Certificate:

    Data:

        Version: 3 (0x2)

        Serial Number:

            ef:aa:73:6b:f6:00:58:f1:08:70:9b:04:f1:2b:c3:b1

        Signature Algorithm: ecdsa-with-SHA384

        Issuer: C = AT, O = ZeroSSL, CN = ZeroSSL ECC Domain Secure Site CA

        Validity

            Not Before: Jun 27 00:00:00 2025 GMT

            Not After : Sep 25 23:59:59 2025 GMT

        Subject: CN = bn-paf.de

        Subject Public Key Info:

            Public Key Algorithm: id-ecPublicKey

                Public-Key: (256 bit)

                pub:

                    04:4d:de:b8:fa:c2:cb:0d:01:ea:79:59:05:64:ca:

                    57:bc:43:82:78:20:38:29:de:17:9d:e9:90:ca:3e:

                    af:c1:4d:65:ec:c0:25:80:e4:3b:02:33:3b:f6:77:

                    16:4c:1a:24:22:9c:80:31:74:48:b9:9b:1a:be:ff:

                    9e:61:89:e3:ac

                ASN1 OID: prime256v1

                NIST CURVE: P-256

        X509v3 extensions:

            X509v3 Authority Key Identifier:

                0F:6B:E6:4B:CE:39:47:AE:F6:7E:90:1E:79:F0:30:91:92:C8:5F:A3

            X509v3 Subject Key Identifier:

                D6:5D:CF:C0:E5:03:A1:FF:77:F0:05:ED:3E:0F:49:C0:D2:E8:7D:A5

            X509v3 Key Usage: critical

                Digital Signature

            X509v3 Basic Constraints: critical

                CA:FALSE

            X509v3 Extended Key Usage:

                TLS Web Server Authentication, TLS Web Client Authentication

            X509v3 Certificate Policies:

                Policy: 1.3.6.1.4.1.6449.1.2.2.78

                  CPS: https://sectigo.com/CPS

                Policy: 2.23.140.1.2.1

            Authority Information Access:

                CA Issuers - URI:http://zerossl.crt.sectigo.com/ZeroSSLECCDomainSecureSiteCA.crt

                OCSP - URI:http://zerossl.ocsp.sectigo.com

            CT Precertificate SCTs:

                Signed Certificate Timestamp:

                    Version   : v1 (0x0)

                    Log ID    : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8:

                                3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A

                    Timestamp : Jun 27 23:10:23.442 2025 GMT

                    Extensions: none

                    Signature : ecdsa-with-SHA256

                                30:46:02:21:00:AB:84:62:D2:9A:F8:EB:D7:18:21:62:

                                0A:F2:7A:72:CC:58:8A:10:CE:94:F6:26:A3:0D:17:A7:

                                90:91:94:92:1B:02:21:00:D3:92:9D:8A:18:7E:5A:78:

                                EA:AA:B6:F0:2B:8C:92:9A:6E:E7:AA:37:BE:70:B4:24:

                                DD:A7:E0:94:60:92:67:91

                Signed Certificate Timestamp:

                    Version   : v1 (0x0)

                    Log ID    : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC:

                                47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34

                    Timestamp : Jun 27 23:10:23.385 2025 GMT

                    Extensions: none

                    Signature : ecdsa-with-SHA256

                                30:44:02:20:3F:25:BE:E2:4E:71:92:55:CA:1D:39:B4:

                                70:79:67:30:7F:1D:56:4E:C6:E0:A9:09:6D:7C:73:96:

                                B3:75:9C:A1:02:20:73:BA:9F:B0:09:1D:37:74:62:4E:

                                9E:14:74:45:98:4D:EB:E8:ED:33:9C:C8:3F:B1:60:5C:

                                B2:AC:55:77:3A:6B

            X509v3 Subject Alternative Name:

                DNS:bn-paf.de, DNS:*.bn-paf.de

    Signature Algorithm: ecdsa-with-SHA384

    Signature Value:

        30:64:02:30:73:77:7a:7d:d2:be:db:a0:70:0d:91:7f:b9:1a:

        99:d1:a7:08:ed:00:f8:7c:8e:ee:1a:95:76:22:7e:7d:1b:b0:

        1a:72:4e:29:47:8a:d1:38:06:d5:27:de:11:29:8f:71:02:30:

        77:4f:07:49:58:f2:55:fb:72:74:a9:d1:b2:13:5b:a6:40:77:

        bb:56:4d:11:14:8f:17:2f:4b:4e:2b:bd:26:4f:27:f9:63:6b:

        c2:e5:78:cd:25:6e:7e:d4:33:40:c6:60

-----BEGIN CERTIFICATE-----

MIIEATCCA4igAwIBAgIRAO+qc2v2AFjxCHCbBPErw7EwCgYIKoZIzj0EAwMwSzEL

MAkGA1UEBhMCQVQxEDAOBgNVBAoTB1plcm9TU0wxKjAoBgNVBAMTIVplcm9TU0wg

RUNDIERvbWFpbiBTZWN1cmUgU2l0ZSBDQTAeFw0yNTA2MjcwMDAwMDBaFw0yNTA5

MjUyMzU5NTlaMBQxEjAQBgNVBAMTCWJuLXBhZi5kZTBZMBMGByqGSM49AgEGCCqG

SM49AwEHA0IABE3euPrCyw0B6nlZBWTKV7xDgnggOCneF53pkMo+r8FNZezAJYDk

OwIzO/Z3FkwaJCKcgDF0SLmbGr7/nmGJ46yjggKCMIICfjAfBgNVHSMEGDAWgBQP

a+ZLzjlHrvZ+kB558DCRkshfozAdBgNVHQ4EFgQU1l3PwOUDof938AXtPg9JwNLo

faUwDgYDVR0PAQH/BAQDAgeAMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYB

BQUHAwEGCCsGAQUFBwMCMEkGA1UdIARCMEAwNAYLKwYBBAGyMQECAk4wJTAjBggr

BgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQIBMIGIBggr

BgEFBQcBAQR8MHowSwYIKwYBBQUHMAKGP2h0dHA6Ly96ZXJvc3NsLmNydC5zZWN0

aWdvLmNvbS9aZXJvU1NMRUNDRG9tYWluU2VjdXJlU2l0ZUNBLmNydDArBggrBgEF

BQcwAYYfaHR0cDovL3plcm9zc2wub2NzcC5zZWN0aWdvLmNvbTCCAQQGCisGAQQB

1nkCBAIEgfUEgfIA8AB3AN3cyjSV1+EWBeeVMvrHn/g9HFDf2wA6FBJ2Ciysu8gq

AAABl7OoCNIAAAQDAEgwRgIhAKuEYtKa+OvXGCFiCvJ6csxYihDOlPYmow0Xp5CR

lJIbAiEA05Kdihh+WnjqqrbwK4ySmm7nqje+cLQk3afglGCSZ5EAdQAN4fIwK9MN

wUBiEgnqVS78R3R8sdfpMO8OQh60fk6qNAAAAZezqAiZAAAEAwBGMEQCID8lvuJO

cZJVyh05tHB5ZzB/HVZOxuCpCW18c5azdZyhAiBzup+wCR03dGJOnhR0RZhN6+jt

M5zIP7FgXLKsVXc6azAhBgNVHREEGjAYgglibi1wYWYuZGWCCyouYm4tcGFmLmRl

MAoGCCqGSM49BAMDA2cAMGQCMHN3en3SvtugcA2Rf7kamdGnCO0A+HyO7hqVdiJ+

fRuwGnJOKUeK0TgG1SfeESmPcQIwd08HSVjyVftydKnRshNbpkB3u1ZNERSPFy9L

Tiu9Jk8n+WNrwuV4zSVuftQzQMZg

-----END CERTIFICATE-----