access.magicshop.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:61:b6:4e:f2:79:de:37:fe:ef:44:cb:5a:e6:e6:be:32:5e was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=access.magicshop.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:61:b6:4e:f2:79:de:37:fe:ef:44:cb:5a:e6:e6:be:32:5e
Serial Number (int): 294586576798998096416168014184348422910558
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ef:10:66:07:c5:fd:5d:0a:c7:ca:37:43:4c:ab:1a:38:39:5d:36:36
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 70:1d:bb:7b:b0:c5:8f:1a:f0:2a:97:0b:6e:4d:7f:c1:19:61:4e:5a
Fingerprint (sha256): 0f:51:76:0a:e8:d3:e9:90:0d:0e:ae:d5:0d:ea:1f:33:98:2b:8c:66:d5:d1:db:cc:1d:fb:99:57:dd:8d:6f:c0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate access.magicshop.nl

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for access.magicshop.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

access.magicshop.nl
adfs.magicshop.nl
analytics.magicshop.nl
app.magicshop.nl
apps.magicshop.nl
backup.magicshop.nl
blogs.magicshop.nl
boards.magicshop.nl
box.magicshop.nl
cart.magicshop.nl
chat.magicshop.nl
citrix.magicshop.nl
client.magicshop.nl
clients.magicshop.nl
cms.magicshop.nl
community.magicshop.nl
connect.magicshop.nl
developer.magicshop.nl
docs.magicshop.nl
extranet.magicshop.nl
files.magicshop.nl
forums.magicshop.nl
ftp.magicshop.nl
gallery.magicshop.nl
gateway.magicshop.nl
git.magicshop.nl
host.magicshop.nl
images.magicshop.nl
intranet.magicshop.nl
jenkins.magicshop.nl
jobs.magicshop.nl
materiais.magicshop.nl
mboss.magicshop.nl
mbox.magicshop.nl
members.magicshop.nl
mx.magicshop.nl
my.magicshop.nl
nas.magicshop.nl
new.magicshop.nl
news.magicshop.nl
newsletter.magicshop.nl
pay.magicshop.nl
rds.magicshop.nl
s.magicshop.nl
sandbox.magicshop.nl
server.magicshop.nl
shop.magicshop.nl
smtp.magicshop.nl
stats.magicshop.nl
status.magicshop.nl
sts.magicshop.nl
support.magicshop.nl
test.magicshop.nl
ts.magicshop.nl
uat.magicshop.nl
vwww.magicshop.nl
w.magicshop.nl
wp.magicshop.nl
ws.magicshop.nl
ww.magicshop.nl
www.adfs.magicshop.nl
www.analytics.magicshop.nl
www.backup.magicshop.nl
www.blogs.magicshop.nl
www.boards.magicshop.nl
www.box.magicshop.nl
www.cart.magicshop.nl
www.clients.magicshop.nl
www.community.magicshop.nl
www.connect.magicshop.nl
www.docs.magicshop.nl
www.forums.magicshop.nl
www.gallery.magicshop.nl
www.gateway.magicshop.nl
www.intranet.magicshop.nl
www.magicshop.nl
www.mx.magicshop.nl
www.newsletter.magicshop.nl
www.pay.magicshop.nl
www.server.magicshop.nl
www.services.magicshop.nl
www.smtp.magicshop.nl
www.test.magicshop.nl
www.vwww.magicshop.nl
www.w.magicshop.nl
www.wp.magicshop.nl
www.ww.magicshop.nl
www.www.magicshop.nl
www.wwww.magicshop.nl
www.wx.magicshop.nl

Other certificates including the domain name magicshop.nl

(limited to 100 certificates)
magicshop.nl
access.magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
2.magicshop.nl
magicshop.nl
2.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
2.magicshop.nl
magicshop.nl
magicshop.nl
2.magicshop.nl
blog.magicshop.nl
magicshop.nl
2.magicshop.nl
magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
access.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
2.magicshop.nl
2.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
www.magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
access.magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
2.magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
access.magicshop.nl
magicshop.nl
magicshop.nl
blog.magicshop.nl
access.magicshop.nl
magicshop.nl
magicshop.nl
access.magicshop.nl
magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
access.magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
2.magicshop.nl
blog.magicshop.nl
access.magicshop.nl
access.magicshop.nl
access.magicshop.nl
www.magicshop.nl
access.magicshop.nl

Certificate

The complete raw certificate details for access.magicshop.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBHU7RCnca0G+m6cbRr5
ij1cUIVnNxOg8WsBb73ybKhHAzxdUINhfVZPbxhTanuoPUSsHN51+g8ebEaOq/M2
6kvvvtsBZmgExxw68kbRwjeXW64ETrZFGmnbrUZKHEa7GojmTx/UF+F8bbCP0fVg
TFQzWmSMsN3HRY8M+XQrfmaFiy0iRuIItO3prddwmtWMPkLCK9z08QOuRl38M7+Q
OA/pkzFe6TgylosYQCx5SFB5ffiGGaavq0UKv5XLNJ0dWhaLh6mWfKUS0252+Dym
XEdXC72GRaG6ReRMJVrYFIbPRnMDDHvaNtKOjV39G7uAk+8pWmOTnz8WKLoAF+gd
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294586576798998096416168014184348422910558
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-08 07:54:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-09 07:54:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'access.magicshop.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25761407372942302231633690727784698686857140261373462755536053707993230554426870018911377795455674422761225444869059236216729221026425105552405551081840434131134067283629736855679564132572201449215753168343161992531602507904484240531799189836737462521708908169942132864705626886502906610379507850475736988747947697549436557333730309935479379566991993894139251751186779297535824243634626910149299631762881776516193636081033296546801121647051960242161648570771206199986531760019226631718026126823639780114387215962718228184147239586140840649133122881027968060137651197199823962358957920492967519912199666145352225398177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef106607c5fd5d0ac7ca37434cab1a38395d3636
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1911 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfs.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boards.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'box.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrix.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forums.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallery.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenkins.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'materiais.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mboss.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbox.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nas.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rds.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vwww.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adfs.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.analytics.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.backup.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blogs.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boards.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.box.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cart.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clients.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.docs.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forums.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gallery.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gateway.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intranet.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mx.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newsletter.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pay.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.server.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.services.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smtp.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vwww.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.w.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wp.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ww.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.www.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wwww.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wx.magicshop.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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