thomas-metz.de

Issued by R3

About this certificate

This digital certificate with serial number 03:b4:f2:09:1a:d3:9f:55:0e:9a:55:c9:9d:fe:e1:fe:97:10 was issued on by Let's Encrypt.

With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=thomas-metz.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b4:f2:09:1a:d3:9f:55:0e:9a:55:c9:9d:fe:e1:fe:97:10
Serial Number (int): 322909404290810442747640084285852353468176
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2e:8b:cb:be:28:0d:c2:eb:1a:d1:b5:aa:cf:76:a1:6a:7c:d1:56:40
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 05:4b:2f:81:f4:b1:c0:1a:42:33:16:4e:ff:8f:07:3b:d3:df:0f:81
Fingerprint (sha256): 3c:0b:14:7b:ab:51:40:69:fb:f3:3f:eb:4f:9e:14:4e:fb:c0:0d:1b:30:eb:0d:7d:66:58:50:12:ef:9f:1a:08

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate thomas-metz.de

37

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thomas-metz.de

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.amz-hunter.de
*.bahnhoefli-bubikon.ch
*.coachingimgarten.de
*.d-brechten.de
*.erik-blumenhuhn.de
*.freunde.stream
*.gemeindeschulzendorf.de
*.madtography.de
*.nina-brandt.com
*.psychisch-betroffen.de
*.the-gymapp.de
*.tristan-ackermann.com
*.uefa-medienwerkstatt.at
academy.enjoi-sailing.com
amz-hunter.de
bahnhoefli-bubikon.ch
coachingimgarten.de
d-brechten.de
developer.hutch79.ch
docs.tutorialecke.org
erik-blumenhuhn.de
freunde.stream
gemeindeschulzendorf.de
madtography.de
magento.p-s-soft.de
nina-brandt.com
psychisch-betroffen.de
the-gymapp.de
thomas-metz.de
tristan-ackermann.com
uefa-medienwerkstatt.at
vpn.kevinroebert.de
www.group.edutainya.de
www.suportica.pervushin.de
www.tk.mjmair.com
www.www2.fischbraterei-koeck.de
zza-test-100.pma.mazza.cloud

Other certificates including the domain name thomas-metz.de

(limited to 100 certificates)
www.thomas-metz.de
gasthaus-peschta.at
www.thomas-metz.de
bczyxuhviucelrq.fantastic3.de
pwg.wot-clan.de
thomas-metz.de
www.pimpleeeze.com
www.thomas-metz.de
thomas-metz.de
www.thomas-metz.de
www.thomas-metz.de
www.thomas-metz.de
cs-test.notar-liessem.de
zimmermanneditorial.lima-city.de
secure.wiesi1.de
secure.wiesi1.de
thomas-metz.de
www.galaktika.lima-city.de
www.karimrammer.lima-city.de
projekttage-gold.de.cool
bc5f-8c683af5d5c2.lima-city.net
emm-elektroantriebe.de
www.thomas-metz.de
www.thomas-metz.de
hr.jaegerhof-schneider.at
www.thomas-metz.de
dlc.loox.tools
www.thomas-metz.de
www.thomas-metz.de
*.kovro.de
huettelbeach.at
*.jenisch-net.de
magicmoonshadow.de
*.mantrailing-berlin.net
www.thomas-metz.de
simeon-trefoil.de
thomas-metz.de
wallig.lima-city.de
motorradhandel-schramm.de
www.thomas-metz.de
thomas-metz.de

Certificate

The complete raw certificate details for thomas-metz.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHbTCCBlWgAwIBAgISA7TyCRrTn1UOmlXJnf7h/pcQMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAzMjUxMjI1MDNaFw0yMzA2MjMxMjI1MDJaMBkxFzAVBgNVBAMT
DnRob21hcy1tZXR6LmRlMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEb8r/BH0l
VzX0Ugpyb9+OahR9TMR5QhPUmjYCcLmIEG7QLtv/n1NGPl+VQ5qG5UwdrsuquaRh
99vn5sQbUq1GIqOCBV8wggVbMA4GA1UdDwEB/wQEAwIHgDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQULovLvigN
wusa0bWqz3ahanzRVkAwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYw
VQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5v
cmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggMtBgNVHREE
ggMkMIIDIIIPKi5hbXotaHVudGVyLmRlghcqLmJhaG5ob2VmbGktYnViaWtvbi5j
aIIVKi5jb2FjaGluZ2ltZ2FydGVuLmRlgg8qLmQtYnJlY2h0ZW4uZGWCFCouZXJp
ay1ibHVtZW5odWhuLmRlghAqLmZyZXVuZGUuc3RyZWFtghkqLmdlbWVpbmRlc2No
dWx6ZW5kb3JmLmRlghAqLm1hZHRvZ3JhcGh5LmRlghEqLm5pbmEtYnJhbmR0LmNv
bYIYKi5wc3ljaGlzY2gtYmV0cm9mZmVuLmRlgg8qLnRoZS1neW1hcHAuZGWCFyou
dHJpc3Rhbi1hY2tlcm1hbm4uY29tghkqLnVlZmEtbWVkaWVud2Vya3N0YXR0LmF0
ghlhY2FkZW15LmVuam9pLXNhaWxpbmcuY29tgg1hbXotaHVudGVyLmRlghViYWhu
aG9lZmxpLWJ1Ymlrb24uY2iCE2NvYWNoaW5naW1nYXJ0ZW4uZGWCDWQtYnJlY2h0
ZW4uZGWCFGRldmVsb3Blci5odXRjaDc5LmNoghVkb2NzLnR1dG9yaWFsZWNrZS5v
cmeCEmVyaWstYmx1bWVuaHVobi5kZYIOZnJldW5kZS5zdHJlYW2CF2dlbWVpbmRl
c2NodWx6ZW5kb3JmLmRlgg5tYWR0b2dyYXBoeS5kZYITbWFnZW50by5wLXMtc29m
dC5kZYIPbmluYS1icmFuZHQuY29tghZwc3ljaGlzY2gtYmV0cm9mZmVuLmRlgg10
aGUtZ3ltYXBwLmRlgg50aG9tYXMtbWV0ei5kZYIVdHJpc3Rhbi1hY2tlcm1hbm4u
Y29tghd1ZWZhLW1lZGllbndlcmtzdGF0dC5hdIITdnBuLmtldmlucm9lYmVydC5k
ZYIWd3d3Lmdyb3VwLmVkdXRhaW55YS5kZYIad3d3LnN1cG9ydGljYS5wZXJ2dXNo
aW4uZGWCEXd3dy50ay5tam1haXIuY29tgh93d3cud3d3Mi5maXNjaGJyYXRlcmVp
LWtvZWNrLmRlghx6emEtdGVzdC0xMDAucG1hLm1henphLmNsb3VkMEwGA1UdIARF
MEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6
Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA
tz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGHGPGqsgAABAMARzBF
AiArJSWQ2o1YYKEB6OAbb34A1qEmXMO0F65GOwrjtGbBggIhAMoW6ezJ1ZIDH02y
wK9awLvB8y0CLSxl4G2QMz4uToLsAHYAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvS
K8E6V6NS61IAAAGHGPGqvwAABAMARzBFAiArptkgatnCJCkJnVoO+lkhGx/8yF4Q
hz46O34jGx1hrAIhANloqfOHfAeuLaTG0dMYb67hxpFCCj0F6JbWdZNQY/EJMA0G
CSqGSIb3DQEBCwUAA4IBAQAz/aPCDsJxDqKCMasyHqedt6UObfE7pFz/rXCSbH0m
nDDxeCOJRoz5yfGufmXYgSUxJhcJpT/1K7f3qBRBucuHH79zLczfzalj1L9us63A
0OQ2EPNAnTSZf3wxbk7h7KxMLh4r1rc6AXecUWYkXUwBolkJNApSCiPj/EpeMqi9
d5UnOKprgaQREY6n2Pdf8W+dL5YJKXWPfffIv/KhQbvVRIMdELxAEQvu+LwRRRDI
Ix2Y4diJFoidZwEA3MbhAZlB+8AnzJrsEt/vdzXEtfowJFRFIqXD5z3CQIcEZC53
gUf7sk7K5YDmf3UWBN+9C0fqhYbYFG7TutN4n6ey3nKt
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEb8r/BH0lVzX0Ugpyb9+OahR9TMR5
QhPUmjYCcLmIEG7QLtv/n1NGPl+VQ5qG5UwdrsuquaRh99vn5sQbUq1GIg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322909404290810442747640084285852353468176
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-25 12:25:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-23 12:25:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thomas-metz.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00046fcaff047d255735f4520a726fdf8e6a147d4cc4794213d49a360270b988106ed02edbff9f53463e5f95439a86e54c1daecbaab9a461f7dbe7e6c41b52ad4622
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e8bcbbe280dc2eb1ad1b5aacf76a16a7cd15640
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (804 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amz-hunter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bahnhoefli-bubikon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coachingimgarten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d-brechten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erik-blumenhuhn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freunde.stream'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gemeindeschulzendorf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.madtography.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nina-brandt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psychisch-betroffen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.the-gymapp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tristan-ackermann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uefa-medienwerkstatt.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academy.enjoi-sailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amz-hunter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bahnhoefli-bubikon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coachingimgarten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd-brechten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.hutch79.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.tutorialecke.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erik-blumenhuhn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freunde.stream'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemeindeschulzendorf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madtography.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magento.p-s-soft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nina-brandt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psychisch-betroffen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-gymapp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thomas-metz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tristan-ackermann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uefa-medienwerkstatt.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.kevinroebert.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.group.edutainya.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suportica.pervushin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tk.mjmair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.www2.fischbraterei-koeck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zza-test-100.pma.mazza.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018718f1aab2000004030047304502202b252590da8d5860a101e8e01b6f7e00d6a1265cc3b417ae463b0ae3b466c182022100ca16e9ecc9d592031f4db2c0af5ac0bbc1f32d022d2c65e06d90333e2e4e82ec0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018718f1aabf000004030047304502202ba6d9206ad9c22429099d5a0efa59211b1ffcc85e10873e3a3b7e231b1d61ac022100d968a9f3877c07ae2da4c6d1d3186faee1c691420a3d05e896d675935063f109
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0033fda3c20ec2710ea28231ab321ea79db7a50e6df13ba45cffad70926c7d269c30f1782389468cf9c9f1ae7e65d8812531261709a53ff52bb7f7a81441b9cb871fbf732dccdfcda963d4bf6eb3adc0d0e43610f3409d34997f7c316e4ee1ecac4c2e1e2bd6b73a01779c5166245d4c01a25909340a520a23e3fc4a5e32a8bd77952738aa6b81a411118ea7d8f75ff16f9d2f960929758f7df7c8bff2a141bbd544831d10bc40110beef8bc114510c8231d98e1d88916889d670100dcc6e1019941fbc027cc9aec12dfef7735c4b5fa3024544522a5c3e73dc2408704642e778147fbb24ecae580e67f751604dfbd0b47ea8586d8146ed3bad3789fa7b2de72ad