bf-tools.net

Issued by R3

About this certificate

This digital certificate with serial number 04:12:d2:54:1f:68:1e:43:28:0b:34:35:ac:68:4a:cb:92:6b was issued on by Let's Encrypt.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bf-tools.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:12:d2:54:1f:68:1e:43:28:0b:34:35:ac:68:4a:cb:92:6b
Serial Number (int): 354853801000672620539778101374787095597675
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 71:20:68:b2:d6:c7:00:f1:21:30:9d:84:94:1a:cf:67:d7:a0:1c:fc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c2:60:c8:f4:d5:a3:1f:96:5a:21:45:76:c7:05:86:0b:53:a6:f9:a5
Fingerprint (sha256): 90:2a:75:09:6a:7e:59:7e:1a:94:d5:85:68:ba:ce:cf:2d:b8:9e:0d:c4:c3:8e:9c:aa:24:39:d2:a0:cf:2b:95

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bf-tools.net

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bf-tools.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a-staging.bf-ad.net
a.bf-ad.net
a.bf-tools.net
admanager.conunity.io
article.bunte.de
article.cinema.de
article.finanzen100.de
article.fitforfun.de
article.netdoktor.de
article.netmoms.de
article.tvspielfilm.de
article.tvtoday.de
beta.corona-care.de
bf-tools.net
brokervergleich.finanzen100.de
cardscout.de
depotvergleich.kleingeldhelden.com
emq.bf-tools.net
etf-sparplan.finanzen100.de
fol-staging.cardscout.de
m-article.fitforfun.de
m-article.netdoktor.de
m-article.tvspielfilm.de
m-article.tvtoday.de
m-staging.cardscout.de
rtt.bf-tools.net
stg-brokervergleich.finanzen100.de
stg-depotvergleich.kleingeldhelden.com
stg-etf-sparplan.finanzen100.de
stg-onvista.depot.bestcheck.de
stg-onvista.festgeld.bestcheck.de
stg-onvista.tagesgeld.bestcheck.de
user-rating-dev.burda-forward.de
user-rating-stg.burda-forward.de
user-rating-v2-dev.burda-forward.de
user-rating-v2-stg.burda-forward.de
user-rating-v2.burda-forward.de
user-rating.burda-forward.de
v.bunte.de
v.burda-forward.de
v.cinema.de
v.finanzen100.de
v.fitforfun.de
v.mydogplanner.com
v.mydogplanner.de
v.n-tv.de
v.netmoms.de
v.pet-forward.com
v.pet-forward.de
v.petforward.de
v.tvspielfilm.de
v.tvtoday.de
web-vitals.bfops.io
welt-staging.cardscout.de
welt.cardscout.de
widget-stg.bunte.de
widget-stg.fitforfun.de
widget-stg.netmoms.de
widget-stg.tvspielfilm.de
widget.bunte.de
widget.fitforfun.de
widget.netmoms.de
widget.tvspielfilm.de
widgets-dev.burda-forward.de
widgets-stg.burda-forward.de
widgets.burda-forward.de
www-staging.cardscout.de
www.cardscout.de
www.constructive-world-award.com
www.corona-care.de

Other certificates including the domain name bf-tools.net

(limited to 100 certificates)
bf-tools.net
bf-tools.net
bf-tools.net
mds.bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
cont.bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
a.tfag.de
bf-tools.net
a.tfag.de
a.tfag.de
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
a.tfag.de
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
a.tfag.de
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
cont.bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
cont.focus.de
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
mds.bf-tools.net
bf-tools.net

Certificate

The complete raw certificate details for bf-tools.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv0wcURRpvLZskuh9lLr
/1+n7fhodCdMRjs6DxY/THlv/QTN8r/84UwrocQrYoCYkm76uwUd2HfVUpeGDsgf
VaOyFA5ysHJSl+WXTODi7o0U393uESXISP1lkUHUqxLUfUmpYq5dXte6ruTcmmVL
kXA9X0CSsKCvLK+MkWB8siMf/C8eA5ixYohyehdav5EUdvYNd73dHfTlESawrPPm
PFIunH/fGEi8I+GSUdtVgrbQEmTKbh6SIiLYnJQcHc4EASHkTLiFpmBE/wnmShkQ
LD7YWGuKya12tfbZYJWpQ1UM5sbCq92x64PBzcFFrC3AoJz/dYM4bYQVM2oKY+4o
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 354853801000672620539778101374787095597675
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 13:12:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 13:12:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bf-tools.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23605176985476695748775429508220262226990351150569631173314097331758235017662795246067258890550715507372884338500753263218623229129627951035981514394154243762233483322823639325930170833518315439220283413239143773222007598773264120636388641061707921881311578503199886638001672455811438115037961790035191715498902901687330694315491971779149477301642674992050979696636459018134632374333395902688509439999482722409315669459569539689030938912404169664568978979859176993777616157376158225399537036607191234952589029300103528224618324762812538124620430642364320192832450820915439153173976077380363572903522419716818880833689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							712068b2d6c700f121309d84941acf67d7a01cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1647 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-staging.bf-ad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.bf-ad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admanager.conunity.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.bunte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.cinema.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.netdoktor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.tvspielfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.tvtoday.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.corona-care.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokervergleich.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depotvergleich.kleingeldhelden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emq.bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etf-sparplan.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fol-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-article.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-article.netdoktor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-article.tvspielfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-article.tvtoday.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtt.bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-brokervergleich.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-depotvergleich.kleingeldhelden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-etf-sparplan.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-onvista.depot.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-onvista.festgeld.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-onvista.tagesgeld.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating-dev.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating-stg.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating-v2-dev.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating-v2-stg.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating-v2.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.bunte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.cinema.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.mydogplanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.mydogplanner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.n-tv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.pet-forward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.pet-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.petforward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.tvspielfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.tvtoday.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-vitals.bfops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welt-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welt.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget-stg.bunte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget-stg.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget-stg.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget-stg.tvspielfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.bunte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.tvspielfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets-dev.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets-stg.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.constructive-world-award.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corona-care.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d17c3f5180000040300463044022028a3e6b9de90b4ba79aa5f9ed3a7748936cc97433cd1b8d0db736196bcc4101d02204e396f8a3ec083bd1ce243d53f0929c08677e47689570492c1ec90e3485f06ea007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d17c3f5230000040300473045022029173e44edc74579eca1109c6069f109f64695dda3f806741abc3edf17d6a67a022100ec8ff2ea4ff122eb437ce632d2c14d85eba07b0aff8efbb3e20badb0bcb77638
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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