concerto-magazin.de
Issued by R3
About this certificate
This digital certificate with serial number 03:b0:1a:6d:e1:34:93:45:93:14:0b:94:2a:50:af:0a:ef:15 was issued on by Let's Encrypt.
With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=concerto-magazin.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b0:1a:6d:e1:34:93:45:93:14:0b:94:2a:50:af:0a:ef:15Serial Number (int): 321261684829321501297583162502436818186005
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: dc:1b:a1:3e:24:6e:bd:15:b6:44:ef:7b:fb:2f:fe:3e:b0:0a:94:55
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): fc:b9:21:29:25:85:92:99:85:49:13:7e:ba:8f:64:97:5d:7d:59:f0
Fingerprint (sha256): ff:37:94:b2:ab:1b:dc:c9:cd:60:3e:07:3a:00:e9:35:32:9b:6e:4d:a3:d5:a2:f5:66:5e:17:7f:ca:4a:77:07
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate concerto-magazin.de
28
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for concerto-magazin.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
altenburg-1180.de
altenburger-musikfestival.com
altenburger-musikfestival.de
backup.kamprad.isp-vhost04.domservice.de
barbarossa-festspiele.de
barbarossa-museum.de
barbarossamuseum.de
concerto-magazin.de
frech-ab.de
frechab.de
gewandhausmagazin.de
kamprad.isp-vhost04.domservice.de
orgelforum-sachsen.de
satt-statt-platt.de
sattstattplatt.de
www.altenburg-1180.de
www.altenburger-musikfestival.com
www.altenburger-musikfestival.de
www.barbarossa-festspiele.de
www.barbarossa-museum.de
www.barbarossamuseum.de
www.concerto-magazin.de
www.frech-ab.de
www.frechab.de
www.gewandhausmagazin.de
www.orgelforum-sachsen.de
www.satt-statt-platt.de
www.sattstattplatt.de
altenburger-musikfestival.com
altenburger-musikfestival.de
backup.kamprad.isp-vhost04.domservice.de
barbarossa-festspiele.de
barbarossa-museum.de
barbarossamuseum.de
concerto-magazin.de
frech-ab.de
frechab.de
gewandhausmagazin.de
kamprad.isp-vhost04.domservice.de
orgelforum-sachsen.de
satt-statt-platt.de
sattstattplatt.de
www.altenburg-1180.de
www.altenburger-musikfestival.com
www.altenburger-musikfestival.de
www.barbarossa-festspiele.de
www.barbarossa-museum.de
www.barbarossamuseum.de
www.concerto-magazin.de
www.frech-ab.de
www.frechab.de
www.gewandhausmagazin.de
www.orgelforum-sachsen.de
www.satt-statt-platt.de
www.sattstattplatt.de
Other certificates including the domain name concerto-magazin.de
(limited to 100 certificates)
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
altenburg-1180.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
altenburg-1180.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
concerto-magazin.de
Certificate
The complete raw certificate details for concerto-magazin.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIlDCCB3ygAwIBAgISA7AabeE0k0WTFAuUKlCvCu8VMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MTkwNTQzMzFaFw0yMzEyMTgwNTQzMzBaMB4xHDAaBgNVBAMT E2NvbmNlcnRvLW1hZ2F6aW4uZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK AoICAQDMV9yKufwQypWza64SiKRGbYMzqy3UUT3Pt2uAsnHkSkVGJFPRc1g1PWyB P0SvgqS3mSRPynUVWjo7DoetCS3pXObVs3nbJmtOklCWH6xpBW9qnms9Namh7Bwj tOPeDTqCfYz4tnKL74TxOZ9n1jDqwI8ZUbml4xe+3MsDrAlsC3+Zg3/vNENeikxH YnQTGCuDL2ptt2t96GoXrh+bnFO58sPGYp2toDmFI5P5WaqotHCkk/Y4lHgA6P76 eNFeGZkri3XUtvHluJec8960d/OuyjYPyxr4XZ6dJ7sZkE6jVUBVkdxERwsLuPrh NKSfAQOG1N2LvPFAa9hKsk7dsmp3q9B31Kda9ZODrNL8I7bQ+NE3hhYvHQUue3YN JO0nPwv2p3Bc4a5ScHJ0r+FZkP5+m9qMDC7NXVtOaB4yzEB/QmNaSw/ZtdrxT7tV h/VDmDiR520POYfnsmg+59ye96z7nSdD5NcuLWAcDgw40kKMUmyv+72sgkmBrNfC 4jWNpeThixwJMxpv6TpH6nuWPBeETmlYfd9tsVVdJ6N5HFGieSq4nWPkbKLtVLs3 mv57yn7MMQSvTGvQ912zDbwbHqGRLC4WW6PYnxbVkQ3h6PfVVVzZmiJ6vtdI71xH kyak/0FQYGnkMyWk5SrHsS9LMw86u+hQB7IF4BzNHsO+dL8KEwIDAQABo4IEtjCC BLIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTcG6E+JG69FbZE73v7L/4+sAqUVTAf BgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcw IQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYW aHR0cDovL3IzLmkubGVuY3Iub3JnLzCCAr4GA1UdEQSCArUwggKxghFhbHRlbmJ1 cmctMTE4MC5kZYIdYWx0ZW5idXJnZXItbXVzaWtmZXN0aXZhbC5jb22CHGFsdGVu YnVyZ2VyLW11c2lrZmVzdGl2YWwuZGWCKGJhY2t1cC5rYW1wcmFkLmlzcC12aG9z dDA0LmRvbXNlcnZpY2UuZGWCGGJhcmJhcm9zc2EtZmVzdHNwaWVsZS5kZYIUYmFy YmFyb3NzYS1tdXNldW0uZGWCE2JhcmJhcm9zc2FtdXNldW0uZGWCE2NvbmNlcnRv LW1hZ2F6aW4uZGWCC2ZyZWNoLWFiLmRlggpmcmVjaGFiLmRlghRnZXdhbmRoYXVz bWFnYXppbi5kZYIha2FtcHJhZC5pc3Atdmhvc3QwNC5kb21zZXJ2aWNlLmRlghVv cmdlbGZvcnVtLXNhY2hzZW4uZGWCE3NhdHQtc3RhdHQtcGxhdHQuZGWCEXNhdHRz dGF0dHBsYXR0LmRlghV3d3cuYWx0ZW5idXJnLTExODAuZGWCIXd3dy5hbHRlbmJ1 cmdlci1tdXNpa2Zlc3RpdmFsLmNvbYIgd3d3LmFsdGVuYnVyZ2VyLW11c2lrZmVz dGl2YWwuZGWCHHd3dy5iYXJiYXJvc3NhLWZlc3RzcGllbGUuZGWCGHd3dy5iYXJi YXJvc3NhLW11c2V1bS5kZYIXd3d3LmJhcmJhcm9zc2FtdXNldW0uZGWCF3d3dy5j b25jZXJ0by1tYWdhemluLmRlgg93d3cuZnJlY2gtYWIuZGWCDnd3dy5mcmVjaGFi LmRlghh3d3cuZ2V3YW5kaGF1c21hZ2F6aW4uZGWCGXd3dy5vcmdlbGZvcnVtLXNh Y2hzZW4uZGWCF3d3dy5zYXR0LXN0YXR0LXBsYXR0LmRlghV3d3cuc2F0dHN0YXR0 cGxhdHQuZGUwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0 BIHxAO8AdQC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYqsLgSD AAAEAwBGMEQCIAbNfAr8HetXEtQF1bpIgJeuD1Ewp27ARnakbbndzvbzAiBCPm+F AThBJAWnHWOW4gZG/yEJ9SX9rZvGBZE6XGCxHQB2AOg+0No+9QY1MudXKLyJa8kD 08vREWvs62nhd31tBr1uAAABiqwuBIUAAAQDAEcwRQIgVAD8F/Pb3MgvYOIDJ2Z5 VhZVZAFNWxAdfB5Pq/eQquECIQD2HCL3zfnwiqX2/W8aYIeME44weQL3B6BflI8r Hw9U3DANBgkqhkiG9w0BAQsFAAOCAQEAudXb51SAN4daW2RpCoczYzaA0/uHD111 EJ0DtylZyIsT9ZtMn/N89a9peLVBOAZpPXnqKVLnyInTAYNKeYYkgqco6Oe697xK ifT44VxZTlpLkxfvx+oyybVUn9lRIKYnGOQ84x82ImnrM/YIFB1ttZ08HDbfQ4tX eVr1KdyDFf1TCvw2EBXzAw0xOpJxcsGhd3zQ9ULbgnohtwZdwDfhWRXgCAYxenYV 7J5S2enSW2cpAzOwP6d98L/8cdNVVfn0kOmN7Nf7QiVGznrwKYzjP2bMu1SRAZ57 gMAJCSr2kC6rTFRX399fBftmKuLi2Vcx8jX/0RN9QqB0azsEar+iKA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzFfcirn8EMqVs2uuEoik Rm2DM6st1FE9z7drgLJx5EpFRiRT0XNYNT1sgT9Er4Kkt5kkT8p1FVo6Ow6HrQkt 6Vzm1bN52yZrTpJQlh+saQVvap5rPTWpoewcI7Tj3g06gn2M+LZyi++E8TmfZ9Yw 6sCPGVG5peMXvtzLA6wJbAt/mYN/7zRDXopMR2J0Exgrgy9qbbdrfehqF64fm5xT ufLDxmKdraA5hSOT+VmqqLRwpJP2OJR4AOj++njRXhmZK4t11Lbx5biXnPPetHfz rso2D8sa+F2enSe7GZBOo1VAVZHcREcLC7j64TSknwEDhtTdi7zxQGvYSrJO3bJq d6vQd9SnWvWTg6zS/CO20PjRN4YWLx0FLnt2DSTtJz8L9qdwXOGuUnBydK/hWZD+ fpvajAwuzV1bTmgeMsxAf0JjWksP2bXa8U+7VYf1Q5g4kedtDzmH57JoPufcnves +50nQ+TXLi1gHA4MONJCjFJsr/u9rIJJgazXwuI1jaXk4YscCTMab+k6R+p7ljwX hE5pWH3fbbFVXSejeRxRonkquJ1j5Gyi7VS7N5r+e8p+zDEEr0xr0Pddsw28Gx6h kSwuFluj2J8W1ZEN4ej31VVc2Zoier7XSO9cR5MmpP9BUGBp5DMlpOUqx7EvSzMP OrvoUAeyBeAczR7DvnS/ChMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 321261684829321501297583162502436818186005 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-19 05:43:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 05:43:30 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'concerto-magazin.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 833647560242601601715105693690433536601183554860667708316428520986763811420809668573616456647052613028806030125261019026864332977888156130967671382926536617443228746162913332026849949235176808139514294231440249577708884281198413614851476103288705713223865625835809186467937289279721741617013368351624170953783888954489301649880992837666427861146329133273819395454440935850461873431864906236319683219857199388017391852778864517065940853277111655189770967604803791570539380850972160857470432048559802434332203470187945681670044868957296567856059574621329177060746820591091607646847475178716270121075614672788598445384816686349884344899658618903986481014778819815313610754575962557131909323749773581117520325612261863821718041601790969628996740747298170195687783708705695416575512957222242496038815635524501775031620977511504406167732263310663396381558443238560638336994477614074340716259569587613504897020582306969984843017911853429194724882199251094899866905684460108262641172007604539987829634974316356029821363798078077557472124778640906015558516239915985437072801867511134342406295039059953102959276485965128628160180309139454679477396232327221292889246113543265575531042057892927400173660006976279014515457270998299435767437396499 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dc1ba13e246ebd15b644ef7bfb2ffe3eb00a9455 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (693 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburg-1180.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburger-musikfestival.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburger-musikfestival.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup.kamprad.isp-vhost04.domservice.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbarossa-festspiele.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbarossa-museum.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbarossamuseum.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concerto-magazin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frech-ab.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frechab.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gewandhausmagazin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamprad.isp-vhost04.domservice.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgelforum-sachsen.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satt-statt-platt.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sattstattplatt.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburg-1180.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburger-musikfestival.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburger-musikfestival.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarossa-festspiele.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarossa-museum.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarossamuseum.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.concerto-magazin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frech-ab.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frechab.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gewandhausmagazin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orgelforum-sachsen.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.satt-statt-platt.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sattstattplatt.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aac2e04830000040300463044022006cd7c0afc1deb5712d405d5ba488097ae0f5130a76ec04676a46db9ddcef6f30220423e6f850138412405a71d6396e20646ff2109f525fdad9bc605913a5c60b11d007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aac2e0485000004030047304502205400fc17f3dbdcc82f60e20327667956165564014d5b101d7c1e4fabf790aae1022100f61c22f7cdf9f08aa5f6fd6f1a60878c138e307902f707a05f948f2b1f0f54dc . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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