brezelkoenig.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:66:92:b0:71:f5:d8:26:9a:3a:ab:93:07:35:9a:35:57:b6 was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=brezelkoenig.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:66:92:b0:71:f5:d8:26:9a:3a:ab:93:07:35:9a:35:57:b6
Serial Number (int): 296240642664238243518505274922533452601270
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 73:35:7d:bd:1b:fe:9e:e7:d9:9b:69:2c:f6:f7:ba:1b:52:eb:2d:01
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 27:6b:70:d2:e4:99:1d:df:c4:1a:fe:a6:02:16:a0:25:b4:8f:cb:b1
Fingerprint (sha256): ca:bf:60:df:c2:e4:a0:6a:d6:a8:0f:c3:d8:31:e1:74:97:65:09:59:3d:70:ad:9c:1d:ff:af:67:5d:c9:4b:5c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate brezelkoenig.ch

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brezelkoenig.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bretzel.ch
bretzelkoenig.ch
bretzelkoenig.de
brezelkoenig.ch
pretzelking.us
swissbretzel.ch
swissbrezel.ch
swisspretzel.ch
swissprezel.ch
www.bretzel.ch
www.bretzelkoenig.ch
www.bretzelkoenig.de
www.brezelkoenig.ch
www.pretzelking.us
www.swissbretzel.ch
www.swissbrezel.ch
www.swisspretzel.ch
www.swissprezel.ch
www.xn--bretzelknig-yfb.ch
www.xn--brezelknig-kcb.com
xn--bretzelknig-yfb.ch
xn--brezelknig-kcb.com

Other certificates including the domain name brezelkoenig.ch

(limited to 100 certificates)
brezelkoenig.ch
ditsch.de
webmail.brezelkoenig.ch
brezelkoenig.ch
tezaaa.com
ditsch.de
brezelkoenig.ch
the22murdersofmadisonmay.com
app-staging.getayra.com
brezelkoenig.ch
github-topstars.cawpea.me
octosdigital.com
webmail.brezelkoenig.ch
ditsch.de
sriharsha.dev
ghneurosurgicalalliance.org
www.marcosdourado.com
login.staging.brezelkoenig.ch
aarnavjindal.com
gokulamdroptaxi.com
brezelkoenig.ch
brezelkoenig.ch
brezelkoenig.ch
brezelkoenig.ch
www.softwarelc.com
brezelkoenig.ch
brezelkoenig.ch
ditsch.de
remote.brezelkoenig.ch
brezelkoenig.ch
www.scandiac.us
login-test.new.de
www.mairimed.com
auth.gluegroups.com
webmail.brezelkoenig.ch
tumascota2022.com
brezelkoenig.ch
ditsch.de
brezelkoenig.ch
brezelkoenig.ch
tezaaa.com
www.zmy.pw
algoritmo9.site
ghneurosurgicalalliance.org
login.staging.brezelkoenig.ch
oivis.com
brezelkoenig.ch
ditsch.de
app.brezelkoenig.ch
brezelkoenig.ch
brezelkoenig.ch
brezelkoenig.ch
*.brezelkoenig.ch
web.feedad.com
ditsch.de
www.allinonefitness.ch
bingo.remotesocial.app
design.joybird.com
brezelkoenig.ch
app.caddygo.ru
brezelkoenig.ch
webmail.brezelkoenig.ch
www.raugh.club
brezelkoenig.ch
ditsch.de
blog.pirika.org
brezelkoenig.ch
brezelkoenig.ch
letspark.gr
brezelkoenig.ch
brezelkoenig.ch
webmail.brezelkoenig.ch
0xgn.com
*.brezelkoenig.ch
gamescoin.pacta-cloud.app
brezelkoenig.ch
firatkirmizi.com
brezelkoenig.ch
cv.hofs.dev
ditsch.de
webmail.brezelkoenig.ch
ditsch.de
ditsch.de
dev.developer.viviware.com
ditsch.de
ditsch.de
staging-admin.lvmhcomplianceescape.com
brezelkoenig.ch
ditsch.de
remote.brezelkoenig.ch

Certificate

The complete raw certificate details for brezelkoenig.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGkjCCBXqgAwIBAgISA2aSsHH12CaaOquTBzWaNVe2MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMzEyMDU5NTJaFw0yNDA2MjkyMDU5NTFaMBoxGDAWBgNVBAMT
D2JyZXplbGtvZW5pZy5jaDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALnIvFG5EpAhTnFW2Da29dLPH2+CGHYj3l4XXCSWCHvUkKVR3sB4tGjmF6Kl9Kg5
dL7quGApOHQjSx/DL899W2fNJ2rcngVbF2dZtWZFfDhBqIcmVpsGNI1YmmzwjImx
6WCyLY+aTdW2Ad316+tZsK+8gVidgh9aHP6EfXhxu4IwYpllMsHqnxoCFi4xaErF
OhFXQg+vkZj+clSky7m6qCCeYHAvhrEmFER4dSOAh6hMgloo2ldRvuoby++mZxp2
MmB/KEbkzvS/z5d//vETmFwwVi8UeImujaox5641/Ap6VarPiwIe36UfJ9mEnD6V
QiV7gEt5805MSskOrA8NFVMCAwEAAaOCA7gwggO0MA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUczV9vRv+nufZm2ks9ve6G1LrLQEwHwYDVR0jBBgwFoAUFC6zF7dYVsuu
UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v
cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y
Zy8wggG/BgNVHREEggG2MIIBsoIKYnJldHplbC5jaIIQYnJldHplbGtvZW5pZy5j
aIIQYnJldHplbGtvZW5pZy5kZYIPYnJlemVsa29lbmlnLmNogg5wcmV0emVsa2lu
Zy51c4IPc3dpc3NicmV0emVsLmNogg5zd2lzc2JyZXplbC5jaIIPc3dpc3NwcmV0
emVsLmNogg5zd2lzc3ByZXplbC5jaIIOd3d3LmJyZXR6ZWwuY2iCFHd3dy5icmV0
emVsa29lbmlnLmNoghR3d3cuYnJldHplbGtvZW5pZy5kZYITd3d3LmJyZXplbGtv
ZW5pZy5jaIISd3d3LnByZXR6ZWxraW5nLnVzghN3d3cuc3dpc3NicmV0emVsLmNo
ghJ3d3cuc3dpc3NicmV6ZWwuY2iCE3d3dy5zd2lzc3ByZXR6ZWwuY2iCEnd3dy5z
d2lzc3ByZXplbC5jaIIad3d3LnhuLS1icmV0emVsa25pZy15ZmIuY2iCGnd3dy54
bi0tYnJlemVsa25pZy1rY2IuY29tghZ4bi0tYnJldHplbGtuaWcteWZiLmNoghZ4
bi0tYnJlemVsa25pZy1rY2IuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYK
KwYBBAHWeQIEAgSB9QSB8gDwAHYAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8o
hez4ZG4AAAGOloauoAAABAMARzBFAiEAweqXHD9DFA1icxk/rnKOglLIUqVXIdwJ
ZIwWjMs9/l4CIEdxqSRO/Gyr6jG+XMO68l5H4d5bwp9/mNGJEPYkXhmKAHYA7s3Q
ZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGOloaurwAABAMARzBFAiEA
1jCH9K4/b2V6ilCcdc004pnknsLgf1pceq02uMMRjIACIFddNzqiFkKTV+Jb5X4b
+OL4ZfxSxeJ6lfyQ1WQ7VsOhMA0GCSqGSIb3DQEBCwUAA4IBAQCY12hET01p3+L5
8DIcPWpv/hZHqYTzv0tvDZw/cLdY1A1h2/Wxadw+aSCwwmj6gULgHLF8FRxLnmUg
I7+XkX2MCgJOGRACeRCptLs9ukK88WUTPVJauu+NHO9pkp3nrCiTjByp0eNxDzwP
pvJn+zR1kie3St4G7A7fjXmfNNedra3F889j59w8wbUqGylCJlKcLmQByidkB17z
5dCoM48IDhrbSfE7WcNmu/Kv2eavwj9sVwNYZDnu+2zJuVU+bHFwUc9EUi0cDNMK
gIYCdIXto+ZX/moyxyP9rmSXF4i9ATUvE6qks1+HRu8artXxjhX2uSfMWdfCEqF/
x700/UZX
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuci8UbkSkCFOcVbYNrb1
0s8fb4IYdiPeXhdcJJYIe9SQpVHewHi0aOYXoqX0qDl0vuq4YCk4dCNLH8Mvz31b
Z80natyeBVsXZ1m1ZkV8OEGohyZWmwY0jViabPCMibHpYLItj5pN1bYB3fXr61mw
r7yBWJ2CH1oc/oR9eHG7gjBimWUyweqfGgIWLjFoSsU6EVdCD6+RmP5yVKTLubqo
IJ5gcC+GsSYURHh1I4CHqEyCWijaV1G+6hvL76ZnGnYyYH8oRuTO9L/Pl3/+8ROY
XDBWLxR4ia6NqjHnrjX8CnpVqs+LAh7fpR8n2YScPpVCJXuAS3nzTkxKyQ6sDw0V
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296240642664238243518505274922533452601270
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-31 20:59:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-29 20:59:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brezelkoenig.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23453072843200203866904881066135472830232158189192154872471729320849948784057502027336844318015913954638859822709522235103735144537114881361632947590762850030730002083640907430549323174595820956531333524632355274664447752426711472733432445151570389257041863139753887230171933913961080847811014879918147381993829596570796158976708908410838078361948205782880337054236226692560862806807682490614603724384839589323422937952943938547509729806600642852187899763323454844815954003230814000978702333882078852295160276741980273982015401236034574668620252163716829280236434286853552042588613391484135862311519577325349771220307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							73357dbd1bfe9ee7d99b692cf6f7ba1b52eb2d01
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (438 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bretzelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bretzelkoenig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brezelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pretzelking.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swissbretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swissbrezel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swisspretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swissprezel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bretzelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bretzelkoenig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brezelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pretzelking.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swissbretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swissbrezel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swisspretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swissprezel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--bretzelknig-yfb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--brezelknig-kcb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bretzelknig-yfb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brezelknig-kcb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e9686aea00000040300473045022100c1ea971c3f43140d6273193fae728e8252c852a55721dc09648c168ccb3dfe5e02204771a9244efc6cabea31be5cc3baf25e47e1de5bc29f7f98d18910f6245e198a007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e9686aeaf0000040300473045022100d63087f4ae3f6f657a8a509c75cd34e299e49ec2e07f5a5c7aad36b8c3118c800220575d373aa216429357e25be57e1bf8e2f865fc52c5e27a95fc90d5643b56c3a1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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