bf-tools.net

Issued by R3

About this certificate

This digital certificate with serial number 04:97:1f:cd:d2:46:91:0c:7c:62:94:22:44:70:d2:ea:84:b0 was issued on by Let's Encrypt.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bf-tools.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:97:1f:cd:d2:46:91:0c:7c:62:94:22:44:70:d2:ea:84:b0
Serial Number (int): 399874055885724905164964152538307595240624
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e7:fd:8a:00:50:f2:88:7d:c2:04:1e:bc:9b:d1:5b:3f:b9:9a:24:64
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5d:b8:37:04:a3:b3:e1:70:48:4d:9a:4f:c7:87:ae:ba:fe:4c:9a:92
Fingerprint (sha256): 43:21:aa:53:5d:e8:83:18:e9:b8:9a:2d:da:c0:43:23:b1:47:e6:27:18:06:04:69:cf:be:66:94:5a:c1:f1:94

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bf-tools.net

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bf-tools.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a-staging.bf-ad.net
a.bf-ad.net
a.bf-tools.net
admanager.conunity.io
article.bunte.de
article.cinema.de
article.finanzen100.de
article.fitforfun.de
article.netdoktor.de
article.netmoms.de
article.tvspielfilm.de
article.tvtoday.de
beta.corona-care.de
bf-tools.net
brokervergleich.finanzen100.de
cardscout.de
depotvergleich.kleingeldhelden.com
emq.bf-tools.net
etf-sparplan.finanzen100.de
fol-staging.cardscout.de
m-article.fitforfun.de
m-article.netdoktor.de
m-article.tvspielfilm.de
m-article.tvtoday.de
m-staging.cardscout.de
rtt.bf-tools.net
stg-brokervergleich.finanzen100.de
stg-depotvergleich.kleingeldhelden.com
stg-etf-sparplan.finanzen100.de
stg-onvista.depot.bestcheck.de
stg-onvista.festgeld.bestcheck.de
stg-onvista.tagesgeld.bestcheck.de
user-rating-dev.burda-forward.de
user-rating-stg.burda-forward.de
user-rating-v2-dev.burda-forward.de
user-rating-v2-stg.burda-forward.de
user-rating-v2.burda-forward.de
user-rating.burda-forward.de
v.bunte.de
v.burda-forward.de
v.cinema.de
v.finanzen100.de
v.fitforfun.de
v.mydogplanner.com
v.mydogplanner.de
v.netmoms.de
v.pet-forward.com
v.pet-forward.de
v.petforward.de
v.tvspielfilm.de
v.tvtoday.de
web-vitals.bfops.io
welt-staging.cardscout.de
welt.cardscout.de
widget-stg.bunte.de
widget-stg.fitforfun.de
widget-stg.netmoms.de
widget-stg.tvspielfilm.de
widget.bunte.de
widget.fitforfun.de
widget.netmoms.de
widget.tvspielfilm.de
widgets-dev.burda-forward.de
widgets-stg.burda-forward.de
widgets.burda-forward.de
www-staging.cardscout.de
www.cardscout.de
www.corona-care.de

Other certificates including the domain name bf-tools.net

(limited to 100 certificates)
bf-tools.net
bf-tools.net
bf-tools.net
mds.bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
cont.bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
a.tfag.de
bf-tools.net
a.tfag.de
a.tfag.de
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
a.tfag.de
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
a.tfag.de
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
cont.bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
cont.focus.de
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
mds.bf-tools.net
bf-tools.net

Certificate

The complete raw certificate details for bf-tools.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILHDCCCgSgAwIBAgISBJcfzdJGkQx8YpQiRHDS6oSwMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MTcwNTI0MzdaFw0yMzEwMTUwNTI0MzZaMBcxFTATBgNVBAMT
DGJmLXRvb2xzLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALLV
4bcrv5FS/t+uJBzhVm7goO7T+Sy3WesJi4h4zLTrUKOCvfOEf0DPhhv98EtcabKF
nOtmzR5Aj4R1G5c32fohuI0r8xALIaAd44KcQLSQbJTg7vf67jmtTfbFDfD9Xn8c
23omXJcJAdvVy0By462mtWrPNb/wzdju5QqT2tjM6Mjz9TzaJ/C0Go+ZVHpNT3CO
DJYV+pIC13BYjMKfpL6kbTpwNn1FmPTpbHAXvV6zWoWZIlrrlsvF2CSt08zf6+2m
evYDcSVnmOIyoWpeKTDZpHFXsyMwYbsMy1BgYdNx7z7ROutcjJqyPDGZwFuMUufT
ubHKmNCM4fqRFT/eurcCAwEAAaOCCEUwgghBMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQU5/2KAFDyiH3CBB68m9FbP7maJGQwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA
5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu
by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w
ggZLBgNVHREEggZCMIIGPoITYS1zdGFnaW5nLmJmLWFkLm5ldIILYS5iZi1hZC5u
ZXSCDmEuYmYtdG9vbHMubmV0ghVhZG1hbmFnZXIuY29udW5pdHkuaW+CEGFydGlj
bGUuYnVudGUuZGWCEWFydGljbGUuY2luZW1hLmRlghZhcnRpY2xlLmZpbmFuemVu
MTAwLmRlghRhcnRpY2xlLmZpdGZvcmZ1bi5kZYIUYXJ0aWNsZS5uZXRkb2t0b3Iu
ZGWCEmFydGljbGUubmV0bW9tcy5kZYIWYXJ0aWNsZS50dnNwaWVsZmlsbS5kZYIS
YXJ0aWNsZS50dnRvZGF5LmRlghNiZXRhLmNvcm9uYS1jYXJlLmRlggxiZi10b29s
cy5uZXSCHmJyb2tlcnZlcmdsZWljaC5maW5hbnplbjEwMC5kZYIMY2FyZHNjb3V0
LmRlgiJkZXBvdHZlcmdsZWljaC5rbGVpbmdlbGRoZWxkZW4uY29tghBlbXEuYmYt
dG9vbHMubmV0ghtldGYtc3BhcnBsYW4uZmluYW56ZW4xMDAuZGWCGGZvbC1zdGFn
aW5nLmNhcmRzY291dC5kZYIWbS1hcnRpY2xlLmZpdGZvcmZ1bi5kZYIWbS1hcnRp
Y2xlLm5ldGRva3Rvci5kZYIYbS1hcnRpY2xlLnR2c3BpZWxmaWxtLmRlghRtLWFy
dGljbGUudHZ0b2RheS5kZYIWbS1zdGFnaW5nLmNhcmRzY291dC5kZYIQcnR0LmJm
LXRvb2xzLm5ldIIic3RnLWJyb2tlcnZlcmdsZWljaC5maW5hbnplbjEwMC5kZYIm
c3RnLWRlcG90dmVyZ2xlaWNoLmtsZWluZ2VsZGhlbGRlbi5jb22CH3N0Zy1ldGYt
c3BhcnBsYW4uZmluYW56ZW4xMDAuZGWCHnN0Zy1vbnZpc3RhLmRlcG90LmJlc3Rj
aGVjay5kZYIhc3RnLW9udmlzdGEuZmVzdGdlbGQuYmVzdGNoZWNrLmRlgiJzdGct
b252aXN0YS50YWdlc2dlbGQuYmVzdGNoZWNrLmRlgiB1c2VyLXJhdGluZy1kZXYu
YnVyZGEtZm9yd2FyZC5kZYIgdXNlci1yYXRpbmctc3RnLmJ1cmRhLWZvcndhcmQu
ZGWCI3VzZXItcmF0aW5nLXYyLWRldi5idXJkYS1mb3J3YXJkLmRlgiN1c2VyLXJh
dGluZy12Mi1zdGcuYnVyZGEtZm9yd2FyZC5kZYIfdXNlci1yYXRpbmctdjIuYnVy
ZGEtZm9yd2FyZC5kZYIcdXNlci1yYXRpbmcuYnVyZGEtZm9yd2FyZC5kZYIKdi5i
dW50ZS5kZYISdi5idXJkYS1mb3J3YXJkLmRlggt2LmNpbmVtYS5kZYIQdi5maW5h
bnplbjEwMC5kZYIOdi5maXRmb3JmdW4uZGWCEnYubXlkb2dwbGFubmVyLmNvbYIR
di5teWRvZ3BsYW5uZXIuZGWCDHYubmV0bW9tcy5kZYIRdi5wZXQtZm9yd2FyZC5j
b22CEHYucGV0LWZvcndhcmQuZGWCD3YucGV0Zm9yd2FyZC5kZYIQdi50dnNwaWVs
ZmlsbS5kZYIMdi50dnRvZGF5LmRlghN3ZWItdml0YWxzLmJmb3BzLmlvghl3ZWx0
LXN0YWdpbmcuY2FyZHNjb3V0LmRlghF3ZWx0LmNhcmRzY291dC5kZYITd2lkZ2V0
LXN0Zy5idW50ZS5kZYIXd2lkZ2V0LXN0Zy5maXRmb3JmdW4uZGWCFXdpZGdldC1z
dGcubmV0bW9tcy5kZYIZd2lkZ2V0LXN0Zy50dnNwaWVsZmlsbS5kZYIPd2lkZ2V0
LmJ1bnRlLmRlghN3aWRnZXQuZml0Zm9yZnVuLmRlghF3aWRnZXQubmV0bW9tcy5k
ZYIVd2lkZ2V0LnR2c3BpZWxmaWxtLmRlghx3aWRnZXRzLWRldi5idXJkYS1mb3J3
YXJkLmRlghx3aWRnZXRzLXN0Zy5idXJkYS1mb3J3YXJkLmRlghh3aWRnZXRzLmJ1
cmRhLWZvcndhcmQuZGWCGHd3dy1zdGFnaW5nLmNhcmRzY291dC5kZYIQd3d3LmNh
cmRzY291dC5kZYISd3d3LmNvcm9uYS1jYXJlLmRlMBMGA1UdIAQMMAowCAYGZ4EM
AQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAtz77JN+cTbp18jnFulj0bF38
Qs96nzXEnh0JgSXttJkAAAGJYoW5EAAABAMASDBGAiEAv2dkNy9SfDpjny6HZG6o
bbe06rePl04ejU2ERvnR2x0CIQCdqX0h8JityZyb5xbg03DuEehPIQHci4KwKZO4
ayOhMAB2AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABiWKFuRoA
AAQDAEcwRQIhAN0tvtp7xURQL5/8hpdVmSxcDjVH7RH6GkXSRqUbsiDtAiBVr0K7
UN7ZU6ie4ETj9LdFJDFZ4tRlu4wQsf4nkjGXcDANBgkqhkiG9w0BAQsFAAOCAQEA
tP2/3mjNpOW3yLhk2kvKPE69sVjZFFhqihiCiuCjwptrSggpT2XZQse+6fBbPGOt
rWoYZ0hOtiO9BMeMbp3/cz9j2k9qH0bII0+qkIE036Rsz/qvMbMJm1fobicCz0PG
/tICENoam3YnQv3KMh5dGrde0w16tY1Jjev+WvkpZfT9k5uy4xGNzQWvpGz9pdRJ
eqXRBBM9h1EKspNxaeuCEZdOy0qb2z7hYvcqA3HMD07shnWPZnSRI0eUNT09Pau0
XzrA25Fa/BUhcKq1QEhTzH6T0l6AiFGIPC3iNRBmhSbHapWc+Bfj2CnJBy5qHsRG
SkknJv2/DS5gcoaRIB7ySQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstXhtyu/kVL+364kHOFW
buCg7tP5LLdZ6wmLiHjMtOtQo4K984R/QM+GG/3wS1xpsoWc62bNHkCPhHUblzfZ
+iG4jSvzEAshoB3jgpxAtJBslODu9/ruOa1N9sUN8P1efxzbeiZclwkB29XLQHLj
raa1as81v/DN2O7lCpPa2MzoyPP1PNon8LQaj5lUek1PcI4MlhX6kgLXcFiMwp+k
vqRtOnA2fUWY9OlscBe9XrNahZkiWuuWy8XYJK3TzN/r7aZ69gNxJWeY4jKhal4p
MNmkcVezIzBhuwzLUGBh03HvPtE661yMmrI8MZnAW4xS59O5scqY0Izh+pEVP966
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399874055885724905164964152538307595240624
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-17 05:24:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-15 05:24:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bf-tools.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22575887281711422904064257282832406296301420047743842582344810160125321299537221985356882716297108485419504362052877283782588466823607242116992447736048431954887684022069546708570225571365903859546748549785651538365313434852994803108135300886903912649015121756145707745562740568233254843951000192574922362462974233560676365380021758066906502470429277336026522441650555014772220830757958138104728038686281661419054488508445021907346922980766563806598655985331626438468974265149981132248508688051506780207447139130090470748979928320305069317122421339146385137787894179683357157631979832465249587391869961198815695256247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7fd8a0050f2887dc2041ebc9bd15b3fb99a2464
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1602 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-staging.bf-ad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.bf-ad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admanager.conunity.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.bunte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.cinema.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.netdoktor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.tvspielfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.tvtoday.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.corona-care.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokervergleich.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depotvergleich.kleingeldhelden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emq.bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etf-sparplan.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fol-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-article.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-article.netdoktor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-article.tvspielfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-article.tvtoday.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtt.bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-brokervergleich.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-depotvergleich.kleingeldhelden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-etf-sparplan.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-onvista.depot.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-onvista.festgeld.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-onvista.tagesgeld.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating-dev.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating-stg.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating-v2-dev.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating-v2-stg.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating-v2.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.bunte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.cinema.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.mydogplanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.mydogplanner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.pet-forward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.pet-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.petforward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.tvspielfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.tvtoday.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-vitals.bfops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welt-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welt.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget-stg.bunte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget-stg.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget-stg.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget-stg.tvspielfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.bunte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.tvspielfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets-dev.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets-stg.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corona-care.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001896285b9100000040300483046022100bf6764372f527c3a639f2e87646ea86db7b4eab78f974e1e8d4d8446f9d1db1d0221009da97d21f098adc99c9be716e0d370ee11e84f2101dc8b82b02993b86b23a130007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001896285b91a0000040300473045022100dd2dbeda7bc544502f9ffc869755992c5c0e3547ed11fa1a45d246a51bb220ed022055af42bb50ded953a89ee044e3f4b745243159e2d465bb8c10b1fe2792319770
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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