easypeasy.steinberg.de
- Steinberg Media Technologies GmbH -
Issued by StartCom Class 2 Primary Intermediate Server CA
About this certificate
This digital certificate with serial number 07:60:c5:c6:d9:e8:ed was issued on by StartCom Ltd..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Compliant certificates SHOULD NOT use the noticeRef option (RFC 5280: 4.2.1.4)
- Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
Steinberg Media Technologies GmbH
Organization:
Steinberg Media Technologies GmbH
State / Province:
Hamburg
Locality: Hamburg
Country: DE
Locality: Hamburg
Country: DE
StartCom Ltd.
Organization:
StartCom Ltd.
Organization unit: Secure Digital Certificate Signing
Organization unit: Secure Digital Certificate Signing
Country:
IL
This certificate has expire since
Certificate Details
Serial Number (hex): 07:60:c5:c6:d9:e8:edSerial Number (int): 2076727397968109
Serial Number lenght: 51 bits, 7 octets
SubjectKeyId: 7b:11:ae:80:c3:50:ca:b9:fb:a8:6b:49:f1:f0:3a:98:0d:e1:a1:f3
AuthorityKeyId: 11:db:23:45:fd:54:cc:6a:71:6f:84:8a:03:d7:be:f7:01:2f:26:86
Fingerprint (sha1): f3:fc:a8:f8:2e:4e:10:54:75:7a:c5:9e:31:b3:cb:0f:04:2d:52:97
Fingerprint (sha256): c2:92:e3:81:8f:4c:d3:f4:06:fd:9a:d0:36:3f:ec:b2:33:74:d7:1c:36:59:63:1c:3c:be:33:90:e0:ee:69:16
Issuing Certificate URL: http://aia.startssl.com/certs/sub.class2.server.ca.crt
Revocation information
OCSP Server: http://ocsp.startssl.com/sub/class2/server/caCRL Distribution Point: http://crl.startssl.com/crt2-crl.crl
Check the revocation status for certificate easypeasy.steinberg.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for easypeasy.steinberg.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Key Agreement
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
easypeasy.steinberg.de
steinberg.de
steinberg.de
Other certificates including the domain name steinberg.de
(limited to 100 certificates)
helpcenter.steinberg.de
traveler.steinberg.de
newbouncer.steinberg.de
www.steinberg.net
helpcenter.steinberg.de
traveler.steinberg.de
www.steinberg.de
*.steinberg.de
mailgw.steinberg.de
webmail.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
webmail.steinberg.de
*.steinberg.de
helpcenter.steinberg.de
testrail.steinberg.de
www.steinberg.de
insektarium.steinberg.de
www.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
www.steinberg.net
*.steinberg.de
helpcenter.steinberg.de
www.steinberg.net
helpcenter.steinberg.de
helpdesk.steinberg.de
helpdesk.steinberg.de
*.steinberg.de
videoconf.steinberg.de
confluence.steinberg.de
testrail.steinberg.de
webmail.steinberg.de
*.steinberg.de
helpcenter.steinberg.de
www.steinberg.net
melitta.steinberg.de
*.steinberg.de
helpcenter.steinberg.de
confluence.steinberg.de
sts.steinberg.de
srv-ftp2.steinberg.de
newbouncer.steinberg.de
insektarium.steinberg.de
confluence.steinberg.de
*.steinberg.de
helpcenter.steinberg.de
sts.steinberg.de
newbouncer.steinberg.de
helpcenter.steinberg.de
easypeasy.steinberg.de
*.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
webcon.steinberg.de
*.steinberg.de
webmail.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
*.steinberg.de
memoq.steinberg.de
*.steinberg.de
ensicaen.steinberg.de
traveler.steinberg.de
newbouncer.steinberg.de
www.steinberg.net
helpcenter.steinberg.de
traveler.steinberg.de
www.steinberg.de
*.steinberg.de
mailgw.steinberg.de
webmail.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
webmail.steinberg.de
*.steinberg.de
helpcenter.steinberg.de
testrail.steinberg.de
www.steinberg.de
insektarium.steinberg.de
www.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
www.steinberg.net
*.steinberg.de
helpcenter.steinberg.de
www.steinberg.net
helpcenter.steinberg.de
helpdesk.steinberg.de
helpdesk.steinberg.de
*.steinberg.de
videoconf.steinberg.de
confluence.steinberg.de
testrail.steinberg.de
webmail.steinberg.de
*.steinberg.de
helpcenter.steinberg.de
www.steinberg.net
melitta.steinberg.de
*.steinberg.de
helpcenter.steinberg.de
confluence.steinberg.de
sts.steinberg.de
srv-ftp2.steinberg.de
newbouncer.steinberg.de
insektarium.steinberg.de
confluence.steinberg.de
*.steinberg.de
helpcenter.steinberg.de
sts.steinberg.de
newbouncer.steinberg.de
helpcenter.steinberg.de
easypeasy.steinberg.de
*.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
webcon.steinberg.de
*.steinberg.de
webmail.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
*.steinberg.de
memoq.steinberg.de
*.steinberg.de
ensicaen.steinberg.de
Certificate
The complete raw certificate details for easypeasy.steinberg.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHqjCCBpKgAwIBAgIHB2DFxtno7TANBgkqhkiG9w0BAQsFADCBjDELMAkGA1UE BhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBE aWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENs YXNzIDIgUHJpbWFyeSBJbnRlcm1lZGlhdGUgU2VydmVyIENBMB4XDTE1MDUyNjE4 NDUyMFoXDTE3MDUyNjEwMjkyM1owgaYxCzAJBgNVBAYTAkRFMRAwDgYDVQQIEwdI YW1idXJnMRAwDgYDVQQHEwdIYW1idXJnMSowKAYDVQQKEyFTdGVpbmJlcmcgTWVk aWEgVGVjaG5vbG9naWVzIEdtYkgxHzAdBgNVBAMTFmVhc3lwZWFzeS5zdGVpbmJl cmcuZGUxJjAkBgkqhkiG9w0BCQEWF3Bvc3RtYXN0ZXJAc3RlaW5iZXJnLmRlMIIC IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtIfrddh+H14PpBPQR45EXmk4 VijTIuuXXotuXW57cZS27LTux2a2cayczybV60aum6lGNzahYeVzDrbRXxEjGqiW aLByzYS4mKlUNwVy5p2aE1ZkfkxUn2nujZ5djVjxEUQvPgY69uFAzM/2RyYCBfJc p3Py8o+/LTVSkdCWYXOkvMdOCB/kvd6+nfs8OthhN3l7/DtINAg2xtq7xxboS4hF XwPX9KgWVK3T9eog9fXp0rXaNEsKX3vMvYDZ/X6qM+QRY7g7LItmzX3QEZEUaDX9 ehtv++Hj4NycZj2XZAoAw/kzFE/wOiNWx8f/rAJbVSrEEZenNOkdbxoHslt8LMDo GYU/jcRtTF6t6QSrzYdHH6aclVpudAB4ElOtqeY2tL1iXFTELNMhtwSy/pVI7PC+ C3ufdWU7EeiwfGYlhF8z9VA5u+cmyhf42VKVzCPEyMNcAigi3bENyOTvsIJVKITu e/GSiWNRwrDsrJGxpD3eE6U0xHI5HQ4xeFNwEWNH9YVhjPGq0q0tg892UPz7Mrc2 BVOJSbU44LkJk0rwZkxB9bP+QJLEGP9ne5YrDIBNsJr9jjVu6VSFhY/gyawr6gs4 GBs886vBGHqnJ81s9nE56wrPrPQ0D/6JFd12wJmff55KinVwmXSXyQgDTvlDa3mZ hKbUmv5B1zo+hHazWP0CAwEAAaOCAvMwggLvMAkGA1UdEwQCMAAwCwYDVR0PBAQD AgOoMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAdBgNVHQ4EFgQUexGu gMNQyrn7qGtJ8fA6mA3hofMwHwYDVR0jBBgwFoAUEdsjRf1UzGpxb4SKA9e+9wEv JoYwLwYDVR0RBCgwJoIWZWFzeXBlYXN5LnN0ZWluYmVyZy5kZYIMc3RlaW5iZXJn LmRlMIIBVgYDVR0gBIIBTTCCAUkwCAYGZ4EMAQICMIIBOwYLKwYBBAGBtTcBAgMw ggEqMC4GCCsGAQUFBwIBFiJodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3ku cGRmMIH3BggrBgEFBQcCAjCB6jAnFiBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1 dGhvcml0eTADAgEBGoG+VGhpcyBjZXJ0aWZpY2F0ZSB3YXMgaXNzdWVkIGFjY29y ZGluZyB0byB0aGUgQ2xhc3MgMiBWYWxpZGF0aW9uIHJlcXVpcmVtZW50cyBvZiB0 aGUgU3RhcnRDb20gQ0EgcG9saWN5LCByZWxpYW5jZSBvbmx5IGZvciB0aGUgaW50 ZW5kZWQgcHVycG9zZSBpbiBjb21wbGlhbmNlIG9mIHRoZSByZWx5aW5nIHBhcnR5 IG9ibGlnYXRpb25zLjA1BgNVHR8ELjAsMCqgKKAmhiRodHRwOi8vY3JsLnN0YXJ0 c3NsLmNvbS9jcnQyLWNybC5jcmwwgY4GCCsGAQUFBwEBBIGBMH8wOQYIKwYBBQUH MAGGLWh0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbS9zdWIvY2xhc3MyL3NlcnZlci9j YTBCBggrBgEFBQcwAoY2aHR0cDovL2FpYS5zdGFydHNzbC5jb20vY2VydHMvc3Vi LmNsYXNzMi5zZXJ2ZXIuY2EuY3J0MCMGA1UdEgQcMBqGGGh0dHA6Ly93d3cuc3Rh cnRzc2wuY29tLzANBgkqhkiG9w0BAQsFAAOCAQEAN7sGruzpAb4wLlAWNTPjTkg+ 9xSmALE4DgY7G5hzRF/bEWwhfV7N7TcL/gSkZ+KalAJhVUhUBHq42wc9lNoQFxDe H1czrnqN+ynjbjalUGzTJ8yu/MhH0wJsy1bmATQSuiEQqOHk2nXbJLbLDIQCizgd 1r/wAf0gJibwfZ7NpWgfE0B1O+RF2vfn0xzwfoTAzObWI1SJygE/mETZCjtJJ7W6 2Delx0fuvoW5IVjNp9ZOEF7A1Eoal3jMfR1JjgwzifvwjpgAP3qC/ObVRQyuqNtC s1SPuc/+kQdELk9hg97PvAguDqWyCFiuBuxXc+Lb/L3pjCpmli47WYtiR3+n8w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtIfrddh+H14PpBPQR45E Xmk4VijTIuuXXotuXW57cZS27LTux2a2cayczybV60aum6lGNzahYeVzDrbRXxEj GqiWaLByzYS4mKlUNwVy5p2aE1ZkfkxUn2nujZ5djVjxEUQvPgY69uFAzM/2RyYC BfJcp3Py8o+/LTVSkdCWYXOkvMdOCB/kvd6+nfs8OthhN3l7/DtINAg2xtq7xxbo S4hFXwPX9KgWVK3T9eog9fXp0rXaNEsKX3vMvYDZ/X6qM+QRY7g7LItmzX3QEZEU aDX9ehtv++Hj4NycZj2XZAoAw/kzFE/wOiNWx8f/rAJbVSrEEZenNOkdbxoHslt8 LMDoGYU/jcRtTF6t6QSrzYdHH6aclVpudAB4ElOtqeY2tL1iXFTELNMhtwSy/pVI 7PC+C3ufdWU7EeiwfGYlhF8z9VA5u+cmyhf42VKVzCPEyMNcAigi3bENyOTvsIJV KITue/GSiWNRwrDsrJGxpD3eE6U0xHI5HQ4xeFNwEWNH9YVhjPGq0q0tg892UPz7 Mrc2BVOJSbU44LkJk0rwZkxB9bP+QJLEGP9ne5YrDIBNsJr9jjVu6VSFhY/gyawr 6gs4GBs886vBGHqnJ81s9nE56wrPrPQ0D/6JFd12wJmff55KinVwmXSXyQgDTvlD a3mZhKbUmv5B1zo+hHazWP0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2076727397968109 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Secure Digital Certificate Signing' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 2 Primary Intermediate Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-26 18:45:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-26 10:29:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamburg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamburg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Steinberg Media Technologies GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'easypeasy.steinberg.de' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 736501964551794692623814458753329422238258023427181230057340849016732067863657654087726326370629410297001599799926572763902280312545895760595000030795952033138375067889383113757590520018448196727209556836618558590456401791982433279569047098413654821197055469255815065924203645055761039625884720109434666054635942865590759724529990770451623194910602033174624104744364069416908365128468968888768138677094568041003693717787534464038795635904092569599508127239939943015792071181235895840491970481466666509271196244337336385964556387979340146983239661388982520270151741223646672413364265575227308705524505023218972782299339010301140901365198982612513305140245003679766225908823534206939119848082238406539511995729705421069563026728575364072277603921216864382761757668068089262037749546641906313613234381399504691764983976938912563713063433259839787028819698001841592987841386446064389258907308288883034919250988693541908837476046091595366823358645601831961035439595325130675640254234790301873076644286524469957112508403442404053165608460929609342341160249580065173519608819499247780938303478478035048156883507007846469490776920868526947961367438047512913811966927186896485834891408956928131441031484378082762560925526256884546508474767613 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 03a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7b11ae80c350cab9fba86b49f1f03a980de1a1f3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 11db2345fd54cc6a716f848a03d7bef7012f2686 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easypeasy.steinberg.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steinberg.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (333 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startssl.com/policy.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'StartCom Certification Authority' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [84 104 105 115 32 99 101 114 116 105 102 105 99 97 116 101 32 119 97 115 32 105 115 115 117 101 100 32 97 99 99 111 114 100 105 110 103 32 116 111 32 116 104 101 32 67 108 97 115 115 32 50 32 86 97 108 105 100 97 116 105 111 110 32 114 101 113 117 105 114 101 109 101 110 116 115 32 111 102 32 116 104 101 32 83 116 97 114 116 67 111 109 32 67 65 32 112 111 108 105 99 121 44 32 114 101 108 105 97 110 99 101 32 111 110 108 121 32 102 111 114 32 116 104 101 32 105 110 116 101 110 100 101 100 32 112 117 114 112 111 115 101 32 105 110 32 99 111 109 112 108 105 97 110 99 101 32 111 102 32 116 104 101 32 114 101 108 121 105 110 103 32 112 97 114 116 121 32 111 98 108 105 103 97 116 105 111 110 115 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/crt2-crl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com/sub/class2/server/ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sub.class2.server.ca.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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