www.fincallorca.de

- Fincallorca GmbH -

Issued by Starfield Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number c3:e5:da:4e:7d:ed:8d:92 was issued on by Starfield Technologies, Inc..

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fincallorca GmbH

Company registration number: HRB 41090
Organization: Fincallorca GmbH
State / Province: Nordrhein-Westfalen
Locality: Bielefeld
Country: DE

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): c3:e5:da:4e:7d:ed:8d:92
Serial Number (int): 14115928637717712274
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: e5:1d:c4:a1:01:b1:5d:41:66:e4:b5:99:f9:e1:ca:3b:ed:5e:c9:7e
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (sha1): e9:d5:fa:24:6e:30:26:a8:8e:83:e6:fb:01:7e:bb:70:7f:7d:7c:ed
Fingerprint (sha256): 94:56:43:6a:9c:c3:43:d7:11:2b:50:b0:7d:78:aa:2b:f3:7e:db:73:74:cc:5b:07:a0:76:7d:29:d3:c4:d9:04

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s3-2.crl

Check the revocation status for certificate www.fincallorca.de

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fincallorca.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fincallorca.es
www.fincallorca.com
www.fincallorca.de
fincallorca.de
www.backend.fincallorca.de
www.fincallorca.ch
fincallorca.com
fincallorca.ch
backend.fincallorca.de
www.fincallorca.es
payment.fincallorca.de
www.payment.fincallorca.de

Other certificates including the domain name fincallorca.de

(limited to 100 certificates)
fincallorca.vin.pm
www.fincallorca.de
fincallorca.vin.pm
wildcard.fincallorca.de
fincallorca.de
www.fincallorca.de
fincallorca.de
fincallorca.de
fincallorca.vin.pm
wildcard.fincallorca.de
awaze-sbd.com
utility.fincallorca.de
fincallorca.de
www.fincallorca.de
www.fincallorca.de
wildcard.fincallorca.de
fincallorca.vin.pm
fincallorca.de
www.fincallorca.de
wildcard.fincallorca.de
fincallorca.vin.pm
www.fincallorca.de
fincallorca.de
fincallorca.vin.pm
fincallorca.vin.pm
wildcard.fincallorca.de
www.fincallorca.de
fincallorca.vin.pm
www.fincallorca.de
fincallorca.vin.pm
fincallorca.vin.pm

Certificate

The complete raw certificate details for www.fincallorca.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqnT3axvE/UO0Py5g8oFp
HhxiIbRk0aRP0cOauT+BKKrVMqZ0xzN+zIHc+mI9yxJdiZXjDJwO/kycbvPPcNxb
qY5niwOYerWeLk3c79lsZSqtNz9kDuQIhv1kB0XSqm1Ztc73kRHm/0s3pubWQiqf
6AFmJK8ApzwH6BjOFk4LxTo6XVL8juO/sGwYq96pt2mrEIM1CWc+Q1205ShtR2+0
3Af21si0Tdil10Wjbik5kXRRxpKCBTFp5B6nKkXpkidYaD0t6NmpfR2RRzC4twMy
lmm9kEl/mjG7h9xo3ELPaAqAlLJssuhy/T0rwQU3qDXDdLqF6VK41sagS5mMK//X
Sp3sOnxyMMFwtCM6DzCs35Fxr/iQtkdkpX2k3aAJ9XBO4fjsQioDhlIz30UkuuUd
n7KIMLvz0/QXSkyY2KgzyhBE3yhg8WgK3cWrJkqZ/5hZTbSoL+64kjUqDLxldTha
DPFHFZOi8Pm7jaSIv2oxv+3QnL3VoxwLzL3hMD3QAFDiTQKdII7rwv8Ali8DdE15
w/vmIMFDDC/OW+2TNVPRVmfFLD0PPxnU156AlsqFzXXg5YsIPIIbR4xJUFZDDQqz
SwyZH9H6pmajvW+Y/gwR2A9Cvvcmh3jXLJdMVbW3Ll+P4RcMk+GMIVMw7h5GVQ7u
4fd27UGKD2BAuLspXSZ+PtcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14115928637717712274
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-30 13:38:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-30 13:38:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bielefeld'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 41090'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bielefeld'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fincallorca GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fincallorca.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 695403482182640349179425217205362043485403587631813355244625064342496662221504201556043755641695744216579457551727374430183042255024842915566798847739917286056545725100459535672397516316035133795056659915037377747853292976665030377528057376346282415803550606808750680457128049580474707733273165581735351411630416747922962114329355657176955480751381437501252926242775428604774134940913598219943741480582110330081297611423095323950181781620355776560417070011440747292589687085982873385924915224965365153599232928986026609976650689919998003505171083230317500358449145658641682664493492367223849481577490292926401757671154971538521982081059052185221946943448626330268639660625270340599147166723878071916298331418710287737409543622695722583107805911301845002639356714797994628395637255352568722988359808723840271725513625149623365809551912589829528320615488864272962018129045956518298234578602467467005774057378833868049233271398836987552855512023730050998617857408224885986571543226913802499465891898184376251636356498336871995378176385763050035145036304200281235603970343390886312508181463454809645540223656114518397194310016951330032381943751358197599791175793584035781302339809258715134380102984977033730056592298878738669178772668119
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s3-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.3 (Starfield EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (253 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fincallorca.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fincallorca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fincallorca.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fincallorca.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.backend.fincallorca.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fincallorca.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fincallorca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fincallorca.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend.fincallorca.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fincallorca.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.fincallorca.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.payment.fincallorca.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e51dc4a101b15d4166e4b599f9e1ca3bed5ec97e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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