bf-tools.net

Issued by R3

About this certificate

This digital certificate with serial number 03:39:fe:8e:4d:7c:99:8e:bd:8c:b9:5a:3b:a6:46:be:4a:da was issued on by Let's Encrypt.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bf-tools.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:39:fe:8e:4d:7c:99:8e:bd:8c:b9:5a:3b:a6:46:be:4a:da
Serial Number (int): 281071315498474868336564486519306770598618
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d7:b7:38:c7:1e:be:4f:fe:f3:ec:d4:31:45:90:6b:c7:19:93:3f:78
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 03:28:33:b5:6c:6f:e0:7b:fa:83:9e:3a:15:ac:61:d8:37:c9:d2:da
Fingerprint (sha256): 8d:3e:ce:f7:92:17:ce:0b:8f:e9:6c:15:ec:d0:6a:2c:06:57:3d:21:5d:50:5c:06:a3:b5:14:59:b3:b4:dd:2f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bf-tools.net

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bf-tools.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a-staging.bf-ad.net
a.bf-ad.net
a.bf-tools.net
admanager.conunity.io
article.bunte.de
article.cinema.de
article.finanzen100.de
article.fitforfun.de
article.netdoktor.de
article.netmoms.de
article.tvspielfilm.de
article.tvtoday.de
beta.corona-care.de
bf-tools.net
brokervergleich.finanzen100.de
cardscout.de
depotvergleich.kleingeldhelden.com
emq.bf-tools.net
etf-sparplan.finanzen100.de
fol-staging.cardscout.de
m-article.fitforfun.de
m-article.netdoktor.de
m-article.tvspielfilm.de
m-article.tvtoday.de
m-staging.cardscout.de
rtt.bf-tools.net
stg-brokervergleich.finanzen100.de
stg-depotvergleich.kleingeldhelden.com
stg-etf-sparplan.finanzen100.de
stg-onvista.depot.bestcheck.de
stg-onvista.festgeld.bestcheck.de
stg-onvista.tagesgeld.bestcheck.de
user-rating-dev.burda-forward.de
user-rating-stg.burda-forward.de
user-rating-v2-dev.burda-forward.de
user-rating-v2-stg.burda-forward.de
user-rating-v2.burda-forward.de
user-rating.burda-forward.de
v.bunte.de
v.burda-forward.de
v.cinema.de
v.finanzen100.de
v.fitforfun.de
v.mydogplanner.com
v.mydogplanner.de
v.n-tv.de
v.netmoms.de
v.pet-forward.com
v.pet-forward.de
v.petforward.de
v.tvspielfilm.de
v.tvtoday.de
web-vitals.bfops.io
welt-staging.cardscout.de
welt.cardscout.de
widget-stg.bunte.de
widget-stg.fitforfun.de
widget-stg.netmoms.de
widget-stg.tvspielfilm.de
widget.bunte.de
widget.fitforfun.de
widget.netmoms.de
widget.tvspielfilm.de
widgets-dev.burda-forward.de
widgets-stg.burda-forward.de
widgets.burda-forward.de
www-staging.cardscout.de
www.cardscout.de
www.constructive-world-award.com
www.corona-care.de

Other certificates including the domain name bf-tools.net

(limited to 100 certificates)
bf-tools.net
bf-tools.net
bf-tools.net
mds.bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
cont.bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
a.tfag.de
bf-tools.net
a.tfag.de
a.tfag.de
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
a.tfag.de
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
a.tfag.de
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
cont.bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
cont.focus.de
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
mds.bf-tools.net
bf-tools.net

Certificate

The complete raw certificate details for bf-tools.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfH1EbhNgqG/XZcRRGix
KRe/KT2B38smmry8f5bh6BfFF84759a2xGudjpxqsPr176Vr5m3gYiyXRT3YQkJJ
/Gfk5UIjDC+hdT4gZE7D49e6aRGrSQrXUYZwa8xu2zdhpXOGey4J7t9JReLEjRbA
hdzhUeJPh0L7540zA0sSOUfQmrPQIpt89MZYv1mYtSYRSk8yS0Ucpa1rGVSXfYk0
ZL/3W7Cca1iIDkIt3zY/ZQSAxMptaKMLcod0wGuDohKKRnoxKSiWp4teMi+rOPse
QIilq6y87S/5i2s1whf6XbRJuE28POgQ5hcd/SBVSPRZYvshtwO/c8WjEUZ6VwGw
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281071315498474868336564486519306770598618
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 14:09:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 14:09:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bf-tools.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19938727471985765594113726658304357325938338044212978789264664699123011152488346234407900133438488390594760669432355810221531569321470569441118475663540280618358917779000626408255691199147041093510836601782124975878505792169084521768038345469640545235524673208388079827440420201299320980452000808817735967908421138000621150634842958821246030009308122513124893127302063402277590107770431341915562189440212099035676647539076599990687697400545245547991889322453517075207335604620035884229261147036161042927436112722703574222386562428985794391643930136463404989876301473819496444593118230310729631998960139439749982171327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d7b738c71ebe4ffef3ecd43145906bc719933f78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1647 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-staging.bf-ad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.bf-ad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admanager.conunity.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.bunte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.cinema.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.netdoktor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.tvspielfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.tvtoday.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.corona-care.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokervergleich.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depotvergleich.kleingeldhelden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emq.bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etf-sparplan.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fol-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-article.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-article.netdoktor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-article.tvspielfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-article.tvtoday.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtt.bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-brokervergleich.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-depotvergleich.kleingeldhelden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-etf-sparplan.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-onvista.depot.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-onvista.festgeld.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-onvista.tagesgeld.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating-dev.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating-stg.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating-v2-dev.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating-v2-stg.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating-v2.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.bunte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.cinema.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.mydogplanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.mydogplanner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.n-tv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.pet-forward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.pet-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.petforward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.tvspielfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.tvtoday.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-vitals.bfops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welt-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welt.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget-stg.bunte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget-stg.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget-stg.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget-stg.tvspielfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.bunte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.tvspielfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets-dev.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets-stg.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.constructive-world-award.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corona-care.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018baf7af17e000004030047304502201c224bad9ae72113a08978e0d06ba87bb97b4980f37125f69907980d41246a4c022100fe8d742dbd09a7823e3e7311ed200118b8b2956aeac3c5e2a9204ac01c6c929b00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018baf7af1c1000004030046304402201632cc6bbc7e3977fd60241600c50a1de0431fb4ce46e1b6533586d51f1dcaff02203ac0a1763b7539bafd2259a6c0ba98b8470b7871fb26d71e226f9709db29de90
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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