concerto-magazin.de
Issued by R3
About this certificate
This digital certificate with serial number 04:dc:18:59:53:8c:56:d2:f4:fd:e9:35:46:82:46:a3:dc:2d was issued on by Let's Encrypt.
With 32 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=concerto-magazin.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:dc:18:59:53:8c:56:d2:f4:fd:e9:35:46:82:46:a3:dc:2dSerial Number (int): 423343629730525506726340301913446609574957
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: cc:09:0c:fe:26:73:ef:24:10:95:b2:3e:bb:fb:bd:67:ba:b9:81:72
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): a0:90:0b:7e:e0:79:74:cb:7f:f6:40:81:a0:14:2d:b2:8f:c1:6f:93
Fingerprint (sha256): fe:f2:b7:93:9c:0d:a0:8e:73:b8:3d:97:06:74:49:ff:7b:30:02:79:88:52:1a:77:7b:78:ec:49:5e:10:1a:e2
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate concerto-magazin.de
32
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for concerto-magazin.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
altenburg-1180.de
altenburg1180.de
altenburger-musikfestival.com
altenburger-musikfestival.de
backup.kamprad.isp-vhost04.domservice.de
barbarossa-festspiele.de
barbarossa-museum.de
barbarossamuseum.de
concerto-magazin.de
frech-ab.de
frechab.de
gewandhausmagazin.de
kamprad.isp-vhost04.domservice.de
orgelforum-sachsen.de
satt-statt-platt.de
sattstattplatt.de
wege-zum-mittelalter.de
www.altenburg-1180.de
www.altenburg1180.de
www.altenburger-musikfestival.com
www.altenburger-musikfestival.de
www.barbarossa-festspiele.de
www.barbarossa-museum.de
www.barbarossamuseum.de
www.concerto-magazin.de
www.frech-ab.de
www.frechab.de
www.gewandhausmagazin.de
www.orgelforum-sachsen.de
www.satt-statt-platt.de
www.sattstattplatt.de
www.wege-zum-mittelalter.de
altenburg1180.de
altenburger-musikfestival.com
altenburger-musikfestival.de
backup.kamprad.isp-vhost04.domservice.de
barbarossa-festspiele.de
barbarossa-museum.de
barbarossamuseum.de
concerto-magazin.de
frech-ab.de
frechab.de
gewandhausmagazin.de
kamprad.isp-vhost04.domservice.de
orgelforum-sachsen.de
satt-statt-platt.de
sattstattplatt.de
wege-zum-mittelalter.de
www.altenburg-1180.de
www.altenburg1180.de
www.altenburger-musikfestival.com
www.altenburger-musikfestival.de
www.barbarossa-festspiele.de
www.barbarossa-museum.de
www.barbarossamuseum.de
www.concerto-magazin.de
www.frech-ab.de
www.frechab.de
www.gewandhausmagazin.de
www.orgelforum-sachsen.de
www.satt-statt-platt.de
www.sattstattplatt.de
www.wege-zum-mittelalter.de
Other certificates including the domain name concerto-magazin.de
(limited to 100 certificates)
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
altenburg-1180.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
altenburg-1180.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
concerto-magazin.de
Certificate
The complete raw certificate details for concerto-magazin.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIII8zCCB9ugAwIBAgISBNwYWVOMVtL0/ek1RoJGo9wtMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA2MjgwMDA5MjRaFw0yMzA5MjYwMDA5MjNaMB4xHDAaBgNVBAMT E2NvbmNlcnRvLW1hZ2F6aW4uZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK AoICAQC+iXHs7dYDBcznR/CS8n5IB618u37dp36kk11Ta66T/AT0ikKgc1FUYgpJ L2ZaHhWlNsvsCPsJV8urDJZmebDs3FSW8j7MIlgnOqzAB6ekZbNZuPBr6WXoWYfx GooqvYeF39n1aAIJuo6DMwds1n8ssVnqmisUHhE0ZgOXzT1SwhvQM4aDaOc3n8S/ 2F2cO6vxQv1pI5alz2eEP0b6eWePz8ANoXGJGO/bk/0FT0VonbeV3OwUCdTe1utD 6SVyi9oRZf3RPBOPOsDBYGN/RNqDwKOZLOdVZwvoZOO85Rd4Gf26FRny8p1j5NEs nFFAHrcxPjFEhlkSMxkoE206157q5HtaVqymHsDv/oSB/h5Nm6PhFhJdjEDNCVXL NoodgTEIyvGGQ6QskOWqvODgzW9OVghs0TAUCf5zgZ5Qhds0iPQZrn+KNJkaZIAa SxhIQ3Z17OWPnXorLa904SZW2wWu+syqMJgkOVDiXB1NfKrMPCj6U7RVLOLlHJlY Pl8XBMCFh8KLiPpldt0N3TKyLGDzW7tBBFc7Vje3VJPNHwNtC2szpC93fXZzVYB3 s7b0jZHEe1egflqlSWnLuchlv9pd5YkEkLW3lTFLwCcjqplnTAahqAazpJqprUZU xFudPo7ANwdgZElp1xkCCWbb8xBeK3C3ySpymTgI7FByVkBRHwIDAQABo4IFFTCC BREwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTMCQz+JnPvJBCVsj67+71nurmBcjAf BgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcw IQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYW aHR0cDovL3IzLmkubGVuY3Iub3JnLzCCAxwGA1UdEQSCAxMwggMPghFhbHRlbmJ1 cmctMTE4MC5kZYIQYWx0ZW5idXJnMTE4MC5kZYIdYWx0ZW5idXJnZXItbXVzaWtm ZXN0aXZhbC5jb22CHGFsdGVuYnVyZ2VyLW11c2lrZmVzdGl2YWwuZGWCKGJhY2t1 cC5rYW1wcmFkLmlzcC12aG9zdDA0LmRvbXNlcnZpY2UuZGWCGGJhcmJhcm9zc2Et ZmVzdHNwaWVsZS5kZYIUYmFyYmFyb3NzYS1tdXNldW0uZGWCE2JhcmJhcm9zc2Ft dXNldW0uZGWCE2NvbmNlcnRvLW1hZ2F6aW4uZGWCC2ZyZWNoLWFiLmRlggpmcmVj aGFiLmRlghRnZXdhbmRoYXVzbWFnYXppbi5kZYIha2FtcHJhZC5pc3Atdmhvc3Qw NC5kb21zZXJ2aWNlLmRlghVvcmdlbGZvcnVtLXNhY2hzZW4uZGWCE3NhdHQtc3Rh dHQtcGxhdHQuZGWCEXNhdHRzdGF0dHBsYXR0LmRlghd3ZWdlLXp1bS1taXR0ZWxh bHRlci5kZYIVd3d3LmFsdGVuYnVyZy0xMTgwLmRlghR3d3cuYWx0ZW5idXJnMTE4 MC5kZYIhd3d3LmFsdGVuYnVyZ2VyLW11c2lrZmVzdGl2YWwuY29tgiB3d3cuYWx0 ZW5idXJnZXItbXVzaWtmZXN0aXZhbC5kZYIcd3d3LmJhcmJhcm9zc2EtZmVzdHNw aWVsZS5kZYIYd3d3LmJhcmJhcm9zc2EtbXVzZXVtLmRlghd3d3cuYmFyYmFyb3Nz YW11c2V1bS5kZYIXd3d3LmNvbmNlcnRvLW1hZ2F6aW4uZGWCD3d3dy5mcmVjaC1h Yi5kZYIOd3d3LmZyZWNoYWIuZGWCGHd3dy5nZXdhbmRoYXVzbWFnYXppbi5kZYIZ d3d3Lm9yZ2VsZm9ydW0tc2FjaHNlbi5kZYIXd3d3LnNhdHQtc3RhdHQtcGxhdHQu ZGWCFXd3dy5zYXR0c3RhdHRwbGF0dC5kZYIbd3d3LndlZ2UtenVtLW1pdHRlbGFs dGVyLmRlMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB 8gDwAHUAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGI/4xMEwAA BAMARjBEAiBN4lztbBK0CdCRaqzz04OVx+S3J4DfUQ6vmu3G3nomvwIgCZZ+QofD xeq1JQ4vXidV3BnDwWuGnNEXdWPPvzsyIWMAdwDoPtDaPvUGNTLnVyi8iWvJA9PL 0RFr7Otp4Xd9bQa9bgAAAYj/jEwMAAAEAwBIMEYCIQD6QIACQKHZM00xO2zieTdX Lm5o6jsa55Hk1r0SrvA6mQIhALe4liHFyAi7fJ8p2h3F55G+Gf0oEsgT+MvugcEY 80rhMA0GCSqGSIb3DQEBCwUAA4IBAQCXJH/HGOlwzyCTIEjwzhN2t1FOlGKtwru9 dWtIhbyoViRvtWqNARZG7cLzQqP6bHSDwTDuEWl88q4fC+QPkl5wR50y2HocHl0j lYij+g8Ehn23AKdjOImkfnM87PQ/xdkwjKdEE+pf8ZOR+bGZv7iVoErfhi13nb/k gDsautuk+1ahmHZ4aHEPZckS2HnBplLZ+awgpq8KQSneUA7mLLlzrIq2t1xG50TZ geeUGuH/uHybgLxBYvosle+X1B4V9NnuQoj7OWcEs51+kJX78jKv8wSNJkoc4Wa+ MKOfiQbKlA9zqs23u1dDwlkjefy+p6KhsAWhXVjbaCwFzEO9PkDv -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvolx7O3WAwXM50fwkvJ+ SAetfLt+3ad+pJNdU2uuk/wE9IpCoHNRVGIKSS9mWh4VpTbL7Aj7CVfLqwyWZnmw 7NxUlvI+zCJYJzqswAenpGWzWbjwa+ll6FmH8RqKKr2Hhd/Z9WgCCbqOgzMHbNZ/ LLFZ6porFB4RNGYDl809UsIb0DOGg2jnN5/Ev9hdnDur8UL9aSOWpc9nhD9G+nln j8/ADaFxiRjv25P9BU9FaJ23ldzsFAnU3tbrQ+klcovaEWX90TwTjzrAwWBjf0Ta g8CjmSznVWcL6GTjvOUXeBn9uhUZ8vKdY+TRLJxRQB63MT4xRIZZEjMZKBNtOtee 6uR7Wlasph7A7/6Egf4eTZuj4RYSXYxAzQlVyzaKHYExCMrxhkOkLJDlqrzg4M1v TlYIbNEwFAn+c4GeUIXbNIj0Ga5/ijSZGmSAGksYSEN2dezlj516Ky2vdOEmVtsF rvrMqjCYJDlQ4lwdTXyqzDwo+lO0VSzi5RyZWD5fFwTAhYfCi4j6ZXbdDd0ysixg 81u7QQRXO1Y3t1STzR8DbQtrM6Qvd312c1WAd7O29I2RxHtXoH5apUlpy7nIZb/a XeWJBJC1t5UxS8AnI6qZZ0wGoagGs6Saqa1GVMRbnT6OwDcHYGRJadcZAglm2/MQ Xitwt8kqcpk4COxQclZAUR8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 423343629730525506726340301913446609574957 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-28 00:09:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 00:09:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'concerto-magazin.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 777322711856022539384895463025955844113014576018058663042267873205716476224060928779111838768658784578225999077111435724629255756753603500510952069147685559129659305126959436185688053573208961729169489016029955300074524845512558143949926826771134304674656351569429593886785252880375877563687590802598009322734921895702701683047453163401460573652589961576871249713356760360957901524020237242759030391468374120732393610270571806476550930407891591108904878087354239759961419846613553214019427160565727452286566809961557201198985839241416935773047599576190609303236693372952365339324671042754874997320528687717875519747616660197495783124955178820967014980084491638098300352598557589333397692609857979819722066599168283274421450843908087609018544499384362078185462907164177243453997297326672810101330496435704644910436653631230926401062821032434928217755188581162382640922583545524049454674391581012090647695786627487624425378426789191101572836126697384779268669031017059607132548421639658447435516533348523239984136724277372527387319778641808863216155571688231618135974575389579680088041321821487118585909000304138758338754835235993768502171873526315210259960162863829186430995298821415953779141139429849680689204045349424575050554560799 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cc090cfe2673ef241095b23ebbfbbd67bab98172 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (787 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburg-1180.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburg1180.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburger-musikfestival.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburger-musikfestival.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup.kamprad.isp-vhost04.domservice.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbarossa-festspiele.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbarossa-museum.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbarossamuseum.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concerto-magazin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frech-ab.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frechab.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gewandhausmagazin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamprad.isp-vhost04.domservice.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgelforum-sachsen.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satt-statt-platt.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sattstattplatt.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wege-zum-mittelalter.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburg-1180.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburg1180.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburger-musikfestival.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburger-musikfestival.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarossa-festspiele.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarossa-museum.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarossamuseum.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.concerto-magazin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frech-ab.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frechab.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gewandhausmagazin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orgelforum-sachsen.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.satt-statt-platt.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sattstattplatt.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wege-zum-mittelalter.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188ff8c4c13000004030046304402204de25ced6c12b409d0916aacf3d38395c7e4b72780df510eaf9aedc6de7a26bf022009967e4287c3c5eab5250e2f5e2755dc19c3c16b869cd1177563cfbf3b322163007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000188ff8c4c0c0000040300483046022100fa40800240a1d9334d313b6ce27937572e6e68ea3b1ae791e4d6bd12aef03a99022100b7b89621c5c808bb7c9f29da1dc5e791be19fd2812c813f8cbee81c118f34ae1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0097247fc718e970cf20932048f0ce1376b7514e9462adc2bbbd756b4885bca856246fb56a8d011646edc2f342a3fa6c7483c130ee11697cf2ae1f0be40f925e70479d32d87a1c1e5d239588a3fa0f04867db700a7633889a47e733cecf43fc5d9308ca74413ea5ff19391f9b199bfb895a04adf862d779dbfe4803b1abadba4fb56a198767868710f65c912d879c1a652d9f9ac20a6af0a4129de500ee62cb973ac8ab6b75c46e744d981e7941ae1ffb87c9b80bc4162fa2c95ef97d41e15f4d9ee4288fb396704b39d7e9095fbf232aff3048d264a1ce166be30a39f8906ca940f73aacdb7bb5743c2592379fcbea7a2a1b005a15d58db682c05cc43bd3e40ef