bf-tools.net

Issued by R3

About this certificate

This digital certificate with serial number 03:1a:3d:56:da:2b:89:2c:ae:12:bf:4d:14:88:77:42:8d:3b was issued on by Let's Encrypt.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bf-tools.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1a:3d:56:da:2b:89:2c:ae:12:bf:4d:14:88:77:42:8d:3b
Serial Number (int): 270265733205512411898639324518563365162299
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 84:bd:91:b1:e7:cf:fb:64:cc:fc:31:7e:34:5d:e1:28:cf:d6:d8:46
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b9:f2:e3:c3:77:20:22:c8:a3:05:6f:4a:2a:e7:dd:39:a4:22:6b:f1
Fingerprint (sha256): 62:1f:a8:35:3e:f5:df:10:99:e1:57:55:25:85:56:df:17:cb:3c:b0:7b:28:06:36:b4:d6:f4:78:1f:2e:ca:8a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bf-tools.net

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bf-tools.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a-staging.bf-ad.net
a.bf-ad.net
a.bf-tools.net
admanager.conunity.io
article.bunte.de
article.cinema.de
article.finanzen100.de
article.fitforfun.de
article.netdoktor.de
article.netmoms.de
article.tvspielfilm.de
article.tvtoday.de
beta.corona-care.de
bf-tools.net
brokervergleich.finanzen100.de
cardscout.de
depotvergleich.kleingeldhelden.com
emq.bf-tools.net
etf-sparplan.finanzen100.de
fol-staging.cardscout.de
m-article.fitforfun.de
m-article.netdoktor.de
m-article.tvspielfilm.de
m-article.tvtoday.de
m-staging.cardscout.de
rtt.bf-tools.net
stg-brokervergleich.finanzen100.de
stg-depotvergleich.kleingeldhelden.com
stg-etf-sparplan.finanzen100.de
stg-onvista.depot.bestcheck.de
stg-onvista.festgeld.bestcheck.de
stg-onvista.tagesgeld.bestcheck.de
user-rating-dev.burda-forward.de
user-rating-stg.burda-forward.de
user-rating-v2-dev.burda-forward.de
user-rating-v2-stg.burda-forward.de
user-rating-v2.burda-forward.de
user-rating.burda-forward.de
v.bunte.de
v.burda-forward.de
v.cinema.de
v.finanzen100.de
v.fitforfun.de
v.mydogplanner.com
v.mydogplanner.de
v.netmoms.de
v.pet-forward.com
v.pet-forward.de
v.petforward.de
v.tvspielfilm.de
v.tvtoday.de
web-vitals.bfops.io
welt-staging.cardscout.de
welt.cardscout.de
widget-stg.bunte.de
widget-stg.fitforfun.de
widget-stg.netmoms.de
widget-stg.tvspielfilm.de
widget.bunte.de
widget.fitforfun.de
widget.netmoms.de
widget.tvspielfilm.de
widgets-dev.burda-forward.de
widgets-stg.burda-forward.de
widgets.burda-forward.de
www-staging.cardscout.de
www.cardscout.de
www.corona-care.de

Other certificates including the domain name bf-tools.net

(limited to 100 certificates)
bf-tools.net
bf-tools.net
bf-tools.net
mds.bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
cont.bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
a.tfag.de
bf-tools.net
a.tfag.de
a.tfag.de
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
a.tfag.de
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
a.tfag.de
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
cont.bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
cont.focus.de
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
mds.bf-tools.net
bf-tools.net

Certificate

The complete raw certificate details for bf-tools.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUMZ3hNDLrpIoZiOc2RA
WWh5K395cTju2cGg1SpqB3+8q3cVSrH7aNzpZw1NpNeUT1H4O6umcaaoCXjs6RbS
6E1PeIEmv0Si0cFHSBFwCjK6AmcPmi0TQxFPJo5cS4TDqruqREM1JSkYrZZ9XjkC
gHAp79GGnMKX6Bk1D4upP25qSmLSNHzKkX/3kblIk3ac2iE3zEgKUWNp3bhXY8vN
o8IUK4EmoFPfjavM/MM3e/Ur/cPZN9RBhgsd44i3FBVHea42rX1CZPFmG/Ms1lY1
IHxOohTaI5x+VbXj0TKLa3Qr5vgukEDl5qKUVWnv3KhpjCzG+jzNDuW9ZwjAWEk+
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270265733205512411898639324518563365162299
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-24 13:26:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-25 13:26:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bf-tools.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19852502638121310719678699651459318356176288115806773304013853881559346506797238964456005936045364674353835322735435095367690041971951217811379513357102494879938122901944619190544152934904414741603758020842609715415155576026415305510713693781914550100805659040069303759049210903408897086707092471826156715040191538447166514393773234774662294750626628233949415296956578990627712416531089283703240861242952591898840474163220676783368011665477554294498660247381271382354894272452233862246963014493167587741988019551930066389204760478432826206073363356542878015677587621866009035237218566745570318804175709968706598158019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							84bd91b1e7cffb64ccfc317e345de128cfd6d846
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1602 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-staging.bf-ad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.bf-ad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admanager.conunity.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.bunte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.cinema.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.netdoktor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.tvspielfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.tvtoday.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.corona-care.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokervergleich.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depotvergleich.kleingeldhelden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emq.bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etf-sparplan.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fol-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-article.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-article.netdoktor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-article.tvspielfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-article.tvtoday.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtt.bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-brokervergleich.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-depotvergleich.kleingeldhelden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-etf-sparplan.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-onvista.depot.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-onvista.festgeld.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-onvista.tagesgeld.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating-dev.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating-stg.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating-v2-dev.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating-v2-stg.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating-v2.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.bunte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.cinema.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.mydogplanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.mydogplanner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.pet-forward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.pet-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.petforward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.tvspielfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.tvtoday.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-vitals.bfops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welt-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welt.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget-stg.bunte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget-stg.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget-stg.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget-stg.tvspielfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.bunte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.tvspielfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets-dev.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets-stg.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corona-care.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018683d1e3ae00000403004630440220116f03f1f2deffc6331a8c2f3e2055f8705657804162f83381a76c4ff42b578d0220182e1ccc5313b2a82f10f6671c21b62040d97252853b1e394b63cffcc43d03c40076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018683d1e3d6000004030047304502201acdbd1e90c39a787fe0bf738fce25dac6a21774c00eff491c3caadba99fe1b1022100e2a7eb7ad5b4aa8349d0abbd3076a4c6a96048148c038e3627b24e7e3d541ff1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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