www.kruemelhuepfer.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:11:ed:7a:5c:d6:fe:df:3c:9f:20:43:d5:7e:c2:90:79:bd was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.kruemelhuepfer.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:11:ed:7a:5c:d6:fe:df:3c:9f:20:43:d5:7e:c2:90:79:bdSerial Number (int): 354549606342930096159457838504708483873213
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 6e:3a:41:1f:83:30:ca:50:76:69:30:9f:0a:d4:48:0a:76:ec:54:da
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 51:fd:71:c2:b5:dd:6b:90:2f:c8:1a:c5:bd:91:ce:be:8f:c5:b3:25
Fingerprint (sha256): db:72:7f:04:cc:72:9d:19:77:c9:8b:21:89:48:7f:3f:40:e4:4e:3b:15:10:e4:4b:23:8b:d5:41:d2:ae:fd:ef
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.kruemelhuepfer.de
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.kruemelhuepfer.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
geocaching.kruemelhuepfer.de
r.kruemelhuepfer.de
rodalber-felsenwanderweg.kruemelhuepfer.de
stat.kruemelhuepfer.de
wandern-im-odenwald.kruemelhuepfer.de
wandern-in-der-pfalz.kruemelhuepfer.de
wandern-und-mehr.kruemelhuepfer.de
www.kruemelhuepfer.de
r.kruemelhuepfer.de
rodalber-felsenwanderweg.kruemelhuepfer.de
stat.kruemelhuepfer.de
wandern-im-odenwald.kruemelhuepfer.de
wandern-in-der-pfalz.kruemelhuepfer.de
wandern-und-mehr.kruemelhuepfer.de
www.kruemelhuepfer.de
Other certificates including the domain name kruemelhuepfer.de
(limited to 100 certificates)
wandern-und-mehr.kruemelhuepfer.de
www.kruemelhuepfer.de
rodalber-felsenwanderweg.kruemelhuepfer.de
www.kruemelhuepfer.de
www.kruemelhuepfer.de
www.kruemelhuepfer.de
wandern-im-odenwald.kruemelhuepfer.de
www.kruemelhuepfer.de
www.kruemelhuepfer.de
krk.kruemelhuepfer.de
wandern-und-mehr.kruemelhuepfer.de
rodalber-felsenwanderweg.kruemelhuepfer.de
xn--schren-dua.kruemelhuepfer.de
stat.kruemelhuepfer.de
padjelanta.kruemelhuepfer.de
www.kruemelhuepfer.de
www.kruemelhuepfer.de
www.kruemelhuepfer.de
www.kruemelhuepfer.de
kruemelhuepfer.de
wandern-in-der-pfalz.kruemelhuepfer.de
www.kruemelhuepfer.de
www.kruemelhuepfer.de
geocaching.kruemelhuepfer.de
rodalber-felsenwanderweg.kruemelhuepfer.de
www.kruemelhuepfer.de
kruemelhuepfer.de
kruemelhuepfer.de
www.kruemelhuepfer.de
geocaching.kruemelhuepfer.de
geocaching.kruemelhuepfer.de
www.kruemelhuepfer.de
stat.kruemelhuepfer.de
wandern-im-odenwald.kruemelhuepfer.de
kruemelhuepfer.de
www.kruemelhuepfer.de
wandern-in-der-pfalz.kruemelhuepfer.de
kruemelhuepfer.de
www.kruemelhuepfer.de
www.kruemelhuepfer.de
www.kruemelhuepfer.de
rodalber-felsenwanderweg.kruemelhuepfer.de
wandern-im-odenwald.kruemelhuepfer.de
rodalber-felsenwanderweg.kruemelhuepfer.de
schaeren.kruemelhuepfer.de
wandern-in-der-pfalz.kruemelhuepfer.de
www.kruemelhuepfer.de
www.kruemelhuepfer.de
rodalber-felsenwanderweg.kruemelhuepfer.de
www.kruemelhuepfer.de
www.kruemelhuepfer.de
www.kruemelhuepfer.de
wandern-im-odenwald.kruemelhuepfer.de
www.kruemelhuepfer.de
www.kruemelhuepfer.de
krk.kruemelhuepfer.de
wandern-und-mehr.kruemelhuepfer.de
rodalber-felsenwanderweg.kruemelhuepfer.de
xn--schren-dua.kruemelhuepfer.de
stat.kruemelhuepfer.de
padjelanta.kruemelhuepfer.de
www.kruemelhuepfer.de
www.kruemelhuepfer.de
www.kruemelhuepfer.de
www.kruemelhuepfer.de
kruemelhuepfer.de
wandern-in-der-pfalz.kruemelhuepfer.de
www.kruemelhuepfer.de
www.kruemelhuepfer.de
geocaching.kruemelhuepfer.de
rodalber-felsenwanderweg.kruemelhuepfer.de
www.kruemelhuepfer.de
kruemelhuepfer.de
kruemelhuepfer.de
www.kruemelhuepfer.de
geocaching.kruemelhuepfer.de
geocaching.kruemelhuepfer.de
www.kruemelhuepfer.de
stat.kruemelhuepfer.de
wandern-im-odenwald.kruemelhuepfer.de
kruemelhuepfer.de
www.kruemelhuepfer.de
wandern-in-der-pfalz.kruemelhuepfer.de
kruemelhuepfer.de
www.kruemelhuepfer.de
www.kruemelhuepfer.de
www.kruemelhuepfer.de
rodalber-felsenwanderweg.kruemelhuepfer.de
wandern-im-odenwald.kruemelhuepfer.de
rodalber-felsenwanderweg.kruemelhuepfer.de
schaeren.kruemelhuepfer.de
wandern-in-der-pfalz.kruemelhuepfer.de
www.kruemelhuepfer.de
Certificate
The complete raw certificate details for www.kruemelhuepfer.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIBTCCBu2gAwIBAgISBBHtelzW/t88nyBD1X7CkHm9MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA1MTMxNDQyMzVaFw0x ODA4MTExNDQyMzVaMCAxHjAcBgNVBAMTFXd3dy5rcnVlbWVsaHVlcGZlci5kZTCC AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAO6tGABkqBmu1ctn1toSi3tx DpwlieiqexCCMHnKoVnzB+/fUQ3XgAUBsWv0mAArTQ35UhFoTXRIdhM+bRsc9NYR 1XUIQK+u3D7nItw4Wex3SWd3XXi+e6lDS25szdpYY8r6jw/LxMYsxx3af/TghWnB 2b4MduIf/2C2VteFHb3gzDvGkr8/7YO6hnb7Tm7tNBUaFH+CCJnig5yzQL5SL5kK nVAIKt5RBbXhWDyyFEL7ey2fXIA6XI+nvWTg4ez5v0iYbT6UI7f3B6AV7/4y/Xe3 ho1FI3sGQXbd/eTUMUKYeXAknFIVaNAsO++pfowz46ImItlUQ0qI3r+pWwfA4unO fQtfBgv7yM+kRIjEJ0opRZDRqCVt5VaEg5IlD/h7WPu7ya4GrXXlLvmsGDLzEsMG jWWW8FwkeYQUoUbzty3isJ5rDAqv7pZbW1z8+qGisQ+NqqBpeftWwa3agbbT1EEl hjkcazMWrLaW2fDKv1AJGoV3clJ2QdAaLm9fCj2jf7m/ZiA+YUew8vjaUHXSj3yH LGzjM1aQcicitjM31cbg+e+vTuzIWgRwn6jAIjW/4eJ9PE8Ud1P2wUaU7QtQaOa3 89S/jZ8/KHrUpaKEF4Rv/KGLsQV82AQ7tMh59B2QhYXPPM2gbXe0/DHbRJ85yPXB wHIpjKGzYzwX+xASYeR5AgMBAAGjggQNMIIECTAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFG46QR+DMMpQdmkwnwrUSAp27FTaMB8GA1UdIwQYMBaAFKhKamMEfd265tE5 t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wggEOBgNVHREEggEFMIIBAYIcZ2Vv Y2FjaGluZy5rcnVlbWVsaHVlcGZlci5kZYITci5rcnVlbWVsaHVlcGZlci5kZYIq cm9kYWxiZXItZmVsc2Vud2FuZGVyd2VnLmtydWVtZWxodWVwZmVyLmRlghZzdGF0 LmtydWVtZWxodWVwZmVyLmRlgiV3YW5kZXJuLWltLW9kZW53YWxkLmtydWVtZWxo dWVwZmVyLmRlgiZ3YW5kZXJuLWluLWRlci1wZmFsei5rcnVlbWVsaHVlcGZlci5k ZYIid2FuZGVybi11bmQtbWVoci5rcnVlbWVsaHVlcGZlci5kZYIVd3d3LmtydWVt ZWxodWVwZmVyLmRlMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLf EwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw gasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSBy ZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3Jk YW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6 Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEEBgorBgEEAdZ5AgQCBIH1 BIHyAPAAdgBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWNaKveD AAAEAwBHMEUCIQCrkB7GEvMqHaztzO1+5Kk7hK8eGN8iu9QKtabq9PnytAIgQ/6j F+Om4+pJSbLF8lR+WgHv8Lcp/B0ADCc/j+kOnmcAdgApPFGWVMg5ZbqqUPxYB9S3 b79Yeily3KTDDPTlRUf0eAAAAWNaKvdtAAAEAwBHMEUCIQCotNQayIMlYo0Ks8EW SpdGHKfwgOXiyP2LNzh1elAC8wIgMC2fopHm/qp8y7Uf8UKXBVGjupkdWaWhwZCL N431wv8wDQYJKoZIhvcNAQELBQADggEBAFHF6e4Sz/De5+XYt4tfCre3pWWD1gub A4F2tpriq75cpEGLmOhLhOpUmuRXrvSdCjJRK4UndqntzdJGJXujTWAHXgz5HiCB hGRt/YLH6uMi+cNW3TFVXg1S7WgQGUH6UyFKTZRqQrY9Zxmj6w2/ZUFjnaDlTnti OtLxymsDN7bMhrR8jUKiRPxDerqjlJZUfbRNLOq3/O+dWkVCWcrfK2NgLkY+pdIP nuusfTADhyWuEYmMsK1TkgiU2MbeDe+BNOiNaB3MtMhoIV/K2HnT4PjEofgCTLX7 5DGUoIWCOpy02k+Fx2inQ/7Ym2S3UUhxcKnvQcZNPU/6j+Ae22N8Vs4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7q0YAGSoGa7Vy2fW2hKL e3EOnCWJ6Kp7EIIwecqhWfMH799RDdeABQGxa/SYACtNDflSEWhNdEh2Ez5tGxz0 1hHVdQhAr67cPuci3DhZ7HdJZ3ddeL57qUNLbmzN2lhjyvqPD8vExizHHdp/9OCF acHZvgx24h//YLZW14UdveDMO8aSvz/tg7qGdvtObu00FRoUf4IImeKDnLNAvlIv mQqdUAgq3lEFteFYPLIUQvt7LZ9cgDpcj6e9ZODh7Pm/SJhtPpQjt/cHoBXv/jL9 d7eGjUUjewZBdt395NQxQph5cCScUhVo0Cw776l+jDPjoiYi2VRDSojev6lbB8Di 6c59C18GC/vIz6REiMQnSilFkNGoJW3lVoSDkiUP+HtY+7vJrgatdeUu+awYMvMS wwaNZZbwXCR5hBShRvO3LeKwnmsMCq/ulltbXPz6oaKxD42qoGl5+1bBrdqBttPU QSWGORxrMxastpbZ8Mq/UAkahXdyUnZB0Boub18KPaN/ub9mID5hR7Dy+NpQddKP fIcsbOMzVpByJyK2MzfVxuD5769O7MhaBHCfqMAiNb/h4n08TxR3U/bBRpTtC1Bo 5rfz1L+Nnz8oetSlooQXhG/8oYuxBXzYBDu0yHn0HZCFhc88zaBtd7T8MdtEnznI 9cHAcimMobNjPBf7EBJh5HkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 354549606342930096159457838504708483873213 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-13 14:42:35 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-11 14:42:35 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kruemelhuepfer.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 973713729262521100795688100758851810417244356876495505852116025031546731491969775273000354520500900777658934356801373851200995449681680069418864522296531766940427767885239804808905200009028326169779325560357953589137640014885532108388186953617625333507329925811216818556953401467933450139630552780440159183207619440586557881203984915739843781446003137818378340623078681404757678352881796203369315667644672096533428086979404246657901700374537768303629184028875416870036191913899697924632676761264289122296193450999776806607567363876497076935292686912822196512240196703486681937548779490702085381411826292951263326151764557394331527656222662712533395338151536398244666001678277968298480051144412840806070233448590571355231418583004767626031703087433380659499668391163508736358105774211504248361366643178625623417334001490535285748274259418323649188855093488675364671732957760997970203837238537755190223998314411886994799769061289367210168716441954196809577593823556136954690927271151224042893508749495447137737149694868873663428926398386743666635665765558673591966041702444007002067566849831490234143047713225370876621611797262510801849332257796393637663004835432365939296842849759333188647203652962571353298004663356649661541661140089 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6e3a411f8330ca507669309f0ad4480a76ec54da . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (261 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geocaching.kruemelhuepfer.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.kruemelhuepfer.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rodalber-felsenwanderweg.kruemelhuepfer.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stat.kruemelhuepfer.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wandern-im-odenwald.kruemelhuepfer.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wandern-in-der-pfalz.kruemelhuepfer.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wandern-und-mehr.kruemelhuepfer.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kruemelhuepfer.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001635a2af7830000040300473045022100ab901ec612f32a1dacedcced7ee4a93b84af1e18df22bbd40ab5a6eaf4f9f2b4022043fea317e3a6e3ea4949b2c5f2547e5a01eff0b729fc1d000c273f8fe90e9e67007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001635a2af76d0000040300473045022100a8b4d41ac88325628d0ab3c1164a97461ca7f080e5e2c8fd8b3738757a5002f30220302d9fa291e6feaa7ccbb51ff142970551a3ba991d59a5a1c1908b378df5c2ff . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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