ankh-morpork-times.de

Issued by R3

About this certificate

This digital certificate with serial number 04:fd:f6:31:4a:b3:42:69:e8:64:9f:18:0e:90:b5:d4:33:c1 was issued on by Let's Encrypt.

With 60 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ankh-morpork-times.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fd:f6:31:4a:b3:42:69:e8:64:9f:18:0e:90:b5:d4:33:c1
Serial Number (int): 434867828582648281159598866695452049552321
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ea:48:c8:09:b0:ee:7e:d3:7e:7b:a9:ba:0f:15:75:5d:63:e4:48:a0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 93:80:32:96:a3:75:44:36:6c:cc:d0:03:b6:5b:4a:9d:f7:54:da:60
Fingerprint (sha256): fb:bd:d9:d2:49:96:1f:6c:ea:f0:9a:4d:43:d8:b8:a5:9f:0a:dd:75:b4:48:93:9e:11:bd:82:ef:df:40:43:4b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ankh-morpork-times.de

60

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ankh-morpork-times.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ankh-morpork-times.de
ankh-morpork.de
autoconfig.ankh-morpork-times.de
autoconfig.ankh-morpork.de
autoconfig.buchjunkies-blog.de
autoconfig.discworld-convention.de
autoconfig.pratchett-fanclub.de
autoconfig.puck525.startdedicated.de
autoconfig.scheibenwelt-convention.de
autoconfig.scheibenwelt.de
autoconfig.thediscworld.de
autodiscover.ankh-morpork-times.de
autodiscover.ankh-morpork.de
autodiscover.buchjunkies-blog.de
autodiscover.discworld-convention.de
autodiscover.pratchett-fanclub.de
autodiscover.puck525.startdedicated.de
autodiscover.scheibenwelt-convention.de
autodiscover.scheibenwelt.de
autodiscover.thediscworld.de
books.buchjunkies-blog.de
buchjunkies-blog.de
discworld-convention.de
forum.ankh-morpork-times.de
forum.ankh-morpork.de
forum.discworld-convention.de
forum.pratchett-fanclub.de
forum.scheibenwelt-convention.de
forum.scheibenwelt.de
forum.thediscworld.de
mail.ankh-morpork-times.de
mail.ankh-morpork.de
mail.buchjunkies-blog.de
mail.discworld-convention.de
mail.pratchett-fanclub.de
mail.puck525.startdedicated.de
mail.scheibenwelt-convention.de
mail.scheibenwelt.de
mail.thediscworld.de
naschwerkstatt.buchjunkies-blog.de
pratchett-fanclub.de
puck525.startdedicated.de
scheibenwelt-convention.de
thediscworld.de
wiki.ankh-morpork-times.de
wiki.ankh-morpork.de
wiki.discworld-convention.de
wiki.pratchett-fanclub.de
wiki.scheibenwelt-convention.de
wiki.scheibenwelt.de
www.ankh-morpork-times.de
www.ankh-morpork.de
www.books.buchjunkies-blog.de
www.buchjunkies-blog.de
www.discworld-convention.de
www.naschwerkstatt.buchjunkies-blog.de
www.pratchett-fanclub.de
www.scheibenwelt-convention.de
www.scheibenwelt.de
www.thediscworld.de

Other certificates including the domain name ankh-morpork-times.de

(limited to 100 certificates)
ankh-morpork-times.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork.de
ankh-morpork-times.de
ankh-morpork-times.de
ankh-morpork-times.de

Certificate

The complete raw certificate details for ankh-morpork-times.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd9o9zdu1miba7bRFv1o
vfzFXicYNMQmjs8T1K9/64V+jHSMItG/6cMnkgsX95oVPt9TDWu4WnDjOEfAug0c
Gs6BSa+LxbK1PVsm6bb1bsudmpWhWeXqGyMHj5gf3SJm410Ldf9LdHIKFKcLrSe7
GcEoY3z8N5jOCRKemTPz0/UzeDm2lyeNzje0C+sqPW7bRFv5WnOf5FXPiOaR6auZ
dzMdmSO4m2eSa0VUmsu24udxTUjazBaXq+MniboB19ep7N3MBJpJ1MJ1t09RwpCg
Tciu2HwmpWpG5C2KMqsFt4mZs5pPq8/Y/+Rd9VWaZQVWmpdKtONlku+ExCFfSwQX
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 434867828582648281159598866695452049552321
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-08 01:09:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-06 01:09:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ankh-morpork-times.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24474160446410675307906185632299844600853433034557681131642132785197650911750110779779799384863351201721725440989443853399181784966327263100311840300654829708959970674291877104670435155549307310674442419856741794066822094484294646888663102270265040985395612752289435312579787009835972431898105027906306215674927572497373159570367796668593044427848299124706020907165664182127118332413220209053962661748861607589352753206036400056288938647030670487460707862001856566998795251548728431831525864521640288427967764140773719390798347641010601929733023715679942374797828850977556724866594276220271204630730441588150072776649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea48c809b0ee7ed37e7ba9ba0f15755d63e448a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1725 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ankh-morpork-times.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ankh-morpork.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.ankh-morpork-times.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.ankh-morpork.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.discworld-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.pratchett-fanclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.puck525.startdedicated.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.scheibenwelt-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.scheibenwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.thediscworld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ankh-morpork-times.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ankh-morpork.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.discworld-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pratchett-fanclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.puck525.startdedicated.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.scheibenwelt-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.scheibenwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.thediscworld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discworld-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.ankh-morpork-times.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.ankh-morpork.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.discworld-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.pratchett-fanclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.scheibenwelt-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.scheibenwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.thediscworld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ankh-morpork-times.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ankh-morpork.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.discworld-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pratchett-fanclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.puck525.startdedicated.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.scheibenwelt-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.scheibenwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.thediscworld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naschwerkstatt.buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pratchett-fanclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puck525.startdedicated.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheibenwelt-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thediscworld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.ankh-morpork-times.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.ankh-morpork.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.discworld-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.pratchett-fanclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.scheibenwelt-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.scheibenwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ankh-morpork-times.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ankh-morpork.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.books.buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discworld-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naschwerkstatt.buchjunkies-blog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pratchett-fanclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scheibenwelt-convention.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scheibenwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thediscworld.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189d2e8325e0000040300473045022003f3a5723175863560a16edfa536b3765590cd5e5852d8d8b8de0873f811a06402210092dd2a09694f025ef34e370e28e82eeb149e4af2ed5df0e8e5d0ddd30fe7c9e6007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189d2e8324f0000040300473045022100e66a13e76fc571e8ad06967ad96fc23d3bad7dca0b09498f8b63cdd9e9b7a3e3022016965bb485bf688820e3ebe9ba134fb4d966012ac0c8c73c0aed986648c1e3ed
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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