magazine.legacylighthouse.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:07:31:4c:8b:38:14:21:7b:68:93:96:81:a1:58:4a:a0:a9 was issued on by Let's Encrypt.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=magazine.legacylighthouse.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:07:31:4c:8b:38:14:21:7b:68:93:96:81:a1:58:4a:a0:a9
Serial Number (int): 263784363973779960894697015248070980051113
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ed:27:59:4a:94:db:75:71:bb:13:a4:7e:26:98:e8:79:65:63:9f:8a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 12:17:10:fc:77:e4:46:c9:1c:5b:54:7c:7f:c5:ef:ed:38:7e:18:86
Fingerprint (sha256): 12:4e:1b:b7:70:0f:41:a5:d2:a0:1d:e9:99:10:71:3e:71:82:91:f5:a8:0d:48:bd:1a:31:e9:a6:d3:e0:47:0d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate magazine.legacylighthouse.org

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magazine.legacylighthouse.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bibliothek.explicare.doctor
brochure.ntpwarranty.com
brochures.keepmoat.com
catalogo.strap.com.br
chef-magazine.com
eatsmarter.kiosk.plus
ebooks.royalafricansafaris.com
emag.diamondworld.net
emag.indianjeweller.in
emags.avr-verlagsobjekte.de
epaper.logistik-news.at
flyer.aqua-dome.at
grazia.kiosk.plus
info.independenceaustralia.com.au
kataloge.teppich-stark.de
kiosk.am-weststrand.com
kiosk.der-kleine-georg.de
kiosk.kip-tape.com
kiosk.verbaende.com
kiosk.vidaglobal.de
kioskopro.seguritecnia.es
magazin.lifechannel.ch
magazine.ausemergencyservices.com.au
magazine.cioa.com
magazine.elektropraktiker.de
magazine.inversionesciel.com
magazine.iuoe.org
magazine.legacylighthouse.org
magazine.mpdunne.com
magazine.roarkidsmagazine.com
magazine.suncoastergroup.com
magazines.somethinggoodmagazines.com
mitteilungsblatt.seifert-medien.de
news.vdmno.de
publications.cwgc.org
publikationen.contipark.de
quals.truebeck.com
read.rapidrivermagazine.com
tagesspiegel.kiosk.plus
webkiosk.leveldesigngroup.com
webkiosks.corshamprint.co.uk
webkiosks.plaskettcollege.com
wirbeicontipark.contipark.de
www.brochures.venturamarketing.ie
www.magazines.thederbeian.com

Other certificates including the domain name legacylighthouse.org

(limited to 100 certificates)
www.magbooks.icsl.org.in
produktkatalog.mwf-technik.de
magazines.somma.co.za
magazin.nivea.de
magazines.somma.co.za
kiosk.citytipp.org
travelshop.accessconsciousness.com
onlinecatalog.custom-chrome-europe.com
vitadoor.mediaflip.de
epaper-en.glasmarte.at
magazine.legacylighthouse.org
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
magazines.somma.co.za
magazine.legacylighthouse.org
start.andernach-wirtschaft.de
epapers.juenglingverlag.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
epaper-en.glasmarte.at
magazines.somma.co.za
epaper-en.glasmarte.at
magazine.legacylighthouse.org
epaper-en.glasmarte.at
magazine.legacylighthouse.org
magazines.somma.co.za
onlinecatalog.custom-chrome-europe.com
www.sblaettle.at
www.magbooks.icsl.org.in
katalog.lemo-schuh.ch
webkiosk.alpenpark.de
onlinecatalog.custom-chrome-europe.com
start.andernach-wirtschaft.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
start.andernach-wirtschaft.de
kataloge.basoeinkaufsverbund.de
epaper-en.glasmarte.at
epaper-en.glasmarte.at
magazines.somma.co.za
webkiosk.alpenpark.de
magazine.legacylighthouse.org
magazine.legacylighthouse.org
epapers.juenglingverlag.de
www.magbooks.icsl.org.in
www.sblaettle.at
magazines.somma.co.za
start.andernach-wirtschaft.de
katalog.lemo-schuh.ch
katalog.lemo-schuh.ch
magazines.somma.co.za
katalog.lemo-schuh.ch
www.magbooks.icsl.org.in
webkiosk.alpenpark.de
katalog.klickparts.com
webkiosk.alpenpark.de
epaper-en.glasmarte.at
magazine.legacylighthouse.org
magazines.somma.co.za
magazin.plusperfekt.de
epaper-en.glasmarte.at
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
katalog.lemo-schuh.ch
epaper-en.glasmarte.at
www.magbooks.icsl.org.in
webkiosk.alpenpark.de
magazine.legacylighthouse.org
handelsblatt.kiosk.plus
magazine.legacylighthouse.org
magazine.legacylighthouse.org
katalog.klickparts.com
magazine.legacylighthouse.org
katalog.klickparts.com
vitadoor.mediaflip.de
epaper.grillzeit.at
onlinecatalog.custom-chrome-europe.com
epaper.grillzeit.at
katalog.lemo-schuh.ch
epaper-en.glasmarte.at
www.magbooks.icsl.org.in
onlinecatalog.custom-chrome-europe.com
magazine.legacylighthouse.org
berliner-kurier1.kiosk.plus
magazine.legacylighthouse.org
webkiosk.alpenpark.de
kiosk.citytipp.org
publikationen.stbverband-koeln.de
start.andernach-wirtschaft.de
epaper-en.glasmarte.at
publikationen.stbverband-koeln.de
vitadoor.mediaflip.de
travelshop.accessconsciousness.com
webkiosk.alpenpark.de
ebook.frcemexambookstore.co.uk
onlinecatalog.custom-chrome-europe.com
katalog.klickparts.com
webkiosk.alpenpark.de
epaper-en.glasmarte.at

Certificate

The complete raw certificate details for magazine.legacylighthouse.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2N6pT0ehFZ/uHZ+eaZo4
s1kGgtb9pxPQcCEoKXrdf2wAY/ApcdMVXimWO8yucpvEPV1PBHuOKeyY27UF0Hu6
Hg1JNEZIDJLEim+TMTweq55LqKnISBaduEBddX3N4WeJFie/YQ36Tuq9nve8+a8d
f9VYtM/fe9/g6QmxIDSjczxzwlUMVX+Y7ma9xDXgs1mzLVeZMsy29XO4aJkMLhGE
7YXj8LdH/Ta+1tul1QhHCNNMHygpjU1J4qaBQLuQOciCj/NtyzAgMGiAtvfj89fD
LczqhjnmQdy1Qjk+bOmWaRZUO2scdbEqoTihxlA/A/NdJzNymbPgnY3DT+ikRdVs
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263784363973779960894697015248070980051113
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 11:03:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 11:03:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magazine.legacylighthouse.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27377272284468247268513463932881285566485945083600782228941294193198283702525964849469231648215898137560602892598895122746614473151478787926088826318142009302950199598775470762149492094662575000101886743872761364112943812271018450155528412433544062387729911013539676774476013042519710776258041207521845308425231028981699235925310798312941644283192687294744831895399440688239975759230348430007452201097247520466526349561754568132992058547685734971672966149888145053409264541358839119370130054107657894556965651209527189509848479923487080136929381625140713625347561488233392167237014226563823059600303582027917575941227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ed27594a94db7571bb13a47e2698e87965639f8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1199 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliothek.explicare.doctor'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochure.ntpwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.keepmoat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogo.strap.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chef-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatsmarter.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebooks.royalafricansafaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emag.diamondworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emag.indianjeweller.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emags.avr-verlagsobjekte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.logistik-news.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.aqua-dome.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grazia.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.independenceaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.teppich-stark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.am-weststrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.der-kleine-georg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.kip-tape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.verbaende.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.vidaglobal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kioskopro.seguritecnia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.lifechannel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.ausemergencyservices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.cioa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.elektropraktiker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.inversionesciel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.iuoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.legacylighthouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.mpdunne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.roarkidsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.suncoastergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazines.somethinggoodmagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitteilungsblatt.seifert-medien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.vdmno.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publications.cwgc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publikationen.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quals.truebeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.rapidrivermagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagesspiegel.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.leveldesigngroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.corshamprint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.plaskettcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wirbeicontipark.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brochures.venturamarketing.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazines.thederbeian.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e02cc75010000040300463044022065de1b1d32ed89f945ec82053fdaf92d277722f0135c26ad4bb42ffa9b63fd15022005485f1d796c5fa2858665211391e40aaaf1e41f13a316af3e64a8a503b4de99007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e02cc74f100000403004730450220587ff49115c60a6d9226f3b4da14effe4befc6d96b7ed1b1011cd41635be451c022100fc674020a2db4c26c48eb2cc8a6e7e6c47c6c835960760074eb53e092109d7bd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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