shop.geo.de

- Gruner + Jahr GmbH & Co KG -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number a2:52:19:85:91:83:be:db:29:1d:f2:57:51:35:1c:3d was issued on by COMODO CA Limited.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Gruner + Jahr GmbH & Co KG

Organization: Gruner + Jahr GmbH & Co KG
Organization unit: Online Betrieb
Organization unit: Issued through Gruner + Jahr GmbH & Co KG E-PKI Manager
Organization unit: Unified Communications
Address: Am Baumwall 11
Postal code: 20459
State / Province: Hamburg
Locality: Hamburg
Country: DE

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): a2:52:19:85:91:83:be:db:29:1d:f2:57:51:35:1c:3d
Serial Number (int): 215761221302176529963769782435719748669
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 75:40:02:ff:f6:48:0a:79:ad:8e:d7:cb:a4:8e:32:42:71:a3:ae:82
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): d9:14:18:ab:14:5b:17:ae:be:e3:0b:93:39:44:02:d3:2b:6c:a7:49
Fingerprint (sha256): 8f:a9:98:2e:70:6f:cb:92:52:7c:48:11:2a:55:f4:46:d1:99:29:40:7a:fd:35:59:09:61:c4:3e:02:ec:40:84

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate shop.geo.de

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.geo.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop.geo.de
aboshop.schoener-wohnen.de
guido-magazin.de
shop.abenteuer-reisen.de
shop.art-magazin.de
shop.barbara.de
shop.business-punk.com
shop.capital.de
shop.dpv.de
shop.food-magazine.de
shop.guido-magazin.de
shop.nationalgeographic.de
shop.neon.de
shop.pm-magazin.de
shopsystem.dpv.de
www.guido-magazin.de
www.meinabo.de
www.online-kiosk-24.de
www.readspot.de

Other certificates including the domain name geo.de

(limited to 100 certificates)
static.stern.de
static.stern.de
static.stern.de
*.live.aws.geo.de
static.stern.de
serviceportal.dpv.de
api.geo.de
www.stage.stern.de
shop.geo.de
*.stage.mobile-toolkit.guj.digital
www.stage.stern.de
static.stern.de
serviceportal.dpv.de
aktion.art-magazin.de
serviceportal.dpv.de
serviceportal.dpv.de
www.guj.digital
shop.geo.de
commsvc.geo.de
www.stage.stern.de
www.stage.stern.de
www.guj.digital
*.int.aws.geo.de
*.shop.geo.de
stage.m.geo.de
static.stern.de
www.guj.digital
static.stern.de
static.stern.de
*.shop.geo.de
static.stern.de
static.stern.de
*.coremedia.guj.digital
stage.serviceportal.dpv.de
shop.geo.de
geo.de
dev.serviceportal.dpv.de
serviceportal.dpv.de
dev.serviceportal.dpv.de
shop.geo.de
serviceportal.dpv.de
static.stern.de
static.stern.de
*.geo.de
commsvc.geo.de
static.stern.de
api.geo.de
sfbws.guj.de
www.stage.stern.de
*.geo.de
shop.stern.de
api.geo.de
www.guj.digital
static.stern.de
static.stern.de
www.guj.digital
*.live.aws.geo.de
shop.stern.de
serviceportal.dpv.de
geo.de
geo.de
shop.stern.de
*.stage.aws.geo.de
www.stage.stern.de
newsletter.eltern.de
geo.de
static.stern.de
shop.geo.de
geo.de
serviceportal.dpv.de
www.stage.stern.de
shop.geo.de
serviceportal.dpv.de
static.stern.de
static.stern.de
shop.geo.de
int.serviceportal.dpv.de
static.stern.de
api.geo.de
www.stage.stern.de
static.stern.de
www.geo.de
www.stage.stern.de
www.stage.stern.de
static.stern.de
static.stern.de
serviceportal.dpv.de
shop.geo.de
*.geo.de
shop.geo.de
static.stern.de
serviceportal.dpv.de
www.guj.digital
static.stern.de
www.guj.digital
*.aws.geo.de
static.stern.de
newsletter.geo.de
static.stern.de
*.shop.geo.de

Certificate

The complete raw certificate details for shop.geo.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3k2Ij/LbRRbEDG/sRzp
fPWBQIVsDg4J/L7aNR6Ltr3fm0wl7bXD1nuQnR5cPof4yPWPq0WV367v7VEdQhpy
DmlrKnMi+c+IC2AKH8HEGn+iBpLmhYoTQnvQoIcPV+QmyXcEzVh6MxRdv2SgxnlM
IccdpaS5E5M/bxUexQ86qYrkDRWkeg8ExDqReLo9zZ2agTh79zcI0eHkvYq4E1bh
jv13/Les/q3j3BcpALXrbjv+Vcn7AdIgjAFwed7IZ6Gjyra71Fxscmut9BRryre2
hYLmChKM19bhZBu8DcnVWCPzZU0TsQtL6Kd2bfBAS4QxThFnGC+U7I3YCkDYeFJT
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 215761221302176529963769782435719748669
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '20459'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Am Baumwall 11'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gruner + Jahr GmbH & Co KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Online Betrieb'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Issued through Gruner + Jahr GmbH & Co KG E-PKI Manager'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.geo.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23666334627346896774195589632155998941044133494871038574701779039344825140240218238016336384820391347891414763689478423952731870680294217910960693554851016517663335355958295238965682766963809069898902252611363463119689057310611755488676169096469417603204770065348204302346286244105867418639620806785751102287941064554190979799329421817510307190486327607140144369152215153653510748730266740543984609894567250322901261797429908582751933129858234606870751335476626008344264579077421344336042931749451848045048111148179715467429661353445987924740272023081472375794438982063840338166022759567834768998924207773466083087109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							754002fff6480a79ad8ed7cba48e324271a3ae82
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (387 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.geo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboshop.schoener-wohnen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guido-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.abenteuer-reisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.art-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.barbara.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.business-punk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.capital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.dpv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.food-magazine.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.guido-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.nationalgeographic.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.neon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pm-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopsystem.dpv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guido-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meinabo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.online-kiosk-24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readspot.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016538dfb9b50000040300473045022075ac2afa565615e404c2f1209881632c760abe7e52fe63dbf17f7e154dd136c2022100b61fbac8c806895793ef984d72c4874604f64c4ff7d4b1540e2965e01680206b0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016538dfb9f3000004030047304502200cc73c83d89d09be40d0ad1e1a6e18c4bb88f67014e186ca97663157757cf72c0221008ea8b75c88399101f199db9dd75ae651036ae0020c918ac1a8ebf2bbe8de169c0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016538dfb9dc000004030047304502201d607353f538677a0acb06d9e1ff9c76dcb727c2f12a2893c9792725ba7b7387022100bf646bb01346ee2d4ac60b99283d6904b8f086cde38e7bac74519ac8d8cdb304
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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