shop.krombacher.de

- KROMBACHER BRAUEREI Bernhard Schadeberg GmbH & Co. KG -

Issued by TeleSec ServerPass Class 2 CA

About this certificate

This digital certificate with serial number 21:a8:07:41:1a:9b:15:3f:c2:46:08:4c:1b:a8:80:7e was issued on by T-Systems International GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

KROMBACHER BRAUEREI Bernhard Schadeberg GmbH & Co. KG

Organization: KROMBACHER BRAUEREI Bernhard Schadeberg GmbH & Co. KG
State / Province: NW
Locality: Kreuztal-Krombach
Country: DE

T-Systems International GmbH

Organization: T-Systems International GmbH
Organization unit: T-Systems Trust Center
Address: Untere Industriestr. 20
Postal code: 57250
State / Province: Nordrhein Westfalen
Locality: Netphen
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 21:a8:07:41:1a:9b:15:3f:c2:46:08:4c:1b:a8:80:7e
Serial Number (int): 44736976868067957939528809413553455230
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: ec:88:6b:e9:1d:41:24:b9:75:12:4f:83:fc:28:9f:ef:f8:75:b2:0d
AuthorityKeyId: 94:c8:74:46:f5:3a:b4:46:48:26:f8:2b:ca:34:1e:56:26:04:12:00

Fingerprint (sha1): ae:45:b4:19:54:c3:1e:fd:66:a2:32:59:1c:6b:1d:3c:e1:bb:88:bf
Fingerprint (sha256): 2c:87:1a:b2:96:8e:bc:95:08:93:04:c9:3c:f2:f5:45:f4:92:75:76:48:c6:1a:c2:67:66:a4:da:46:64:cd:3f

Issuing Certificate URL: http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_Class_2_CA.cer

Revocation information

OCSP Server: http://ocsp.serverpass.telesec.de/ocspr
CRL Distribution Point: http://crl.serverpass.telesec.de/rl/ServerPass_Class_2.crl

Check the revocation status for certificate shop.krombacher.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.krombacher.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop.krombacher.de

Other certificates including the domain name krombacher.de

(limited to 100 certificates)
magazine.kueche-co.de
magazin.rollstuhlsport.de
magazine.kueche-co.de
webkiosk.con-nexi.de
magazine.kueche-co.de
epaper.krombacher.de
magazine.kueche-co.de
kiosk.miles-magazine.be
kiosk.miles-magazine.be
kiosk.laloupe.com
kiosk.miles-magazine.be
krombacher.de
kiosk.laloupe.com
kiosk.laloupe.com
kiosk.miles-magazine.be
kiosk.laloupe.com
magazine.kueche-co.de
magazine.kueche-co.de
presseservice.krombacher.de
epaper.immosale24.net
kiosk.laloupe.com
kiosk.laloupe.com
kiosk.laloupe.com
magazin.rollstuhlsport.de
epaper.krombacher.de
magazine.kueche-co.de
magazine.kueche-co.de
epaper.immosale24.net
epaper.krombacher.de
mx1.krombacher.de
magazine.kueche-co.de
pachtvermittlung.krombacher.de
magazin.rollstuhlsport.de
webkiosk.con-nexi.de
magazine.kueche-co.de
magazine.kueche-co.de
1855896918.rsc.cdn77.org
1855896918.rsc.cdn77.org
finanzierung.krombacher.de
kiosk.miles-magazine.be
magazine.kueche-co.de
magazine.kueche-co.de
magazine.kueche-co.de
magazine.kueche-co.de
kiosk.laloupe.com
kiosk.miles-magazine.be
magazine.kueche-co.de
magazin.rollstuhlsport.de
magazine.kueche-co.de
servicepartner.krombacher.de
epaper.krombacher.de
epaper.krombacher.de
kiosk.miles-magazine.be
magazin.rollstuhlsport.de
magazine.kueche-co.de
1855896918.rsc.cdn77.org
webkiosk.con-nexi.de
qr.krombacher.de
kiosk.miles-magazine.be
kiosk.laloupe.com
kiosk.laloupe.com
magazine.kueche-co.de
kiosk.laloupe.com
kiosk.miles-magazine.be
magazine.kueche-co.de
kiosk.miles-magazine.be
kiosk.miles-magazine.be
cashkorken.krombacher.de
webkiosk.con-nexi.de
kiosk.miles-magazine.be
kiosk.laloupe.com
magazine.kueche-co.de
m.krombacher.de
magazine.kueche-co.de
kiosk.laloupe.com
kiosk.laloupe.com
epaper.immosale24.net
*.krombacher.de
magazin.rollstuhlsport.de
kiosk.miles-magazine.be
epaper.immosale24.net
kiosk.miles-magazine.be
kiosk.laloupe.com
magazine.kueche-co.de
magazine.kueche-co.de
webkiosk.con-nexi.de
servicepartner.krombacher.de
magazine.kueche-co.de
kiosk.laloupe.com
www.krombacher.de
webkiosk.con-nexi.de
kiosk.miles-magazine.be
shop.krombacher.de
kiosk.miles-magazine.be
webkiosk.con-nexi.de
kiosk.miles-magazine.be
kiosk.miles-magazine.be
webkiosk.vedes.de
magazin.rollstuhlsport.de
epaper.immosale24.net

Certificate

The complete raw certificate details for shop.krombacher.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HQiY48uZcElmdcrA2Jy
h2OsXvSd8HEORtXED9NL/7kdnl3RNSOWxhFfcw70/tOg9V67DeNHBkRCnFSwndd7
EY/y0/wDAPqb8olvMdUngiAKbwpdsa8hlknCJ0UXY/lokKvpj8VHmR44ufBJ0T8i
HwkcoI9BaGGGr6SW0Iz1BdF5Kj9QQQOCO9Eta+NW89c1W0ovsmzowP3VWvAONH6h
kjHQa1C8cZf7eL49SQ6/kfzGP1ZkdnqQVn0eLhgiRrz0+A2Potkxq8EwiKmvMEIs
7GbMlMS9lQZqpJzS0/fb+V4dWzfQHuFZwQHrFuAv51pF/rHXtmA47x58jGnF2+C0
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 44736976868067957939528809413553455230
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'T-Systems International GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'T-Systems Trust Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '57250'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Netphen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Untere Industriestr. 20'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeleSec ServerPass Class 2 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-20 06:52:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KROMBACHER BRAUEREI Bernhard Schadeberg GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kreuztal-Krombach'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.krombacher.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27829695065878270106412177828952426626481882962699183190898017425779352867509764252127069132044225167368931297338797949521698165818862677349957683605092595745862191819103003786187022267374938931873355142700384266123846982222850197502186447557715910822043900524966106233754943554668474490249920991181272405401123481075683770018951459191945266708818970866089005056695251798353753543533304000864281199923146869238804475599339912418260517919365891964342524611447768017008717520119579431151700832420133151080639377195254505811968977426790022106162220428520001467046013818501322915026758915457202683442756816241437637129289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 94c87446f53ab4464826f82bca341e5626041200
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec886be91d4124b975124f83fc289feff875b20d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.7879.13.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.telesec.de/serverpass/cps.html'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/rl/ServerPass_Class_2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.serverpass.telesec.de/ocspr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_Class_2_CA.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.krombacher.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (609 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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