ankh-morpork.de

Issued by R3

About this certificate

This digital certificate with serial number 04:be:c4:88:f4:e2:77:ac:3a:4b:3d:0b:bf:2b:ea:07:85:e7 was issued on by Let's Encrypt.

With 60 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ankh-morpork.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:be:c4:88:f4:e2:77:ac:3a:4b:3d:0b:bf:2b:ea:07:85:e7
Serial Number (int): 413364033248416443838109597903772902196711
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 52:30:3a:d7:4b:17:2c:9e:2d:91:14:b6:df:6f:f0:2d:9e:6e:57:5b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 04:16:c7:a8:26:45:b3:69:ae:a5:2a:39:40:5e:27:cd:fc:47:54:d9
Fingerprint (sha256): 98:9f:9e:6a:f0:3a:81:24:68:fc:d3:68:7e:d9:b1:1b:90:c8:d8:20:e2:05:9c:db:af:18:e7:09:fa:97:85:d8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ankh-morpork.de

60

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ankh-morpork.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ankh-morpork-times.de
ankh-morpork.de
autoconfig.ankh-morpork-times.de
autoconfig.ankh-morpork.de
autoconfig.buchjunkies-blog.de
autoconfig.discworld-convention.de
autoconfig.pratchett-fanclub.de
autoconfig.puck525.startdedicated.de
autoconfig.scheibenwelt-convention.de
autoconfig.scheibenwelt.de
autoconfig.thediscworld.de
autodiscover.ankh-morpork-times.de
autodiscover.ankh-morpork.de
autodiscover.buchjunkies-blog.de
autodiscover.discworld-convention.de
autodiscover.pratchett-fanclub.de
autodiscover.puck525.startdedicated.de
autodiscover.scheibenwelt-convention.de
autodiscover.scheibenwelt.de
autodiscover.thediscworld.de
books.buchjunkies-blog.de
buchjunkies-blog.de
discworld-convention.de
forum.ankh-morpork-times.de
forum.ankh-morpork.de
forum.discworld-convention.de
forum.pratchett-fanclub.de
forum.scheibenwelt-convention.de
forum.scheibenwelt.de
forum.thediscworld.de
mail.ankh-morpork-times.de
mail.ankh-morpork.de
mail.buchjunkies-blog.de
mail.discworld-convention.de
mail.pratchett-fanclub.de
mail.puck525.startdedicated.de
mail.scheibenwelt-convention.de
mail.scheibenwelt.de
mail.thediscworld.de
naschwerkstatt.buchjunkies-blog.de
pratchett-fanclub.de
puck525.startdedicated.de
scheibenwelt-convention.de
thediscworld.de
wiki.ankh-morpork-times.de
wiki.ankh-morpork.de
wiki.discworld-convention.de
wiki.pratchett-fanclub.de
wiki.scheibenwelt-convention.de
wiki.scheibenwelt.de
www.ankh-morpork-times.de
www.ankh-morpork.de
www.books.buchjunkies-blog.de
www.buchjunkies-blog.de
www.discworld-convention.de
www.naschwerkstatt.buchjunkies-blog.de
www.pratchett-fanclub.de
www.scheibenwelt-convention.de
www.scheibenwelt.de
www.thediscworld.de

Other certificates including the domain name ankh-morpork.de

(limited to 100 certificates)
ankh-morpork-times.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork-times.de
ankh-morpork-times.de
ankh-morpork-times.de

Certificate

The complete raw certificate details for ankh-morpork.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+csiBYa0zg4v+AvcAFYz
duaFoRE4RBT8TgMB/ZEU8B6FK7LfZoYLxws7V7tyG4qxHYwa/ah5CcfCTVbSt23H
pbLVf2044q3OVd4JcsPOQsGzjLzoLYiX6gfKc86WmFUN9Z//R+Gqi1G5uJmzeonY
w/SAiicQbOQYVoC5z2tQRbmUhy4e3ZSDmWDzk7qQhFKwISsS4p28HoyPMMogd/GL
NhD7n/3WmRg6dIMEdgAMmDBTUaUHfjdF0dH6lfPw+/ORvg6mkqNd5o3hmy7d2kTx
urIXju3TLtqjtAENTF6A0UhtbhHAF2SCT13wR0xvc7jnRLGxAciJTsIBLHwHVbLQ
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 413364033248416443838109597903772902196711
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-08 22:43:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-09 22:43:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ankh-morpork.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31533506501305585046371381209706295931503586401095744435188173680376779229271931885262695145598628217158422378146463823860044308254881693678589270053453686849397916123454375768128780371660487845038232337833475160316962747420507669252942683674745780441769119688039698028324142085068753893429420203267182091236866319465773448962094526020555811200293153894762050030571705269619483592504567042971938523683912745148925880970250646636202553813384078502579015498307782809831950339540653583549445568650966360246758332205294709453894575242575087996971486042819588155590617815754470477546491851841343971044953311314434535379161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52303ad74b172c9e2d9114b6df6ff02d9e6e575b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1725 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ankh-morpork-times.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ankh-morpork.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.ankh-morpork-times.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.ankh-morpork.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.discworld-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.pratchett-fanclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.puck525.startdedicated.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.scheibenwelt-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.scheibenwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.thediscworld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ankh-morpork-times.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ankh-morpork.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.discworld-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pratchett-fanclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.puck525.startdedicated.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.scheibenwelt-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.scheibenwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.thediscworld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discworld-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.ankh-morpork-times.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.ankh-morpork.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.discworld-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.pratchett-fanclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.scheibenwelt-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.scheibenwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.thediscworld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ankh-morpork-times.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ankh-morpork.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.discworld-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pratchett-fanclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.puck525.startdedicated.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.scheibenwelt-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.scheibenwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.thediscworld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naschwerkstatt.buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pratchett-fanclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puck525.startdedicated.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheibenwelt-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thediscworld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.ankh-morpork-times.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.ankh-morpork.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.discworld-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.pratchett-fanclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.scheibenwelt-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.scheibenwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ankh-morpork-times.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ankh-morpork.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.books.buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discworld-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naschwerkstatt.buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pratchett-fanclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scheibenwelt-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scheibenwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thediscworld.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186336a23810000040300483046022100a82e75395aed699c1dd482633b3a955967a3689ed2ece3e1aedc05c5d06bb5e0022100dd5f77a10fa5f946012d213186c5056ebe9da5765d45bed56edcb12eff70e3e80076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186336a2393000004030047304502202a351c4647e760659294e3d8ae9445ef8b4c5f6ac5727936a2d2d6fd4f6dc884022100f22e18e7c91a563409329b8aaa1b9f5970472d668e461ec5cc5dcdf960c519a6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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