baseendpoint.11freunde.de

Issued by R3

About this certificate

This digital certificate with serial number 03:72:97:f9:30:6d:c8:5a:04:0c:19:eb:00:4d:22:bc:58:77 was issued on by Let's Encrypt.

With 47 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=baseendpoint.11freunde.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:72:97:f9:30:6d:c8:5a:04:0c:19:eb:00:4d:22:bc:58:77
Serial Number (int): 300331054915802558757320104639207768348791
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 55:fa:12:09:98:2d:e5:19:ff:18:6b:df:f7:29:ff:2c:18:f5:b0:87
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 04:44:ce:6e:ac:93:3a:e1:a2:d1:25:fd:ca:5b:8d:58:4a:7c:22:c1
Fingerprint (sha256): 85:ae:62:96:8e:67:f7:5b:2a:a0:be:8a:6c:bd:18:2f:62:3e:e8:65:60:ac:e9:cf:1c:97:88:f3:74:33:0a:23

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate baseendpoint.11freunde.de

47

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for baseendpoint.11freunde.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

baseendpoint.11freunde.de
baseendpoint.art-aboclub.de
baseendpoint.art-archiv.de
baseendpoint.art-magazin.de
baseendpoint.b-eat-mag.de
baseendpoint.barbara.de
baseendpoint.beef.de
baseendpoint.brigitte-wir.de
baseendpoint.brigitte.de
baseendpoint.business-punk.com
baseendpoint.bym.de
baseendpoint.capital.de
baseendpoint.chefkoch.de
baseendpoint.couch-mag.de
baseendpoint.dogs-magazin.de
baseendpoint.dpv-service.de
baseendpoint.dpv.de
baseendpoint.einfach-weiterlesen.de
baseendpoint.eltern-family.de
baseendpoint.eltern.de
baseendpoint.essen-und-trinken.de
baseendpoint.gala.de
baseendpoint.geo-epoche.de
baseendpoint.geo.de
baseendpoint.grunerundjahr.de
baseendpoint.guido-magazin.de
baseendpoint.guj-direct.de
baseendpoint.guj-kids.de
baseendpoint.guj.de
baseendpoint.haeuser.de
baseendpoint.ideat-magazin.de
baseendpoint.livingathome.de
baseendpoint.meinabo.de
baseendpoint.nido.de
baseendpoint.pm-magazin.de
baseendpoint.salon-mag.de
baseendpoint.schoener-wohnen-kollektion.de
baseendpoint.schoener-wohnen.de
baseendpoint.schwangerschaft.de
baseendpoint.stern-crime.de
baseendpoint.stern.de
baseendpoint.urbia.de
baseendpoint.view-magazin.de
baseendpoint.vip.de
baseendpoint.vorname.com
baseendpoint.walden-magazin.de
baseendpoint.wohnklamotte.de

Other certificates including the domain name 11freunde.de

(limited to 100 certificates)
serviceportal.dpv.de
serviceportal.dpv.de
serviceportal.dpv.de
*.aboshop.11freunde.de
aboshop.11freunde.de
stage.serviceportal.dpv.de
aboshop.11freunde.de
dev.serviceportal.dpv.de
serviceportal.dpv.de
dev.serviceportal.dpv.de
serviceportal.dpv.de
derspiegel.eu
*.aboshop.11freunde.de
serviceportal.dpv.de
serviceportal.dpv.de
int.serviceportal.dpv.de
*.11freunde.de
*.11freunde.de
bilderwelt.11freunde.de
serviceportal.dpv.de
data-664e19af6d.11freunde.de
serviceportal.dpv.de
dev.serviceportal.dpv.de
aboshop.11freunde.de
serviceportal.dpv.de
dev.serviceportal.dpv.de
serviceportal.dpv.de
amp-manager-magazin-de.manager-magazin.de
aboshop.11freunde.de
aboshop.11freunde.de
int.serviceportal.dpv.de
*.11freunde.de
stage.serviceportal.dpv.de
tippspiel.11freunde.de
baseendpoint.11freunde.de
int.serviceportal.dpv.de
baseendpoint.11freunde.de
amp-manager-magazin-de.manager-magazin.de
serviceportal.dpv.de
www.11freunde.de
www.11freunde.de
serviceportal.dpv.de
baseendpoint.11freunde.de
stage.serviceportal.dpv.de
*.11freunde.de
*.aboshop.11freunde.de
stage.serviceportal.dpv.de
tippspiel-staging.11freunde.de
serviceportal.dpv.de
aboshop.11freunde.de
serviceportal.dpv.de
serviceportal.dpv.de
aktion.11freunde.de
shop.11freunde.de
serviceportal.dpv.de

*.11freunde.de
serviceportal.dpv.de
interred.11freunde.de
aboshop.11freunde.de
amp-manager-magazin-de.manager-magazin.de
serviceportal.dpv.de
*.11freunde.de
aboshop.11freunde.de
stage.serviceportal.dpv.de
tippspiel.11freunde.de
serviceportal.dpv.de
www.11freunde.de
dev.serviceportal.dpv.de
tippspiel.11freunde.de
*.cmk.iqdigital.de
*.aboshop.11freunde.de
aboshop.11freunde.de
aboshop.11freunde.de
data-d687fc47c0.11freunde.de
int.serviceportal.dpv.de
derspiegel.eu
www.11freunde.de
shop.food-magazine.de
int.serviceportal.dpv.de

Certificate

The complete raw certificate details for baseendpoint.11freunde.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12hVQsjaVVY3MEnRMYvL
ulIQ6beFHfQWnK1c8Ifj37g5u1pHDXXzcOXWYLMoRQSbiAyv6NgJyXHdqRBwJbp0
aEXOeKWpXWo+Zyn1xlYYxWYid315ocFWF/hUu9G0sPZF/uKMsHGnvF/MCJ5UjnbI
bFjIEjukZst1YI5inVRtQ4oXCnYkaab5n9HmvrdHKRLkkQ/khzaBU5cOLzG8qp5w
VdiYa4j1bqhBLjpe7OTf0+xJ67fGdehlBXumPk6FRn7ugGBJHZAScQZ79m0WHtQu
6GnJwvp217cr/JD9kC/Bjq6OYE8k2K2j/zmY6Rfy7UjW5bc5kN58Qa0s+WElpOA6
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300331054915802558757320104639207768348791
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-29 08:16:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-27 08:16:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'baseendpoint.11freunde.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27192684112319959398746484368891914167540442160238544069324095588218298614782401893358850974750741754635277407557152341200113620688057187775467447533650986306719299817024180102201639097968042741784706243684212409997228124172449119885478363452307631065325106450265932438639448625707533235625325996602787759360428416906998798267893693094140391364353769502194587660069875474436486339136332635272481710723518038061131361682053967498105684716323007101334070532615299896182511747618665553400280859343734326243223270707833490265207396514986269049650890013444845251047925309920985279619287753491227495500322885669911271586457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55fa1209982de519ff186bdff729ff2c18f5b087
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1305 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.11freunde.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.art-aboclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.art-archiv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.art-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.b-eat-mag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.barbara.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.beef.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.brigitte-wir.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.brigitte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.business-punk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.bym.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.capital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.chefkoch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.couch-mag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.dogs-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.dpv-service.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.dpv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.einfach-weiterlesen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.eltern-family.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.eltern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.essen-und-trinken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.gala.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.geo-epoche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.geo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.grunerundjahr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.guido-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.guj-direct.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.guj-kids.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.guj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.haeuser.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.ideat-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.livingathome.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.meinabo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.nido.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.pm-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.salon-mag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.schoener-wohnen-kollektion.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.schoener-wohnen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.schwangerschaft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.stern-crime.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.stern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.urbia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.view-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.vip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.vorname.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.walden-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseendpoint.wohnklamotte.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a4094cd04000004030047304502202fb470d031e71c1bea68cdde48a2522b44e54f9a1b70b4085ff9e2387fb4a6ab022100929aeea26e53520c6345c9128ac34d47cd59b8e1bbe5184ee43aebda7be357740077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a4094cd2500000403004830460221008d45a6a1e5cd5f83f1b040e0c4506b0317ad3b80eae42c2a8e48e083a4e4a3fe022100b6f07d354636c2d3fd14a2f4404ab56e0c163a11d778b65868433ee122eaa35f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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