www.sfj.de

Issued by STRATO SSL - G4

About this certificate

This digital certificate with serial number 49:bf:b6:58:72:f2:3d:47:22:53:c7:ca:6a:43:5f:f5 was issued on by STRATO AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.sfj.de

STRATO AG

Organization: STRATO AG
Organization unit: Domain Validated SSL
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 49:bf:b6:58:72:f2:3d:47:22:53:c7:ca:6a:43:5f:f5
Serial Number (int): 98029070798479317202834009500124667893
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c9:54:47:be:bd:cc:8f:b4:fb:4e:27:5a:0e:dc:bc:a9:5b:d9:ab:b9

Fingerprint (sha1): 76:2c:bc:01:df:3b:8b:bf:f7:b6:0b:fb:9f:cc:8e:be:99:d9:73:c5
Fingerprint (sha256): a7:77:98:76:d1:6d:c3:ec:a7:ef:43:5f:c5:97:71:05:f9:88:12:78:44:e2:03:85:67:80:a6:8c:e5:ab:77:1b

Issuing Certificate URL: http://strato-aia.digitalcertvalidation.com/stratog4.crt

Revocation information

OCSP Server: http://strato-ocsp.digitalcertvalidation.com
CRL Distribution Point: http://strato-crl.digitalcertvalidation.com/stratog4.crl

Check the revocation status for certificate www.sfj.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sfj.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sfj.de
sfj.de

Other certificates including the domain name sfj.de

(limited to 100 certificates)
dbadmin.kai307.tv
info.canaltoursmada.net
testshopgeko.lima-city.de
dein-hebammensupport.de
kdl.sfj.de
www.qiao3210.lima-city.de
webstore.einsatzdisplay.de
regaver.lima-city.de
www.sisoft.lima-city.de
wordpress3.icn-international.com
testapi.nikokranz.de
www.dwu.lima-city.de
smtp2.enjoi-sailing.com
kdl.sfj.de
shop3.sfj.de
www.autohauskastinger-ulm.lima-city.de
www.adamar-trio.de
shop.tjark.pro
tanzstudio-pharao.lima-city.de
www.stabilerolaf.lima-city.de
sr-webspace.lima-city.de
www.hautop.lima-city.de
www.11h55.de
frityl.lima-city.de
legoproject.lima-city.de
www.testprojekt-nov-19.4lima.de
www.ultras94.lima-city.de
infrarotheizung.sfj.de
www.testomatiko.clan.rip
www.fraber.lima-city.de
kinderdeslichts.sfj.de
www.prager-bodenstein.at
*.dhs38.de
xirmed.lima-city.de
intranet.icekey.de
www.4list.ovh
matthiaskrach.lima-city.de
www.tera.lima-city.de
www.worldwide-cargo.madless.net
www.martin-lindlbauer.de
skyribartest.lima-city.de
bns-fi.de.cool
data.hypnobirthing-vinschgau.it
www.eckert.lima-city.de
xvnvbfd.lima-city.de
www.sfj.de
*.rescuegel.eu
www.spfaffe.lima-city.de
intranet.radiospeed.eu
mon-capu.clan.rip
ichteste1.lima-city.de
sfj.de
lotwr.sfj.de
ultimate-cdn.runstorage.com
www.sfj.de
www.code.fygle.eu
reachsocial-staging.lima-city.de
*.annaheupel.de
*.arditbasha.de
www.lotwr.sfj.de
sampsd.lima-city.de
danis-psy-land.lima-city.de
flemming.lima-city.de
relay2.moinalex.de
projekttage-elemente-der-welt.de.cool
www.dinah-villar.lima-city.de
hechma.1337.pictures
kyrillow.net
www.youtube.playkev.de
www.sfj.de
schnorrinator.lima-city.de
www.4list.ovh
kdl.sfj.de
carwash-sarstedt.lima-city.de
www.dwcv.lima-city.de
www.cutstyler.lima-city.de
divingweather.4lima.at
www.lotwr.sfj.de
www.zeitung.juenger-radio.de
www.injektionsduebel.sfj.de
lotwr.sfj.de
pma.albertus-dienste.de
www.meerliebe.lima-city.de
*.chor-cantabile.de
antisemit.me
www.sfj.de
www.anne-sauter180924.lima-city.de
*.maidemanti.de
skynet101.lima-city.de
www.ingridblomqvist.lima-city.de
donkanallie89.lima-city.de
www.hobbyhuus.lima-city.de
www.lexalisa.lima-city.de
www.sfj.de
coliamo.4lima.de
*.ankrebo.com
www.ilona-mabun.lima-city.de
shop3.sfj.de
lotwr.sfj.de
sfj.de

Certificate

The complete raw certificate details for www.sfj.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF/zCCBOegAwIBAgIQSb+2WHLyPUciU8fKakNf9TANBgkqhkiG9w0BAQsFADBa
MQswCQYDVQQGEwJERTESMBAGA1UEChMJU1RSQVRPIEFHMR0wGwYDVQQLExREb21h
aW4gVmFsaWRhdGVkIFNTTDEYMBYGA1UEAxMPU1RSQVRPIFNTTCAtIEc0MB4XDTE3
MDMxMjAwMDAwMFoXDTE4MDQxMTIzNTk1OVowFTETMBEGA1UEAwwKd3d3LnNmai5k
ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKg/1W/1fMfJVZ5rszsW
mP3eWrkligIS0gOS5zjiTzCzRXUu1YRyzo/Z504yW6HXJGxwn1PsTv4SR75HQARe
rqFpb9QGGnxwtM0W9noEPzRNop3kEWOc8gSaNHIBunjWIPDLL4S9M4UTvHayaftM
+ClAw3z54uFWGu/c4gHJ6DS+VvyIWfOFPCqtj78wFFbxyVK7E911exSDpCovT80N
nkKO7JILb/JcHJv4cZwHP3L458QuWvaFxG2kvVDVok7w5HWZqytLNmvGzih+uAYz
QLhbZ9g0zhNJ5xi635v2GFgOKTEqGRyXf6D8bGKBsZZduQD6QhgbNXVLDOsUrc+J
ckECAwEAAaOCAwQwggMAMB0GA1UdEQQWMBSCCnd3dy5zZmouZGWCBnNmai5kZTAJ
BgNVHRMEAjAAMEkGA1UdHwRCMEAwPqA8oDqGOGh0dHA6Ly9zdHJhdG8tY3JsLmRp
Z2l0YWxjZXJ0dmFsaWRhdGlvbi5jb20vc3RyYXRvZzQuY3JsMIGdBgNVHSAEgZUw
gZIwgY8GBmeBDAECATCBhDA/BggrBgEFBQcCARYzaHR0cHM6Ly93d3cuZ2VvdHJ1
c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMEEGCCsGAQUFBwICMDUM
M2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9s
ZWdhbDAfBgNVHSMEGDAWgBTJVEe+vcyPtPtOJ1oO3LypW9mruTAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGQBggrBgEFBQcB
AQSBgzCBgDA4BggrBgEFBQcwAYYsaHR0cDovL3N0cmF0by1vY3NwLmRpZ2l0YWxj
ZXJ0dmFsaWRhdGlvbi5jb20wRAYIKwYBBQUHMAKGOGh0dHA6Ly9zdHJhdG8tYWlh
LmRpZ2l0YWxjZXJ0dmFsaWRhdGlvbi5jb20vc3RyYXRvZzQuY3J0MIIBBAYKKwYB
BAHWeQIEAgSB9QSB8gDwAHYA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbs
vswAAAFawXQ/TgAABAMARzBFAiBRzAAAJ06acgnpidenCFiPz95tZZJrgGRtN3Gr
g6jfsgIhAMDJjQTYgeJA5/oD5JAW0oRshAF5Zlyw6y1uVpVMVZpSAHYApLkJkLQY
WBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFawXQ/hgAABAMARzBFAiAiiWlW
iG1YkxDL0hDbZDtl8Znx1cqiXLOZ4Ut3aEmhkwIhAOGQ0jpLmePS+5QsMQy1UzYF
/XctTJRTurep6PQI4tpGMA0GCSqGSIb3DQEBCwUAA4IBAQA6381Yb6h3aGGQchA2
YOMGl82uWozNYk6UTZdhMaF1lAC1rFaw7pijWvxmg9okcZ+TDYOcVkrEy+99Al67
6v5jEi2YqtNDyr7263vzYUxXarb5/HPeVXcGpym5J4YS7WvCfIl3N6NrlOTNCy7y
RLhd/Mkv+QNgkq24xSVNP1NGA33slwuNSYvdQWjHWe1O9KhiIK75eMrgCOfpHqfF
vGnf0TsXf1x26RcaHdZzVRTIhni4lJnz0qWsf0gwP9FHzqVidCpW1Sm/Z4cJRJPK
mHDd8hjUksAUxAoquxuHg2YshW0j5ObZgOlOhn7TMIc6qTXokCgC1TOXNFOCRWDi
q66h
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD/Vb/V8x8lVnmuzOxaY
/d5auSWKAhLSA5LnOOJPMLNFdS7VhHLOj9nnTjJbodckbHCfU+xO/hJHvkdABF6u
oWlv1AYafHC0zRb2egQ/NE2ineQRY5zyBJo0cgG6eNYg8MsvhL0zhRO8drJp+0z4
KUDDfPni4VYa79ziAcnoNL5W/IhZ84U8Kq2PvzAUVvHJUrsT3XV7FIOkKi9PzQ2e
Qo7skgtv8lwcm/hxnAc/cvjnxC5a9oXEbaS9UNWiTvDkdZmrK0s2a8bOKH64BjNA
uFtn2DTOE0nnGLrfm/YYWA4pMSoZHJd/oPxsYoGxll25APpCGBs1dUsM6xStz4ly
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 98029070798479317202834009500124667893
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'STRATO AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'STRATO SSL - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.sfj.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21239512824484295725668854564893054412039391248140259678474820549223075240453423841649486219817003373129299786341688448593031095729606076884833033475204250323476564420624988109448096054251989186039689053847569254330324532458965492341082006223994774018755418216239995861564440880137174916066970558564264911528678555716936246273070841847436636541824992866274216103099172165511612678712640894098347128092003395459822498502969272442396855228327889868857178213308259458864237143400801565916802757157190610223685612900768420133665288041470161201773613942336308326695016039789472583155121221484320714049333777467581502419521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfj.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://strato-crl.digitalcertvalidation.com/stratog4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c95447bebdcc8fb4fb4e275a0edcbca95bd9abb9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://strato-ocsp.digitalcertvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://strato-aia.digitalcertvalidation.com/stratog4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015ac1743f4e0000040300473045022051cc0000274e9a7209e989d7a708588fcfde6d65926b80646d3771ab83a8dfb2022100c0c98d04d881e240e7fa03e49016d2846c840179665cb0eb2d6e56954c559a52007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015ac1743f860000040300473045022022896956886d589310cbd210db643b65f199f1d5caa25cb399e14b776849a193022100e190d23a4b99e3d2fb942c310cb5533605fd772d4c9453bab7a9e8f408e2da46
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003adfcd586fa87768619072103660e30697cdae5a8ccd624e944d976131a1759400b5ac56b0ee98a35afc6683da24719f930d839c564ac4cbef7d025ebbeafe63122d98aad343cabef6eb7bf3614c576ab6f9fc73de557706a729b9278612ed6bc27c897737a36b94e4cd0b2ef244b85dfcc92ff9036092adb8c5254d3f5346037dec970b8d498bdd4168c759ed4ef4a86220aef978cae008e7e91ea7c5bc69dfd13b177f5c76e9171a1dd6735514c88678b89499f3d2a5ac7f48303fd147cea562742a56d529bf6787094493ca9870ddf218d492c014c40a2abb1b8783662c856d23e4e6d980e94e867ed330873aa935e8902802d533973453824560e2abaea1