derspiegel.eu

Issued by R3

About this certificate

This digital certificate with serial number 03:79:64:ef:1f:30:36:89:40:90:b5:6c:d4:5f:6e:59:68:bd was issued on by Let's Encrypt.

With 43 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=derspiegel.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:79:64:ef:1f:30:36:89:40:90:b5:6c:d4:5f:6e:59:68:bd
Serial Number (int): 302645188583816503062188595793851787602109
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7f:b8:07:c3:c6:85:fb:33:43:05:5e:30:0a:8f:f7:3e:db:14:29:1a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1c:97:a7:6e:11:3d:10:46:e3:e1:16:6c:58:ac:84:02:de:23:35:d1
Fingerprint (sha256): ec:7c:86:65:24:c3:fb:36:6e:b1:82:fd:12:33:6b:42:53:60:4c:b7:fd:48:56:cb:82:12:1a:4f:8b:68:97:0a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate derspiegel.eu

43

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for derspiegel.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

der-spiegel.eu
derspiegel.eu
derspiegel.info
investors-darling.de
konferenzen.spiegel.de
manage-forward.com
manage-forward.eu
manageforward.de
manageforward.eu
radar.manager-magazin.de
radar.spiegel.de
rudolf-augstein-stiftung.com
rudolf-augstein.de
spiegel-bestseller.de
spiegel-bestsellerliste.de
spiegel-plus.de
spiegel-veranstaltungen.de
spiegel-verlag.de
spiegel.club
spiegel.plus
spiegel.tv
spiegelgruppe-rechteerwerb.de
spiegelgruppe-veranstaltungen.de
spiegelverlag.de
spon.de
wissen.spiegel.de
www.der-spiegel.eu
www.derspiegel.eu
www.derspiegel.info
www.investors-darling.de
www.rudolf-augstein-stiftung.com
www.rudolf-augstein.de
www.spiegel-bestseller.de
www.spiegel-bestsellerliste.de
www.spiegel-plus.de
www.spiegel.club
www.spiegel.plus
www.spiegel.tv
www.spiegelgruppe-veranstaltungen.de
www.spiehel.de
www.spigle.de
www.spirgel.de
www.spon.de

Other certificates including the domain name derspiegel.eu

(limited to 100 certificates)
apiegel.de
derspiegel.eu
derspiegel.eu
derspiegel.eu
derspiegel.eu
bento.app
der-spiegel.eu
apiegel.de
dasdeutschenachrichtenmagazin.de
der-spiegel.eu
derspiegel.eu
bento.app
apiegel.de
apiegel.de
der-spiegel.eu
bento.app
arztsuche.spiegel.de
derspiegel.eu
der-spiegel.eu
bento.app
bento.app
derspiegel.eu
apiegel.de
derspiegel.eu
derspiegel.eu

Certificate

The complete raw certificate details for derspiegel.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIYzCCB0ugAwIBAgISA3lk7x8wNolAkLVs1F9uWWi9MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMDcwMTIzMjZaFw0yNDA0MDYwMTIzMjVaMBgxFjAUBgNVBAMT
DWRlcnNwaWVnZWwuZXUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK
C5dOgt3zs2W2xwkLLgsntMUCGjIp5C21M023wh2P+YAFXtVaOaldpZZFKekhh8H3
8Bq3K8rTp+om4qHm6fma+N7tvjGYEuvCP18A0CdPBXQZsixYWum7RhyZJOA2YBxv
+2OroBfwD4Lr3c6SuTTgcWvL/ZXh3f1NQIPgVD8b86QN22WOSwJYqBP7+I1GOF4t
sLL4cSm4QbPmuk6e9/jLilL1+T4sEyh0oQqNgcht7ccwt6jWIr/hzZSm20Z1Bwth
zkF2dMN6emqZodKQjcQGdCpkLdnreUO/Ur/T5je5PM69S6AKzfHJMbzJmBQ6caxT
1fhKSZ1z9cHKEDgbIAMlAgMBAAGjggWLMIIFhzAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFH+4B8PGhfszQwVeMAqP9z7bFCkaMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ
QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz
Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv
MIIDlAYDVR0RBIIDizCCA4eCDmRlci1zcGllZ2VsLmV1gg1kZXJzcGllZ2VsLmV1
gg9kZXJzcGllZ2VsLmluZm+CFGludmVzdG9ycy1kYXJsaW5nLmRlghZrb25mZXJl
bnplbi5zcGllZ2VsLmRlghJtYW5hZ2UtZm9yd2FyZC5jb22CEW1hbmFnZS1mb3J3
YXJkLmV1ghBtYW5hZ2Vmb3J3YXJkLmRlghBtYW5hZ2Vmb3J3YXJkLmV1ghhyYWRh
ci5tYW5hZ2VyLW1hZ2F6aW4uZGWCEHJhZGFyLnNwaWVnZWwuZGWCHHJ1ZG9sZi1h
dWdzdGVpbi1zdGlmdHVuZy5jb22CEnJ1ZG9sZi1hdWdzdGVpbi5kZYIVc3BpZWdl
bC1iZXN0c2VsbGVyLmRlghpzcGllZ2VsLWJlc3RzZWxsZXJsaXN0ZS5kZYIPc3Bp
ZWdlbC1wbHVzLmRlghpzcGllZ2VsLXZlcmFuc3RhbHR1bmdlbi5kZYIRc3BpZWdl
bC12ZXJsYWcuZGWCDHNwaWVnZWwuY2x1YoIMc3BpZWdlbC5wbHVzggpzcGllZ2Vs
LnR2gh1zcGllZ2VsZ3J1cHBlLXJlY2h0ZWVyd2VyYi5kZYIgc3BpZWdlbGdydXBw
ZS12ZXJhbnN0YWx0dW5nZW4uZGWCEHNwaWVnZWx2ZXJsYWcuZGWCB3Nwb24uZGWC
EXdpc3Nlbi5zcGllZ2VsLmRlghJ3d3cuZGVyLXNwaWVnZWwuZXWCEXd3dy5kZXJz
cGllZ2VsLmV1ghN3d3cuZGVyc3BpZWdlbC5pbmZvghh3d3cuaW52ZXN0b3JzLWRh
cmxpbmcuZGWCIHd3dy5ydWRvbGYtYXVnc3RlaW4tc3RpZnR1bmcuY29tghZ3d3cu
cnVkb2xmLWF1Z3N0ZWluLmRlghl3d3cuc3BpZWdlbC1iZXN0c2VsbGVyLmRlgh53
d3cuc3BpZWdlbC1iZXN0c2VsbGVybGlzdGUuZGWCE3d3dy5zcGllZ2VsLXBsdXMu
ZGWCEHd3dy5zcGllZ2VsLmNsdWKCEHd3dy5zcGllZ2VsLnBsdXOCDnd3dy5zcGll
Z2VsLnR2giR3d3cuc3BpZWdlbGdydXBwZS12ZXJhbnN0YWx0dW5nZW4uZGWCDnd3
dy5zcGllaGVsLmRlgg13d3cuc3BpZ2xlLmRlgg53d3cuc3BpcmdlbC5kZYILd3d3
LnNwb24uZGUwEwYDVR0gBAwwCjAIBgZngQwBAgEwggECBgorBgEEAdZ5AgQCBIHz
BIHwAO4AdQCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3iviabfUX2AAAAYzhu3EO
AAAEAwBGMEQCIA9E7zWn0dudCNSH5e7sXnfleySQuljBa1xlBoYqKKxnAiAZFIUj
JA4p+Ipg24fT7oqrMV0YP7bC/yKdb5bdaoPYDgB1ADtTd3U+LbmAToswWwb+QDtn
2E/D9Me9AA0tcm/h+tQXAAABjOG7cR0AAAQDAEYwRAIgXeOh66RShVXm4CVIwIEr
e7mZ5E5TV5+Y2yiCk4q5vVwCIGsS77cmbM2a/UQcCHSDD4hTPyIVOSIV1Dwqf9vA
86qqMA0GCSqGSIb3DQEBCwUAA4IBAQB5/DnxUTm1OqO1BMqZcQj3dGD09DQG/arE
1h39eATL9A0pKMjstdz+pANoOQ0K1PPZq8QdFxfoLIC9Zf4jzJMeJeQ159r0mX2O
aMneRI/9L+G1m8oA/DD8+0TgRVTLcz/1S0nOa5YNCheHzmLlFi3cy+k3tGYo78gm
RkVe1pzH+/vqCKU1WQrCvPMlaPRUwO67wAhfXz+RkO5XRlCOzB8wwggMeSR0s6B7
hdAVYv4yYtriNbWSELkh8OBx2EBwOQaeDDf7t2ZB3czfLWVRuMCDmZxmwyfYFF3i
67zK1c8isEaQr+bW1THNlGwdtrzVte4suWfF7eBhY8asWr6VIhr9
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyguXToLd87NltscJCy4L
J7TFAhoyKeQttTNNt8Idj/mABV7VWjmpXaWWRSnpIYfB9/AatyvK06fqJuKh5un5
mvje7b4xmBLrwj9fANAnTwV0GbIsWFrpu0YcmSTgNmAcb/tjq6AX8A+C693Okrk0
4HFry/2V4d39TUCD4FQ/G/OkDdtljksCWKgT+/iNRjheLbCy+HEpuEGz5rpOnvf4
y4pS9fk+LBModKEKjYHIbe3HMLeo1iK/4c2UpttGdQcLYc5BdnTDenpqmaHSkI3E
BnQqZC3Z63lDv1K/0+Y3uTzOvUugCs3xyTG8yZgUOnGsU9X4Skmdc/XByhA4GyAD
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302645188583816503062188595793851787602109
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-07 01:23:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-06 01:23:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'derspiegel.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25505853358852911063585489724471650441509446300991423033733943658662352187010900776079147881751111533514586604516051668337286455455505901070474579907046183373871146306902515336259779282060303376720331759822674554092097570686276988235561446666105701413089568914461845512781487831003816978253851387314904290465226451742142987299111638825657762381690533280854950310855871481660580332395651801214260257709340946493596343183393546801577020999498507131254446149997997672425815597136510875489124993289586054641571697909627573285402231032960174697411715670289259013612750082739208807521054523081481991589392196370715889369893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7fb807c3c685fb3343055e300a8ff73edb14291a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (907 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'der-spiegel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derspiegel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derspiegel.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors-darling.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konferenzen.spiegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manage-forward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manage-forward.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manageforward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manageforward.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radar.manager-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radar.spiegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rudolf-augstein-stiftung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rudolf-augstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel-bestseller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel-bestsellerliste.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel-plus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel-veranstaltungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel-verlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegelgruppe-rechteerwerb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegelgruppe-veranstaltungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegelverlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wissen.spiegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.der-spiegel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.derspiegel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.derspiegel.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investors-darling.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rudolf-augstein-stiftung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rudolf-augstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel-bestseller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel-bestsellerliste.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel-plus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegelgruppe-veranstaltungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiehel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spigle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spirgel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spon.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018ce1bb710e000004030046304402200f44ef35a7d1db9d08d487e5eeec5e77e57b2490ba58c16b5c6506862a28ac67022019148523240e29f88a60db87d3ee8aab315d183fb6c2ff229d6f96dd6a83d80e0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ce1bb711d000004030046304402205de3a1eba4528555e6e02548c0812b7bb999e44e53579f98db2882938ab9bd5c02206b12efb7266ccd9afd441c0874830f88533f2215392215d43c2a7fdbc0f3aaaa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0079fc39f15139b53aa3b504ca997108f77460f4f43406fdaac4d61dfd7804cbf40d2928c8ecb5dcfea40368390d0ad4f3d9abc41d1717e82c80bd65fe23cc931e25e435e7daf4997d8e68c9de448ffd2fe1b59bca00fc30fcfb44e04554cb733ff54b49ce6b960d0a1787ce62e5162ddccbe937b46628efc82646455ed69cc7fbfbea08a535590ac2bcf32568f454c0eebbc0085f5f3f9190ee5746508ecc1f30c2080c792474b3a07b85d01562fe3262dae235b59210b921f0e071d8407039069e0c37fbb76641ddccdf2d6551b8c083999c66c327d8145de2ebbccad5cf22b04690afe6d6d531cd946c1db6bcd5b5ee2cb967c5ede06163c6ac5abe95221afd