqVD6Rswv9qroMukwEaZcSPNq+Iih/WbPlAHYAh3W/51l8
+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFu1uB1EAAABAMARzBFAiAbkJzX
eZEVLg4HSzoOhAFmsxKW3CgD+4zpboFJPX/7QgIhANZYgQGWw6V7LqRR9C+iaOhQ
XUY2bNuDMOzEHw8hSQamAHUARJRlLrDuzq/EQAfYqP4owNrmgr7YyzG1P9MzlrW2
gagAAAFu1uB0HQAABAMARjBEAiA/oYHWJ4BaYr95aIjwEO/BwKFAqa9BJoOr/W7p
BFZySgIgegN0h+3PCDc3TGnmToLRm4+Sn6VncRFqcYmPJ5BiXA8wDQYJKoZIhvcN
AQELBQADggEBANOo4pb7NzZaF6FKl2/Tjz/iyWREBWveYhqibsOylkXjxHv0id9p
MNMIWbmQtIfc4YjNVf2YcW6Hho/flJaiGbRRQE+O6ZJvpNjucF1W3XJ6Pm3Y0bTc
0yy663l8pq8a4VtuWGQYXQmDb47VOjyidSDGaHMzd4dxqu8DPnDAJHRuODO714Jd
5LsY8qS+/tOOLxGR/JM4qp7dwqw8Sb81tgbZb9xJPUFzVicFJqlOBAHFqUNfRyW7
AI419liSyhjQELXEz1n4zTJoK6BGS05dILpsG7+AJHAATgVfdhrWBpZFc819aWG8
dl4/cNhCVhfRWmN9QXReaGQ1DxiA9cYoZbc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K46q0m9LWjgA0yCaDQP
MWwyeABDC1dDhFxlNKXIIlJrQDCraHgpQ4UIGwI/PPnNNYNUbF4/FjPSU7lu15XP
OMr00jE22e9LHw7spbrQHFtdjaVbmNr1ioxONe5x6YYW3LXQlK04MT29MpVgf6NZ
Ld3e0/KB5Phb567TeWz6SJT9Pcnk3ufcuzQfYjXj9lq6mZ3qTrTV20wgUIkzbkHo
NyzF8tMc7MYsUGvhkXdqQAuE0PxSOSdqyCzC0FL6oJYTKs7dfUCF5fD0rpaHrLzT
IIE2gfmRyDzRg/SBQBIbLWxnPfKC9Xjzap4zTXqUbHWMjzodjNu3oiqxJLg2i6RO
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10994750910226023030267464690034747118
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tchibo GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tchibo.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26848436261681657976667627771827462094117466219390590149796637806815170660598112356332089719645979309118697476883264360031734912249951634271313504446640383857146092972088721884212308606475751092807135220775739548546228892991462250283367926000006238199246239744527577922926679912555209854296346431697800919962711073527647687593248362868326671763164890467593786455856730114517807497178775792035630949552854971145731701623973607401634940742171361888638682326817058720989927829659483373720251770326202724165181252234403942594928089392386936925287010349378106087404143923136415386847616866544556081520205939408825429020263
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							51b7ae5cd27159cab8bc92181ec897c237210843
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tchibo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tchibo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tchibo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.tchibo.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reisen-de.tchibo-content.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eduscho.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prelive-reisen.tchibo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-reisen.eduscho.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.tchibo.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media5.tchibo-content.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reisen-at.tchibo-content.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.tchibo.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-reisen.tchibo.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tchibo.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tchibo.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tchibo.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reisen.eduscho.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abnahme.reisedeals.tchibo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.tchibo.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.reisedeals.tchibo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tchibo.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media1.tchibo-content.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prelive-reisen.eduscho.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.tchibo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media9.tchibo-content.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.tchibo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.tchibo-content.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tchibo.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reisedeals.tchibo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fr.tchibo.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reisen-test-de.tchibo-content.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.tchibo.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tchibo.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tchibo.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.tchibo.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media3.tchibo-content.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.tchibo.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reisen-ch.tchibo-content.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reisen.tchibo.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reisen-test-ch.tchibo-content.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media6.tchibo-content.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prelive-reisen.tchibo.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eduscho.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-reisen.tchibo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media8.tchibo-content.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reisen.tchibo.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media4.tchibo-content.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tchibo.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reisen.tchibo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prev.reisedeals.tchibo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media7.tchibo-content.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.tchibo-content.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.tchibo.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reisen-test-at.tchibo-content.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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