12bis3.de

Issued by ZeroSSL RSA Domain Secure Site CA

About this certificate

This digital certificate with serial number 33:51:5b:8e:2b:4f:29:c1:4b:be:ed:c5:84:d8:28:35 was issued on by ZeroSSL.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=12bis3.de

ZeroSSL

Organization: ZeroSSL
Country: AT

This certificate will expire on

Certificate Details

Serial Number (hex): 33:51:5b:8e:2b:4f:29:c1:4b:be:ed:c5:84:d8:28:35
Serial Number (int): 68213060793648597628322506532449691701
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: b8:7c:d0:f4:a3:8c:66:d0:4a:37:fc:a2:e8:b3:90:d1:b7:23:54:69
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6

Fingerprint (sha1): bd:bb:1a:4d:7c:29:00:60:00:10:c9:14:83:ee:29:49:f6:05:97:29
Fingerprint (sha256): c7:20:4f:2a:ba:41:61:c8:d8:7e:4c:98:f1:d6:b6:68:00:20:bd:6f:3d:8b:7a:52:60:91:18:ce:6e:04:3b:b8

Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt

Revocation information

OCSP Server: http://zerossl.ocsp.sectigo.com

Check the revocation status for certificate 12bis3.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 12bis3.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

12bis3.de
www.12bis3.de

Other certificates including the domain name 12bis3.de

(limited to 100 certificates)
www.tekom.de
tekom.56.stage.12bis3.de
www.tekom.de
12bis3.de
webmail.12bis3.de
www.tekom.de
12bis3.de
12bis3.de
webmail.12bis3.de
tekom.56.stage.12bis3.de
live.tekom.12bis3.de
www.kaercher-municipal.com
tekom.56.stage.12bis3.de
12bis3.de
www.kaercher-municipal.com
tekomconferences.72.stage.12bis3.de
12bis3.de
www.tekom.de
www.tekom.de
12bis3.de
www.tekom.de
tekom.56.stage.12bis3.de
webmail.12bis3.de
12bis3.de
webmail.12bis3.de
tekom.56.stage.12bis3.de
12bis3.de
www.tekom.de
apps.12bis3.de
webmail.12bis3.de
www.tekom.de
www.tekom.de
www.tekom.de
hoeveler.72.stage.12bis3.de
12bis3.de
aussicht.stage.12bis3.de
relaunch.maxholder.12bis3.de
hoeveler.72.stage.12bis3.de
hoeveler.72.stage.12bis3.de
*.12bis3.de
git.12bis3.de
12bis3.de
git.12bis3.de
git.12bis3.de
www.tekom.de
*.12bis3.de
webmail.12bis3.de
git.12bis3.de
webmail.12bis3.de
mail.12bis3.de
webmail.12bis3.de
relaunch.maxholder.12bis3.de
*.12bis3.de
webmail.12bis3.de
webmail.12bis3.de
git.12bis3.de
*.12bis3.de
relaunch.maxholder.12bis3.de
www.tekom.de
www.tekom.de
*.12bis3.de
tekom.56.stage.12bis3.de
www.tekom.de
www.tekom.de
git.12bis3.de
www.tekom.de
12bis3.de
www.tekom.de
tekom.56.stage.12bis3.de
*.12bis3.de
www.kaercher-municipal.com
12bis3.de
relaunch.maxholder.12bis3.de
12bis3.de
www.kaercher-municipal.com
git.12bis3.de
12bis3.de
cloud.12bis3.de
git.12bis3.de
www.tekom.de

Certificate

The complete raw certificate details for 12bis3.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHbzCCBVegAwIBAgIQM1FbjitPKcFLvu3FhNgoNTANBgkqhkiG9w0BAQwFADBL
MQswCQYDVQQGEwJBVDEQMA4GA1UEChMHWmVyb1NTTDEqMCgGA1UEAxMhWmVyb1NT
TCBSU0EgRG9tYWluIFNlY3VyZSBTaXRlIENBMB4XDTI0MDQxNjAwMDAwMFoXDTI0
MDcxNTIzNTk1OVowFDESMBAGA1UEAxMJMTJiaXMzLmRlMIICIjANBgkqhkiG9w0B
AQEFAAOCAg8AMIICCgKCAgEA3p0jlHLdTJUA/PjeLlFgIUngsF8V9Sz/14MnFuvS
fiU9KKXH5Q4z5v7Tl0MA6BLvSa8dtiMwlKyTeW4M2GLB3ix9lvq3jEvWkNn++7ER
Jkh90T9mcunB9pCaIebWXaPlwMoetkbbI5s/GCAKnVHKIwmOyRW+ExL21VZ6K3YI
yqwEfmq1vGu2YGUuMvlIeU99R9LX321yehrlGL8vzHK4Na9jg1+DTdkVxbF44DCH
sQ5le918bIlnezMDI0TPLXYb3V2n72WpKD2KGd69jiPda5H9c4Ms8Ja4cVwMXQfI
bMgF4a6n0v7FlHxGRXHzR31rR17mJ320QSVGPoqRPfe1BgrqLEgquijpexbi13Hc
+/yI++sWS6BpnlYnkWgeMmRnf4mNTGLYqiPE5X5jkYhdU0wQWPuLUh9gjixTGYpP
ghtNukrRKpn1PEHb1sG6t8E+PTa6IglCp9UQrkeecfZ//xc51KvUAJ3GALcLF7Jk
CsohRM5Ci7+AoPCs3pgI/H22C7XjgeGLdXZinbKlZTwIXuNrC5goNkhLapOJVXWi
rpb1adQt98GV5dU+GZ+WFs0VAi2ks1nGzHQAqIGa0NywWwCDY/QfYCGLzmc2S7oE
magxNJ9ASZTnqgg0iUIYj+h2NRvQBSHY8H0HoSdqNpcomcq7p4dtiuTBt9YDJJKl
EccCAwEAAaOCAoQwggKAMB8GA1UdIwQYMBaAFMjZeGii2Rlo1T1y3l8KPty1hoam
MB0GA1UdDgQWBBS4fND0o4xm0Eo3/KLos5DRtyNUaTAOBgNVHQ8BAf8EBAMCBaAw
DAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYD
VR0gBEIwQDA0BgsrBgEEAbIxAQICTjAlMCMGCCsGAQUFBwIBFhdodHRwczovL3Nl
Y3RpZ28uY29tL0NQUzAIBgZngQwBAgEwgYgGCCsGAQUFBwEBBHwwejBLBggrBgEF
BQcwAoY/aHR0cDovL3plcm9zc2wuY3J0LnNlY3RpZ28uY29tL1plcm9TU0xSU0FE
b21haW5TZWN1cmVTaXRlQ0EuY3J0MCsGCCsGAQUFBzABhh9odHRwOi8vemVyb3Nz
bC5vY3NwLnNlY3RpZ28uY29tMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAdv+I
Pwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGO5RFjZgAABAMARzBFAiBs
hcfY++SYs+8QbBWJ7JJK7WbqAcBYC5IgZ6Glfe26eAIhAJdWMidg/rHAYWjcwN6Y
TT74S4wn8B6KRzHNjYiJrFeuAHYAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8o
hez4ZG4AAAGO5RFjLgAABAMARzBFAiEAoeOOxwaKYK06yS+ALUX4DKzSxTEv3cM9
UKs1WyDpMg0CIFIEcskp97+hRY+ZJhjchi97mtuB1WnRFIhl9+8TGP8BMCMGA1Ud
EQQcMBqCCTEyYmlzMy5kZYINd3d3LjEyYmlzMy5kZTANBgkqhkiG9w0BAQwFAAOC
AgEAHoLtUrRkLtNHNHP6Vtu9uug9urJZwDS+LotpfnB0EpxNpH8SgBMkslQ6pk0U
xkciQqP2enI6tsd7KP0VR81mRRf6iJYykHpDef7uc7mJ8yD+b3YGeqiMIsSQRwzH
iRccYaiFNhs4k0Maa+ZR58Xsmwxo4eInJMA2iyatInHwRIMjRP+eCj5NBYdTC+31
QP569XW61vsDlAJEbbKQvp9a849S6Cb3OmjtKtEdHgahiO7TNsMkPA0SPtmc0Duj
3Cb6DXZhQ5X6rEN23y+fPhvWlIclfFgIRIz1aQ60td3ycS4k+n/yWw1D6cTGR5wx
J5H7zJP1UmjtGnzy2DQyLl09XFkp4Q9LPzrEAt1Z5fSlSJ4WVYcozc/HyZAlExQo
uDnJZP0wi4pvrWZgDtDlZ3DxEpaY+ET7RvqpXH+ph555AS2QTi3RtEZxdrNZuw8R
7+osfiI9O3rEQSywhjEqngyKwMNhj+UUzXfZ6128/8rIGNGGCST95uKk+JAiXq8i
0Ly8Aeqz/XGK9jWdHawWleckZw7bxziIAoyR8lT95q33Gy+F5fXjQaXRRl4mZVk7
Ax2LT4dNlG23qxAYJNz2l2ptSJiOMYx38gr6uDQ4xdZNdiUFCqNjCRSEI1xU1box
wmv+ttiLCHMwFgc6BNTaMllv2JppJGzWiOUSb8Qp67ok708=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 68213060793648597628322506532449691701
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '12bis3.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 908185167176683302719851464783264718962396477670936898338228556394128316354340035965288809013477740338397706772834464610061672888937647390430317819151832871268502965684078000544471962822614981281897833590043258084931101086869044015354109526698757242555154691248193921753159330945832378071392444889102166440694517071662974040119745284608008061725622615274367073763795580609856045899461533735701112958327253497204663734028982280565546620558223009020818473277321004762911206475331466288540098441785025276549211998003334249040499215601823558850618223278799666931356795808216765055224243800072766293971700879563000714371349430707637285988201378580689120698390991849050524999217111008500228915784846784277481677421387568927262475315196455211775560677878810476398552269585411808206932616492108542101226709039409196046162407294504077203271834844877082777421368290482841714521133557799990800996757218006190199692117549470815380532773019501301476205261261757722941138232447119906211766382593705530391901619242015178225975743153891233067319939091508412040739377181579805646619099553607612207921237221591276012312154660822670708534659198343315227033404849671853204340528109486551673395293285087520146395809575185594310315802424193112017564144071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b87cd0f4a38c66d04a37fca2e8b390d1b7235469
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ee5116366000004030047304502206c85c7d8fbe498b3ef106c1589ec924aed66ea01c0580b922067a1a57dedba780221009756322760feb1c06168dcc0de984d3ef84b8c27f01e8a4731cd8d8889ac57ae0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ee511632e0000040300473045022100a1e38ec7068a60ad3ac92f802d45f80cacd2c5312fddc33d50ab355b20e9320d0220520472c929f7bfa1458f992618dc862f7b9adb81d569d1148865f7ef1318ff01
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12bis3.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12bis3.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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