bfops.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ed:0b:5b:ab:4f:e9:e2:1c:da:01:38:dc:fb:3e:e7:10:63 was issued on by Let's Encrypt.

With 41 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bfops.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ed:0b:5b:ab:4f:e9:e2:1c:da:01:38:dc:fb:3e:e7:10:63
Serial Number (int): 341998876237134366948441489885415527092323
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c2:8d:8a:c3:24:1d:48:57:00:2d:1c:32:08:2b:8d:a9:70:7b:4c:ed
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b3:ac:51:41:d4:72:67:23:52:56:3b:e4:c2:1b:f7:ff:79:87:ce:58
Fingerprint (sha256): 6b:74:48:85:fa:5e:04:fc:db:45:81:77:19:33:da:ca:ad:86:16:0e:c4:88:a6:b7:ab:f7:5e:3d:18:ec:b1:e7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bfops.io

41

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bfops.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adtm.bestcheck.de
bc-api.bestcheck.de
bestcheck.de
bfops.io
biz01.chipimages.de
biz02.chipimages.de
biz03.chipimages.de
biz04.chipimages.de
biz05.chipimages.de
biz06.chipimages.de
cdn.bestcheck.de
chip01.chipimages.de
chip02.chipimages.de
chip03.chipimages.de
chip04.chipimages.de
chip05.chipimages.de
chip06.chipimages.de
deals.bestcheck.de
efahrer.com
efahrer.de
im-dev.contentlounge.net
im-stage.contentlounge.net
im.contentlounge.net
onvista-depot.bestcheck.de
onvista-festgeld.bestcheck.de
onvista-tagesgeld.bestcheck.de
pn-staging.bestcheck.de
pn.bestcheck.de
redirect.bestcheck.de
rest.generator.chip.de
services-staging.bestcheck.de
services.bestcheck.de
stg-bc-api.bestcheck.de
stg-cdn.bestcheck.de
tools.c.de
www-staging.bestcheck.de
www.bestcheck.de
www.efahrer.com
www.efahrer.de
x-staging.bestcheck.de
x.bestcheck.de

Other certificates including the domain name bfops.io

(limited to 100 certificates)
regional.bf-regioccms-development.aws.bfops.io
*.bf-nativedashboard-development.aws.bfops.io
*.bf-admanager-dr.aws.bfops.io
bfops.io
*.bf-cpx-staging.aws.bfops.io
*.bf-onelogin-dr.aws.bfops.io
bf-tools.net
*.bf-folcore-development.aws.bfops.io
bfops.io
bfops.io
bfops.io
cat-front-api.bf-personalize-development.aws.bfops.io
*.bf-contentlounge-tools.aws.bfops.io
bfops.io
*.bf-onelogin-staging.aws.bfops.io
*.bf-trackalo-staging.aws.bfops.io
*.bf-cpx-production.aws.bfops.io
*.bf-operations-sandbox.aws.bfops.io
*.bf-netdoctor-development.aws.bfops.io
bfops.io
*.bf-tvspielfilm-staging.aws.bfops.io
*.bf-datalake-staging.aws.bfops.io
*.bf-folcore-dr.aws.bfops.io
bfops.io
*.bf-chipproduct-production.aws.bfops.io
bf-tools.net
*.bf-poc-development.aws.bfops.io
bf-tools.net
*.bf-onelogin-development.aws.bfops.io
bf-tools.net
*.bf-newswirefrontend-staging.aws.bfops.io
*.bf-newswirefrontend-dr.aws.bfops.io
*.bf-cpx-sandbox.aws.bfops.io
bf-tools.net
*.bf-poc-production.aws.bfops.io
*.bf-cpx-development.aws.bfops.io
*.bf-datalake-sandbox.aws.bfops.io
bfops.io
*.bf-contentplatform-dr.aws.bfops.io
bfops.io
bfops.io
cat-user-management-api.bf-personalize-development.aws.bfops.io
*.bf-chipwidgets-dr.aws.bfops.io
*.bf-folapp-production.aws.bfops.io
*.bf-honeyfactory-production.aws.bfops.io
*.bf-datalake-production.aws.bfops.io
bfops.io
bfops.io
*.bf-honeyfactory-production.aws.bfops.io
*.bf-onelogin-tools.aws.bfops.io
*.bf-bcfinancetools-sandbox.aws.bfops.io
*.bf-contentlounge-staging.aws.bfops.io
*.bf-cpx-production.aws.bfops.io
bfops.io
cognito.bf-kaufberatungsseotool-development.aws.bfops.io
news-feed-front-api.bf-personalize-development.aws.bfops.io
bfops.io
bf-tools.net
*.bf-admanager-sandbox.aws.bfops.io
bfops.io
*.bf-chipwidgets-tools.aws.bfops.io
bf-tools.net
*.bf-admanager-development.aws.bfops.io
bfops.io
bfops.io
gitlab.bfops.io
bfops.io
*.bf-contentassembler-dr.aws.bfops.io
*.bf-datalake-dr.aws.bfops.io
*.bf-datalake-development.aws.bfops.io
*.bf-bcfinancetools-production.aws.bfops.io
news-feed-front-api.bf-personalize-development.aws.bfops.io
bf-tools.net
cat-fetcher-api.bf-personalize-development.aws.bfops.io
news-feed-front-api.bf-personalize-development.aws.bfops.io
cat-fetcher-api.bf-personalize-development.aws.bfops.io
bf-tools.net
*.bf-operations-development.aws.bfops.io
bfops.io
bfops.io
*.bf-bcfinancetools-staging.aws.bfops.io
*.bf-powerdns-tools.aws.bfops.io
*.bf-poc-development.aws.bfops.io
*.bf-netdoctor-sandbox.aws.bfops.io
*.bf-bcfinancetools-tools.aws.bfops.io
*.bf-trackalo-dr.aws.bfops.io
*.bf-admanager-production.aws.bfops.io
*.bf-admanager-dr.aws.bfops.io
bf-tools.net
*.bf-trackalo-tools.aws.bfops.io
*.bf-bcfinancetools-tools.aws.bfops.io
cat-fetcher-api.bf-personalize-development.aws.bfops.io
*.bf-poc-sandbox.aws.bfops.io
*.bf-newswirefrontend-staging.aws.bfops.io
*.bf-nativedashboard-sandbox.aws.bfops.io
*.bf-honeyfactory-dr.aws.bfops.io
bf-tools.net
*.bf-automizeddatavideos-dr.aws.bfops.io
bfops.io
regional.bf-regioccms-staging.aws.bfops.io

Certificate

The complete raw certificate details for bfops.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5h9jM7bcnHgu/Z4vm2aO
NCuZIPTwBSnog1cCO0t2OWy2orTi7lGdfQ3SfpsvyLDCUv28/MTEJuu6bHtNSCih
Oc1DuyhsLxGY3LsMS4dFmhoumVdyISDh20IeXVHZydZm47DsAK/Z/YOwDsiAT9p4
KJf3ngC2gaDADvjKNxNEb+2GlpvVOTtHqqQ0KEGD1/ZA13j/znwRPLDQVQ/e1RiN
rHR5y+ivgBkm2GfEzuO/6L4HjlFNgaDKUnWNSoDtxFj5I3haNImYiBJQ1ReuHAZL
na+guVkmFnGx3lDn/GcCAO9V3AMZlig0HMLQQ0uPgcTSIxugBlHzvtO5N/cbTVAb
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341998876237134366948441489885415527092323
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-24 13:14:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-22 13:14:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bfops.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29050287899177063299365264722115692453649488248320905506455374559326321251902877683426415613911100115820594124645834004361979981835405524267664500038660654597846299811025097012158960643691556782393799447903548910618964475250234472456884977715937996584866691773586423070958120709696173358700746207143769401758095721024302826404436628260950293388196899080866992607077934891853873421390766267445190839708261789761761337046482912625412872304642488836209721187317299342040535757665690058713458488439444636525402959161273476291427677309567458954713096123954299222467796474053544967565955855450009930825522774803149482892243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c28d8ac3241d4857002d1c32082b8da9707b4ced
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (875 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adtm.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bc-api.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biz01.chipimages.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biz02.chipimages.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biz03.chipimages.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biz04.chipimages.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biz05.chipimages.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biz06.chipimages.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chip01.chipimages.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chip02.chipimages.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chip03.chipimages.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chip04.chipimages.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chip05.chipimages.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chip06.chipimages.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deals.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efahrer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efahrer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'im-dev.contentlounge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'im-stage.contentlounge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'im.contentlounge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onvista-depot.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onvista-festgeld.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onvista-tagesgeld.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pn-staging.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pn.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirect.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rest.generator.chip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-staging.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-bc-api.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-cdn.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tools.c.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-staging.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.efahrer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.efahrer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x-staging.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x.bestcheck.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000175fa9b5a2700000403004630440220657156a7f6c0368ae5730bf7b480637251b0a82eae881c8b4481116cb993175102204187aee9f93086e50d4b50034efc1e9e797b815c11fb867b067a2feceb0350de007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000175fa9b5a26000004030046304402203e0ff544b08691d6e6534de3324d7cc263edc10e794fc0eeff1923fefd35d3fb02200c75a904e59632a4e7d3f041f6d1e405c568e2a4d5da636ac22c5617fe8968cf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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