cmp-sp.handelsblatt.com
Issued by R3
About this certificate
This digital certificate with serial number 03:a0:93:0b:46:d5:6f:82:07:e7:8a:17:4c:e0:78:76:b0:99 was issued on by Let's Encrypt.
With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=cmp-sp.handelsblatt.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a0:93:0b:46:d5:6f:82:07:e7:8a:17:4c:e0:78:76:b0:99Serial Number (int): 315977491569955501515362075725698444996761
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 9b:96:cf:ef:1d:f6:de:37:4f:86:01:66:05:86:89:5a:6b:28:a5:5d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 67:8e:51:6a:90:bf:21:3b:51:58:b2:a7:c0:08:b0:b5:48:c3:fe:2f
Fingerprint (sha256): 9c:aa:83:3b:fb:81:44:95:75:be:6c:6e:a1:8c:e4:20:57:31:98:9d:53:12:64:f3:3e:9d:05:55:7e:34:94:22
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate cmp-sp.handelsblatt.com
14
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cmp-sp.handelsblatt.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cmp-sp.handelsblatt.com
cmp-sp.pnn.de
cmp-sp.tagesspiegel.de
cmp-sp.wiwo.de
cmp.berufstest.zeit.de
cmp.cicero.de
cmp.monopol-magazin.de
cmp2.prod.academics.at
cmp2.prod.academics.ch
cmp2.prod.academics.com
cmp2.prod.academics.de
cmp2.prod.jobs.zeit.de
consent-cdn.zeit.de
consent.btc-echo.de
cmp-sp.pnn.de
cmp-sp.tagesspiegel.de
cmp-sp.wiwo.de
cmp.berufstest.zeit.de
cmp.cicero.de
cmp.monopol-magazin.de
cmp2.prod.academics.at
cmp2.prod.academics.ch
cmp2.prod.academics.com
cmp2.prod.academics.de
cmp2.prod.jobs.zeit.de
consent-cdn.zeit.de
consent.btc-echo.de
Other certificates including the domain name handelsblatt.com
(limited to 100 certificates)
financetoday.handelsblatt.com
handelsblatt.com
image.e.grandamerica.com
innovationen.handelsblatt.com
playground.handelsblatt.com
wiwo.jobturbo.de
click.email.handelsblatt.com
kurspiloten.handelsblatt.com
handelsblatt.com
image.e.grandamerica.com
chinacircle.handelsblatt.com
br.bikeradar.com
kreditkartenvergleich.handelsblatt.com
abo.handelsblatt.com
ssl963081.cloudflaressl.com
san-4-s7.tlsprovisioning.exacttarget.com
karriere.handelsblatt.com
akademie.handelsblatt.com
kreditkartenvergleich.handelsblatt.com
wiwo.jobturbo.de
www.stepstone.de
morningbriefing-global.handelsblatt.com
unternehmen.handelsblatt.com
auswahl.handelsblatt.com
tls.automattic.com
*.handelsblatt.com
ssl963081.cloudflaressl.com
chronoto.de
image.e.grandamerica.com
tagesgeld.rechner.app.handelsblatt.com
wiwo.jobturbo.de
image.e.grandamerica.com
image.e.grandamerica.com
*.redaktion.handelsblatt.com
tls.automattic.com
tls.automattic.com
cmk.handelsblatt.com
vhb-umfragen.de
akamai-san27.exacttarget.com
tls.automattic.com
www.stepstone.de
akademie.handelsblatt.com
br.bikeradar.com
*.edison.handelsblatt.com
cmk.handelsblatt.com
chinacircle.handelsblatt.com
wiwo.jobturbo.de
seniorenratgeber.handelsblatt.com
image.e.grandamerica.com
www.handelsblattglobal.shop
image.e.grandamerica.com
services.global-showroom.handelsblatt.com
tls.automattic.com
wiwo.jobturbo.de
image.e.grandamerica.com
chinacircle.handelsblatt.com
handelsblatt.com
playground.handelsblatt.com
info-angebot.handelsblatt.com
cmk.handelsblatt.com
jobs.handelsblatt.com
karriere.handelsblatt.com
br.bikeradar.com
tls.automattic.com
wikifolio.handelsblatt.com
br.bikeradar.com
akamai-san27.exacttarget.com
wiwo.jobturbo.de
abo.handelsblatt.com
chinacircle.handelsblatt.com
norkon.handelsblatt.com
chinacircle.handelsblatt.com
image.e.grandamerica.com
data-08d52e2a42.handelsblatt.com
br.bikeradar.com
tls.automattic.com
tls.automattic.com
handelsblattmediagroup.de
*.cmk.iqdigital.de
tls.automattic.com
handelsblatt.com
financetoday.handelsblatt.com
tls.automattic.com
chinacircle.handelsblatt.com
chinacircle.handelsblatt.com
chinacircle.handelsblatt.com
*.edison.handelsblatt.com
*.redaktion.handelsblatt.com
wiwo.jobturbo.de
services.global-showroom.handelsblatt.com
services.global-showroom.handelsblatt.com
financetoday.handelsblatt.com
tls.automattic.com
hbgateway-prod.vhbdns.de
karriere.handelsblatt.com
morningbriefingmail.handelsblatt.com
tls.automattic.com
sni.cloudflaressl.com
tls.automattic.com
handelsblatt.com
image.e.grandamerica.com
innovationen.handelsblatt.com
playground.handelsblatt.com
wiwo.jobturbo.de
click.email.handelsblatt.com
kurspiloten.handelsblatt.com
handelsblatt.com
image.e.grandamerica.com
chinacircle.handelsblatt.com
br.bikeradar.com
kreditkartenvergleich.handelsblatt.com
abo.handelsblatt.com
ssl963081.cloudflaressl.com
san-4-s7.tlsprovisioning.exacttarget.com
karriere.handelsblatt.com
akademie.handelsblatt.com
kreditkartenvergleich.handelsblatt.com
wiwo.jobturbo.de
www.stepstone.de
morningbriefing-global.handelsblatt.com
unternehmen.handelsblatt.com
auswahl.handelsblatt.com
tls.automattic.com
*.handelsblatt.com
ssl963081.cloudflaressl.com
chronoto.de
image.e.grandamerica.com
tagesgeld.rechner.app.handelsblatt.com
wiwo.jobturbo.de
image.e.grandamerica.com
image.e.grandamerica.com
*.redaktion.handelsblatt.com
tls.automattic.com
tls.automattic.com
cmk.handelsblatt.com
vhb-umfragen.de
akamai-san27.exacttarget.com
tls.automattic.com
www.stepstone.de
akademie.handelsblatt.com
br.bikeradar.com
*.edison.handelsblatt.com
cmk.handelsblatt.com
chinacircle.handelsblatt.com
wiwo.jobturbo.de
seniorenratgeber.handelsblatt.com
image.e.grandamerica.com
www.handelsblattglobal.shop
image.e.grandamerica.com
services.global-showroom.handelsblatt.com
tls.automattic.com
wiwo.jobturbo.de
image.e.grandamerica.com
chinacircle.handelsblatt.com
handelsblatt.com
playground.handelsblatt.com
info-angebot.handelsblatt.com
cmk.handelsblatt.com
jobs.handelsblatt.com
karriere.handelsblatt.com
br.bikeradar.com
tls.automattic.com
wikifolio.handelsblatt.com
br.bikeradar.com
akamai-san27.exacttarget.com
wiwo.jobturbo.de
abo.handelsblatt.com
chinacircle.handelsblatt.com
norkon.handelsblatt.com
chinacircle.handelsblatt.com
image.e.grandamerica.com
data-08d52e2a42.handelsblatt.com
br.bikeradar.com
tls.automattic.com
tls.automattic.com
handelsblattmediagroup.de
*.cmk.iqdigital.de
tls.automattic.com
handelsblatt.com
financetoday.handelsblatt.com
tls.automattic.com
chinacircle.handelsblatt.com
chinacircle.handelsblatt.com
chinacircle.handelsblatt.com
*.edison.handelsblatt.com
*.redaktion.handelsblatt.com
wiwo.jobturbo.de
services.global-showroom.handelsblatt.com
services.global-showroom.handelsblatt.com
financetoday.handelsblatt.com
tls.automattic.com
hbgateway-prod.vhbdns.de
karriere.handelsblatt.com
morningbriefingmail.handelsblatt.com
tls.automattic.com
sni.cloudflaressl.com
tls.automattic.com
Certificate
The complete raw certificate details for cmp-sp.handelsblatt.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgISA6CTC0bVb4IH54oXTOB4drCZMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEwMDIxMjIwMTBaFw0yMzEyMzExMjIwMDlaMCIxIDAeBgNVBAMT F2NtcC1zcC5oYW5kZWxzYmxhdHQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAspYOwfGiI2uIIUCyZ0GP5w3Qs4VS3Wye6/zWNu4lnO/hDR7sMXiD o+7OUoggqoNFpM+FKQa9+qNUV3qtAGfJDwNdqny0z7RtFxjuBGbu2BRv2HBwXzMA Vblx4SzgIqYSBZZirFGltYe4k2RlCR/jXL4h5EY37K6WhMiL9PA1LgPseE7EQYum VebPortT9+gbSpD+l/ujqz/VxXiMaHdCUEEr0BuL7oU9qVv4ZzgY7dZ0VfwDGkII dtqJbxv6U9h9gzdnWS9vhj5jk9rgDsmWckBuRtGPvX/AV0FU1Q217I4V+Ro4KpDe RPdnFE2k4ZykE50XSMN+7kjQJpoDLj7tcwIDAQABo4IDOTCCAzUwDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E AjAAMB0GA1UdDgQWBBSbls/vHfbeN0+GAWYFholaayilXTAfBgNVHSMEGDAWgBQU LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku bGVuY3Iub3JnLzCCAT8GA1UdEQSCATYwggEyghdjbXAtc3AuaGFuZGVsc2JsYXR0 LmNvbYINY21wLXNwLnBubi5kZYIWY21wLXNwLnRhZ2Vzc3BpZWdlbC5kZYIOY21w LXNwLndpd28uZGWCFmNtcC5iZXJ1ZnN0ZXN0LnplaXQuZGWCDWNtcC5jaWNlcm8u ZGWCFmNtcC5tb25vcG9sLW1hZ2F6aW4uZGWCFmNtcDIucHJvZC5hY2FkZW1pY3Mu YXSCFmNtcDIucHJvZC5hY2FkZW1pY3MuY2iCF2NtcDIucHJvZC5hY2FkZW1pY3Mu Y29tghZjbXAyLnByb2QuYWNhZGVtaWNzLmRlghZjbXAyLnByb2Quam9icy56ZWl0 LmRlghNjb25zZW50LWNkbi56ZWl0LmRlghNjb25zZW50LmJ0Yy1lY2hvLmRlMBMG A1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAtz77 JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGK8IvWRwAABAMASDBGAiEA 5U+3XZsrzywjiuXc96uMyTdMqFhsE0jAyFtTgbLKhgYCIQDwFJVFx2h06yTNW03o 6BGRaJCbOWxRDBhW8vIaqTdXswB2AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqF hjTr3IKKAAABivCL1ooAAAQDAEcwRQIgc6Pu8dkPwgvZQn6w6wE9+kVnDGSTI5z8 nkTvNSysMKQCIQDq/BQDTPmvWPl4AMuvePVfQm8Tz9SIiGzDsntmvZ00ETANBgkq hkiG9w0BAQsFAAOCAQEAM2V1jzL2pHTOpVoUAH++83rmAGEfI9BFOskgX6NopNpv Y5Fjjpq7k2U+xVWH4kdvKOEHLmft9IusZg9i54arVryAN5BsN+Yi7bGWZX3nj9Fd nPd+rMz6ZS7my/GV4llGKB8j+tfnMuCsPZjI5knqwhVZfyKz6TtD0nFp4Oh+QPR9 TR/bi9o8W8aKR/1O5x4fs11eC/8dPw+HP9zQ/UHepB0xIn3no+Av9T3c+gxE9SXQ zifjZE6/PHC2APJNTWkn0yPozsM0lc0WOMo6FZpCq42TmuoYrAORUNxsEJ9KHUua dDVlrzuFBBK3TwIIhM2ZgIxYrFe00bJU6lNSApEZCA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspYOwfGiI2uIIUCyZ0GP 5w3Qs4VS3Wye6/zWNu4lnO/hDR7sMXiDo+7OUoggqoNFpM+FKQa9+qNUV3qtAGfJ DwNdqny0z7RtFxjuBGbu2BRv2HBwXzMAVblx4SzgIqYSBZZirFGltYe4k2RlCR/j XL4h5EY37K6WhMiL9PA1LgPseE7EQYumVebPortT9+gbSpD+l/ujqz/VxXiMaHdC UEEr0BuL7oU9qVv4ZzgY7dZ0VfwDGkIIdtqJbxv6U9h9gzdnWS9vhj5jk9rgDsmW ckBuRtGPvX/AV0FU1Q217I4V+Ro4KpDeRPdnFE2k4ZykE50XSMN+7kjQJpoDLj7t cwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 315977491569955501515362075725698444996761 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-02 12:20:10 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 12:20:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmp-sp.handelsblatt.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22544414467495086300988094428896039184211804784508125204856615534565269014977164989924598971212405978326487750793442362295640603535407488648249886799228107705765984761748397131718912637496186505345604100670268452088376714808252276090823500655057380813388002923566774818460633707528833953326301109236959001252121112673263304293062608890682028957361777913888606235002735361083813858500487030791486593620719817434978431603050428863275394101560434215931565908450666281528307566687539412196133819796683360718088652263114649792404171643071209279456950050360807555149063628742187182838726031121163259858724675770024567172467 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9b96cfef1df6de374f8601660586895a6b28a55d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (310 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp-sp.handelsblatt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp-sp.pnn.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp-sp.tagesspiegel.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp-sp.wiwo.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.berufstest.zeit.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.cicero.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.monopol-magazin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp2.prod.academics.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp2.prod.academics.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp2.prod.academics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp2.prod.academics.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp2.prod.jobs.zeit.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent-cdn.zeit.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.btc-echo.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018af08bd6470000040300483046022100e54fb75d9b2bcf2c238ae5dcf7ab8cc9374ca8586c1348c0c85b5381b2ca8606022100f0149545c76874eb24cd5b4de8e8119168909b396c510c1856f2f21aa93757b3007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018af08bd68a0000040300473045022073a3eef1d90fc20bd9427eb0eb013dfa45670c6493239cfc9e44ef352cac30a4022100eafc14034cf9af58f97800cbaf78f55f426f13cfd488886cc3b27b66bd9d3411 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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