poczta.kevinkoziol.com

Issued by R3

About this certificate

This digital certificate with serial number 03:56:0b:a2:c6:76:73:22:80:cc:a7:09:31:4b:c1:25:e4:17 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=poczta.kevinkoziol.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:56:0b:a2:c6:76:73:22:80:cc:a7:09:31:4b:c1:25:e4:17
Serial Number (int): 290616608035827821701959017726719593669655
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:18:7f:6b:40:4e:76:59:79:9d:22:f2:7c:44:b1:b8:ac:66:48:5d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 67:fe:05:56:b0:f7:25:ca:21:3b:80:f8:f3:76:36:3f:6b:dc:7f:90
Fingerprint (sha256): 31:d0:3c:ef:1d:e0:05:fe:05:fa:e3:75:1d:51:0d:e2:bb:27:82:6b:b0:5a:61:03:ef:48:fb:26:ff:7a:6d:68

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate poczta.kevinkoziol.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for poczta.kevinkoziol.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.die-empathie.de
*.hoeger.eu
*.hotelcasacoco.com
*.jakobheidenreich.de
*.leben-dokumentieren.com
*.praxispatzig.de
*.s-die-empathie.de
*.schoenen-service.de
*.tantepippi.at
*.wohnungstadtilm.de
*.xn--mrpit-zauberknstler-ibc.de
777.enjoi-sailing.com
abcdefghijklmnop12345.eishorn.de
admin.eishorn.de
api.gaestehaus-kicker.at
app.debugging.wachplan.info
app.icekey.org
die-empathie.de
exchange.hypnobirthing-vinschgau.it
files.agouti.games
gdiqrssustexgvg.fliesen-keil.de
haeuser-fuer-waisenkinder.lima-city.org
hoeger.eu
hotelcasacoco.com
jakobheidenreich.de
leben-dokumentieren.com
mailout.fliesen-keil.de
mailout.hypnobirthing-vinschgau.it
mx2.hypnobirthing-vinschgau.it
mx20.kevinkoziol.de
photos.moin-alex.de
phpmyadmin.tutorialecke.org
poczta.kevinkoziol.com
postmaster.hypnobirthing-vinschgau.it
praxispatzig.de
s-die-empathie.de
schoenen-service.de
tantepippi.at
wohnungstadtilm.de
www.cdn.aidt-ev.org
www.fucktheeu.drjustusadam.de
www.liveblog.aidt-ev.org
www.mc-gg.askarian.net
www.ml.vmartin.de
www.moinleer.de
www.p-s-soft.de
www.sort-it.blinzi.de
www.ueberclub.de
www1.icekey.de
www2.jaegerhof-schneider.at
xn--mrpit-zauberknstler-ibc.de

Other certificates including the domain name kevinkoziol.com

(limited to 100 certificates)
www.lugga.lima-city.de
news.testcontact.com
sql.lime-city.de
etter.moin-alex.de
pma.gaestehaus-kicker.at
charmephotography.com
test.antimarder.com
*.iris-appartements.at
magento.beautyled.com
igpegwuqdfptgv.tjark.pro
lowphecarfi.forenhosting.net
plex.katharina-on-tour.de
wp.kevinkoziol.com
*.fundaagirbas.com
m.immo-look.eu
*.fam-meindl.de
pnys.de
2016.lime-city.de
tbsayxzhxourqhw.dubistdeingym.de
*.infar.eu
www.aimondo.net
uzutmcsjmshqrbo.execbase.de
chat.lima-city.net
whm.rotafon.com
vnet.hypnobirthing-vinschgau.it
www.fgk.lima-city.de
*.klaresmarketing.de
www.judo.sg-meerane02.de
haustierversicherung.work
test.kevinkoziol.com
aekifisjiawwlpk.lima-city.info
idecministeriosmail.albertus-dienste.de
web.jaegerhof-schneider.at
prod.icekey.de
018.icekey.org
mail.moinalex.de
sistema.enjoi-sailing.com
www.christophkoncz.12hp.de
*.dr-heil-berlin.de
swissalpsmining.io
store.icekey.de
mail01.p-s-soft.de
2020.woeschka.com
*.gebaeudeservice.nrw
www.betakanal.stream
*.domainfreude.de
*.schulzindependent.com
poke-island.lima-city.de
mailx.kevinkoziol.com
git.bigpicture.at
*.novus-ordo-mundus.org
sito.immo-look.de
hirschnbuam.at
website.alicepeters.de
*.weakwillies.de
fototage-perspektiven.de
2015.kevinkoziol.com
zqddggwwuscvkfw.lima-city.eu
m.rallyefokus.de
ss.kevinkoziol.de
www.konform.stampe.at
stg.visagistylist.ch
www.birdstop.eu
ut.icekey.de
www.coronavirus.y8nn8ck.de
*.terrasse14.com
ismh.lima-city.net
1.kevinkoziol.com
*.numhteneriffa.eu
store.kevinkoziol.com
checkout.notar-liessem.de
ssl.no-key.info
joleroi.de
comfreak1003.lima-city.de
*.fairbund-kleingarten.de
git.kevinkoziol.com
app.beautyled.com
*.biofutter-landshut.de
*.chillandlearn.de
nightowlproductionsw.dt80.net
old.beautyled.com
vpn.icekey.de
*.b-h-gartenservice.de
theacnestudiotest.hundeschule-tutzing.com
internet.rotglut.net
outmail.kevinkoziol.com
www.plr-imperium.de
ra.tutorialecke.org
www.annabeladria.lima-city.de
*.vdbenken.de
ackup.gaestehaus-kicker.at
mnbcgqoyzrbwkwr.lima-city.eu
wandernaufteneriffa.com
office.jaegerhof-schneider.at
tbsayxzhxourqhw.dubistdeingym.de
gilde-nero.lima-city.eu
www.telegermany.lima-city.de
megabuds.pl
*.textilprint-otte.de
*.thetasteofwanderlust.de

Certificate

The complete raw certificate details for poczta.kevinkoziol.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEbqvMz2YrT38+a5hR09bVvoo53db2
JckcVKo7MjXisHktMxr7xlwEanMPC5n0YHOgIou2fPs1chjjIP6Lp9vXEQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290616608035827821701959017726719593669655
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-20 08:02:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 08:02:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'poczta.kevinkoziol.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00046eabcccf662b4f7f3e6b9851d3d6d5be8a39ddd6f625c91c54aa3b3235e2b0792d331afbc65c046a730f0b99f46073a0228bb67cfb357218e320fe8ba7dbd711
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39187f6b404e7659799d22f27c44b1b8ac66485d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1205 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.die-empathie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoeger.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelcasacoco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jakobheidenreich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leben-dokumentieren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.praxispatzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s-die-empathie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schoenen-service.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tantepippi.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wohnungstadtilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mrpit-zauberknstler-ibc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '777.enjoi-sailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abcdefghijklmnop12345.eishorn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eishorn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.gaestehaus-kicker.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.debugging.wachplan.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.icekey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'die-empathie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.hypnobirthing-vinschgau.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.agouti.games'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdiqrssustexgvg.fliesen-keil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haeuser-fuer-waisenkinder.lima-city.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoeger.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelcasacoco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jakobheidenreich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leben-dokumentieren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailout.fliesen-keil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailout.hypnobirthing-vinschgau.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx2.hypnobirthing-vinschgau.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx20.kevinkoziol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photos.moin-alex.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phpmyadmin.tutorialecke.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poczta.kevinkoziol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postmaster.hypnobirthing-vinschgau.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxispatzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's-die-empathie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoenen-service.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tantepippi.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wohnungstadtilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdn.aidt-ev.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fucktheeu.drjustusadam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liveblog.aidt-ev.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mc-gg.askarian.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ml.vmartin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moinleer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p-s-soft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sort-it.blinzi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ueberclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.icekey.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.jaegerhof-schneider.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mrpit-zauberknstler-ibc.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b4c51f80b000004030047304502206a97606416762843f2aeacd14e50ffd2c29c36a5488e409d53bb4225393d4f850221008a1bc6db56e3d7afecb11880a046d3c46b2f50d2c2bf503fba8565d5f3c32ba2007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b4c51f83e0000040300473045022100a1d51b14a52ec1e12fb85b895a8e230e84e42508824c8dc86eb0bd1fd6649d03022016ed59cf76ae5c7c082000928fad443586b00681f6648c8a22cf34b4afc39507
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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