lmu-klinikum.de

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0a:e8:db:95:92:c4:dd:36:8d:48:e6:7b:a9:dc:3c:d1 was issued on by Amazon.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lmu-klinikum.de

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:e8:db:95:92:c4:dd:36:8d:48:e6:7b:a9:dc:3c:d1
Serial Number (int): 14501346527151458623924673537707359441
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c4:77:3e:ba:1e:7b:f8:86:68:66:61:a1:3d:50:51:7a:48:15:44:da
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 29:be:0e:17:d6:42:14:64:49:c4:f1:21:ab:f7:6d:13:64:71:bc:c2
Fingerprint (sha256): 31:25:fa:e9:fd:db:b6:c3:c1:25:7c:98:fc:5f:73:ad:3b:8c:38:d7:f9:6c:2f:21:13:21:7d:70:1d:2f:c2:7a

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate lmu-klinikum.de

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lmu-klinikum.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lmu-klinikum.de
*.eurosmr.com
*.iolin.org
iolin.org
*.aware-study.eu
*.gibmirfuenf.org
life-hivinitiative.org
*.german-stroke-registry.de
*.psy-pgx.org
*.lmu-klinikum.de
champ-allergy.eu
*.forschungsprojekt-mobistar.de
*.neuroimmunology-munich.de
partner-studie.de
keep-your-nerves.org
forschungsprojekt-mobistar.de
herzklappenzentrum.org
pokal-kolleg.de
*.grk2274.de
*.infopark.io
bewegung-bei-krebs.org
grk2274.de
ccc-muenchen.de
*.early-studie.de
*.lungentumorzentrum-muenchen.de
ccrc-hauner.de
rapaed.org
lungentumorzentrum-muenchen.de
synergy-munich.de
*.rapaed.org
german-stroke-registry.de
*.kum-kompass.de
*.bszg.lmu-klinikum.de
tele-kasper.de
*.tele-kasper.de
*.ccc-muenchen.de
*.advance-care-planning.de
*.munichcancertalks.de
isd-research.de
gibmirfuenf.org
trace-study.de
neuroimmunology-munich.de
prisma-pediatricstroke.com
*.augennetz.bayern
projekt-gertrud.de
*.champ-allergy.eu
*.covid-kids-bavaria.de
*.baycellator.de
cio-uk.de
psy-pgx.org
*.ccrc-hauner.de
*.ipek-research.com
integration-programm.de
*.itn-top.eu
itn-top.eu
*.percellum.de
*.projekt-gertrud.de
*.brenda-leducq.de
*.pokal-kolleg.de
*.solar-studie.de
advance-care-planning.de
baycellator.de
*.cio-uk.de
covid-kids-bavaria.de
ipek-research.com
*.prisma-pediatricstroke.com
*.trace-study.de
brenda-leducq.de
*.keep-your-nerves.org
*.hno-netzwerk-bayern.de
*.life-hivinitiative.org
*.partner-studie.de
munichcancertalks.de
kum-kompass.de
*.synergy-munich.de
medizinlehre-bayern.de
eurosmr.com
*.nerven-behalten.org
*.integration-programm.de
*.bewegung-bei-krebs.org
*.herzklappenzentrum.org
forschungsprojekt-response.de
augennetz.bayern
nerven-behalten.org
aware-study.eu
*.isd-research.de
*.forschungsprojekt-response.de
early-studie.de
hno-netzwerk-bayern.de
solar-studie.de
percellum.de
*.medizinlehre-bayern.de

Other certificates including the domain name lmu-klinikum.de

(limited to 100 certificates)
lmu-klinikum.de
lmu-klinikum.de
neurologie.klinikum.uni-muenchen.de
lmu-klinikum.de
lmu-klinikum.de
lmu-klinikum.de
lmu-klinikum.de
neurologie.klinikum.uni-muenchen.de
lmu-klinikum.de
lmu-klinikum.de
lmu-klinikum.de
lmu-klinikum.de
lmu-klinikum.de
lmu-klinikum.de
webanalyse.lmu-klinikum.de
lmu-klinikum.de
augennetz.bayern
lmu-klinikum.de
apm.lmu-klinikum.de
lmu-klinikum.de
lmu-klinikum.de
apm.lmu-klinikum.de
augennetz.bayern
webanalyse.lmu-klinikum.de
lmu-klinikum.de
mit.alphanodes.net
augennetz.bayern
neurologie.klinikum.uni-muenchen.de
lmu-klinikum.de
lmu-klinikum.de
lmu-klinikum.de

Certificate

The complete raw certificate details for lmu-klinikum.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vCVTr5onBPcdieS++oa
aM8RpAcumOQluFciSk9wG8epcXHHWeaVnoMO8Ku0si69WjrzfkKGj2jmJ3Bk/3oS
wgRe0I3BSlP79DuIoqfDCKd4wDvOLa5KPNNkecBZc+wyDGtbIW1M2GGWGpyu2w6Q
x1QCm1cqMQAmNuwDd8hPihmakjOOtTllZM/E2GQ9TapnmLitS0M8bTqAT4wMHx08
cx/CI8PaiTlnYbnIdmbibNx6cUVnUiwQlh9v3GnlxOO/8TBGHvwVy5VKry/3Yodd
3zXuaRDBhLP0iqAzRyi6GrvJ+TWxYrB70Quv3qJiHlWjBwLc5oNZHE2N6zxnxQ5M
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14501346527151458623924673537707359441
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lmu-klinikum.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28143539716175975287445145999512925844573921227106380398000228878513457676604965845085898578555639715603010464091008836875614581794887820065081514542538880942485264526831691842244494233122514636865675868812386533056651201400074589279646182799975303856362557710264496663946762246144713742274282354554986658793939292353381976599178140673897413316174825012999247630177783357290297065745657257208503394249905107097508973863497383336043564430101633280776857510669976323089870288973768582206033959212962224247813783850410468580971213202676336833863961729143337758791454910943583697264073080705185762887897886919082103426157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c4773eba1e7bf886686661a13d50517a481544da
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1891 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmu-klinikum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosmr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iolin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iolin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aware-study.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gibmirfuenf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life-hivinitiative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.german-stroke-registry.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psy-pgx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lmu-klinikum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champ-allergy.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forschungsprojekt-mobistar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neuroimmunology-munich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-studie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keep-your-nerves.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forschungsprojekt-mobistar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herzklappenzentrum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokal-kolleg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grk2274.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infopark.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bewegung-bei-krebs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grk2274.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccc-muenchen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.early-studie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lungentumorzentrum-muenchen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccrc-hauner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapaed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lungentumorzentrum-muenchen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synergy-munich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rapaed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'german-stroke-registry.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kum-kompass.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bszg.lmu-klinikum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tele-kasper.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tele-kasper.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccc-muenchen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advance-care-planning.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.munichcancertalks.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isd-research.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gibmirfuenf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trace-study.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuroimmunology-munich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prisma-pediatricstroke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.augennetz.bayern'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projekt-gertrud.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.champ-allergy.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.covid-kids-bavaria.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baycellator.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cio-uk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psy-pgx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccrc-hauner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipek-research.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration-programm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itn-top.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itn-top.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.percellum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projekt-gertrud.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brenda-leducq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pokal-kolleg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solar-studie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advance-care-planning.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baycellator.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cio-uk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid-kids-bavaria.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipek-research.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prisma-pediatricstroke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trace-study.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brenda-leducq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keep-your-nerves.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hno-netzwerk-bayern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.life-hivinitiative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partner-studie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'munichcancertalks.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kum-kompass.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.synergy-munich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medizinlehre-bayern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurosmr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nerven-behalten.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integration-programm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bewegung-bei-krebs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herzklappenzentrum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forschungsprojekt-response.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augennetz.bayern'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nerven-behalten.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aware-study.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.isd-research.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forschungsprojekt-response.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'early-studie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hno-netzwerk-bayern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solar-studie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'percellum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medizinlehre-bayern.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018da2f2005a0000040300483046022100ed3586afb418dbda6e78f068f92418d6461b4b4652d0aaa493357213f357b3130221008d697ca027703c4ffb6986d3c2d307a18107367d2d02bfd072a0324dc014d29a0076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018da2f200970000040300473045022100c528458981f6e8a8aba942d382c742027ad73f12015a19b6aa77b90f0344a3a802205db0be5635f25037d10246a8259ee379090083816c84b363aa768225ae859fd4007500e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018da2f200bf000004030046304402203e45db325fc67fbf90e6a47561568717215dd8c4f8602ddbe319be4e68793bd102204a1f17855444d10c14f18a87577ee2e56b355d0deffdf5b83e8ed5d66e8f790b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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