www.zapfinhd.de
Issued by StartCom Class 1 DV Server CA
About this certificate
This digital certificate with serial number 3e:95:a9:d9:4c:17:6c:1d:4f:1b:31:b8:9d:81:fa:05 was issued on by StartCom Ltd..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.zapfinhd.de,C=DE
StartCom Ltd.
Organization:
StartCom Ltd.
Organization unit: StartCom Certification Authority
Organization unit: StartCom Certification Authority
Country:
IL
This certificate has expire since
Certificate Details
Serial Number (hex): 3e:95:a9:d9:4c:17:6c:1d:4f:1b:31:b8:9d:81:fa:05Serial Number (int): 83189232913869932760859280750655175173
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: 56:45:1c:89:c0:1b:9c:78:02:44:46:07:a1:c2:15:a6:7d:1c:5f:a1
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af
Fingerprint (sha1): ae:e0:d6:87:bc:59:3e:f3:63:23:02:ad:46:b5:ff:c9:32:78:23:85
Fingerprint (sha256): 8a:4c:da:e3:5b:0d:7f:52:d4:e6:04:c9:c0:6c:64:b1:ee:e9:32:e2:fd:7e:52:af:98:03:c3:3c:70:18:87:6d
Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt
Revocation information
OCSP Server: http://ocsp.startssl.comCRL Distribution Point: http://crl.startssl.com/sca-server1.crl
Check the revocation status for certificate www.zapfinhd.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.zapfinhd.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.zapfinhd.de
zapfinhd.de
zapfinhd.de
Other certificates including the domain name zapfinhd.de
(limited to 100 certificates)
www.zapfinhd.de
anmeldung.zapfinhd.de
cherry.dmath.uni-heidelberg.de
anmeldung.zapfinhd.de
cherry.dmath.uni-heidelberg.de
anmeldung.zapfinhd.de
zapfinhd.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
www.zapfinhd.de
zapfinhd.de
cherry.dmath.uni-heidelberg.de
cherry.dmath.uni-heidelberg.de
cherry.dmath.uni-heidelberg.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
cherry.dmath.uni-heidelberg.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
www.zapfinhd.de
anmeldung.zapfinhd.de
cherry.dmath.uni-heidelberg.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
cherry.dmath.uni-heidelberg.de
anmeldung.zapfinhd.de
cherry.dmath.uni-heidelberg.de
anmeldung.zapfinhd.de
zapfinhd.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
www.zapfinhd.de
zapfinhd.de
cherry.dmath.uni-heidelberg.de
cherry.dmath.uni-heidelberg.de
cherry.dmath.uni-heidelberg.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
cherry.dmath.uni-heidelberg.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
www.zapfinhd.de
anmeldung.zapfinhd.de
cherry.dmath.uni-heidelberg.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
anmeldung.zapfinhd.de
Certificate
The complete raw certificate details for www.zapfinhd.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIH8TCCBtmgAwIBAgIQPpWp2UwXbB1PGzG4nYH6BTANBgkqhkiG9w0BAQsFADB4 MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMg U3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxJjAkBgNVBAMTHVN0YXJ0 Q29tIENsYXNzIDEgRFYgU2VydmVyIENBMB4XDTE2MTExNjExMDY0MFoXDTE5MTEx NjExMDY0MFowJzELMAkGA1UEBhMCREUxGDAWBgNVBAMMD3d3dy56YXBmaW5oZC5k ZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMqGeHiOwVodGMC4cbsx RMvuHyPYrtnTgMXWO8wiedJHmqe0FrEx9pB/F6MuyE5eVwInojmxGh0V2JCkVBDn 3oaSibP57tiNcze1bol53741weiYGsi1DMbWBOd3Ze37AwTYPAbR1AHlB+xQk/Er jV66YQNsI1noRsXXwTWU6v5O5NkMzFCWDLviGpSXxMWk5gzEh4zRFe22dwdk4lfV v1ToBuWRwJgRgmAi+Es7fJuGMr7ipaT/zVRcz0cgp2YsI7PxB8r4xM4/4jpa153t AHyTYyuGse4DkqMpqL5KWNKuDk9wu98hCxKWmL9LjfjV9PRp6WIkGjkmHjH45Vg9 w5LrQQ7KZQZ7qZeYNHTXmVOXt0ZYoFFuuKGecPu4cYmPe85UCmDPEMS/xEnDzbj9 zqUsGgFMo8xGatqdlSAd3jmtrPEdzeJuH4fX5rIj3mlXQ0YmggQTbwVE/5mah+hv Z7tr9GIOxVqjlNHU3ELn1JKhz4JYb70FuI4PYmvtPzdE96fz9Dp+nN7BYAoX9Kkn J+ENx2PgtRnOdk/GaYyEPtM2u6Jd2h8kJ9CWKBBHK7bFTASGoz3Om5B2CNc3Ibr4 GX5tM10cgtq4Rwe837O8kWx8IcLjxTUg+ZeGzUVIZdJeKGBB0SiUetjMjxJ7XKL+ QZu5Ancdty3EaqfGCVgwerIrAgMBAAGjggPGMIIDwjAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMAkGA1UdEwQCMAAwHQYDVR0O BBYEFFZFHInAG5x4AkRGB6HCFaZ9HF+hMB8GA1UdIwQYMBaAFNeRTgHEsL/4yGeT RJznM/qtkwyvMG8GCCsGAQUFBwEBBGMwYTAkBggrBgEFBQcwAYYYaHR0cDovL29j c3Auc3RhcnRzc2wuY29tMDkGCCsGAQUFBzAChi1odHRwOi8vYWlhLnN0YXJ0c3Ns LmNvbS9jZXJ0cy9zY2Euc2VydmVyMS5jcnQwOAYDVR0fBDEwLzAtoCugKYYnaHR0 cDovL2NybC5zdGFydHNzbC5jb20vc2NhLXNlcnZlcjEuY3JsMCcGA1UdEQQgMB6C D3d3dy56YXBmaW5oZC5kZYILemFwZmluaGQuZGUwIwYDVR0SBBwwGoYYaHR0cDov L3d3dy5zdGFydHNzbC5jb20vMFEGA1UdIARKMEgwCAYGZ4EMAQIBMDwGCysGAQQB gbU3AQIFMC0wKwYIKwYBBQUHAgEWH2h0dHBzOi8vd3d3LnN0YXJ0c3NsLmNvbS9w b2xpY3kwggH4BgorBgEEAdZ5AgQCBIIB6ASCAeQB4gB2ADS7atbD35wD7qikmf94 kUhsnV5crJLQH3v9G84Z20jvAAABWGz8Sd4AAAQDAEcwRQIhAJS4GXVKlbSIETqq VHW26bxUqJ2eCNewZh5lyFUH2wotAiAOIll7WNyRB1Rr1mEqQn17t2ult5Q31h7o GOrldCzGVwB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABWGz8 UekAAAQDAEcwRQIga9XvTUtVk+YWr1bcoG3JVxvkPE8BdPwhzGlFL9vN0S8CIQCF Yu7mu7KFMLxg0h+qGLqPq4xInucPvu/KYJA7wyY/JgB3AO5Lvbd1zmC64UJpH6vh nmajD35fsHLYgwDEe4l6qP3LAAABWGz8TQEAAAQDAEgwRgIhAKMBonFEfr/zY1+k tXEkMkYvB7McQt1+PgzRn4xWh4Z9AiEAhnXBmP5Y+eBKUl5w+G4nbyKWNuej+QGx z/vsHL4uNzAAdwBo9pj4H2SCvjqM7rkoHUz8cVFdZ5PURNEKZ6y7T0/7xAAAAVhs /ExiAAAEAwBIMEYCIQDRRNlP+WYEqTJr733AGT/OHXntEYr1NNzDyx18LuraXQIh AICm0nA5l1uAzsjcxZNebxlR/jVdrZuDhxsYltwQXxEjMA0GCSqGSIb3DQEBCwUA A4IBAQDB1m0MgQyvoyhv5k7k4SwlyVGp3W+TC4e6yGvP0mIqdoAdsGtOg0c6frD9 zgWjMWVdoQH/0OA1v2SNkEt95Iz0V/9l6w1MGKPKSbq8rs5wkQdLmJGRz5hSOs2r ogyCn97+odN+WgAg4onVJf7SnNP3hH2efqMq2rMXpqTuBitOOMvo9XtqwLnPlTVS jHkgVL0DvJOO8s1CLP7edvD5b6q9fJHcKEk2Pafs7cl6phuZ3m0vBCh17S/4o9Gw PSJjfNxId7cxnllIwc3+eSDaJvSBu1DAGxmu+qzEXGfPAEjAl/i/Hb6+9r8Xgjt1 vit++4OXxdDXC6eD93DGcs8e1x6n -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyoZ4eI7BWh0YwLhxuzFE y+4fI9iu2dOAxdY7zCJ50keap7QWsTH2kH8Xoy7ITl5XAieiObEaHRXYkKRUEOfe hpKJs/nu2I1zN7VuiXnfvjXB6JgayLUMxtYE53dl7fsDBNg8BtHUAeUH7FCT8SuN XrphA2wjWehGxdfBNZTq/k7k2QzMUJYMu+IalJfExaTmDMSHjNEV7bZ3B2TiV9W/ VOgG5ZHAmBGCYCL4Szt8m4YyvuKlpP/NVFzPRyCnZiwjs/EHyvjEzj/iOlrXne0A fJNjK4ax7gOSoymovkpY0q4OT3C73yELEpaYv0uN+NX09GnpYiQaOSYeMfjlWD3D kutBDsplBnupl5g0dNeZU5e3RligUW64oZ5w+7hxiY97zlQKYM8QxL/EScPNuP3O pSwaAUyjzEZq2p2VIB3eOa2s8R3N4m4fh9fmsiPeaVdDRiaCBBNvBUT/mZqH6G9n u2v0Yg7FWqOU0dTcQufUkqHPglhvvQW4jg9ia+0/N0T3p/P0On6c3sFgChf0qScn 4Q3HY+C1Gc52T8ZpjIQ+0za7ol3aHyQn0JYoEEcrtsVMBIajPc6bkHYI1zchuvgZ fm0zXRyC2rhHB7zfs7yRbHwhwuPFNSD5l4bNRUhl0l4oYEHRKJR62MyPEntcov5B m7kCdx23LcRqp8YJWDB6sisCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 83189232913869932760859280750655175173 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-16 11:06:40 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-16 11:06:40 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.zapfinhd.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 826231039798800682995660192845459431790666965811259647314939742317586362449404690412793213527710907731175031711739812961007353202623811175425955453928653769971921452278637247482555472025561648027928223439287530294601423439821373447765022647423929643727167815525207506522511126688607698512146776187572391133953433442535700207863559715226968381327851639423871464657085972171865831626026334134514951750035024832698226896270379279141257832650850386855128861330268991762993544080377126224141207209796836603236907368674806104033206346119893204949422274753193723947624330033807806177308960378277751298967861028848139046869823236464983439373387898188032101969127639553690860248020880036733796453387028792873128383941831320210193308581758184720299004919147295789627848548553816741959738765931153966251753075953802340191049488485359452925277429519092181208260433802935053404050913032424819158129255625509079563965878274179478612008234394007406329906735330094014739723467953127375462912857506586832097760871086939453802082224450562773107472656017769128024331482403352818761320507798987744887314059002881766184721398870583693508435015105509181561063145214945230901118123428562733156198923670415155627663501599306171705025480622195223278896460331 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 56451c89c01b9c7802444607a1c215a67d1c5fa1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zapfinhd.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zapfinhd.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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