www.stage.stern.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bb:05:30:43:d0:44:90:84:9a:81:3b:25:81:39:9f:25:18 was issued on by Let's Encrypt.

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.stage.stern.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bb:05:30:43:d0:44:90:84:9a:81:3b:25:81:39:9f:25:18
Serial Number (int): 324976557155146487798430701595697172391192
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f0:45:00:b3:b3:ce:c4:9e:a4:00:30:96:c6:a8:67:60:dc:dc:00:f5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c1:4d:43:d5:fa:67:9c:bd:a4:b2:ea:e0:9a:55:95:56:90:11:c0:88
Fingerprint (sha256): 42:ac:39:5d:76:4d:59:f5:86:8d:de:05:79:88:b6:9e:31:dd:45:df:ba:d1:bf:6c:0d:39:f4:ab:d8:dc:fa:25

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.stage.stern.de

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.stage.stern.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ads.guj.digital
asset3.stern.de
assets.essen-und-trinken.de
assets.geo.de
assets.livingathome.de
assets.schoener-wohnen.de
brabble.brigitte.de
cdn-images.dpv.de
cm-image.gala.de
dev-dss.static.emsservice.de
dev-is-dvs.guj.de
dvs-images.dpv.de
email-images.dpv.de
fbmwmticker.stern.de
image.brigitte.de
image.gala.de
image.stern.de
img1.brigitte.de
is-dvs.guj.de
m.art-magazin.de
m.beef.de
m.brigitte-wir.de
m.essen-und-trinken.de
m.geo.de
m.hygge-magazin.de
m.kreativ.brigitte.de
m.livingathome.de
m.pm-magazin.de
m.salon-mag.de
m.schoener-wohnen.de
m.stern-crime.de
m.wunderwelt-wissen-magazin.de
mobil.dev.stern.de
mobile-feed.brigitte.de
mobile-feed.gala.de
mobile-feed.stern.de
mobilebackfill.guj.digital
native.emsservice.de
stage-is-dvs.guj.de
stage.dvs-images.dpv.de
stage.static.emsservice.de
static.art-magazin.de
static.beef.de
static.brigitte.de
static.emsservice.de
static.essen-und-trinken.de
static.gala.de
static.geo.de
static.livingathome.de
static.schoener-wohnen.de
static.stern.de
testd.beef.de
testm.beef.de
ticker.stern.de
www.art-magazin.de
www.beef.de
www.dev.stern.de
www.essen-und-trinken.de
www.geo.de
www.livingathome.de
www.schoener-wohnen.de
www.stage.stern.de

Other certificates including the domain name stern.de

(limited to 100 certificates)
abo.stern.de
commsvc.stern.de
static.stern.de
secure.stern.de
static.stern.de
static.stern.de
www.guj.digital
secure.stern.de
getsomelorem.com
wefind.stern.de
ssl.1.damoh.aws.stern.de
andreyneto.com.br
static.stern.de
serviceportal.dpv.de
quizbattle.stern.de
www.stern.de
stern.de
gutscheine.stern.de
www.stage.stern.de
mobile.stern.de
commsvc.stern.de
wap.stern.de
blog.stern.de
static.stern.de
*.stage.mobile-toolkit.guj.digital
tausendreporter.stern.de
neon.stern.de
www.guj.digital
www.view.stern.de
ssgtm.stern.de
view-s3.stern.de
www.stage.stern.de
*.gws.stern.de
ssl.1.damoh.aws.stern.de
*.aws.stern.de
static.stern.de
blogs.stern.de
krankenkassenvergleich.stern.de
serviceportal.dpv.de
aktion.art-magazin.de
serviceportal.dpv.de
www.guj.digital
serviceportal.dpv.de
*.brigitte.de
jungefotografie.stern.de
static.stern.de
static.stern.de
hheezd.stern.de
lbm.stern.de
newsletter.stern.de
www.guj.digital
www.stage.stern.de
*.coremedia-dev.guj.digital
*.aws.stern.de
insider.stern.de
www.guj.digital
www.stage.stern.de
augenzeuge.stern.de
static.stern.de
view-s3.stern.de
baeume.stern.de
www.guj.digital
secure.stern.de
stern.de
neon.stern.de
*.stern.de
commsvc.stern.de
oc.stern.de
static.stern.de
*.stern.de
www.guj.digital
tausendreporter.stern.de
static.stern.de
abo.stern.de
static.stern.de
static.stern.de
static.stern.de
*.coremedia.guj.digital
gewinnspiele.stern.de
neon.stern.de
stage.serviceportal.dpv.de
ssl.1.damoh.aws.stern.de
commsvc.stern.de
quizbattle.stern.de
secure.stern.de
dev.serviceportal.dpv.de
serviceportal.dpv.de
dev.serviceportal.dpv.de
reisewelten.stern.de
commsvc.stern.de
picturedesk-new.stern.de
commsvc.stern.de
form.ipstar.app
static.stern.de
serviceportal.dpv.de
wetter.stern.de
view.stern.de
*.stern.de
static.stern.de
stern.de

Certificate

The complete raw certificate details for www.stage.stern.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zRwDzegMKFc5mUiosRM
lEjIZ76hCsJOOsa7+3dW/bnbC1iMDcY3kQdc98rDYmT4wfFrC62OkYboSOEd0s9A
VBofKnvLT6Q4Jq+KTMBg7p1wcZfb1PI8vBmc8HIxNm6e+mu/o9h3BE6HQlt1G2N7
m0IY1NIrt0NkWr5Zkupni08RY+ZTDXQ//HX97yhn7BtR9Sy1oNxwGBGo0GJcw6Mt
9E7zow/XzubWHDRi4kJQoGrMU/OnAfEqA9AVaewvuJj5YPMP+e7pU+npFVgRMyq4
MzVu0368GdQUjbPNjvmGlrjS1gC6CLk+fOFiJ7ufnTTfFEWRWSVIIbDEyfr1JPAo
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324976557155146487798430701595697172391192
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-26 10:18:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 10:18:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.stage.stern.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26662140357326113223829549351400587505602706095948447352888669029752801177061634146411831097353759647957489532337038835708796016362873251182481600622766817118997391275052726217110021012572903176710387769600690986120182577302259160029151620871778565645445497913898229879347082123886482804954118814818521652676847182111109438334300610368042848416330977228266045773560854641500746435739742730690419417173567773734277594414286288719041665580797996908676477655569631829626201645054421768583523161596444808526563660243517908596467665111790244629740077333339522541029256322640735974099365604526139734880233551812619752450059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f04500b3b3cec49ea4003096c6a86760dcdc00f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1256 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads.guj.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asset3.stern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.essen-und-trinken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.geo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.livingathome.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.schoener-wohnen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brabble.brigitte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-images.dpv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cm-image.gala.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-dss.static.emsservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-is-dvs.guj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvs-images.dpv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email-images.dpv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbmwmticker.stern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.brigitte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.gala.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.stern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img1.brigitte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is-dvs.guj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.art-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.beef.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.brigitte-wir.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.essen-und-trinken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.geo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hygge-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.kreativ.brigitte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.livingathome.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.pm-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.salon-mag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.schoener-wohnen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.stern-crime.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.wunderwelt-wissen-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobil.dev.stern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-feed.brigitte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-feed.gala.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-feed.stern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilebackfill.guj.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'native.emsservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-is-dvs.guj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.dvs-images.dpv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.static.emsservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.art-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.beef.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.brigitte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.emsservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.essen-und-trinken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.gala.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.geo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.livingathome.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.schoener-wohnen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.stern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testd.beef.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testm.beef.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticker.stern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.art-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beef.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.stern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.essen-und-trinken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingathome.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoener-wohnen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage.stern.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016929877ab10000040300483046022100ce9e18e65f873d5ea9e18033fe8e195116136533061e5e688e25d0e01478d21d022100b1b9bfb3dd97662cf97abd8e41b0ef9715212da29f47257472d59a77653d205a00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016929877b00000004030047304502206fb0fd0de8fdf6ec2d544d062370327911701406c67b68f517a93442f55dc144022100e5759a0f6c7c1877ac5456825838372b1d8058d631edec74948c0f1100931bc1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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