a.westfalen-blatt.de

Issued by R3

About this certificate

This digital certificate with serial number 03:b1:98:46:10:a9:f0:71:94:ca:1b:93:8b:88:cb:2a:f9:01 was issued on by Let's Encrypt.

With 63 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=a.westfalen-blatt.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b1:98:46:10:a9:f0:71:94:ca:1b:93:8b:88:cb:2a:f9:01
Serial Number (int): 321769243194408779460454987789859317020929
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 67:d4:35:98:1b:cd:a4:b2:9d:48:0d:ef:9c:19:9a:7b:fc:eb:ce:0c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): aa:c0:60:15:59:0f:76:bd:b1:51:c5:e6:82:ce:18:ea:1a:f5:47:2f
Fingerprint (sha256): 49:f1:9b:6c:7f:9e:2e:ab:b1:c2:b7:4e:e2:0f:3b:e5:3d:7e:68:cc:e4:a0:3f:08:be:64:14:f6:be:de:5e:8c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate a.westfalen-blatt.de

63

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for a.westfalen-blatt.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a.westfalen-blatt.de
a.wn.de
drco.ga.de
drive.abendzeitung-muenchen.de
drive.allgemeine-zeitung.de
drive.bnn.de
drive.borkumer-zeitung.de
drive.dattelner-morgenpost.de
drive.davoserzeitung.ch
drive.dorstenerzeitung.de
drive.echo-online.de
drive.freiepresse.de
drive.ga-online.de
drive.gn-online.de
drive.haller-kreisblatt.de
drive.halternerzeitung.de
drive.hellwegeranzeiger.de
drive.hertener-allgemeine.de
drive.idowa.de
drive.linthzeitung.ch
drive.lr-online.de
drive.lz.de
drive.marler-zeitung.de
drive.mittelhessen.de
drive.moz.de
drive.mt.de
drive.muensterlandzeitung.de
drive.nn.de
drive.nordbayern.de
drive.nw.de
drive.on-online.de
drive.oz-online.de
drive.recklinghaeuser-zeitung.de
drive.ruhrnachrichten.de
drive.saarbruecker-zeitung.de
drive.stimberg-zeitung.de
drive.suedostschweiz.ch
drive.swp.de
drive.tt.com
drive.vol.at
drive.volksfreund.de
drive.waltroper-zeitung.de
drive.weser-kurier.de
drive.wiesbadener-kurier.de
drive.wnoz.de
drv.badische-zeitung.de
t.aachener-nachrichten.de
t.aachener-zeitung.de
t.bgland24.de
t.chiemgau24.de
t.hz.de
t.innsalzach24.de
t.mangfall24.de
t.medienhausaachen.de
t.ovb-online.de
t.rheinpfalz.de
t.rosenheim24.de
t.saechsische.de
t.schickler.de
t.wasserburg24.de
tracking.kreiszeitung-wesermarsch.de
tracking.nordsee-zeitung.de
tracking.zevener-zeitung.de

Other certificates including the domain name westfalen-blatt.de

(limited to 100 certificates)
amp-stage.wn.de
abo.westfalen-blatt.de
amp-consent.desired.de
westfalen-blatt.de
amp-stage.wn.de
amp-stage.wn.de
amp-consent.familie.de
westfalen-blatt.de
westfalen-blatt.de
amp-stage.wn.de
www.westfalen-blatt.de
a.westfalen-blatt.de
*.westfalen-blatt.de
amp-stage.wn.de
amp-consent.desired.de
www.wn-jobs.de
www.wn-jobs.de
amp-consent.desired.de
a.westfalen-blatt.de
amp-consent.desired.de
a.westfalen-blatt.de
amp-stage.wn.de
www.wn-jobs.de
*.westfalen-blatt.de
amp-consent.desired.de
amp-consent.desired.de
*.westfalen-blatt.de
amp-stage.wn.de
solutions.westfalen-blatt.de
westfalen-blatt.de
amp-stage.wn.de
amp-consent.desired.de
amp-consent.desired.de
westfalen-blatt.de
solutions.westfalen-blatt.de
amp-stage.wn.de
amp-consent.desired.de
amp-stage.wn.de
amp-consent.desired.de
amp-stage.wn.de
amp-stage.wn.de
www.wn-jobs.de
amp-stage.wn.de
www.wn-jobs.de
amp-consent.desired.de
amp-stage.wn.de
amp-stage.wn.de
amp-consent.desired.de
westfalen-blatt.de
solutions.westfalen-blatt.de
amp-stage.wn.de
data-deb04a4388.westfalen-blatt.de
amp-stage.wn.de
amp-consent.desired.de
westfalen-blatt.de
amp-stage.wn.de
amp-consent.desired.de
amp-consent.desired.de
www.wn-jobs.de
amp-consent.desired.de
amp-consent.desired.de
amp-consent.desired.de
amp-stage.wn.de
amp-consent.desired.de
amp-stage.wn.de
amp-consent.desired.de
amp-consent.desired.de
westfalen-blatt.de
amp-stage.wn.de
amp-consent.desired.de
amp-consent.desired.de
*.westfalen-blatt.de
amp-stage.wn.de
westfalen-blatt.de
amp-stage.wn.de
solutions.westfalen-blatt.de
solutions.westfalen-blatt.de
*.westfalen-blatt.de
amp-stage.wn.de
www.wn-jobs.de
amp-consent.desired.de
amp-consent.familie.de
westfalen-blatt.de
amp-consent.desired.de

Certificate

The complete raw certificate details for a.westfalen-blatt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkpSojwxkJghTrlaDkhO
1P6ROt4vc4OLS4XGIqifhoyNHtRmO3z4nU7bfTydZefosrzmTLENVsXnV7CR35q2
ON6QmF0qeU63Ci4zcGDj1OZKEEDMdsJTdKxz/gCZfmjhpapIlIYgE9Fb54exJbkY
ecU4nkH/DBnByrn5W2Sce4ZHXbCDJYB7vIOG1JuZGtaSAidFrMYQRKVNhLvHNpdi
f9iRpVJp6n3KI8AGmwVNoYwVEnpNBNJPns6FWFjjx4iwYPI+6BhkcG133AL7k3gr
S+5i5g/MxOBBUvSzfWXXdx5rESjFEEv8DfAMXCiHPBi/1NXfbdfVIbA2ZC3uVGzz
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321769243194408779460454987789859317020929
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-20 09:08:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 09:08:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'a.westfalen-blatt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18467442457774801125950175718582200328468540743128893217664114701508567721272615206643132663771297845065272518553204924234526728174999323583317942736817842218227701771639038307829369680399887337406451796112529148832511592925291736178169976394369549023861823793964406666378733506588025336153191824399406211616635218171764182306859014559896161125290233350429950425760507577615246551968193578614462967018362630000956345172532280355065317237155190186690644218978226313467497641965683442888459701699223512082219590036999201373939726475769143815006055450087010202922763739691119500289389060881074242062126113502630507246581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							67d435981bcda4b29d480def9c199a7bfcebce0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1371 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.westfalen-blatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.wn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drco.ga.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.abendzeitung-muenchen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.allgemeine-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.bnn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.borkumer-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.dattelner-morgenpost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.davoserzeitung.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.dorstenerzeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.echo-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.freiepresse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.ga-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.gn-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.haller-kreisblatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.halternerzeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.hellwegeranzeiger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.hertener-allgemeine.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.idowa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.linthzeitung.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.lr-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.lz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.marler-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.mittelhessen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.moz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.mt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.muensterlandzeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.nn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.nordbayern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.nw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.on-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.oz-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.recklinghaeuser-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.ruhrnachrichten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.saarbruecker-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.stimberg-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.suedostschweiz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.swp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.tt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.vol.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.volksfreund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.waltroper-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.weser-kurier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.wiesbadener-kurier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.wnoz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drv.badische-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.aachener-nachrichten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.aachener-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.bgland24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.chiemgau24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.hz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.innsalzach24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.mangfall24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.medienhausaachen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.ovb-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.rheinpfalz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.rosenheim24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.saechsische.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.schickler.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.wasserburg24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking.kreiszeitung-wesermarsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking.nordsee-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking.zevener-zeitung.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b4c8ef54f0000040300463044022066d7ad4f5513d5d2ee0b2f8c73cbf36a3a863416959d8fcdca86585457b72265022009696d56256a6922af3d651caebf59fa20bf99c21e3a093424ff0c873c6bda2600750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b4c8ef58b000004030046304402202a1458db0610b8e6a2b83d1e2176d09d6dc795b8afd3f732a6869aa59a006cb90220067206a51995d978103ebf3969178a723bc86c908c7940526e942288318a68a2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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