www.glamitalia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:eb:49:49:60:db:39:d3:d6:57:3c:a1:e3:2f:b0:76:f6:ec was issued on by Let's Encrypt.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.glamitalia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:eb:49:49:60:db:39:d3:d6:57:3c:a1:e3:2f:b0:76:f6:ec
Serial Number (int): 341400628667544437037191260974715734783724
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ef:af:5a:59:36:8e:f4:6d:dc:46:8e:d7:5e:76:ca:17:1e:a4:af:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 52:64:01:2d:a5:3b:5b:60:0c:51:e0:2f:1c:94:ce:f2:9e:83:7c:b1
Fingerprint (sha256): 02:5a:35:b3:3f:4a:22:ac:72:6d:4d:d1:87:7d:85:f8:39:77:a7:75:36:1e:ed:5b:98:a3:85:b2:c5:d2:68:12

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.glamitalia.com

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.glamitalia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.epaper-poonen.lies-das-evangelium.de
berliner-kurier1.kiosk.plus
berliner-zeitung1.kiosk.plus
blaetterkatalog.andrees-angelreisen.de
brochures.hilliard.com
catalog.churchgoods.com
catalogue.designmiami.com
chiosco.flp.ch
epaper.immobilienboerse-ag.ch
epaper.wandermagazin.de
fall-magazine.robinsonlightingandbath.com
flipbooks.pure-lox.com
idee.elite-consulting.eu
infomagazin.tischdecken-shop.de
katalog.dierotenbullen.com
katalog.lemo-schuh.ch
katalog.workcess.at
kataloge.basoeinkaufsverbund.de
kiosk.astrosofa.com
kiosk.flp.at
kiosk.flp.ch
kiosk.flp.de
kiosk.friesenbote.de
kiosk.omnia-magazin.com
kiosk.saxoprint.com
kiosk.velototal.de
kiosque.flp.ch
magazin.ewtc.de
magazin.nivea.de
magazin.plusperfekt.de
magazine.arbeit-und-arbeitsrecht.de
magazine.medbhealth.com
magazine.petsmag.co.uk
magazine.therealpartnership.com
magazines.esteticanetwork.com
prospekte.grainau.de
publikationen.stbverband-koeln.de
travelshop.accessconsciousness.com
vitadoor.mediaflip.de
webkiosk.die-bank.de
webkiosk.k-studio.co.za
webkiosk.matthews.com
www.glamitalia.com
www.healthread.co.za
www.sblaettle.at

Other certificates including the domain name glamitalia.com

(limited to 100 certificates)
www.revistacipcisa.com
www.glamitalia.com
autodiscover.epaper-poonen.neuer-bund-verlag.de
digiprospekt.freyplus.de
webkiosks.zaubertopf-club.de
blaetterkatalog.kleentex.eu
magazine.montana-cans.com
app.procycling.de
magazine.montana-cans.com
digital.queencityconnections.com
magazine.montana-cans.com
publications.nursingald.com
flyer.medion-fabrikverkauf.de
ebooks.teammelanie.nz
webkiosk.magazinmarley.de
digital.queencityconnections.com
blaetterkatalog.kleentex.eu
autodiscover.epaper-poonen.neuer-bund-verlag.de
publikationen.kmu.org
kurse.bdb-musikakademie.de
app.worldofmtb.de
epaper.chili-peppers.de
webkiosks.zaubertopf-club.de
digital.queencityconnections.com
kataloge.holzimpraegnierwerk.ch
digital.queencityconnections.com
autodiscover.epaper-poonen.neuer-bund-verlag.de
digiprospekt.freyplus.de
digital.queencityconnections.com
publikationen.kmu.org
webkiosk.stephanshof.com
publications.nursingald.com
digital.queencityconnections.com
katalog.hltravel.at
rieswick.mediaflip.de
katalog.isa-racing.com
app.fahrrad-news.com
rieswick.mediaflip.de
webkiosk.stephanshof.com
kiosk.seniorenreisen.de
immomagazin.wegenerimmobilien.de
neubau-projekte.vr-immoservice-mainfranken.de
webkiosks.zaubertopf-club.de
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
webkiosk.bm-agrotech.ch
digital.queencityconnections.com
publications.nursingald.com
webkiosk.magazinmarley.de
webkiosk.airhoppark.de
brochures.hts-touristik.de
publikationen.manres.ch
biblioteca.sciens.com.ar
silentreview.faaa.net
epaper.hz.de
digital.queencityconnections.com
kurse.bdb-musikakademie.de
publications.nursingald.com
webkiosk.bm-agrotech.ch
kiosk.thewholenote.com
epaper.asscompact.de
rieswick.mediaflip.de
brochures.hts-touristik.de
ebooks.teammelanie.nz
neubau-projekte.vr-immoservice-mainfranken.de
rieswick.mediaflip.de
ebooks.teammelanie.nz
webkiosk.lurkoi.com
kiosk.seniorenreisen.de
webkiosk.lurkoi.com
webkiosk.magazinmarley.de
silentreview.faaa.net
blaetterkatalog.kleentex.eu
webkiosk.bm-agrotech.ch
kataloge.pier7.de
kurse.bdb-musikakademie.de
publications.nursingald.com
katalog.hltravel.ch
webkiosks.zaubertopf-club.de
blaetterkatalog.kleentex.eu
epaper.logistik-express.com
webkiosk.bm-agrotech.ch
kiosk.seniorenreisen.de
kiosk.seniorenreisen.de
epaper.asscompact.de
prospekte.wernigerode-tourismus.de
katalog.hltravel.ch
kurse.bdb-musikakademie.de
webkiosk.stephanshof.com
kataloge.pier7.de
magazine.montana-cans.com
webkiosk.magazinmarley.de
biblioteca.sciens.com.ar
digital.queencityconnections.com
publications.nursingald.com
webkiosks.zaubertopf-club.de
rieswick.mediaflip.de
epaper.asscompact.de
webkiosk.bm-agrotech.ch
brochures.hts-touristik.de
webkiosk.bm-agrotech.ch

Certificate

The complete raw certificate details for www.glamitalia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fGL5bRXmHvA3grvsrS+
CpVIpthuySFhugQOmMcy6mKRKVA01H34MrIpM8h63hzWmNswY+kVtdFyW3Y8sDG0
MN/7JR7U97zjq+OxBfkL9NHkmIkpZOodWmWcHFOflRkqSrnepAKsjOlcDiFqEpH2
8Tpdty+Nw1CQJYN8zWDFV4r6Le/YratopqmD5zgHuSIN63bvpQMimR20mpgRUHD+
5CTvJPGjiWwWCcFDOg+O21DeTv95c8zr5uAvScQkpnZ5p64DFSHlNoiC392CCAux
OQT4objsdbL2GHWeqHL/U0y+6N15jJsb6ncVa3QWLFjH/qCEl4ahSDjuA83Y4/04
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341400628667544437037191260974715734783724
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-21 07:06:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-21 07:06:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.glamitalia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28017776403038932600158344428962151239621850929626819990088331230997635815778749235853693232645033183200788284567225311652904446596025786494915109419346505637904264239917918977241188841231285264041156784808388746085181330075132694634793568509512048484574482113426700600381945590659950581570367779978688300474786318900218642279639967294686910193218791381416568009325539506101688025306894273400134291186376982718739699269633382734149832339685968057982545896977176249045466339000246747468525904952400658234454378713452534090738541178181786931842338053961572079062267783249968159524776872034051808997043717051167574669483
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							efaf5a59368ef46ddc468ed75e76ca171ea4afc2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1155 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.epaper-poonen.lies-das-evangelium.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berliner-kurier1.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berliner-zeitung1.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blaetterkatalog.andrees-angelreisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.hilliard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.churchgoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogue.designmiami.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiosco.flp.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.immobilienboerse-ag.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.wandermagazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fall-magazine.robinsonlightingandbath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flipbooks.pure-lox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idee.elite-consulting.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infomagazin.tischdecken-shop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalog.dierotenbullen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalog.lemo-schuh.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalog.workcess.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.basoeinkaufsverbund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.astrosofa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.flp.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.flp.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.flp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.friesenbote.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.omnia-magazin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.saxoprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.velototal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosque.flp.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.ewtc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.nivea.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.plusperfekt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.arbeit-und-arbeitsrecht.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.medbhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.petsmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.therealpartnership.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazines.esteticanetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospekte.grainau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publikationen.stbverband-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelshop.accessconsciousness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitadoor.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.die-bank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.k-studio.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.matthews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glamitalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthread.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sblaettle.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001686f722c590000040300463044022100ec2c3cf9998c0db58cc1a0c31601f3cd0f81ad6a49edd01db197a0739bec3f61021f72147f6eead3efb93e9ed3bb521867ec0ff8338bd748150f127820405fa89a00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001686f722c59000004030047304502201f2276a1ba28f20576d181230438df3abc0bf43d6101495fce8bd30787f99015022100c7d4b0a81bb19749fa87dbc344271cf12ece8c84d4217470ce661ab0d6dbd7dd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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