tagesspiegel.kiosk.plus

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:08:78:ac:d7:40:db:cc:00:db:64:1c:ee:c6:2a:f2:67:f8 was issued on by Let's Encrypt.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tagesspiegel.kiosk.plus

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:08:78:ac:d7:40:db:cc:00:db:64:1c:ee:c6:2a:f2:67:f8
Serial Number (int): 351331807462819043217390344526615691814904
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 89:db:62:e3:ab:52:b4:6e:f8:47:a4:78:6e:6b:c1:9f:86:6e:39:8d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e2:a2:35:e1:ac:88:be:ce:c3:a0:66:3e:c6:c3:2a:dd:ae:5e:51:49
Fingerprint (sha256): 02:d2:23:fb:cc:21:16:bd:6d:88:45:a8:51:0a:68:de:74:4d:bc:fd:9f:6c:0e:e4:4c:79:5c:9f:13:e8:aa:02

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tagesspiegel.kiosk.plus

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tagesspiegel.kiosk.plus

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bibliothek.explicare.doctor
brochures.waterrower.co.uk
catalogo.strap.com.br
chapters.transamericanheroes.com
chef-magazine.com
documents.zettlerelectronics.com
dokumente.zettlerelectronics.com
dvgforum-022019.dvg.de
eatsmarter.kiosk.plus
ebooks.royalafricansafaris.com
emags.avr-verlagsobjekte.de
epaper.bioplasticsmagazine.com
epaper.keim.com
expose.hoepfnerimmobilien.de
flyer.aqua-dome.at
grazia.kiosk.plus
info.independenceaustralia.com.au
katalog.diewe.de
kataloge.westfalen-urlaubsreisen.de
kiosk.antalis-verpackungen.de
kiosk.ath-heinl.de
kiosk.graviantbooks.com
kiosk.kip-tape.com
kiosk.meininger.de
kiosk.prometheaneditions.com
kiosk.shopdecormagazines.com
kundenmagazin.derpart.com
liapornews.mkpublishing.de
lpdigitalbooks.learnersplatform.com
magazin.films-home.de
magazin.volkswagen.ba
magazin.wirtungutes.de
magazine.ausemergencyservices.com.au
magazine.elektropraktiker.de
magazine.iuoe.org
magazine.well-hotel.at
media.hirschmann-automotive.com
mitteilungsblatt.seifert-medien.de
miwi.halle.ihk.de
news.vdmno.de
prospekt.sonderpreis-baumarkt.de
prospekte.hkl-baumaschinen.at
prospekte.ostbayern-tourismus.de
publications.cwgc.org
read.jaimemagazine.com
read.rapidrivermagazine.com
specials.klickparts.com
tagesspiegel.kiosk.plus
test.schauspiegel.com
webkiosk.angelina-schulze.com
webkiosk.annaghmoreagencies.com
webkiosk.artandpictures.nl
webkiosk.keim.com
webkiosk.mwk-koeln.de
webkiosk.wandelkrant.be
webkiosk.ww-events-online.de
webkiosks.corshamprint.co.uk
webweb.webberz.ch
worldwide.i-am-magazine.com
www.brochures.venturamarketing.ie
www.dreamchasezurs.com
www.magazine.e-motec.net
www.magazines.thederbeian.com
www.motomedia.co.za
www.transport-press.bg
www.uykusuzdigital.info
www.vkguiasdigitais.com.br
yumpu.testact.de

Other certificates including the domain name kiosk.plus

(limited to 100 certificates)
tennis.yumpu100.com
kiosque.flp.ch
magazine.kueche-co.de
chiosco.flp.ch
magazin.rollstuhlsport.de
test.phcsystem.com
www.magbooks.icsl.org.in
magazine.kueche-co.de
digital.industrielle-automation.net
webkiosk.con-nexi.de
magazine.kueche-co.de
epaper.krombacher.de
magazine.kueche-co.de
catalogues.meister.com
kiosk.greater.sydney
webkiosk.wonendoejezo.com
kiosk.laloupe.com
mediathek.stiftung-liebenau.de
digital.derbetriebsleiter.de
www.glamitalia.com
produktkatalog.mwf-technik.de
magazines.somma.co.za
magazin.nivea.de
kiosk.miles-magazine.be
kiosk.astrosofa.com
tagesspiegel.kiosk.plus
magazines.somma.co.za
kiosk.miles-magazine.be
kiosk.laloupe.com
kiosk.miles-magazine.be
digital.derkonstrukteur.de
online-katalog.baude.com
kiosk.laloupe.com
kiosk.am-weststrand.com
kiosk.citytipp.org
magazine.suncoastergroup.com
webkiosks.zaubertopf-club.de
webkiosk.wonendoejezo.com
kiosk.laloupe.com
e-paper.moinmoin.de
kiosk.miles-magazine.be
kiosk.laloupe.com
travelshop.accessconsciousness.com
magazine.kueche-co.de
magazin.ferienmagazin-deutschland.de
onlinecatalog.custom-chrome-europe.com
blaetterkatalog.kleentex.eu
magazine.kueche-co.de
ssl.yumpu.com
journal.flyskywork.com
epaper.immosale24.net
kiosk.laloupe.com
kiosk.laloupe.com
kiosque.flp.ch
kiosk.laloupe.com
kiosk.vidaglobal.de
digital.foerdern-und-heben.de
kiosk.laloupe.com
moebel-boeck.mediaflip.de
publikationen.kreis-goerlitz.de
chiosco.flp.ch
kiosk.am-weststrand.com
digital.derbetriebsleiter.de
magazin.rollstuhlsport.de
media.hirschmann-automotive.com
epaper.krombacher.de
magazine.kueche-co.de
prospekte.intersport.de
digital.derbetriebsleiter.de
magazine.kueche-co.de
vitadoor.mediaflip.de
catalogues.meister.com
epaper.immosale24.net
webkiosk.die-bank.de
digital.derbetriebsleiter.de
epaper.krombacher.de
magazine.kueche-co.de
magazine.legacylighthouse.org
kiosk.laloupe.com
kiosk.velototal.de
flyer.medion-fabrikverkauf.de
magazin.rollstuhlsport.de
webkiosk.con-nexi.de
online-katalog.baude.com
magazine.kueche-co.de
kiosk.der-kleine-georg.de
magazine.kueche-co.de
digital.derbetriebsleiter.de
tennis.yumpu100.com
ssl.yumpu.com
epaper.glasmarte.at
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
kiosk.storyboard.de
tennis.yumpu100.com
kiosk.miles-magazine.be
downloads.yspi.ie
magazines.somma.co.za
magazine.arbeit-und-arbeitsrecht.de
magazine.kueche-co.de

Certificate

The complete raw certificate details for tagesspiegel.kiosk.plus in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvclZMfpncXKDoWjpxgzG
wZEisYw/0NkdhlF8iJMAja5GfEnjdrUk17BZmg+2kQR6BNjwg7wSQosGBuTs3SYX
G2b1nMAlw98BHhjP4hXvTZqPpr9nB2Ja4W7E55/9sR23BWf6eFNXP61MuO8G1n34
DsVIsa4D0QaVP7Jb9cLbsCMwev6F8vmi7iAH5BmP7Z/9OunnfnAofYshpQIGSqLl
/pcvBGIwlyQPMAx4Ve8tyB0XnjJXrmLkkEBl+VXjjSNcrLSLsnaq42OszgNRBY7g
6hhNDDBXny36Nladtg+rqFSBCahkFNJrO6b0cDZcMAuWRrrSLbxvai/wQerikZoI
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 351331807462819043217390344526615691814904
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-09 11:04:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-08 11:04:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tagesspiegel.kiosk.plus'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23958328244459947085022882096511711958981926518912772840895379778978243395939059066446203220377170854609181205189090712487547351843871733731429136264506419016123915800147392228367458348435223480787542871251452400463933059140499368193732344093131260369586879113643008473412181251284691496731191119408899778261730508754162214563165828670082323339235355110263629910878989223115765239287664932437942724478640351065205959360577150265752934570779938363264511117183415478342798383508328386148031538838640634966943122504126080760335635070390279506783389076719305620902011687109813862686838300495689499985628022935466268035239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89db62e3ab52b46ef847a4786e6bc19f866e398d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1820 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliothek.explicare.doctor'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.waterrower.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogo.strap.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chapters.transamericanheroes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chef-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documents.zettlerelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dokumente.zettlerelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvgforum-022019.dvg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatsmarter.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebooks.royalafricansafaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emags.avr-verlagsobjekte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.bioplasticsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.keim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expose.hoepfnerimmobilien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.aqua-dome.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grazia.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.independenceaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalog.diewe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.westfalen-urlaubsreisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.antalis-verpackungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.ath-heinl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.graviantbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.kip-tape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.meininger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.prometheaneditions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.shopdecormagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundenmagazin.derpart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liapornews.mkpublishing.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpdigitalbooks.learnersplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.films-home.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.volkswagen.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.wirtungutes.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.ausemergencyservices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.elektropraktiker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.iuoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.well-hotel.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.hirschmann-automotive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitteilungsblatt.seifert-medien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miwi.halle.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.vdmno.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospekt.sonderpreis-baumarkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospekte.hkl-baumaschinen.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospekte.ostbayern-tourismus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publications.cwgc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.jaimemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.rapidrivermagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'specials.klickparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagesspiegel.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.schauspiegel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.angelina-schulze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.annaghmoreagencies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.artandpictures.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.keim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.mwk-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.wandelkrant.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.ww-events-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.corshamprint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webweb.webberz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldwide.i-am-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brochures.venturamarketing.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamchasezurs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazine.e-motec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazines.thederbeian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motomedia.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transport-press.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uykusuzdigital.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vkguiasdigitais.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yumpu.testact.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001715ed3c3890000040300483046022100c4d4795c32f58d5030797f9390939ba47b607573f669e73d7605323281ebcfc7022100c13ebed6804394d370110e9b9e381976b40cd234c7de1a7c4be358a8aabe4eae00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001715ed3c3bb00000403004730450221008b7e31f518f25b72ec1774e706d293e43eb0655f475ee1be43af1457806547fe02203c290835939bce6ef4c92d5c4e6228ee7f6f13a43d78479cc73f1c2cb62c87f3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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