emm.sis-schwerin.de

Issued by StartCom BR SSL ICA

About this certificate

This digital certificate with serial number 45:64:52:d8:9e:98:6d:61 was issued on by StartCom CA.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=emm.sis-schwerin.de,C=DE

StartCom CA

Organization: StartCom CA
Organization unit: StartCom Certification Authority
Country: ES

This certificate has expire since

Certificate Details

Serial Number (hex): 45:64:52:d8:9e:98:6d:61
Serial Number (int): 5000212576615296353
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: d5:83:ba:64:94:87:bd:94:de:4f:90:87:04:03:26:37:24:e7:35:fa
AuthorityKeyId: fb:10:4b:95:b1:35:55:2f:bd:62:14:a9:52:02:12:0a:68:e8:12:42

Fingerprint (sha1): ea:e6:4b:1c:9c:dc:a6:90:64:88:57:92:00:bb:7c:47:cf:98:88:62
Fingerprint (sha256): 74:98:d7:88:93:60:5c:ff:fd:cb:88:62:c3:28:69:74:c4:ee:a0:94:b0:6f:75:08:23:c9:24:ca:36:66:0a:1b

Issuing Certificate URL: http://aia.startcomca.com/certs/sca.server1.crt

Revocation information

OCSP Server: http://ocsp.startcomca.com
CRL Distribution Point: http://crl.startcomca.com/sca-server1.crl

Check the revocation status for certificate emm.sis-schwerin.de

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for emm.sis-schwerin.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

emm.sis-schwerin.de
emmcs.sis-schwerin.de
emmseg.sis-schwerin.de
emmctr.sis-schwerin.de
emmtr.sis-schwerin.de

Other certificates including the domain name sis-schwerin.de

(limited to 100 certificates)
cag3.sis-schwerin.de
mobil.sis-schwerin.de
sis-schwerin.de
emmtest.sis-schwerin.de
sis-schwerin.de
sslvpn.sis-schwerin.de
sslvpn.sis-schwerin.de
sis-schwerin.de
mgw2.sis-schwerin.de
cag1.sis-schwerin.de
sis-schwerin.de
sis-schwerin.de
sslvpn.sis-schwerin.de
sis-schwerin.de
piwik.sis-schwerin.de
ssl-vpn.sis-schwerin.de
sslvpn.sis-schwerin.de
www.sis-schwerin.de
www.sis-schwerin.de
www.sis-schwerin.de
webmail.sis-schwerin.de
mgw1.sis-schwerin.de
*.sis-schwerin.de
www.sis-schwerin.de
sslvpn.sis-schwerin.de
*.sis-schwerin.de
sslvpn.sis-schwerin.de
sis-schwerin.de
sis-schwerin.de
*.sis-schwerin.de
sis-schwerin.de
mobil.sis-schwerin.de
cag3.sis-schwerin.de
emm.sis-schwerin.de
piwik.sis-schwerin.de
www.sis-schwerin.de
sslvpn.sis-schwerin.de
mgw1.sis-schwerin.de
mgw1.sis-schwerin.de
piwik.sis-schwerin.de
webmail.sis-schwerin.de
cag3.sis-schwerin.de
wlanportal.sis-schwerin.de
webmail.sis-schwerin.de
webmail.sis-schwerin.de
sis-ksm-wlanportal.sis-schwerin.de
www.sis-schwerin.de
sis-schwerin.de
cag3.sis-schwerin.de
sis-schwerin.de
webmail.sis-schwerin.de
www.sis-schwerin.de
sis-schwerin.de
wlanportal.sis-schwerin.de
analytics.sis-schwerin.de
*.sis-schwerin.de
webmail.sis-schwerin.de
piwik.sis-schwerin.de

Certificate

The complete raw certificate details for emm.sis-schwerin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHMTCCBRmgAwIBAgIIRWRS2J6YbWEwDQYJKoZIhvcNAQELBQAwbDELMAkGA1UE
BhMCRVMxFDASBgNVBAoMC1N0YXJ0Q29tIENBMSkwJwYDVQQLDCBTdGFydENvbSBD
ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEcMBoGA1UEAwwTU3RhcnRDb20gQlIgU1NM
IElDQTAeFw0xNzA5MjExMTA0MTRaFw0xOTA5MjEwMzE0MDBaMCsxCzAJBgNVBAYT
AkRFMRwwGgYDVQQDDBNlbW0uc2lzLXNjaHdlcmluLmRlMIICIjANBgkqhkiG9w0B
AQEFAAOCAg8AMIICCgKCAgEAvQzhMr0JNMQMRP1sq8XYD5xaI6bkt0e3wQHchr19
qPwcv8Pb06pnM8qQLiYF1TOau6tmJKrW+PMLv3IUJvm3jgjDCb5wPhTBpNuiY2xk
nXqtdIXbKQDMMEue6Hyb7vdOp6TspCbzVQeEdA1q7QmTYuUsIo2/EhrDD2AwDeUZ
PR88/n8krHZtpE39eaGXQ1A8FY/lJjkYJS2YMgxk+ZHpKvTeCHBJR+rqLpVQaocY
WKRQghDbx3bWBBaSQY00VFmptBon6+Ur9DcX7NMmTc0HqD2fdPRLA1v9l3Qk17Zi
NvUzKY651l51oyyVHcR6/wOI8b7o58t0d7NT4jqr7Nm8t1WSgMaYRfmEFZDHdGjp
gKKjLM/ITXqr+fjqIrdl5jrWwGnTdLNzQtDiEpErKjW0mG6vppZuXcLdKCdIousN
bmU0I+zZZya9um3q+9yGIjReRIeMTQZwgiT1wZCfuKGwZB3M+LJAY4Q3+xTi+vNk
LiMbV9XbKHcu6X4NLV4Pnxxj8SAahGZ07+p7kilmkAxgozeWZdJczHM9uNUZrc4o
ge/mRdMJlLzv1RXQ1uOLk4V7CAlV37khiGZ7Vsd4BaHUdxOdxeek5CDWaFXB9H5v
8ETwbv7RFgaJNg38eIMyRv5dxRpD9jr4J7E2uIc7XKpMIeTpctSMr2iGB5C9pxXF
DyECAwEAAaOCAhYwggISMHMGCCsGAQUFBwEBBGcwZTA7BggrBgEFBQcwAoYvaHR0
cDovL2FpYS5zdGFydGNvbWNhLmNvbS9jZXJ0cy9zY2Euc2VydmVyMS5jcnQwJgYI
KwYBBQUHMAGGGmh0dHA6Ly9vY3NwLnN0YXJ0Y29tY2EuY29tMB0GA1UdDgQWBBTV
g7pklIe9lN5PkIcEAyY3JOc1+jAJBgNVHRMEAjAAMB8GA1UdIwQYMBaAFPsQS5Wx
NVUvvWIUqVICEgpo6BJCMFIGA1UdIARLMEkwDQYLKwYBBAGBtTcBAgMwOAYGZ4EM
AQIBMC4wLAYIKwYBBQUHAgEWIGh0dHA6Ly93d3cuc3RhcnRjb21jYS5jb20vcG9s
aWN5MDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jcmwuc3RhcnRjb21jYS5jb20v
c2NhLXNlcnZlcjEuY3JsMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAgYIKwYBBQUHAwEwfAYDVR0RBHUwc4ITZW1tLnNpcy1zY2h3ZXJpbi5kZYIV
ZW1tY3Muc2lzLXNjaHdlcmluLmRlghZlbW1zZWcuc2lzLXNjaHdlcmluLmRlghZl
bW1jdHIuc2lzLXNjaHdlcmluLmRlghVlbW10ci5zaXMtc2Nod2VyaW4uZGUwEwYK
KwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggIBAJCbmDOcRi7e5uhZ
m0yEPl3BfZoZxnbh41w1JrdoMUf2WkT4CJfr/JD5t1mRxVw/mhsXCHQ0X0h2+nrg
M7Ij7grPiZ9i7/BRf6T6A1BDDhgiWYy1M8BFK692fQUYFuk70ZPJl9Oy/0yqnWJB
DsnoTqUISdHdHygig/a1OShfC301UarHVaSpHVX8AEzhV/DgXoLq0nUgc0c/n5vR
qv8nr9CbhSyl5fy2/WGs8FVsvyL412LtVeC+PGQ2VVxMFFJMBBhxT0Bp0EFTxO3L
VtJFKDmPAb3u76jXht/wQTgQsixBZtjpv+XVonZG5U6LJdU4eP8e3JMJXxOqv6VH
MxauqL8Gcu1miNwjK4CrSLXXANkVFf6uDtr/TpmgdjEw0QUT/S2XZg4fZgFPv/vh
fhdMO9XOize+gams8RobxrYsxd0f2gaJ8SvQG5sdU97NvEHXGzMkFZkDcceBQqzz
wyXALsh5MHHBYP+1gFyhARZruN3YjtG90uxQux1uMXtrVpiYogyuREdG8eckRKqM
lw3WDoFj2ZA9nibgiMRg9FNuaygC4s95YS0DMNVUPmC/eGSC1LN9LWanvWf89w6q
GbYTNaLeiDSSWIipkNa0v4hzvg6TFJjH3IFx+xFOQ765HSDXGTOpHU+bJmIXcVp+
CJ2wmL6vHdcbcEp4XNsZZ8hQYO8v
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5000212576615296353
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'StartCom CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'StartCom BR SSL ICA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-21 11:04:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-21 03:14:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'emm.sis-schwerin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 771257980855701978078608019235903810785488033509465209152188828045679409852152792879304039841987410459072630704571027402785176465069513497110747492018376750689229261337639561205207188866249832108760262858590836689133631840367307197954743474526026868618139274510152686231287122717302522779453111219315773405435030192694754144580505221673874967188759024039870544438990539272908178493533803054926594840467222168218063586616151459021484241240956097432838780908148317780091576879812253840477040151673926753845651474992228596265709661920653722253867725416328183334107967133700268430169386280412862442151771807187639077925604821617990139916682281551934897337643582758677465197012600240565247916617216099952738305445990523368057501751705668534380191286374456807432662854385657735494444722177217416058795210333224004773797541169851156449605010388947136678823327916339507769562489697458307413486930028459971799740638468814550195412074059407424466164691702152055515715194534229732437137760037398741703573565328921966297107794256380608523813456982392467843226731170827459772395588849242823551169177060969170050471494867435783173403752718387901895432594091738083822916310594619759428462977327620469007727122216019987901077773816763182357823164193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startcomca.com/certs/sca.server1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startcomca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d583ba649487bd94de4f90870403263724e735fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fb104b95b135552fbd6214a95202120a68e81242
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startcomca.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startcomca.com/sca-server1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emm.sis-schwerin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emmcs.sis-schwerin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emmseg.sis-schwerin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emmctr.sis-schwerin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emmtr.sis-schwerin.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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