a.westfalen-blatt.de

Issued by R3

About this certificate

This digital certificate with serial number 04:8f:d2:7a:5d:12:43:48:82:11:7c:a1:a2:f2:ac:c7:02:e9 was issued on by Let's Encrypt.

With 58 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=a.westfalen-blatt.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8f:d2:7a:5d:12:43:48:82:11:7c:a1:a2:f2:ac:c7:02:e9
Serial Number (int): 397389295423777783661448015013369898009321
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 88:96:ec:b6:fd:6a:f9:1e:78:31:91:5b:db:1d:f2:47:b8:1b:33:50
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a5:bd:c6:83:25:ca:ab:71:b0:83:c7:76:6c:ea:4a:6e:d6:48:68:bc
Fingerprint (sha256): 40:0f:56:90:6b:e1:6b:60:78:09:5d:c6:74:08:a0:2d:39:34:18:76:53:30:a1:9d:0c:7a:a0:e7:8f:b3:ec:94

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate a.westfalen-blatt.de

58

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for a.westfalen-blatt.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a.westfalen-blatt.de
a.wn.de
drco.ga.de
drive.abendzeitung-muenchen.de
drive.allgemeine-zeitung.de
drive.bnn.de
drive.borkumer-zeitung.de
drive.dattelner-morgenpost.de
drive.dorstenerzeitung.de
drive.echo-online.de
drive.freiepresse.de
drive.ga-online.de
drive.gn-online.de
drive.haller-kreisblatt.de
drive.halternerzeitung.de
drive.hellwegeranzeiger.de
drive.hertener-allgemeine.de
drive.idowa.de
drive.lr-online.de
drive.lz.de
drive.marler-zeitung.de
drive.mittelhessen.de
drive.moz.de
drive.mt.de
drive.muensterlandzeitung.de
drive.nn.de
drive.nordbayern.de
drive.nw.de
drive.on-online.de
drive.oz-online.de
drive.recklinghaeuser-zeitung.de
drive.ruhrnachrichten.de
drive.stimberg-zeitung.de
drive.swp.de
drive.tt.com
drive.vol.at
drive.waltroper-zeitung.de
drive.weser-kurier.de
drive.wiesbadener-kurier.de
drive.wnoz.de
drv.badische-zeitung.de
t.aachener-nachrichten.de
t.aachener-zeitung.de
t.bgland24.de
t.chiemgau24.de
t.hz.de
t.innsalzach24.de
t.mangfall24.de
t.medienhausaachen.de
t.ovb-online.de
t.rheinpfalz.de
t.rosenheim24.de
t.saechsische.de
t.schickler.de
t.wasserburg24.de
tracking.kreiszeitung-wesermarsch.de
tracking.nordsee-zeitung.de
tracking.zevener-zeitung.de

Other certificates including the domain name westfalen-blatt.de

(limited to 100 certificates)
amp-stage.wn.de
abo.westfalen-blatt.de
amp-consent.desired.de
westfalen-blatt.de
amp-stage.wn.de
amp-stage.wn.de
amp-consent.familie.de
westfalen-blatt.de
westfalen-blatt.de
amp-stage.wn.de
www.westfalen-blatt.de
a.westfalen-blatt.de
*.westfalen-blatt.de
amp-stage.wn.de
amp-consent.desired.de
www.wn-jobs.de
www.wn-jobs.de
amp-consent.desired.de
a.westfalen-blatt.de
amp-consent.desired.de
a.westfalen-blatt.de
amp-stage.wn.de
www.wn-jobs.de
*.westfalen-blatt.de
amp-consent.desired.de
amp-consent.desired.de
*.westfalen-blatt.de
amp-stage.wn.de
solutions.westfalen-blatt.de
westfalen-blatt.de
amp-stage.wn.de
amp-consent.desired.de
amp-consent.desired.de
westfalen-blatt.de
solutions.westfalen-blatt.de
amp-stage.wn.de
amp-consent.desired.de
amp-stage.wn.de
amp-consent.desired.de
amp-stage.wn.de
amp-stage.wn.de
www.wn-jobs.de
amp-stage.wn.de
www.wn-jobs.de
amp-consent.desired.de
amp-stage.wn.de
amp-stage.wn.de
amp-consent.desired.de
westfalen-blatt.de
solutions.westfalen-blatt.de
amp-stage.wn.de
data-deb04a4388.westfalen-blatt.de
amp-stage.wn.de
amp-consent.desired.de
westfalen-blatt.de
amp-stage.wn.de
amp-consent.desired.de
amp-consent.desired.de
www.wn-jobs.de
amp-consent.desired.de
amp-consent.desired.de
amp-consent.desired.de
amp-stage.wn.de
amp-consent.desired.de
amp-stage.wn.de
amp-consent.desired.de
amp-consent.desired.de
westfalen-blatt.de
amp-stage.wn.de
amp-consent.desired.de
amp-consent.desired.de
*.westfalen-blatt.de
amp-stage.wn.de
westfalen-blatt.de
amp-stage.wn.de
solutions.westfalen-blatt.de
solutions.westfalen-blatt.de
*.westfalen-blatt.de
amp-stage.wn.de
www.wn-jobs.de
amp-consent.desired.de
amp-consent.familie.de
westfalen-blatt.de
amp-consent.desired.de

Certificate

The complete raw certificate details for a.westfalen-blatt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlmnXhfmGDV0KLr1fJOz
GHCXFlLujAmd+U4ccbHc9TSI08n2sDccLXxTjPTZiRT2W5yJovFPyqnsH7BzHHcW
mqUTPJ3BHTUGBGmfQxIF7jvpL6vl93n6veWDuCCc01JdvZ+0YUmuXydxElvHHWY0
J2V/7/9BRxQZA49EzXlSJS2FPeD95eyb/wsSNeZXOo8OtVu+AjvvG813tgMOUCe5
yp2WAvTcdEAtkjAxwqAiK0E8DGFlD+GFeZ0RU23Qv4wtNMx/SqiToKyyZesxt7Bw
j2B8j+XqPQG9uFR1ZPmHNSysqCVNj5KtsSXWwGp1Hc7yD+XImAgaJyoAG24pYYhN
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397389295423777783661448015013369898009321
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 07:49:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 07:49:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'a.westfalen-blatt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24534441089813665896351887354679636233920257136972229790763310016885727427379592633679312697302761778476914992226660675722082635468275096116487971070504202084883382492873628013911589119327196057356694324312744475159545395542258148480801168546831654158363686065990290434875890073504042105411431736743789843140180426914928703143728740898615249366636789481487726937902375088106243515041250133253339088935163769028804461831725403336920118878302819416722748712734421802223440806080229454948993185626024717953173761229229646203045823231863310269800592880049075908043269109746883511064219624046879293350031102322340409134347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8896ecb6fd6af91e7831915bdb1df247b81b3350
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.westfalen-blatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.wn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drco.ga.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.abendzeitung-muenchen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.allgemeine-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.bnn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.borkumer-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.dattelner-morgenpost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.dorstenerzeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.echo-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.freiepresse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.ga-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.gn-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.haller-kreisblatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.halternerzeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.hellwegeranzeiger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.hertener-allgemeine.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.idowa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.lr-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.lz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.marler-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.mittelhessen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.moz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.mt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.muensterlandzeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.nn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.nordbayern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.nw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.on-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.oz-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.recklinghaeuser-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.ruhrnachrichten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.stimberg-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.swp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.tt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.vol.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.waltroper-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.weser-kurier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.wiesbadener-kurier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.wnoz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drv.badische-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.aachener-nachrichten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.aachener-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.bgland24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.chiemgau24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.hz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.innsalzach24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.mangfall24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.medienhausaachen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.ovb-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.rheinpfalz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.rosenheim24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.saechsische.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.schickler.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.wasserburg24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking.kreiszeitung-wesermarsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking.nordsee-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking.zevener-zeitung.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ab6edc03000000403004630440220082363591886b3985c5a33b84f0529506aeea0b226c861f9006cb255c99fd1c702204ead7fdc492107a257c3b569a7bbab3dc306a82ec93d956531265cd0a4f62ac30076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ab6edc0420000040300473045022100b5c7ed6d8dff9192389d83b1c1c35addc5c6a33398a3e4f084152866e57ad1280220063b77f1f983acc08faf2f36364c57a2a2566dbe56fa56020163cbe4b889834e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00121462a6210acce11c4e7ff334faa64c98d00152ad9affa8141b2b18bc24fb6360c345513d4741ce5c81803b9764066e3499fc93569421fb730cb910f4b81c8cb6518b504452be5496beb12660d37a8427d70ddfafa9aff56ee6abd386ef7daa89e38aa2415d2db9c8a793a939412272473f2dfdd4a5dd4955efa3bc47832682a6ebc73cd067181b4b3e849706b8db088e323dc7744eaeaa929dee3d6af72997dc336dd859a5776db923e5bf74724a0809679fb6ef265a363bf72a572d1bdc6861715eaf6f55155561d80476e4203f066dd89127f895e1f51d2ca82a951cfac192795bd23af61d7412864dc041fed4a2e12ed83c70a1038f857426d2c068345f