www.simson-project.com

Issued by R3

About this certificate

This digital certificate with serial number 04:5c:3f:04:b9:a8:54:39:08:4f:9a:4f:64:2d:82:b5:5b:b2 was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.simson-project.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5c:3f:04:b9:a8:54:39:08:4f:9a:4f:64:2d:82:b5:5b:b2
Serial Number (int): 379838887382271382731229007887160860564402
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 08:84:48:ac:c9:f2:78:4e:cd:f9:8e:0d:c5:d8:be:1f:a8:22:b9:82
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d1:c6:7e:0e:3c:24:4f:79:c2:ad:8e:f8:c3:2b:30:a6:56:02:4c:85
Fingerprint (sha256): c1:d2:28:8c:2b:50:56:d9:3c:05:43:9b:02:fa:02:9d:6d:21:7a:10:3e:cd:81:61:c7:c8:22:d8:c1:84:82:8e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.simson-project.com

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.simson-project.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.buckfast.xyz
*.dernbachtaler-mundharmonie.de
*.elke-thielsch.de
*.hsv-neustadt-glewe.de
*.hvc1858.de
*.hypnose-heilzentrum.de
*.kiga-bockhorst.de
*.la-pinata-loca.de
*.m-rinn.de
*.museen-am-niederrhein.de
*.rhodesian-ridgeback-ueberlingen.de
*.royalblues1987.de
*.schiessen-xanten.de
*.sydor.de
*.tomen-bau.de
*.traverse.at
bkwolfisberg.ch
buckfast.xyz
cp.2icecube.de
dashboard.2icecube.de
dernbachtaler-mundharmonie.de
dr-lehner.eu
elke-thielsch.de
ferien-in-dierhagen.de
hsv-neustadt-glewe.de
hvc1858.de
hypnose-heilzentrum.de
kbv-schoenach.de
kickeriky.de
kiga-bockhorst.de
la-pinata-loca.de
longecote.de
m-rinn.de
museen-am-niederrhein.de
psv-oschatz.de
rhodesian-ridgeback-ueberlingen.de
royalblues1987.de
schiessen-xanten.de
sparattacke.de
sydor.de
tauchenkohtao.de
tomen-bau.de
traverse.at
waltraudkrainz.com
www.burkinart.bf
www.hartmutrotzt.de
www.medien-dachsberg.at
www.naturheilpraxis-kapeluch.de
www.peterrehkop.com
www.simson-project.com

Other certificates including the domain name simson-project.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.simson-project.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIICDCCBvCgAwIBAgISBFw/BLmoVDkIT5pPZC2CtVuyMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMTYxNDAwNTNaFw0yNDAyMTQxNDAwNTJaMCExHzAdBgNVBAMT
Fnd3dy5zaW1zb24tcHJvamVjdC5jb20wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNC
AAQtdJ3FbDdIjJbWlvaUGSBLoLpHiNAw2RVNApZFEbXdXD5rknfWYd1p8iRAOLig
ZkT/3kGT6Uj1R/1CAHuR4qPJo4IF8jCCBe4wDgYDVR0PAQH/BAQDAgeAMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBQIhEisyfJ4Ts35jg3F2L4fqCK5gjAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDm
H6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5v
LmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCC
A/kGA1UdEQSCA/AwggPsgg4qLmJ1Y2tmYXN0Lnh5eoIfKi5kZXJuYmFjaHRhbGVy
LW11bmRoYXJtb25pZS5kZYISKi5lbGtlLXRoaWVsc2NoLmRlghcqLmhzdi1uZXVz
dGFkdC1nbGV3ZS5kZYIMKi5odmMxODU4LmRlghgqLmh5cG5vc2UtaGVpbHplbnRy
dW0uZGWCEyoua2lnYS1ib2NraG9yc3QuZGWCEyoubGEtcGluYXRhLWxvY2EuZGWC
CyoubS1yaW5uLmRlghoqLm11c2Vlbi1hbS1uaWVkZXJyaGVpbi5kZYIkKi5yaG9k
ZXNpYW4tcmlkZ2ViYWNrLXVlYmVybGluZ2VuLmRlghMqLnJveWFsYmx1ZXMxOTg3
LmRlghUqLnNjaGllc3Nlbi14YW50ZW4uZGWCCiouc3lkb3IuZGWCDioudG9tZW4t
YmF1LmRlgg0qLnRyYXZlcnNlLmF0gg9ia3dvbGZpc2JlcmcuY2iCDGJ1Y2tmYXN0
Lnh5eoIOY3AuMmljZWN1YmUuZGWCFWRhc2hib2FyZC4yaWNlY3ViZS5kZYIdZGVy
bmJhY2h0YWxlci1tdW5kaGFybW9uaWUuZGWCDGRyLWxlaG5lci5ldYIQZWxrZS10
aGllbHNjaC5kZYIWZmVyaWVuLWluLWRpZXJoYWdlbi5kZYIVaHN2LW5ldXN0YWR0
LWdsZXdlLmRlggpodmMxODU4LmRlghZoeXBub3NlLWhlaWx6ZW50cnVtLmRlghBr
YnYtc2Nob2VuYWNoLmRlggxraWNrZXJpa3kuZGWCEWtpZ2EtYm9ja2hvcnN0LmRl
ghFsYS1waW5hdGEtbG9jYS5kZYIMbG9uZ2Vjb3RlLmRlggltLXJpbm4uZGWCGG11
c2Vlbi1hbS1uaWVkZXJyaGVpbi5kZYIOcHN2LW9zY2hhdHouZGWCInJob2Rlc2lh
bi1yaWRnZWJhY2stdWViZXJsaW5nZW4uZGWCEXJveWFsYmx1ZXMxOTg3LmRlghNz
Y2hpZXNzZW4teGFudGVuLmRlgg5zcGFyYXR0YWNrZS5kZYIIc3lkb3IuZGWCEHRh
dWNoZW5rb2h0YW8uZGWCDHRvbWVuLWJhdS5kZYILdHJhdmVyc2UuYXSCEndhbHRy
YXVka3JhaW56LmNvbYIQd3d3LmJ1cmtpbmFydC5iZoITd3d3LmhhcnRtdXRyb3R6
dC5kZYIXd3d3Lm1lZGllbi1kYWNoc2JlcmcuYXSCH3d3dy5uYXR1cmhlaWxwcmF4
aXMta2FwZWx1Y2guZGWCE3d3dy5wZXRlcnJlaGtvcC5jb22CFnd3dy5zaW1zb24t
cHJvamVjdC5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQC
BIH1BIHyAPAAdgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYvY
pjb1AAAEAwBHMEUCIQCDvwh4+DJfadqFwaLq7evcW1IaKDLueXCr2qeavDAMrAIg
ZffHdvEF0jaEB1AX5neq4MCRLmiZ+KOZZUt8FHy57hcAdgB2/4g/Crb7lVHCYcz1
h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYvYpjdOAAAEAwBHMEUCIQCbrsu6hhBz3w0E
AaouAjAX/HfOq7OTU9XgRxyFvfQFJAIgPTFZl9JBGbqi0ihTXFREE++4qm10aEw7
KQx29D1MOfYwDQYJKoZIhvcNAQELBQADggEBAJyLR/gfnYD9QSsRVyGDn4MZyyJq
O7UafADvvB3c5rv6/6pcb/aKC0ULleRFfXTTweqOzsSm1YUK7trKJ8ByyH3KjUK0
BLVxQ6jrmDjH98e4Y/5okhj2VhCp1Os8EZo5ioigEKlN+KiQwz2brhwqEx3I3LLg
KUdaoRL050HICWcVZuYQt5rOU0smlmAiu5ZG7E2w6v/ATN9pVGZIoBCmFJ2P5JJq
Ko2nMi8YNWo9f4YLt1NO6ovXeLy/xOxneAoIUBHkVuIkEBnTWq271CpfKsbgtW+n
MinPEw/LPxL4/O2X1HWCt5jngmjyuZXL1ftYNBt8QL7ZXsVc4CX7nwUBXzY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAELXSdxWw3SIyW1pb2lBkgS6C6R4jQ
MNkVTQKWRRG13Vw+a5J31mHdafIkQDi4oGZE/95Bk+lI9Uf9QgB7keKjyQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379838887382271382731229007887160860564402
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 14:00:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 14:00:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.simson-project.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00042d749dc56c37488c96d696f69419204ba0ba4788d030d9154d02964511b5dd5c3e6b9277d661dd69f2244038b8a06644ffde4193e948f547fd42007b91e2a3c9
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							088448acc9f2784ecdf98e0dc5d8be1fa822b982
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1008 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buckfast.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dernbachtaler-mundharmonie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elke-thielsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsv-neustadt-glewe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hvc1858.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hypnose-heilzentrum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiga-bockhorst.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.la-pinata-loca.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m-rinn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.museen-am-niederrhein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rhodesian-ridgeback-ueberlingen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalblues1987.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schiessen-xanten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sydor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tomen-bau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.traverse.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bkwolfisberg.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buckfast.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.2icecube.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.2icecube.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dernbachtaler-mundharmonie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-lehner.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elke-thielsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferien-in-dierhagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsv-neustadt-glewe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvc1858.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypnose-heilzentrum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbv-schoenach.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kickeriky.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiga-bockhorst.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la-pinata-loca.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longecote.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-rinn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museen-am-niederrhein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psv-oschatz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhodesian-ridgeback-ueberlingen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalblues1987.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schiessen-xanten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparattacke.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sydor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tauchenkohtao.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tomen-bau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traverse.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waltraudkrainz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burkinart.bf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hartmutrotzt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medien-dachsberg.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturheilpraxis-kapeluch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterrehkop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simson-project.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bd8a636f5000004030047304502210083bf0878f8325f69da85c1a2eaedebdc5b521a2832ee7970abdaa79abc300cac022065f7c776f105d23684075017e677aae0c0912e6899f8a399654b7c147cb9ee1700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bd8a6374e00000403004730450221009baecbba861073df0d0401aa2e023017fc77ceabb39353d5e0471c85bdf4052402203d315997d24119baa2d228535c544413efb8aa6d74684c3b290c76f43d4c39f6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009c8b47f81f9d80fd412b115721839f8319cb226a3bb51a7c00efbc1ddce6bbfaffaa5c6ff68a0b450b95e4457d74d3c1ea8ecec4a6d5850aeedaca27c072c87dca8d42b404b57143a8eb9838c7f7c7b863fe689218f65610a9d4eb3c119a398a88a010a94df8a890c33d9bae1c2a131dc8dcb2e029475aa112f4e741c809671566e610b79ace534b26966022bb9646ec4db0eaffc04cdf69546648a010a6149d8fe4926a2a8da7322f18356a3d7f860bb7534eea8bd778bcbfc4ec67780a085011e456e2241019d35aadbbd42a5f2ac6e0b56fa73229cf130fcb3f12f8fced97d47582b798e78268f2b995cbd5fb58341b7c40bed95ec55ce025fb9f05015f36