*.cmk.iqdigital.de
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0f:0b:2b:89:e5:6a:f8:af:d4:d1:c6:16:87:b5:5b:17 was issued on by Amazon.
With 32 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.cmk.iqdigital.de
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0f:0b:2b:89:e5:6a:f8:af:d4:d1:c6:16:87:b5:5b:17Serial Number (int): 19996418271090230449883813419072969495
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: c2:b5:97:f8:c7:86:3b:d0:ee:a8:c4:26:8a:e5:4e:29:5e:8e:a5:3e
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 91:22:cd:d8:fd:b8:27:19:9e:58:a3:06:e0:12:15:f4:4d:50:37:51
Fingerprint (sha256): e9:7f:60:50:2e:7b:65:3e:3c:f4:2c:d9:3b:ef:68:b1:ee:83:18:a4:f1:f8:36:2a:20:fe:d6:2f:ee:9b:0b:da
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate *.cmk.iqdigital.de
32
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.cmk.iqdigital.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.cmk.iqdigital.de
cmk.wissenschaft.de
cmk.11freunde.de
cmk.sz-magazin.sueddeutsche.de
cmk.forschung-und-wissen.de
campus.cmk.zeit.de
cmk.btc-echo.de
cmk.sueddeutsche.de
zeit-magazin.cmk.zeit.de
cmk.jetzt.de
cmk.theeuropean.de
cmk.monopol-magazin.de
cmk.handelsblatt.com
cmk.manager-magazin.de
cmk.ariva.de
cmk.cicero.de
zett.cmk.zeit.de
cmk.hamburg-airport.de
cmk.wirtschaftskurier.de
cmk.wiwo.de
cmk.iq.client.avenga.cloud
cmk.wissen.de
cmk.tagesspiegel.de
cmk.spiegel.de
cmk.dus.com
cmk.emotion.de
cmk.marktundmittelstand.de
cmk.faz.net
cmk.zeit.de
cmk.spektrum.de
cmk.scinexx.de
cmk.boerse-am-sonntag.de
cmk.wissenschaft.de
cmk.11freunde.de
cmk.sz-magazin.sueddeutsche.de
cmk.forschung-und-wissen.de
campus.cmk.zeit.de
cmk.btc-echo.de
cmk.sueddeutsche.de
zeit-magazin.cmk.zeit.de
cmk.jetzt.de
cmk.theeuropean.de
cmk.monopol-magazin.de
cmk.handelsblatt.com
cmk.manager-magazin.de
cmk.ariva.de
cmk.cicero.de
zett.cmk.zeit.de
cmk.hamburg-airport.de
cmk.wirtschaftskurier.de
cmk.wiwo.de
cmk.iq.client.avenga.cloud
cmk.wissen.de
cmk.tagesspiegel.de
cmk.spiegel.de
cmk.dus.com
cmk.emotion.de
cmk.marktundmittelstand.de
cmk.faz.net
cmk.zeit.de
cmk.spektrum.de
cmk.scinexx.de
cmk.boerse-am-sonntag.de
Other certificates including the domain name iqdigital.de
(limited to 100 certificates)
cmp.channelpartner.de
consent.iqdigital.de
zcz.cmk-dev.iqdigital.de
default.cmk-stage.iqdigital.de
iqdigital.de
cmk.iqdigital.de
iqdigital.de
mum.cmk-stage.iqdigital.de
arr.cmk-dev.iqdigital.de
emo.cmk-dev.iqdigital.de
consent.iqdigital.de
iqdigital.de
tag.cmk-dev.iqdigital.de
zol.cmk-stage.iqdigital.de
faz.cmk-stage.iqdigital.de
byron-dev.iqdigital.de
mms.sp-prod.net
cmp.channelpartner.de
tep.cmk-stage.iqdigital.de
cmk.iqdigital.de
default.cmk-stage.iqdigital.de
sz.cmk-dev.iqdigital.de
cmk.iqdigital.de
tep.cmk-stage.iqdigital.de
wis.cmk-dev.iqdigital.de
btc.cmk-stage.iqdigital.de
jet.cmk-dev.iqdigital.de
*.cmk.iqdigital.de
btc.cmk-dev.iqdigital.de
zol.cmk-dev.iqdigital.de
www.iqdigital.de
cmk.iqdigital.de
fuw.cmk-stage.iqdigital.de
zcz.cmk-stage.iqdigital.de
www.iqdigital.de
tag.cmk-dev.iqdigital.de
ccz.cmk-dev.iqdigital.de
consent.iqdigital.de
wis.cmk-stage.iqdigital.de
wis.cmk-stage.iqdigital.de
zmz.cmk-dev.iqdigital.de
sci.cmk-dev.iqdigital.de
byron-stage.iqdigital.de
cmp.academics.at
cmp.academics.at
default.cmk-dev.iqdigital.de
cmp.academics.at
wiwo.cmk-stage.iqdigital.de
byron-dev.iqdigital.de
fuw.cmk-dev.iqdigital.de
faz.cmk-dev.iqdigital.de
datenschutz.iqdigital.de
byron-dev.iqdigital.de
sz.cmk-dev.iqdigital.de
jet.cmk-dev.iqdigital.de
cmp.academics.at
wiwo.cmk-stage.iqdigital.de
zol.cmk-dev.iqdigital.de
faz.cmk-dev.iqdigital.de
cmp.academics.at
cmk.iqdigital.de
sz.cmk-stage.iqdigital.de
cmk.iqdigital.de
www.iqdigital.de
mms.sp-prod.net
ccz.cmk-dev.iqdigital.de
emo.cmk-stage.iqdigital.de
byron-stage.iqdigital.de
cmp.academics.at
sz.cmk-dev.iqdigital.de
admin.qa.iqdigital.de
default.cmk-stage.iqdigital.de
iqdigital.de
iqdigital.de
default.cmk-dev.iqdigital.de
sz.cmk-stage.iqdigital.de
cmk.iqdigital.de
wisd.cmk-stage.iqdigital.de
wis.cmk-dev.iqdigital.de
iqdigital.de
cmp.academics.at
arr.cmk-dev.iqdigital.de
wisd.cmk-dev.iqdigital.de
ccz.cmk-stage.iqdigital.de
wis.cmk-dev.iqdigital.de
emo.cmk-stage.iqdigital.de
cmp.channelpartner.de
www.iqdigital.de
mum.cmk-dev.iqdigital.de
www.iqdigital.de
hb.cmk-dev.iqdigital.de
consent.iqdigital.de
www.iqdigital.de
cmp.channelpartner.de
zmz.cmk-dev.iqdigital.de
btc.cmk-stage.iqdigital.de
cmp.channelpartner.de
wis.cmk-stage.iqdigital.de
consent.iqdigital.de
zmz.cmk-stage.iqdigital.de
consent.iqdigital.de
zcz.cmk-dev.iqdigital.de
default.cmk-stage.iqdigital.de
iqdigital.de
cmk.iqdigital.de
iqdigital.de
mum.cmk-stage.iqdigital.de
arr.cmk-dev.iqdigital.de
emo.cmk-dev.iqdigital.de
consent.iqdigital.de
iqdigital.de
tag.cmk-dev.iqdigital.de
zol.cmk-stage.iqdigital.de
faz.cmk-stage.iqdigital.de
byron-dev.iqdigital.de
mms.sp-prod.net
cmp.channelpartner.de
tep.cmk-stage.iqdigital.de
cmk.iqdigital.de
default.cmk-stage.iqdigital.de
sz.cmk-dev.iqdigital.de
cmk.iqdigital.de
tep.cmk-stage.iqdigital.de
wis.cmk-dev.iqdigital.de
btc.cmk-stage.iqdigital.de
jet.cmk-dev.iqdigital.de
*.cmk.iqdigital.de
btc.cmk-dev.iqdigital.de
zol.cmk-dev.iqdigital.de
www.iqdigital.de
cmk.iqdigital.de
fuw.cmk-stage.iqdigital.de
zcz.cmk-stage.iqdigital.de
www.iqdigital.de
tag.cmk-dev.iqdigital.de
ccz.cmk-dev.iqdigital.de
consent.iqdigital.de
wis.cmk-stage.iqdigital.de
wis.cmk-stage.iqdigital.de
zmz.cmk-dev.iqdigital.de
sci.cmk-dev.iqdigital.de
byron-stage.iqdigital.de
cmp.academics.at
cmp.academics.at
default.cmk-dev.iqdigital.de
cmp.academics.at
wiwo.cmk-stage.iqdigital.de
byron-dev.iqdigital.de
fuw.cmk-dev.iqdigital.de
faz.cmk-dev.iqdigital.de
datenschutz.iqdigital.de
byron-dev.iqdigital.de
sz.cmk-dev.iqdigital.de
jet.cmk-dev.iqdigital.de
cmp.academics.at
wiwo.cmk-stage.iqdigital.de
zol.cmk-dev.iqdigital.de
faz.cmk-dev.iqdigital.de
cmp.academics.at
cmk.iqdigital.de
sz.cmk-stage.iqdigital.de
cmk.iqdigital.de
www.iqdigital.de
mms.sp-prod.net
ccz.cmk-dev.iqdigital.de
emo.cmk-stage.iqdigital.de
byron-stage.iqdigital.de
cmp.academics.at
sz.cmk-dev.iqdigital.de
admin.qa.iqdigital.de
default.cmk-stage.iqdigital.de
iqdigital.de
iqdigital.de
default.cmk-dev.iqdigital.de
sz.cmk-stage.iqdigital.de
cmk.iqdigital.de
wisd.cmk-stage.iqdigital.de
wis.cmk-dev.iqdigital.de
iqdigital.de
cmp.academics.at
arr.cmk-dev.iqdigital.de
wisd.cmk-dev.iqdigital.de
ccz.cmk-stage.iqdigital.de
wis.cmk-dev.iqdigital.de
emo.cmk-stage.iqdigital.de
cmp.channelpartner.de
www.iqdigital.de
mum.cmk-dev.iqdigital.de
www.iqdigital.de
hb.cmk-dev.iqdigital.de
consent.iqdigital.de
www.iqdigital.de
cmp.channelpartner.de
zmz.cmk-dev.iqdigital.de
btc.cmk-stage.iqdigital.de
cmp.channelpartner.de
wis.cmk-stage.iqdigital.de
consent.iqdigital.de
zmz.cmk-stage.iqdigital.de
Certificate
The complete raw certificate details for *.cmk.iqdigital.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIQjCCByqgAwIBAgIQDwsrieVq+K/U0cYWh7VbFzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTEyOTAwMDAwMFoXDTI0MTIyNzIzNTk1OVowHTEb MBkGA1UEAwwSKi5jbWsuaXFkaWdpdGFsLmRlMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA1lSHyMvdSxE6Geao0C5IK2n/gb7OHGsTLWaMdKwHuEBUWL4z 9DPSodbHR0m02wpjmhT21C07GRAF0sBM5bjLi+IxcUd4p+ApNVx8DeYhBTmfhWIm JR5oFfkjdnpiuQxPKZbNAmY95MkNcnEyArWpebc2LP4ln1tO5k/lXETYc1yq6OdK tjXf83814jbbCyGemk/L5Cqx8jABFV67TpmQJeASftqFsgyB/XEHPLLd6FV6NnSo 56LUAhavB++Uw30Qx0qR871KHtpiFLYYKQmDRwS0IRrys+j/oWofymsLvjFF+xNx BX/+LoTTdGauRFnoJONnwL/VA8pDVzpO6FgGoQIDAQABo4IFXTCCBVkwHwYDVR0j BBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFMK1l/jHhjvQ7qjE JorlTilejqU+MIICjQYDVR0RBIIChDCCAoCCEiouY21rLmlxZGlnaXRhbC5kZYIT Y21rLndpc3NlbnNjaGFmdC5kZYIQY21rLjExZnJldW5kZS5kZYIeY21rLnN6LW1h Z2F6aW4uc3VlZGRldXRzY2hlLmRlghtjbWsuZm9yc2NodW5nLXVuZC13aXNzZW4u ZGWCEmNhbXB1cy5jbWsuemVpdC5kZYIPY21rLmJ0Yy1lY2hvLmRlghNjbWsuc3Vl ZGRldXRzY2hlLmRlghh6ZWl0LW1hZ2F6aW4uY21rLnplaXQuZGWCDGNtay5qZXR6 dC5kZYISY21rLnRoZWV1cm9wZWFuLmRlghZjbWsubW9ub3BvbC1tYWdhemluLmRl ghRjbWsuaGFuZGVsc2JsYXR0LmNvbYIWY21rLm1hbmFnZXItbWFnYXppbi5kZYIM Y21rLmFyaXZhLmRlgg1jbWsuY2ljZXJvLmRlghB6ZXR0LmNtay56ZWl0LmRlghZj bWsuaGFtYnVyZy1haXJwb3J0LmRlghhjbWsud2lydHNjaGFmdHNrdXJpZXIuZGWC C2Ntay53aXdvLmRlghpjbWsuaXEuY2xpZW50LmF2ZW5nYS5jbG91ZIINY21rLndp c3Nlbi5kZYITY21rLnRhZ2Vzc3BpZWdlbC5kZYIOY21rLnNwaWVnZWwuZGWCC2Nt ay5kdXMuY29tgg5jbWsuZW1vdGlvbi5kZYIaY21rLm1hcmt0dW5kbWl0dGVsc3Rh bmQuZGWCC2Ntay5mYXoubmV0ggtjbWsuemVpdC5kZYIPY21rLnNwZWt0cnVtLmRl gg5jbWsuc2NpbmV4eC5kZYIYY21rLmJvZXJzZS1hbS1zb25udGFnLmRlMBMGA1Ud IAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0w Mi5hbWF6b250cnVzdC5jb20vcjJtMDIuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggr BgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDIuYW1hem9udHJ1c3QuY29tMDYGCCsG AQUFBzAChipodHRwOi8vY3J0LnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5j ZXIwDAYDVR0TAQH/BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYA7s3Q ZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGMGmVGtQAABAMARzBFAiEA +n0FbMXOP88XGTr/hnczafDp/XWeHQgFjMjz61pAKDQCIFliS82nlMHJoMGPIVD9 Fev2SSpoVu0Lk1aajB4u+PxNAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/ qznYhHMAAAGMGmVGsQAABAMARzBFAiAZRNoVoTU8tHcbrEvm4yuUrGv1Zr1oomNL /3hjeBmIvAIhAJVMsuiU6sRPUQUkiz83qcgevLazvA4cQ5H/s2BVjVK1AHYA2ra/ az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGMGmVGuQAABAMARzBFAiB7 mf1uzA+VfevrdnHYRxZBH0mR1WElM2MhjC6YgG4TeQIhAKu132sP0qYo20OKPU7T 674Ra+z7FbsEAWkoq3ZH2vi6MA0GCSqGSIb3DQEBCwUAA4IBAQAL6RCAu3uNHcH1 mDJLllSuISBWkKip52/tIilk+OxPZV4C3X/Df86vosbWocVRKo8NyDOH1c/li8I6 mBSKd6feGbtg3r4R6cAOSYaqzcgWKWPNkoifwI5ezeOPhgX5mg+h9my8fL5T1Eow vnfcwrd+emNMh4Soy8LPiB4B2ClvurFIk1V6qD/VRge5GIDQr+HG8/Xk5DCxy5Gw whegAqdYBx4N+AkGJFr6j6pKSdvU8CIluAn36+cpFLYfRfPBEa+BY097FcOtdcWN YLPrJ7aXcfgRAIOdwmud0DAWsxBm2RSB+OhNEKKQIP5uvbTfZ/kAyDns4OTJNHiC nvwiETh/ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lSHyMvdSxE6Geao0C5I K2n/gb7OHGsTLWaMdKwHuEBUWL4z9DPSodbHR0m02wpjmhT21C07GRAF0sBM5bjL i+IxcUd4p+ApNVx8DeYhBTmfhWImJR5oFfkjdnpiuQxPKZbNAmY95MkNcnEyArWp ebc2LP4ln1tO5k/lXETYc1yq6OdKtjXf83814jbbCyGemk/L5Cqx8jABFV67TpmQ JeASftqFsgyB/XEHPLLd6FV6NnSo56LUAhavB++Uw30Qx0qR871KHtpiFLYYKQmD RwS0IRrys+j/oWofymsLvjFF+xNxBX/+LoTTdGauRFnoJONnwL/VA8pDVzpO6FgG oQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19996418271090230449883813419072969495 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-27 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cmk.iqdigital.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27056680760318467438822171293799463329654552240270889234739155272454530882173789063355604714699704453432792418057003688101076202662687214063996441210133238174670716826623362054325103348758125706852775885898196839224738954827903726813076059960341028986628839911813943039172165548959347423134262019339687844173701644476650258784923878495120067380814763494929551174775028155290496944659632109993860816906723545748303359611669036121089093298781482221126282797826724149888913085962190324903471401402076256619711802234919326467360104543720867556998673940454119388263524088216137001066354065200719395967382174255465474033313 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c2b597f8c7863bd0eea8c4268ae54e295e8ea53e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (644 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmk.iqdigital.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.wissenschaft.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.11freunde.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.sz-magazin.sueddeutsche.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.forschung-und-wissen.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campus.cmk.zeit.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.btc-echo.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.sueddeutsche.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeit-magazin.cmk.zeit.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.jetzt.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.theeuropean.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.monopol-magazin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.handelsblatt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.manager-magazin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.ariva.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.cicero.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zett.cmk.zeit.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.hamburg-airport.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.wirtschaftskurier.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.wiwo.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.iq.client.avenga.cloud' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.wissen.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.tagesspiegel.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.spiegel.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.dus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.emotion.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.marktundmittelstand.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.faz.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.zeit.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.spektrum.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.scinexx.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.boerse-am-sonntag.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 0168007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c1a6546b50000040300473045022100fa7d056cc5ce3fcf17193aff86773369f0e9fd759e1d08058cc8f3eb5a402834022059624bcda794c1c9a0c18f2150fd15ebf6492a6856ed0b93569a8c1e2ef8fc4d00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c1a6546b1000004030047304502201944da15a1353cb4771bac4be6e32b94ac6bf566bd68a2634bff7863781988bc022100954cb2e894eac44f5105248b3f37a9c81ebcb6b3bc0e1c4391ffb360558d52b5007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018c1a6546b9000004030047304502207b99fd6ecc0f957debeb7671d84716411f4991d561253363218c2e98806e1379022100abb5df6b0fd2a628db438a3d4ed3ebbe116becfb15bb04016928ab7647daf8ba . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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