emag.otz.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:20:f0:9b:32:f8:b5:6f:73:3b:d0:1f:8a:32:5d:3f:0d:9c was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=emag.otz.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:20:f0:9b:32:f8:b5:6f:73:3b:d0:1f:8a:32:5d:3f:0d:9cSerial Number (int): 359658000027337686132943139258775732424092
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 7f:2a:4f:b3:36:d3:0b:df:23:e7:3c:4b:b4:4a:43:99:04:fa:24:41
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 97:d3:f5:31:1c:65:0c:bb:e0:57:aa:13:8a:9c:9c:4a:50:c5:0c:54
Fingerprint (sha256): 5a:a4:58:7a:5f:7c:30:98:9a:de:e3:11:ea:21:f7:17:df:e4:45:ab:c8:0e:ef:22:64:f3:0d:fb:f0:24:ce:be
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate emag.otz.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for emag.otz.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
emag.otz.de
Other certificates including the domain name otz.de
(limited to 100 certificates)
sso.zgt.de
*.otz.de
origin-interaktiv.fnki.de
reader.otz.de
trauer.otz.de
www.funkedigital.de
trauer.otz.de
*.funkemedien.de
sso.zgt.de
dev3.aws.funkedigital.de
www.funkedigital.de
funkedigital.de
trauer.otz.de
anzeigen.thueringer-allgemeine.de
dev2.aws.funkedigital.de
*.fabo-live.funkemedien.de
voting.thueringer-allgemeine.de
anzeigen.thueringer-allgemeine.de
www.funkedigital.de
waz.de
trauer.otz.de
www.funkedigital.de
emag.otz.de
trauer.otz.de
trauer.otz.de
www.funkedigital.de
sso.funkemedien.de
dev1.aws.funkedigital.de
*.thueringer-allgemeine.de
reader.otz.de
otz.de
origin-interaktiv.fnki.de
*.funkemedien.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
*.otz.de
www.funkedigital.de
trauer.otz.de
*.waz.de
anzeigen.funkemedien.de
sso.zgt.de
sso.zgt.de
anzeigenbuchung-in-thueringen.de
www.funkedigital.de
*.fabo-live.funkemedien.de
*.funkemedien.de
www.funkedigital.de
anzeigen.thueringer-allgemeine.de
dev2.aws.funkedigital.de
origin-interaktiv.fnki.de
uat.aws.bildderfrau.de
*.funkemedien.de
emag.otz.de
*.thueringer-allgemeine.de
funkedigital.de
uat.aws.bildderfrau.de
dev5.aws.funkedigital.de
trauer.otz.de
dev2.aws.funkedigital.de
*.waz.de
reader.otz.de
img.otz.de
uat.aws.bildderfrau.de
www.funkedigital.de
funkedigital.de
www.funkedigital.de
sso.zgt.de
interaktiv.derwesten.de
anzeigen.meinanzeiger.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
dev1.aws.funkedigital.de
anzeigen.thueringer-allgemeine.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
trauer.otz.de
*.otz.de
trauer.otz.de
www.funkedigital.de
www.funkedigital.de
anzeigen.funkemedien.de
anzeigen.otz.de
www.funkedigital.de
img.otz.de
sso.zgt.de
trauer.otz.de
emag.otz.de
*.fabo-live.funkemedien.de
*.funkemedien.de
funkedigital.de
funkedigital.de
*.waz.de
funkedigital.de
anmeldung.otz.de
funkedigital.de
*.waz.de
*.otz.de
origin-interaktiv.fnki.de
reader.otz.de
trauer.otz.de
www.funkedigital.de
trauer.otz.de
*.funkemedien.de
sso.zgt.de
dev3.aws.funkedigital.de
www.funkedigital.de
funkedigital.de
trauer.otz.de
anzeigen.thueringer-allgemeine.de
dev2.aws.funkedigital.de
*.fabo-live.funkemedien.de
voting.thueringer-allgemeine.de
anzeigen.thueringer-allgemeine.de
www.funkedigital.de
waz.de
trauer.otz.de
www.funkedigital.de
emag.otz.de
trauer.otz.de
trauer.otz.de
www.funkedigital.de
sso.funkemedien.de
dev1.aws.funkedigital.de
*.thueringer-allgemeine.de
reader.otz.de
otz.de
origin-interaktiv.fnki.de
*.funkemedien.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
*.otz.de
www.funkedigital.de
trauer.otz.de
*.waz.de
anzeigen.funkemedien.de
sso.zgt.de
sso.zgt.de
anzeigenbuchung-in-thueringen.de
www.funkedigital.de
*.fabo-live.funkemedien.de
*.funkemedien.de
www.funkedigital.de
anzeigen.thueringer-allgemeine.de
dev2.aws.funkedigital.de
origin-interaktiv.fnki.de
uat.aws.bildderfrau.de
*.funkemedien.de
emag.otz.de
*.thueringer-allgemeine.de
funkedigital.de
uat.aws.bildderfrau.de
dev5.aws.funkedigital.de
trauer.otz.de
dev2.aws.funkedigital.de
*.waz.de
reader.otz.de
img.otz.de
uat.aws.bildderfrau.de
www.funkedigital.de
funkedigital.de
www.funkedigital.de
sso.zgt.de
interaktiv.derwesten.de
anzeigen.meinanzeiger.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
dev1.aws.funkedigital.de
anzeigen.thueringer-allgemeine.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
trauer.otz.de
*.otz.de
trauer.otz.de
www.funkedigital.de
www.funkedigital.de
anzeigen.funkemedien.de
anzeigen.otz.de
www.funkedigital.de
img.otz.de
sso.zgt.de
trauer.otz.de
emag.otz.de
*.fabo-live.funkemedien.de
*.funkemedien.de
funkedigital.de
funkedigital.de
*.waz.de
funkedigital.de
anmeldung.otz.de
funkedigital.de
*.waz.de
Certificate
The complete raw certificate details for emag.otz.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgISBCDwmzL4tW9zO9AfijJdPw2cMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MTEwNDA1MDlaFw0x OTA3MTAwNDA1MDlaMBYxFDASBgNVBAMTC2VtYWcub3R6LmRlMIICIjANBgkqhkiG 9w0BAQEFAAOCAg8AMIICCgKCAgEAvua1bWpR69HrOnpM+qh3Dmzdp7OQU1nGKW91 2IkS0Vkri3li6WyD1ZWeE7BabpiJYHNurYJtshgSe2P/+Rt00CAI1tTUtEYvTu4l j6KLySbsKaAEczrmkil2XTuFiGBWRtgIhc1v2M97RwW2OErm0ACmECJFjt5xEiAV V1GvvUkCV2xMp4Btt6jVgIfbT4hpC13lf4RWi0KbvUi9XITetf1RpugmKiPyAjqo 6WauVOTiYkvhCH+uKdrIvVY+qMIsfGN3QFmsl6OGYDDPY6IwyjT/atMetfKT0hjw hRrC93WUA9KPfVxDNC2hyPIs0ymJloM94llcwb/drAh8LG6LAW/Xi/bq78WJUI4X qFCcBSP4LlJ+9R9csX2VjdC+R7Cj//7YuielitaVif1yPD0NFC+qu16/hV3YwFNl MVkU+YSJNE/7ZBVzTGvQEZ95JZT2gid6LZOynysVOC4Exc31rNVg5H3nS5ZmolJw m5vCnvC+6l2pzbZDxCV1ZLKY2sEQDaMtzszQqBvOqiHjL1ha7O7DgOgwoUfSHc4J pHqg9NPHRPaEIrZwZiRJymPSYMCJLTvLxMq23YIVb68id7E3ItNGl1CLxyxONlZs GoOLfGmL7UOCXkPgHz0yavGNNAziDVNSfu2i3mw2jajFl+NSIU99R8rGVORXcgJ2 zNebbecCAwEAAaOCAmEwggJdMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUfypPszbT C98j5zxLtEpDmQT6JEEwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu bGV0c2VuY3J5cHQub3JnLzAWBgNVHREEDzANggtlbWFnLm90ei5kZTBMBgNVHSAE RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2 AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABagrJDXoAAAQDAEcw RQIhAJuMBO8nZ3tZR5vttFqPCIVglrH8pvx1uOYyuieEWnkwAiAT/q7udc+fqnWb VMLO2Y6MeiBFEIm1WO8NbmWr1T9blQB3AGPy283oO8wszwtyhCdXazOkjWF3j711 pjixx2hUS9iNAAABagrJD1sAAAQDAEgwRgIhAKg330XYWiM+GOWBygFfnBcbMrhK VBEmJ3E87avyMM73AiEA1Bc3DGGBqUh0f23EYgHkkoPc2SnCnZz1HJEaULvFHQsw DQYJKoZIhvcNAQELBQADggEBAFmP9K0acgYCvTlvkTbxOoRxPIa2nEFRhcLRsHby 3fWCfoThUAVRy1u04L4qjNINxUC+bFBDGWB8kngJ4ZDVOTzWflNb5B4AQ994PU7g elc8qH55LURyoMec7oVLicas5ZQXDyrIGIpsVc2wHJ6BRH99qvRO94Ur+DKHrPsg DmUPKGdrrkZqd5jBHfq7EsPyrmMF44oMA9T5BJr/109y1KAe7R4bLV+9yXUXuQRe E7XiGq6rgd41AFtrKD8uiJ6kms0E2tZ7UYi8JjzBMYSxH0QVldfLSbLeWj2It3N3 oCbnKfE9JYH1kdNK3p8iTUEwFc7cqej7fkb/1bmCpwlhs+4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvua1bWpR69HrOnpM+qh3 Dmzdp7OQU1nGKW912IkS0Vkri3li6WyD1ZWeE7BabpiJYHNurYJtshgSe2P/+Rt0 0CAI1tTUtEYvTu4lj6KLySbsKaAEczrmkil2XTuFiGBWRtgIhc1v2M97RwW2OErm 0ACmECJFjt5xEiAVV1GvvUkCV2xMp4Btt6jVgIfbT4hpC13lf4RWi0KbvUi9XITe tf1RpugmKiPyAjqo6WauVOTiYkvhCH+uKdrIvVY+qMIsfGN3QFmsl6OGYDDPY6Iw yjT/atMetfKT0hjwhRrC93WUA9KPfVxDNC2hyPIs0ymJloM94llcwb/drAh8LG6L AW/Xi/bq78WJUI4XqFCcBSP4LlJ+9R9csX2VjdC+R7Cj//7YuielitaVif1yPD0N FC+qu16/hV3YwFNlMVkU+YSJNE/7ZBVzTGvQEZ95JZT2gid6LZOynysVOC4Exc31 rNVg5H3nS5ZmolJwm5vCnvC+6l2pzbZDxCV1ZLKY2sEQDaMtzszQqBvOqiHjL1ha 7O7DgOgwoUfSHc4JpHqg9NPHRPaEIrZwZiRJymPSYMCJLTvLxMq23YIVb68id7E3 ItNGl1CLxyxONlZsGoOLfGmL7UOCXkPgHz0yavGNNAziDVNSfu2i3mw2jajFl+NS IU99R8rGVORXcgJ2zNebbecCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 359658000027337686132943139258775732424092 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-11 04:05:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-10 04:05:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'emag.otz.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778808972074760304287936937863713781487272783317832201673011865552617511475587892884527610123084511378300803650157342675438864081762000974233345642074163476256360347808156332337738437003730239069689142839381696053281150773063586873361751966439232163642679155047252639773485889469034291760102116089517036460309867774532474489165853660911654940158456603338555633851275763614576107889514528195521415678407427222436502794396661057839851870136815885559271714129753617351935776018169556209504959379039753433243842437856877446606625321690396145028410287531535051870629292506057048087344366431459341515708806201096416355582430562420856374136053966822437075464842599225744332742770378863528929249454064672229640236661136312016643756965240224622249188931020475014011018433789909552648766762126126544425447232625337327143219108549299267937893793651759283610563661958828609772517653099804390891009675414311376678093937507669516901184315788877879340819148362162390609147366841567492900870357025169670802425734199545900742133629867646163629866577010011725258865705716739375656143400298043059597444671097886492372608004681827515920435506021073854628824482554542434146681221811967034050073167091470675741073249610757402736562567623321810043045375463 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7f2a4fb336d30bdf23e73c4bb44a439904fa2441 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emag.otz.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a0ac90d7a00000403004730450221009b8c04ef27677b59479bedb45a8f08856096b1fca6fc75b8e632ba27845a7930022013feaeee75cf9faa759b54c2ced98e8c7a20451089b558ef0d6e65abd53f5b9500770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a0ac90f5b0000040300483046022100a837df45d85a233e18e581ca015f9c171b32b84a54112627713cedabf230cef7022100d417370c6181a948747f6dc46201e49283dcd929c29d9cf51c911a50bbc51d0b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00598ff4ad1a720602bd396f9136f13a84713c86b69c415185c2d1b076f2ddf5827e84e1500551cb5bb4e0be2a8cd20dc540be6c504319607c927809e190d5393cd67e535be41e0043df783d4ee07a573ca87e792d4472a0c79cee854b89c6ace594170f2ac8188a6c55cdb01c9e81447f7daaf44ef7852bf83287acfb200e650f28676bae466a7798c11dfabb12c3f2ae6305e38a0c03d4f9049affd74f72d4a01eed1e1b2d5fbdc97517b9045e13b5e21aaeab81de35005b6b283f2e889ea49acd04dad67b5188bc263cc13184b11f441595d7cb49b2de5a3d88b77377a026e729f13d2581f591d34ade9f224d413015cedca9e8fb7e46ffd5b982a70961b3ee