drkbg.de

- DRK-Pflegedienste Rhein-Sieg/Rhein-Berg gGmbH -

Issued by Sectigo RSA Extended Validation Secure Server CA

About this certificate

This digital certificate with serial number 8b:1e:92:a2:e0:a9:fb:d5:0e:d7:f0:42:c8:e5:d8:4b was issued on by Sectigo Limited.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DRK-Pflegedienste Rhein-Sieg/Rhein-Berg gGmbH

Company registration number: HRB 56902
Organization: DRK-Pflegedienste Rhein-Sieg/Rhein-Berg gGmbH
State / Province: Nordrhein-Westfalen
Country: DE

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 8b:1e:92:a2:e0:a9:fb:d5:0e:d7:f0:42:c8:e5:d8:4b
Serial Number (int): 184921434456153951524899126033764440139
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ff:27:a4:79:9f:36:67:61:50:66:ed:a0:67:3e:3f:32:bf:7c:96:1b
AuthorityKeyId: 2c:69:ff:80:c9:87:90:ae:34:e1:b4:e7:4c:93:85:99:40:e9:a7:b2

Fingerprint (sha1): c2:b5:6a:b7:07:89:56:66:b7:51:13:69:9b:2c:ea:f6:60:3f:d2:44
Fingerprint (sha256): d3:67:04:92:5f:9a:5c:10:3a:31:34:27:e5:6c:de:c1:f3:b3:32:a2:db:8a:1d:e1:b3:37:78:32:1b:b3:92:56

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl

Check the revocation status for certificate drkbg.de

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for drkbg.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

drkbg.de
autodiscover.drk-pflege-bonn.de
autodiscover.drk-rhein-berg.de
autodiscover.drkbg.de
autodiscover.drkbg.net
autodiscover.ktg-rhein-sieg.de
autodiscover.pflegedienste-rsb.drk.de
autodiscover.rd-drk-rhein-berg.de
autodiscover.rhein-berg.drk.de
drkbg.net
drkbgs007.drkbg.net
www.drkbg.de
www.drkbg.net

Other certificates including the domain name drkbg.de

(limited to 100 certificates)
suport.staff.utcluj.app
helpdesk.centurionukrs.com
servicedesk.cheaperwaste.co.uk
support.ecctis.com
servicedesk.cheaperwaste.co.uk
servicedesk.restoredigital.co.uk
support.tuxexpert.com
support.ecctis.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
helpdesk.pfleiderer.pl
ithelpdesk.uteco.com
sd.sch1584.su
*.drkbg.de
servicedesk.hidefsurveying.co.uk
it-support.drkbg.de
*.drkbg.de
servicedesk.ibisacam.at
drkbg.de
support-services.gruener-punkt.de
servicedesk.quorumdev.com
dsi.alivetravel.com
suport.staff.utcluj.app
servicedesk.cheaperwaste.co.uk
helpdesk.zultys.com
sd.sch1584.su
support-services.gruener-punkt.de
support.tuxexpert.com
helpdesk.derbigum.com
support-services.gruener-punkt.de
servicedesk.quorumdev.com
ithelpdesk.uteco.com
techteam.awayresorts.co.uk
support.gjesdal.kommune.no
ithelpdesk.uteco.com
ithelpdesk.uteco.com
dsi.alivetravel.com
servicedesk.envisionpharma.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.beauchamps.ie
support-services.gruener-punkt.de
helpdesk.derbigum.com
servicedesk.chsgroup.org.uk
servicedesk.cheaperwaste.co.uk
servicedesk.beauchamps.ie
suport.staff.utcluj.app
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
sd.sch1584.su
helpdesk.pgzinternational.com
techteam.awayresorts.co.uk
support.languagelink.ru
servicedesk.cheaperwaste.co.uk
servicedesk.envisionpharma.com
servicemanager.loacker.com
sd.sch1584.su
itservicedesk.eu.anritsu.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.solidsolutions.co.uk
helpdesk.zultys.com
helpdesk.derbigum.com
servicedesk.solidsolutions.co.uk
servicedesk.trencon.co.za
support.languagelink.ru
servicedesk.cheaperwaste.co.uk
techteam.awayresorts.co.uk
servicedesk.trencon.co.za
servicedesk.solidsolutions.co.uk
itsupport.lutonsfc.ac.uk
servicedesk.quorumdev.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
dsi.alivetravel.com
support.gjesdal.kommune.no
support.gjesdal.kommune.no
drkbg.de
it-support.drkbg.de
servicedesk.solidsolutions.co.uk
itservicedesk.apc-overnight.com
helpdesk.galbraithgroup.com
servicedesk.abbotsholme.co.uk
support.ecctis.com
servicedesk.trencon.co.za
itsupport.lutonsfc.ac.uk
helpdesk.derbigum.com
servicedesk.envisionpharma.com
support.languagelink.ru
support.ecctis.com
helpdesk.zultys.com
helpdesk.zultys.com
support.gjesdal.kommune.no
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
suport.staff.utcluj.app

Certificate

The complete raw certificate details for drkbg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vDmWN1vQ/fk1P8ntqEJ
TYaG1Rj4DUw1iAxa+ielEV8njHldpuFo2icXFD8uoRTVXxcfz+3/O4B80fb1Hjvj
rkeXvG+NDbU+Ke8so/7t28oMu5+hRaXItNO0G+OD7qbRvqCMIqRo4ucAC2AG7iFL
rc2+QSo74V1uRC16JfPxli++Qzwq+T0osmMYjT1TndMwiICqlSeReeu/QydDAG/A
5lDhh9Llt8ivSTDmWN/RHWVkS6S8M1P5aZyGwdA29CnBBwCDf9nMaGTw+uOJ8YD9
p3X5nAefsuS/8HlooSuIQfVPMQrbOeg8iMrZmGGEBVAxLWUMa7/vz+aP1ISdgb7D
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 184921434456153951524899126033764440139
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Extended Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 56902'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DRK-Pflegedienste Rhein-Sieg/Rhein-Berg gGmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'drkbg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28648649037933057572693773209169317354879152079082524176509361338703314597440748329484343058192018396220489228607913157826013466538687826155907731562964628934802148790803856911569022442553352120644526157256782003123654169879888607651738859100529943490253020557115148045051540540117373926986258657025210915753184912410348437061965929412399121372657408196465965984635401432383156323399077608014246107872505711550846087723665453965631795711514035529134407424131450748635060589496200015373311498080427642009067039308643829378526254273605882734049220227435253562296754352725693288618769684925293890961572483179707390411589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2c69ff80c98790ae34e1b4e74c93859940e9a7b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff27a4799f3667615066eda0673e3f32bf7c961b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (325 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drkbg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.drk-pflege-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.drk-rhein-berg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.drkbg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.drkbg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ktg-rhein-sieg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pflegedienste-rsb.drk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.rd-drk-rhein-berg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.rhein-berg.drk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drkbg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drkbgs007.drkbg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drkbg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drkbg.net'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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