ab-impianti-srl.comovee.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:63:03:84:b5:a8:03:69:55:a8:ef:6c:4f:61:97:01:cd:92 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ab-impianti-srl.comovee.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:63:03:84:b5:a8:03:69:55:a8:ef:6c:4f:61:97:01:cd:92
Serial Number (int): 295029488872053854527718197411332883598738
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bb:ed:71:7d:71:be:97:5e:ca:cc:ef:af:13:02:1e:e4:64:e3:c7:30
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7b:fe:da:e7:8e:57:1d:47:3f:e5:09:6b:5c:82:fc:a8:24:07:eb:d0
Fingerprint (sha256): 0e:0a:c1:27:22:77:71:9d:9c:5b:48:36:63:62:34:6d:55:61:9b:e9:60:be:5c:ef:47:ed:a0:a7:bb:a5:4b:8d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ab-impianti-srl.comovee.it

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ab-impianti-srl.comovee.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ab-impianti-srl.comovee.it
ace.comovee.de
acticall.comovee.fr
ahold.comovee.net
airliquide.comovee.nl
alliander.comovee.nl
altrans.comovee.net
alutronic.comovee.de
amazon-es.comovee.net
arvato-distribution.comovee.net
atnt.comovee.net
bank-deutsches-kraftfahrzeuggewerbe.comovee.net
bank-leumi.comovee.net
bechtel.comovee.net
big-direkt-gesund.comovee.net
blechwaren-limburg.comovee.net
bnp-paritest.comovee.net
bornheim.comovee.de
cargobull.comovee.net
ceramtec.comovee.de
ch-dracenie.comovee.net
cho.comovee.net
cnh-industrial.comovee.net
cnhi.comovee.it
cofely.comovee.net
colgate-palmolive.comovee.net
covoiturekiabi.comovee.net
ctco.comovee.net
currenta.comovee.net
cycloon.comovee.nl
dachser.comovee.net
deutsche-lufthansa-ag.comovee.net
dormagen.comovee.de
drivemx.comovee.net
eisenmann.comovee.net
emc2.comovee.fr
emerson-electric.comovee.net
enterprise-france.comovee.net
eph.comovee.mx
ey-de.comovee.net
fantasy.comovee.net
fasterminds.comovee.net
ferromex.comovee.net
ge-brazil.comovee.net
gens.comovee.fr
gonvarri.comovee.net
grand-dax.comovee.fr
groupecarso.comovee.fr
hennessy.comovee.net
hilti.comovee.net
ienova.comovee.mx
lendlease.comovee.net
lessebo.samakning.se
liazon.comovee.net
linde.comovee.de
liverpool.comovee.mx
lok-leipzig.comovee.net
lw.comovee.net
mcdonalds-canada.comovee.net
mdc-power.comovee.net
nagel-group.comovee.de
neiu.comovee.net
nevs.comovee.net
novagile.comovee.net
orkelljunga.samakning.se
pays-pyrenees-mediterranee.comovee.fr
pepsico.comovee.mx
pg.comovee.net
ponant.comovee.fr
primokont.comovee.de
pwclu.comovee.net
redblue.comovee.de
rnv.comovee.net
roche.comovee.mx
rockinleuben.comovee.net
ruag.comovee.net
rxante.comovee.net
schueco.comovee.net
schwarzgruppe.comovee.net
sgd-perfumery.comovee.net
skitaos.comovee.net
sms-group.comovee.net
stadt-bornheim.comovee.de
stadtwerke-pfaffenhofen-adilm.comovee.net
suez.comovee.es
suez.comovee.net
sumitomo.comovee.net
summerfest.comovee.net
swarthmore.comovee.net
sysware.comovee.de
tally.comovee.net
tecnico---lisbon.comovee.net
teton.comovee.net
unitedpercussion.comovee.net
vaude.comovee.net
visiativ.comovee.fr
volaris.comovee.net
vw-otlg.comovee.net
wfp.comovee.net
yaskawa.comovee.net

Other certificates including the domain name comovee.it

(limited to 100 certificates)

Certificate

The complete raw certificate details for ab-impianti-srl.comovee.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1dlr9lofQ6pl2mrjTlZz
3tpykt4R+LEZdLE9hCEEDcLhGHfWZvHBl5gYdadBMw25A5jLvvid41/uD5OxBs4W
/oJFz4tn5UhIItVDcoe/D7hlG/6U65sXFEvjiBumZOREh63qZ90gp1vW5aMFQUmy
/pR/n0mzX0tN7cIIkCvZmtabg9GhLK//6ef/YJEWCOYD4EMPrZKZrD/l1cxX5mWj
bWVL8QdBnTxB1BMKnh2g9J3oOXF0t+tdY7eqkhazoswYT0KViauQf3MOy5S8/Ply
dPJrOg3UdeYJoQ5QTuYr6PQFWOUh6x0f+92RNDWE9Jq20zq0tO1VvASsfAgTuVyq
j6YlH2UW392FWheMlBjYpBn4qMVa4b+3Z75ExLj+Anog3pH5DGWeJkey2MKxmPd3
np7ApysRSGerylcPJql8njIBSdlv5gniyC/VlvYf+q8qL6SqvUEC7oVrnhwUHC5I
K5Qbz/VlRT32asb17QXKftdtM2wVEZEd8/X2UaU4mcwGYq4GQNmryqr4O4lOTHIJ
IyOYUedcg/Ob8X/ji3iHbueLbTGaesswKhc6BWMBPL0MfmrI5R1Dae6GGxyzfAV3
pMNXMGaRr36xIcqNHz76tAA1cgDM3xzYzaPkZOvwbYkfJ4Q3veOiX/nKeuSij5In
0jYOuwtpdVgHOA13HkVcDXcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295029488872053854527718197411332883598738
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-13 02:37:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-11 02:37:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ab-impianti-srl.comovee.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 872429042980521006807807956184505860190557469844454487525866552119601995562397653070843661252316868838195441308509338097088652947745605160595519856164879866997183585027988019831889670835039912528216816311835500231974129303058706763611227988110715950296149120266121185997260394975874125361153655220057779461291941132424903682470483715718642986105011676481360780177240190491211879468675847918668474955860836270353880993440164746417926435215209108781738118783823793350459189799630900225527203130182077330274105595128515408107480230751707196272226351690611555499120221950235205225717444904301156126649396553776073546406242246600005841620595799492265586116874545983786358941567674284260429999481920421014717132914042688628722062600124266994718508080391105866232543973040131812936626679292095782618968645069299236083920503061320568675718964877666168685894510596200467759940257496035384572736496611166877468898904103266839869622792173013256942999256181163074760469353202782288173489112575154623213505054812004053562134654001879113410677106563878920399594539740376206475091115074152853389665780571094627266032356369654954526944046366826107593577103250472780047234727829568660912388189154327845480761389662232764085869492668656535066342329719
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bbed717d71be975ecaccefaf13021ee464e3c730
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2287 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ab-impianti-srl.comovee.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ace.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acticall.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahold.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airliquide.comovee.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliander.comovee.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altrans.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alutronic.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazon-es.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvato-distribution.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atnt.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bank-deutsches-kraftfahrzeuggewerbe.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bank-leumi.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bechtel.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'big-direkt-gesund.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blechwaren-limburg.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp-paritest.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bornheim.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cargobull.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceramtec.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch-dracenie.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cho.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnh-industrial.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnhi.comovee.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cofely.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colgate-palmolive.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covoiturekiabi.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctco.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'currenta.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cycloon.comovee.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dachser.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutsche-lufthansa-ag.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dormagen.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drivemx.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eisenmann.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emc2.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emerson-electric.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterprise-france.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eph.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ey-de.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasy.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fasterminds.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferromex.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge-brazil.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gens.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gonvarri.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grand-dax.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupecarso.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hennessy.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilti.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ienova.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lendlease.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lessebo.samakning.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liazon.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linde.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liverpool.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lok-leipzig.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lw.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdonalds-canada.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdc-power.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nagel-group.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neiu.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nevs.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novagile.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orkelljunga.samakning.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pays-pyrenees-mediterranee.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pepsico.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponant.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primokont.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwclu.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redblue.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rnv.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockinleuben.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruag.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxante.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schueco.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwarzgruppe.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgd-perfumery.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skitaos.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms-group.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadt-bornheim.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadtwerke-pfaffenhofen-adilm.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suez.comovee.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suez.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumitomo.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summerfest.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swarthmore.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sysware.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tally.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnico---lisbon.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teton.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedpercussion.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaude.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visiativ.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volaris.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vw-otlg.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfp.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaskawa.comovee.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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