www.stephanshof.com
Issued by R3
About this certificate
This digital certificate with serial number 04:7a:75:b3:7e:c4:e5:91:4e:59:94:80:d5:b7:8b:37:f6:13 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.stephanshof.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:7a:75:b3:7e:c4:e5:91:4e:59:94:80:d5:b7:8b:37:f6:13Serial Number (int): 390120044159223369664698814903450085094931
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 57:e2:00:c1:db:18:52:30:28:bf:aa:e9:93:3f:dd:8a:00:30:36:9b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): cf:34:0d:1d:c2:25:91:c6:c2:0c:d1:50:63:2c:1a:58:2f:99:ee:04
Fingerprint (sha256): 47:32:7b:e9:67:2a:6f:1c:97:c7:cc:4f:dc:7e:32:be:29:4b:28:bd:2c:4f:b2:cc:89:af:69:31:ee:4d:51:e3
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.stephanshof.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.stephanshof.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
stephanshof.com
stephanshof.it
www.stephanshof.com
www.stephanshof.it
stephanshof.it
www.stephanshof.com
www.stephanshof.it
Other certificates including the domain name stephanshof.com
(limited to 100 certificates)
www.revistacipcisa.com
broschuere.bildkunstakademie.de
kataloge.vitaltours.de
kiosk.dolcevita-magazin.ch
catalogs.k7-pro.com
downloads.berghaus-verkehrstechnik.de
blaetterkatalog.kleentex.eu
immobilienmagazin.steinauer-immo.ch
magazine.montana-cans.com
app.procycling.de
magazine.montana-cans.com
downloads.berghaus-verkehrstechnik.de
digital.queencityconnections.com
magazine.montana-cans.com
publications.nursingald.com
downloads.berghaus-verkehrstechnik.de
moegro.mediaflip.de
www.maryspubs.com
ebooks.teammelanie.nz
webkiosk.magazinmarley.de
digital.queencityconnections.com
blaetterkatalog.kleentex.eu
epaper.audimax.de
angebote.dersteirerhof.at
magazine.biss.team
read.africanphotomag.co.ke
katalog.seglerbedarf.de
kiosk.leuchtfeuer-verlag.com
kataloge.triplex-fischer.de
publikationen.kmu.org
kurse.bdb-musikakademie.de
app.worldofmtb.de
epaper.chili-peppers.de
magazine.biss.team
digital.queencityconnections.com
kataloge.holzimpraegnierwerk.ch
digital.queencityconnections.com
epaper.sinntec.de
digital.queencityconnections.com
publikationen.kmu.org
webkiosk.stephanshof.com
publications.nursingald.com
digital.queencityconnections.com
katalog.hltravel.at
app.fahrrad-news.com
webkiosk.stephanshof.com
kiosk.seniorenreisen.de
immomagazin.wegenerimmobilien.de
webkiosk.edeka-koehne.de
kataloge.otto-pokale.de
digital.queencityconnections.com
publications.nursingald.com
webkiosk.magazinmarley.de
brochures.adipec.com
catalogs.k7-pro.com
logo-moebel.mediaflip.de
brochures.hts-touristik.de
publikationen.manres.ch
biblioteca.sciens.com.ar
digital.queencityconnections.com
kurse.bdb-musikakademie.de
publications.nursingald.com
magazine.biss.team
kiosk.thewholenote.com
epaper.asscompact.de
brochures.hts-touristik.de
kataloge.werbeartikel-laeser.ch
magazine.biss.team
magazine.biss.team
ebooks.teammelanie.nz
ebooks.teammelanie.nz
webkiosk.werk5.ch
webkiosk.lurkoi.com
kiosk.seniorenreisen.de
webkiosk.lurkoi.com
webkiosk.magazinmarley.de
blaetterkatalog.kleentex.eu
magazine.biss.team
read.africanphotomag.co.ke
www.stephanshof.com
www.stephanshof.com
epaper.audimax.de
kataloge.pier7.de
kurse.bdb-musikakademie.de
publications.nursingald.com
moebel-seesen.mediaflip.de
katalog.hltravel.ch
magazine.biss.team
blaetterkatalog.kleentex.eu
epaper.logistik-express.com
brochures.adipec.com
kataloge.otto-pokale.de
kiosk.tsg-reutlingen.info
kiosk.seniorenreisen.de
catalogs.k7-pro.com
kiosk.seniorenreisen.de
epaper.asscompact.de
prospekte.wernigerode-tourismus.de
epaper.uehlingerag.ch
epaper.uehlingerag.ch
broschuere.bildkunstakademie.de
kataloge.vitaltours.de
kiosk.dolcevita-magazin.ch
catalogs.k7-pro.com
downloads.berghaus-verkehrstechnik.de
blaetterkatalog.kleentex.eu
immobilienmagazin.steinauer-immo.ch
magazine.montana-cans.com
app.procycling.de
magazine.montana-cans.com
downloads.berghaus-verkehrstechnik.de
digital.queencityconnections.com
magazine.montana-cans.com
publications.nursingald.com
downloads.berghaus-verkehrstechnik.de
moegro.mediaflip.de
www.maryspubs.com
ebooks.teammelanie.nz
webkiosk.magazinmarley.de
digital.queencityconnections.com
blaetterkatalog.kleentex.eu
epaper.audimax.de
angebote.dersteirerhof.at
magazine.biss.team
read.africanphotomag.co.ke
katalog.seglerbedarf.de
kiosk.leuchtfeuer-verlag.com
kataloge.triplex-fischer.de
publikationen.kmu.org
kurse.bdb-musikakademie.de
app.worldofmtb.de
epaper.chili-peppers.de
magazine.biss.team
digital.queencityconnections.com
kataloge.holzimpraegnierwerk.ch
digital.queencityconnections.com
epaper.sinntec.de
digital.queencityconnections.com
publikationen.kmu.org
webkiosk.stephanshof.com
publications.nursingald.com
digital.queencityconnections.com
katalog.hltravel.at
app.fahrrad-news.com
webkiosk.stephanshof.com
kiosk.seniorenreisen.de
immomagazin.wegenerimmobilien.de
webkiosk.edeka-koehne.de
kataloge.otto-pokale.de
digital.queencityconnections.com
publications.nursingald.com
webkiosk.magazinmarley.de
brochures.adipec.com
catalogs.k7-pro.com
logo-moebel.mediaflip.de
brochures.hts-touristik.de
publikationen.manres.ch
biblioteca.sciens.com.ar
digital.queencityconnections.com
kurse.bdb-musikakademie.de
publications.nursingald.com
magazine.biss.team
kiosk.thewholenote.com
epaper.asscompact.de
brochures.hts-touristik.de
kataloge.werbeartikel-laeser.ch
magazine.biss.team
magazine.biss.team
ebooks.teammelanie.nz
ebooks.teammelanie.nz
webkiosk.werk5.ch
webkiosk.lurkoi.com
kiosk.seniorenreisen.de
webkiosk.lurkoi.com
webkiosk.magazinmarley.de
blaetterkatalog.kleentex.eu
magazine.biss.team
read.africanphotomag.co.ke
www.stephanshof.com
www.stephanshof.com
epaper.audimax.de
kataloge.pier7.de
kurse.bdb-musikakademie.de
publications.nursingald.com
moebel-seesen.mediaflip.de
katalog.hltravel.ch
magazine.biss.team
blaetterkatalog.kleentex.eu
epaper.logistik-express.com
brochures.adipec.com
kataloge.otto-pokale.de
kiosk.tsg-reutlingen.info
kiosk.seniorenreisen.de
catalogs.k7-pro.com
kiosk.seniorenreisen.de
epaper.asscompact.de
prospekte.wernigerode-tourismus.de
epaper.uehlingerag.ch
epaper.uehlingerag.ch
Certificate
The complete raw certificate details for www.stephanshof.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISBHp1s37E5ZFOWZSA1beLN/YTMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MDQxOTE4NDBaFw0yNDA4MDIxOTE4MzlaMB4xHDAaBgNVBAMT E3d3dy5zdGVwaGFuc2hvZi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDDWFaNnhk5qBRdJrdKUj2vQjMloiucZx3jCBvPtDRWv75opa2DiUSV1zIt LWEjQUuP9+T2KQD/5f5+kbQtWRnruiGcF11Fs8ZfqwkNpyRAAGNuPYrKUsswKvw9 R17AQD1ZsEzYuYq2vO6KDf2gr312pbhzUNAu2WVBUfP6CGnJ13ANWt+UzNwqvNGv 20PC9hRbDWwzzWYXnaG0YF3ZWQQpkdV+nV/PTAybaZvY3dR1D7NORM3Oc8z+BHuR hkUsTbrC2RB7Qq3i1KM8fFF4bStnVqi2FX6KKYReioxGKWt/WpvuzwDfRFL9+gp2 v1kexVHrORLavDn9xOalCQPSaMcvAgMBAAGjggJKMIICRjAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFFfiAMHbGFIwKL+q6ZM/3YoAMDabMB8GA1UdIwQYMBaAFBQusxe3 WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0 cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j ci5vcmcvMFMGA1UdEQRMMEqCD3N0ZXBoYW5zaG9mLmNvbYIOc3RlcGhhbnNob2Yu aXSCE3d3dy5zdGVwaGFuc2hvZi5jb22CEnd3dy5zdGVwaGFuc2hvZi5pdDATBgNV HSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AEiw42va pkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABj0VCPxYAAAQDAEcwRQIhAIvt GnAQQZH5pldtRu7lXpASEA+pehD2A3FMSXS+vNyoAiA1amFdEupe4q+/U0Nto3IT cGwXcb01kzLetOe+8ftABgB2ABmYEHEJ8NZSLjCA0p4/ZLuDbijM+Q9Sju7fzko/ FrTKAAABj0VCPxkAAAQDAEcwRQIgDDvnYJoMpHg8ZvCWw1m3ixwtka6Lc3FIDcVA ozN2ufECIQD1H9jFFaLLN5efhOZyWgWiJutOAF4LqWjA+ZNUGTX2STANBgkqhkiG 9w0BAQsFAAOCAQEAHo5BEt87mc4AE1RIgsZ5Rr+cKaMW/HqpUrJLY6wRZybq9a0T etfBDTKC2/RDY/F5fxrh62r/aEmTN/LbOtHUwRSh1KJXmx+B2OfFjR3PX0Qz56ze GZdPrPU+/y+3hKi1gGM0bEYd6sfchgEiHkSHKEhnCFblQfsMuMl/ZxyuqMRRoaFa iaP2s1KMFiwIUpnr4889/G1RokwzeFbNLhmZSzoIybeqrkoI/H8rvaQO/H19qNqp PZyZeQO7897mimIxRjNC3w2Sye+5Ha0V6n5kuf+ceQqc95C30Pklm7ka8lk/xUF2 wBqgtyTNuUG6acDz18/yICJVIAh+8xxt5o21mQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1hWjZ4ZOagUXSa3SlI9 r0IzJaIrnGcd4wgbz7Q0Vr++aKWtg4lEldcyLS1hI0FLj/fk9ikA/+X+fpG0LVkZ 67ohnBddRbPGX6sJDackQABjbj2KylLLMCr8PUdewEA9WbBM2LmKtrzuig39oK99 dqW4c1DQLtllQVHz+ghpyddwDVrflMzcKrzRr9tDwvYUWw1sM81mF52htGBd2VkE KZHVfp1fz0wMm2mb2N3UdQ+zTkTNznPM/gR7kYZFLE26wtkQe0Kt4tSjPHxReG0r Z1aothV+iimEXoqMRilrf1qb7s8A30RS/foKdr9ZHsVR6zkS2rw5/cTmpQkD0mjH LwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 390120044159223369664698814903450085094931 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-04 19:18:40 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-02 19:18:39 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.stephanshof.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24660030608254633255083700478672447943779468772096798178033670335323832892718260325103209369691200103204806846667789947504965488780167484841533589114490106071006355943680971585765847542012494947834638672601929340702574611133621127136703058645709051597536592675397271516868242219659082820408929342583494819434262167012578612903195605055234214459818654768247285454472868631618466216950030982925471549081923761767847667405718770367564071397274519203409338777575226031312096425804074814673168972997326257529619259883867836506370452355216780981040572821853399705012695304468115095901398278773479219308663376633169973921583 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 57e200c1db18523028bfaae9933fdd8a0030369b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stephanshof.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stephanshof.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stephanshof.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stephanshof.it' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f45423f1600000403004730450221008bed1a70104191f9a6576d46eee55e9012100fa97a10f603714c4974bebcdca80220356a615d12ea5ee2afbf53436da37213706c1771bd359332deb4e7bef1fb40060076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f45423f19000004030047304502200c3be7609a0ca4783c66f096c359b78b1c2d91ae8b7371480dc540a33376b9f1022100f51fd8c515a2cb37979f84e6725a05a226eb4e005e0ba968c0f993541935f649 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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