www.baeckereibuettner.de
Issued by R3
About this certificate
This digital certificate with serial number 03:5d:24:bb:00:2d:af:9e:cd:38:05:b7:ab:ed:3a:db:6b:ab was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.baeckereibuettner.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:5d:24:bb:00:2d:af:9e:cd:38:05:b7:ab:ed:3a:db:6b:abSerial Number (int): 293031941089908439195415297589213319097259
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 38:52:56:62:ae:04:e8:4f:cb:5f:e0:ce:a6:0c:22:9e:e6:b2:89:3e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 8c:4d:bf:52:6c:05:26:c7:79:52:a7:b1:a4:b1:f5:20:eb:4b:ab:d5
Fingerprint (sha256): 43:c7:ca:f6:cb:dc:63:88:1f:71:0c:df:39:8a:73:56:92:08:03:6a:e9:38:3c:dd:92:1c:ba:3e:93:4d:40:2e
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.baeckereibuettner.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.baeckereibuettner.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
baeckereibuettner.de
www.baeckereibuettner.de
www.baeckereibuettner.de
Other certificates including the domain name baeckereibuettner.de
(limited to 100 certificates)
catalogues.meister.com
kiosk.greater.sydney
webkiosk.wonendoejezo.com
mediathek.stiftung-liebenau.de
www.baeckereibuettner.de
webkiosk.wonendoejezo.com
e-paper.moinmoin.de
epaper.abakus-magdeburg.de
journal.flyskywork.com
moebel-boeck.mediaflip.de
catalog.sogears.com
prospekte.intersport.de
webkiosk.dein-typ.de
catalogues.meister.com
www.baeckereibuettner.de
epaper.glasmarte.at
kiosk.storyboard.de
kataloge.quester.at
kiosk.greater.sydney
www.baeckereibuettner.de
kiosk.greater.sydney
berliner-kurier.kiosk.plus
epapers.gleitz-online.de
epaper.swecon-baumaschinen.de
webkiosk.baeckereibuettner.de
kiosk.greater.sydney
pub.vermoegenszentrum.ch
berliner-kurier.kiosk.plus
ssl.yumpu.com
kataloge.quester.at
ssl.yumpu.com
kataloge.quester.at
kiosk.greater.sydney
ssl.yumpu.com
berliner-zeitung.kiosk.plus
berliner-zeitung.kiosk.plus
ca.lyreco.de
webkiosk.wonendoejezo.com
kataloge.fuerholz.de
kiosk.greater.sydney
tennis.yumpu100.com
webkiosk.reven.de
kiosk.greater.sydney
onlinekrant.binnenvaartkrant.nl
pop3.kraemer-praezisionswerkzeuge-kataloge.de
tueren.holzschwab.de
catalogues.meister.com
pub.vermoegenszentrum.ch
www.baeckereibuettner.de
kataloge.fuerholz.de
baeucke.mediaflip.de
magazin.wiese-rt.de
ssl.yumpu.com
pop3.kraemer-praezisionswerkzeuge-kataloge.de
webkiosk.reven.de
kataloge.quester.at
outdoor.holzschwab.de
kataloge.quester.at
catalogues.meister.com
spezial.holzschwab.de
ssl.yumpu.com
kataloge.fuerholz.de
kataloge.quester.at
kataloge.my-workwear.de
webkiosk.creativstudio8.com
webkiosk.sossenheimer-wochenblatt.de
catalog.sogears.com
berliner-kurier.kiosk.plus
spezial.holzschwab.de
onlinekrant.binnenvaartkrant.nl
www.magazine-kraftquelle-bgl.de
ssl.yumpu.com
www.baeckereibuettner.de
webkiosk.wonendoejezo.com
catalogues.meister.com
onlinekrant.binnenvaartkrant.nl
weser-wohnwelt.mediaflip.de
ssl.yumpu.com
tennis.yumpu100.com
e-paper.moinmoin.de
www.hochseescheinkurs.online
webkiosk.wonendoejezo.com
polsteraktuell.mediaflip.de
berliner-kurier.kiosk.plus
kataloge.my-workwear.de
pop3.kraemer-praezisionswerkzeuge-kataloge.de
ssl.yumpu.com
kataloge.fuerholz.de
kiosk.greater.sydney
webkiosk.wonendoejezo.com
kataloge.quester.at
webkiosk.baeckereibuettner.de
boeden.holzschwab.de
epaper.glasmarte.at
ssl.yumpu.com
cf.completesportsnigeria.com
ca.lyreco.de
tennis.yumpu100.com
journal.burgls.at
www.magazine-kraftquelle-bgl.de
kiosk.greater.sydney
webkiosk.wonendoejezo.com
mediathek.stiftung-liebenau.de
www.baeckereibuettner.de
webkiosk.wonendoejezo.com
e-paper.moinmoin.de
epaper.abakus-magdeburg.de
journal.flyskywork.com
moebel-boeck.mediaflip.de
catalog.sogears.com
prospekte.intersport.de
webkiosk.dein-typ.de
catalogues.meister.com
www.baeckereibuettner.de
epaper.glasmarte.at
kiosk.storyboard.de
kataloge.quester.at
kiosk.greater.sydney
www.baeckereibuettner.de
kiosk.greater.sydney
berliner-kurier.kiosk.plus
epapers.gleitz-online.de
epaper.swecon-baumaschinen.de
webkiosk.baeckereibuettner.de
kiosk.greater.sydney
pub.vermoegenszentrum.ch
berliner-kurier.kiosk.plus
ssl.yumpu.com
kataloge.quester.at
ssl.yumpu.com
kataloge.quester.at
kiosk.greater.sydney
ssl.yumpu.com
berliner-zeitung.kiosk.plus
berliner-zeitung.kiosk.plus
ca.lyreco.de
webkiosk.wonendoejezo.com
kataloge.fuerholz.de
kiosk.greater.sydney
tennis.yumpu100.com
webkiosk.reven.de
kiosk.greater.sydney
onlinekrant.binnenvaartkrant.nl
pop3.kraemer-praezisionswerkzeuge-kataloge.de
tueren.holzschwab.de
catalogues.meister.com
pub.vermoegenszentrum.ch
www.baeckereibuettner.de
kataloge.fuerholz.de
baeucke.mediaflip.de
magazin.wiese-rt.de
ssl.yumpu.com
pop3.kraemer-praezisionswerkzeuge-kataloge.de
webkiosk.reven.de
kataloge.quester.at
outdoor.holzschwab.de
kataloge.quester.at
catalogues.meister.com
spezial.holzschwab.de
ssl.yumpu.com
kataloge.fuerholz.de
kataloge.quester.at
kataloge.my-workwear.de
webkiosk.creativstudio8.com
webkiosk.sossenheimer-wochenblatt.de
catalog.sogears.com
berliner-kurier.kiosk.plus
spezial.holzschwab.de
onlinekrant.binnenvaartkrant.nl
www.magazine-kraftquelle-bgl.de
ssl.yumpu.com
www.baeckereibuettner.de
webkiosk.wonendoejezo.com
catalogues.meister.com
onlinekrant.binnenvaartkrant.nl
weser-wohnwelt.mediaflip.de
ssl.yumpu.com
tennis.yumpu100.com
e-paper.moinmoin.de
www.hochseescheinkurs.online
webkiosk.wonendoejezo.com
polsteraktuell.mediaflip.de
berliner-kurier.kiosk.plus
kataloge.my-workwear.de
pop3.kraemer-praezisionswerkzeuge-kataloge.de
ssl.yumpu.com
kataloge.fuerholz.de
kiosk.greater.sydney
webkiosk.wonendoejezo.com
kataloge.quester.at
webkiosk.baeckereibuettner.de
boeden.holzschwab.de
epaper.glasmarte.at
ssl.yumpu.com
cf.completesportsnigeria.com
ca.lyreco.de
tennis.yumpu100.com
journal.burgls.at
www.magazine-kraftquelle-bgl.de
Certificate
The complete raw certificate details for www.baeckereibuettner.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGEzCCBPugAwIBAgISA10kuwAtr57NOAW3q+0622urMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MTExMzUzMTNaFw0yNDA3MTAxMzUzMTJaMCMxITAfBgNVBAMT GHd3dy5iYWVja2VyZWlidWV0dG5lci5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIP ADCCAgoCggIBALbKyh3DRnFrjz0EHXwhhigvt3eqww9vkVBYZQwXydltWmzv+Rqr uX1YgT8c9QBWVSuZ0YbXlm2MzRd6VJL6Tox2Mt2jfkaY0sQDcwXpwH1wH5lH+UWU DsjBjWhzSLoys9wIQ4+7ZD3LGpbaDqxy+UC3L+iXjLh7C6RcqbKAoIy5wFOk0OVs lJPcPS+KLmN3FU5wKnWOqaqbn/wbQtIYPEPSxAziqe4phG84S0OLzjs/UeuBSraH sLS6yprUGJPiy8jkVEWrCcoqTNeKFUj0Xq6ZjVGiHxy2xqUIdTJsPf5ERjRn4Qtv /pBYTBkKRMD9oE13hOn1NJsC5mSvCH5IFCafgi1EM692c1X7dBPVK6Z9ti4YXRdN KA/goWsAoOGdK3DR5WE8Yd9c53L+rKnnOO1X6IUNNOK43TEkN6lZIxjC7BiTNHFr 2nxcMPbnor4x39oqpcCb39OgOVxwEl7zsr6TtakVTDgIlisL0sWw4DFxgpa1jWj7 FseB5WLrpVTic/MI4B3zIV0bu7UIyS4GaOUBRPVvTNpJ6yLaaS64REeqnXsWLlXa PMnh4rOKJA09+2964/aiTlL04BY1MNc1clHXPjxvRvCpE/VelyhTqTmwQqbCpIAu CYpm4brqi3AjXXJyl9RqT1U3mMXBYcnYvARhBMRsitVypBbDBlHc8kiZAgMBAAGj ggIwMIICLDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDhSVmKuBOhPy1/gzqYMIp7m sok+MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEB BEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUF BzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMDkGA1UdEQQyMDCCFGJhZWNrZXJl aWJ1ZXR0bmVyLmRlghh3d3cuYmFlY2tlcmVpYnVldHRuZXIuZGUwEwYDVR0gBAww CjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQBIsONr2qZHNA/l agL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY7NpgUgAAAEAwBGMEQCIF1idJzpZYpn arSfIYK2lXKbXcDq4Amq3ZlmVoUWhpIlAiAYVXWb8q9Q4W6qJd/vGXFA4jCxxYVm nxtsEGslZswqZQB3AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAAB js2mBSMAAAQDAEgwRgIhALZN0O1LysQKw/9rakj1ZGDUct3s4ISs2bbdlp0AgWsD AiEAhSeCOftjE2wAh8qSyxZdCrZsiQKmzzuPWN6p7zh+gJwwDQYJKoZIhvcNAQEL BQADggEBAAzpYwEetaCfT4bRE8bhL8GBW0eEVjkAdmoAkmB85qWsb6yJKdAUIWod qncTdNYc7TbZP5nkCo8BaQ2GmTDEk+fwKg6FZXyBwS4doW5GVj8hqNbB0vLuhcpY zvfgfVDfcK8E9HLLQ2t/kVX3HKrVWAfNu5AMBJpWpOXjC3jDk/kifdRJUfVKwY3K tUJaSWmsxcpO6vmOqkKSE5CvNd8lq6idqmUHbKrve3rTCZAoPdh3gMk+MfUdf2+d FURM009uYqQQJvilnRvEEy2bmMtrYz3aZB3StU9Otwbocj+ZVLlQbtYqXuT9KpZ1 K5GjKMUsUHmgXWNTTmuUzHbQI4csTRc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtsrKHcNGcWuPPQQdfCGG KC+3d6rDD2+RUFhlDBfJ2W1abO/5Gqu5fViBPxz1AFZVK5nRhteWbYzNF3pUkvpO jHYy3aN+RpjSxANzBenAfXAfmUf5RZQOyMGNaHNIujKz3AhDj7tkPcsaltoOrHL5 QLcv6JeMuHsLpFypsoCgjLnAU6TQ5WyUk9w9L4ouY3cVTnAqdY6pqpuf/BtC0hg8 Q9LEDOKp7imEbzhLQ4vOOz9R64FKtoewtLrKmtQYk+LLyORURasJyipM14oVSPRe rpmNUaIfHLbGpQh1Mmw9/kRGNGfhC2/+kFhMGQpEwP2gTXeE6fU0mwLmZK8IfkgU Jp+CLUQzr3ZzVft0E9Urpn22LhhdF00oD+ChawCg4Z0rcNHlYTxh31zncv6sqec4 7VfohQ004rjdMSQ3qVkjGMLsGJM0cWvafFww9ueivjHf2iqlwJvf06A5XHASXvOy vpO1qRVMOAiWKwvSxbDgMXGClrWNaPsWx4HlYuulVOJz8wjgHfMhXRu7tQjJLgZo 5QFE9W9M2knrItppLrhER6qdexYuVdo8yeHis4okDT37b3rj9qJOUvTgFjUw1zVy Udc+PG9G8KkT9V6XKFOpObBCpsKkgC4JimbhuuqLcCNdcnKX1GpPVTeYxcFhydi8 BGEExGyK1XKkFsMGUdzySJkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 293031941089908439195415297589213319097259 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 13:53:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-10 13:53:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.baeckereibuettner.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745726896350890211410799882426724778047767880364710691311375137641684403816862833998584975388107252618930917234866797956180725952351886831072020024083542515616345824550625656767722899859349211672404660446426238974061517835304660463483143016811080663509714948537349267136533233070791751018230066259796203619815459004869193834203850681893142649484568104544554531164659237774418371829815352412931555239193961065794066374406382620106825647238376388708602375958633696694402271307454970828217749184983566187661014785019916124978322944879839221989701612296832036298787781393590302672070895235795365657227601636478368873169405141715004886408511871962902544472974450197582724586033659180035668896613482995665008999784188640045879900352139852333539445126101117802461501547480962778701027336127130050662022449842758051990036359725045620089350593725201544679915418702794320587696603102673126284766992974559944020917192291216401765053323260150076528913584668916699161697815695413301511485120856235056708253013378683113023688050326548929512901193920173126821926111104061162910195498965900901142801392081633115302123641435295347623243610818758103000257937618986365986863106422622420408967312815310793482974712709663437793128571400480344419427567769 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 38525662ae04e84fcb5fe0cea60c229ee6b2893e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baeckereibuettner.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baeckereibuettner.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ecda60520000004030046304402205d62749ce9658a676ab49f2182b695729b5dc0eae009aadd996656851686922502201855759bf2af50e16eaa25dfef197140e230b1c585669f1b6c106b2566cc2a650077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ecda605230000040300483046022100b64dd0ed4bcac40ac3ff6b6a48f56460d472ddece084acd9b6dd969d00816b0302210085278239fb63136c0087ca92cb165d0ab66c8902a6cf3b8f58dea9ef387e809c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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