ankh-morpork-times.de

Issued by R3

About this certificate

This digital certificate with serial number 04:5a:c8:69:87:68:b9:e8:00:17:b1:32:8e:d6:de:1f:7c:cc was issued on by Let's Encrypt.

With 60 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ankh-morpork-times.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5a:c8:69:87:68:b9:e8:00:17:b1:32:8e:d6:de:1f:7c:cc
Serial Number (int): 379340950286675138222184211106092904578252
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8a:bd:29:c1:39:22:0e:25:27:78:01:65:54:c8:c8:c9:5d:5a:24:82
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a0:7b:d5:29:b1:eb:79:4d:f6:69:e9:63:30:7e:8f:e4:21:97:e0:c2
Fingerprint (sha256): 9c:55:41:4a:82:56:37:c9:34:62:8e:08:85:fe:97:4c:30:35:53:d9:ce:2e:d7:6d:db:12:b4:71:83:c5:f9:71

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ankh-morpork-times.de

60

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ankh-morpork-times.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ankh-morpork-times.de
ankh-morpork.de
autoconfig.ankh-morpork-times.de
autoconfig.ankh-morpork.de
autoconfig.buchjunkies-blog.de
autoconfig.discworld-convention.de
autoconfig.pratchett-fanclub.de
autoconfig.puck525.startdedicated.de
autoconfig.scheibenwelt-convention.de
autoconfig.scheibenwelt.de
autoconfig.thediscworld.de
autodiscover.ankh-morpork-times.de
autodiscover.ankh-morpork.de
autodiscover.buchjunkies-blog.de
autodiscover.discworld-convention.de
autodiscover.pratchett-fanclub.de
autodiscover.puck525.startdedicated.de
autodiscover.scheibenwelt-convention.de
autodiscover.scheibenwelt.de
autodiscover.thediscworld.de
books.buchjunkies-blog.de
buchjunkies-blog.de
discworld-convention.de
forum.ankh-morpork-times.de
forum.ankh-morpork.de
forum.discworld-convention.de
forum.pratchett-fanclub.de
forum.scheibenwelt-convention.de
forum.scheibenwelt.de
forum.thediscworld.de
mail.ankh-morpork-times.de
mail.ankh-morpork.de
mail.buchjunkies-blog.de
mail.discworld-convention.de
mail.pratchett-fanclub.de
mail.puck525.startdedicated.de
mail.scheibenwelt-convention.de
mail.scheibenwelt.de
mail.thediscworld.de
naschwerkstatt.buchjunkies-blog.de
pratchett-fanclub.de
puck525.startdedicated.de
scheibenwelt-convention.de
thediscworld.de
wiki.ankh-morpork-times.de
wiki.ankh-morpork.de
wiki.discworld-convention.de
wiki.pratchett-fanclub.de
wiki.scheibenwelt-convention.de
wiki.scheibenwelt.de
www.ankh-morpork-times.de
www.ankh-morpork.de
www.books.buchjunkies-blog.de
www.buchjunkies-blog.de
www.discworld-convention.de
www.naschwerkstatt.buchjunkies-blog.de
www.pratchett-fanclub.de
www.scheibenwelt-convention.de
www.scheibenwelt.de
www.thediscworld.de

Other certificates including the domain name ankh-morpork-times.de

(limited to 100 certificates)
ankh-morpork-times.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork-times.de
ankh-morpork-times.de
ankh-morpork-times.de

Certificate

The complete raw certificate details for ankh-morpork-times.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfxDfRNSfbaQpJe9H+Te
qIrFfGykEXtToykvaewvhpOvURc09fX6Ofl3gqQV2/M9DbHqEF4IgJcDOBfQ2j2t
SCyc4845zHp9OCZwMzTUHYtR0cF6kUCZ6Eox+9Y8Mw041k7MLc7PRlVox3KuUDhk
NFyaUjD5QJxWxnoY9MMxhpGZaaeoreGLrQf3G1ua18alZFWGarj4XsfGd7oGF3U8
xRf+TKPW/XXBqzffZtNfNeWtuECuY5WtuNztsqj01eZVAPWw0/gjcItDon3zoLa3
cbHq2c4cXBaEE7vDKLmeFcGC1reiABDSFEM3iQvcdTQqOB7rqTh3XTGOOqdKGgGJ
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379340950286675138222184211106092904578252
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-04 08:20:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-04 08:20:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ankh-morpork-times.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19943809710564449714422782180493822487865283461884074574540751188488868225274793332767891721530261214467786584329030652592441302016217060260318077646012717106251448152223892114499909362473266009724169741365406033280955182786197215909881948984908106110084704524262666308542689446665016826813274201494217053981934588920834059680346076485466292908969871132137834638407233485958576906933002738632781460100131702127043606757241014223261381872134322804308666401613433697882469169289200268516492285725800359033917023232684967502231738199835157943301018603454478021157446233628626926261743355515227235426686695917647611136371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8abd29c139220e252778016554c8c8c95d5a2482
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1725 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ankh-morpork-times.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ankh-morpork.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.ankh-morpork-times.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.ankh-morpork.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.discworld-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.pratchett-fanclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.puck525.startdedicated.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.scheibenwelt-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.scheibenwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.thediscworld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ankh-morpork-times.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ankh-morpork.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.discworld-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pratchett-fanclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.puck525.startdedicated.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.scheibenwelt-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.scheibenwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.thediscworld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discworld-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.ankh-morpork-times.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.ankh-morpork.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.discworld-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.pratchett-fanclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.scheibenwelt-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.scheibenwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.thediscworld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ankh-morpork-times.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ankh-morpork.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.discworld-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pratchett-fanclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.puck525.startdedicated.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.scheibenwelt-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.scheibenwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.thediscworld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naschwerkstatt.buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pratchett-fanclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puck525.startdedicated.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheibenwelt-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thediscworld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.ankh-morpork-times.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.ankh-morpork.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.discworld-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.pratchett-fanclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.scheibenwelt-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.scheibenwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ankh-morpork-times.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ankh-morpork.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.books.buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discworld-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naschwerkstatt.buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pratchett-fanclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scheibenwelt-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scheibenwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thediscworld.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d736b60e50000040300473045022100cf25995205028ab5ec7673a3c489a209330c951de1df1c12ef07457b5ffef3b60220668ccd6ac839b94adec80235da6b4e60a34bc649661606cb1e3806080929cadb0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d736b60e10000040300473045022100c9692529fed77247a6574eadbeb2f13dd8df415e91b93fb704d2874ece63cd99022049b6c7486e4cc5a16c28879628a66400031a051a4a6600e616601eddea534f7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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