www.guj.digital

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fc:01:54:8d:ff:3e:cd:8f:16:57:9a:d7:0e:33:e2:77:1b was issued on by Let's Encrypt.

With 53 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.guj.digital

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fc:01:54:8d:ff:3e:cd:8f:16:57:9a:d7:0e:33:e2:77:1b
Serial Number (int): 347089782520331506706171228219577989232411
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 85:55:69:68:09:6f:19:36:27:f3:26:cc:22:c6:57:53:90:32:be:10
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a7:9b:a0:1e:ba:0b:cc:7c:72:3e:ee:2a:a2:fa:54:7d:5e:2a:fb:07
Fingerprint (sha256): dc:12:cd:0b:ae:72:47:68:25:c6:13:3d:fc:f6:74:e1:27:49:07:f8:bf:fc:54:9b:ab:8c:1b:22:c7:28:c9:ab

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.guj.digital

53

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.guj.digital

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev-cdn-dam.dpv.de
dev-cdn-dam.guj.de
dev.eltern.de
dev.m.eltern.de
image.mgdev.essen-und-trinken.de
image.mgdev.geo.de
image.mgdev.schoener-wohnen.de
m-dev.gala.de
m-preview.brigitte.de
m-preview.cm-dev.guj.digital
m-preview.cm-mgdev.guj.digital
m-preview.cm-updev.guj.digital
m-preview.dev.brigitte.de
m-preview.dev.gala.de
m-preview.gala.de
m.dev.beef.de
m.dev.brigitte-wir.de
m.dev.brigitte.de
m.dev.essen-und-trinken.de
m.dev.gala.de
m.dev.geo.de
m.dev.livingathome.de
m.dev.pm-magazin.de
m.dev.salon-mag.de
m.dev.schoener-wohnen.de
m.dev.stern-crime.de
m.eltern.de
mobil-dev.stern.de
mt-preview.dev.stern.de
mt-preview.stern.de
s1.dev.eltern.de
s1.dev.m.eltern.de
s1.eltern.de
s1.m.eltern.de
s1.stage.eltern.de
s1.stage.m.eltern.de
shop.barbara.de
shop.guido-magazin.de
stage.eltern.de
stage.m.eltern.de
traffic.emsservice.de
www-dev.brigitte.de
www-dev.essen-und-trinken.de
www-dev.gala.de
www-dev.geo.de
www-dev.schoener-wohnen.de
www-dev.stern.de
www.eltern.de
www.guj.digital
www.joko-magazin.de
www.mgdev.essen-und-trinken.de
www.mgdev.geo.de
www.mgdev.schoener-wohnen.de

Other certificates including the domain name guj.digital

(limited to 100 certificates)
static.stern.de
static.stern.de
static.stern.de
www.guj.digital
static.stern.de
confluence.guj.digital
www.stage.stern.de
*.stage.mobile-toolkit.guj.digital
www.guj.digital
www.stage.stern.de
static.stern.de
www.guj.digital
ki.guj.digital
static.stern.de
static.stern.de
www.guj.digital
www.stage.stern.de
*.coremedia-dev.guj.digital
www.guj.digital
www.stage.stern.de
a0818.guj.digital
*.onecore-dev.guj.digital
www.guj.digital
*.harmony.guj.digital
*.das-001-prod-eks2.guj.digital
static.stern.de
www.guj.digital
static.stern.de
static.stern.de
a0162.guj.digital
static.stern.de
guj.digital
static.stern.de
*.coremedia.guj.digital
dcvtest.guj.digital
static.stern.de
a0127.guj.digital
static.stern.de
static.stern.de
static.stern.de
api-warmup.paid.guj.digital
www.stage.stern.de
www.guj.digital
static.stern.de
static.stern.de
guj.digital
www.guj.digital
*.guj.digital
static.stern.de
*.harmony-dev.guj.digital
guj.digital
static.stern.de
static.stern.de
www.stage.stern.de
guj.digital
api.paid-dev.guj.digital
static.stern.de
www.stage.stern.de
static.stern.de
static.stern.de
das.guj.digital
static.stern.de
static.stern.de
*.harmony.guj.digital
www.stage.stern.de
static.stern.de
*.onecore-dev.guj.digital
www.guj.digital
www.stage.stern.de
www.stage.stern.de
static.stern.de
static.stern.de
static.stern.de
static.stern.de
*.harmony.guj.digital
www.guj.digital
static.stern.de
www.guj.digital
static.stern.de
static.stern.de
s3repo.guj.digital
guj.digital
www.guj.digital
static.stern.de
static.stern.de
diginet.guj.digital
static.stern.de
static.stern.de
static.stern.de
*.harmony-dev.guj.digital
paid-preview.stern.de
api.paid.guj.digital
static.stern.de
*.aws-dvs.guj.digital
www.stage.stern.de
*.harmony-dev.guj.digital
www.guj.digital
static.stern.de
www.cm-dev.guj.digital
*.harmony-dev.guj.digital

Certificate

The complete raw certificate details for www.guj.digital in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JXNxIcPx8y+qa7nHDJd
ZA8weVSbd27mblVG+i1W14FqEMHOv4g89RACO27zEA1Rik4XvfYZvIIDA7fRDMWo
mRsseIRvnxSfraNsGMTEtnyQwK/+F9Rvzgmnb/+FeBxdRanBuC/y4NkzLlqzqXHe
JPIklFClvL2u+N9Ic+2vbrAWWCYnJSsifcSi12YRueZPuWSAiDDWW6a4KitmvA4H
FVvKiaiAE4v+WhNfhv38ZCXHXMWeaTfks2DA0o24Ra1qzpEegvPypCGzQKgjQ0z5
ysuS76bcHo9joi/0iy1FuhdGOL1yKxBOSPp0lfJPtlAE4uI+42uxwOneOJ8eNYzr
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347089782520331506706171228219577989232411
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-19 10:25:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-19 10:25:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.guj.digital'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26836391649943515677018527488276543078890334384880991833379645414507418413656767787970000723446860681479412482550366668509892695275751902110663048299373655993574343877560547602696631164806810887543063408726584436950257044338157955713030838189995523170993680673694176883426416106936835336005656095372041545505121936946518554304779999830535033199414874915235046953152301329398803175859386579392214855539308946162988821849315275385808395486485910897015119387678638797000527870724885823016862667530666811277071040249489018504694156814826556594243726751930128983195692719042019169702928723593155883052787596377590900517841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85556968096f193627f326cc22c657539032be10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-cdn-dam.dpv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-cdn-dam.guj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.eltern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.m.eltern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mgdev.essen-und-trinken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mgdev.geo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mgdev.schoener-wohnen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-dev.gala.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-preview.brigitte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-preview.cm-dev.guj.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-preview.cm-mgdev.guj.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-preview.cm-updev.guj.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-preview.dev.brigitte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-preview.dev.gala.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-preview.gala.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dev.beef.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dev.brigitte-wir.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dev.brigitte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dev.essen-und-trinken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dev.gala.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dev.geo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dev.livingathome.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dev.pm-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dev.salon-mag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dev.schoener-wohnen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dev.stern-crime.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.eltern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobil-dev.stern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mt-preview.dev.stern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mt-preview.stern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1.dev.eltern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1.dev.m.eltern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1.eltern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1.m.eltern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1.stage.eltern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1.stage.m.eltern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.barbara.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.guido-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.eltern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.m.eltern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traffic.emsservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev.brigitte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev.essen-und-trinken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev.gala.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev.geo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev.schoener-wohnen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev.stern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eltern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guj.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joko-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mgdev.essen-und-trinken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mgdev.geo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mgdev.schoener-wohnen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001705d31b1ab00000403004630440220796c68e611c4ad7ac735c0451ab38f671615b624283d189feb22acfac60e395802206d5eddc4d4e4694aa97b3506467de70a1c9a3f0d809b9a15f077c0bdece1282d00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001705d31b1da0000040300473045022100f17b852a8c7866c426db4fecd3f6e41ea2b1e2dd57a7ee94dbaa8b3c2f28120b02201eae5670539648aca4cb9f655554e68dc580659f0c6292b6e7691b9d7e4b4991
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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