kiosk.der-kleine-georg.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:da:03:8b:80:f4:bd:e5:4f:36:b4:6f:b6:00:52:2d:b5:0f was issued on by Let's Encrypt.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kiosk.der-kleine-georg.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:da:03:8b:80:f4:bd:e5:4f:36:b4:6f:b6:00:52:2d:b5:0f
Serial Number (int): 335523125812834886869385756831480963511567
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dd:84:ac:d2:8d:46:df:d7:7e:86:ab:3d:c2:c7:6e:bb:2d:5a:4d:b0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 78:70:19:c8:7c:bb:cc:79:13:90:a7:83:f2:7f:d4:30:13:f9:34:96
Fingerprint (sha256): 15:89:ad:5b:a5:a6:3c:31:b8:2e:4a:ec:c6:3a:1b:85:c5:46:99:ee:03:20:14:d6:61:a5:26:2f:94:9f:6a:a2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kiosk.der-kleine-georg.de

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kiosk.der-kleine-georg.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bibliothek.explicare.doctor
brochure.ntpwarranty.com
brochures.keepmoat.com
brochures.waterrower.co.uk
catalogo.strap.com.br
chapters.transamericanheroes.com
chef-magazine.com
documents.zettlerelectronics.com
dokumente.zettlerelectronics.com
dvgforum-022019.dvg.de
eatsmarter.kiosk.plus
ebooks.royalafricansafaris.com
emags.avr-verlagsobjekte.de
epaper.logistik-news.at
flyer.aqua-dome.at
grazia.kiosk.plus
info.independenceaustralia.com.au
kataloge.teppich-stark.de
kataloge.westfalen-urlaubsreisen.de
kiosk.am-weststrand.com
kiosk.antalis-verpackungen.de
kiosk.der-kleine-georg.de
kiosk.kip-tape.com
kiosk.shopdecormagazines.com
kiosk.verbaende.com
kundenmagazin.derpart.com
magazin.tellz.me
magazin.volkswagen.ba
magazine.ausemergencyservices.com.au
magazine.cioa.com
magazine.elektropraktiker.de
magazine.inversionesciel.com
magazine.iuoe.org
magazine.mpdunne.com
magazine.roarkidsmagazine.com
magazine.suncoastergroup.com
mitteilungsblatt.seifert-medien.de
miwi.halle.ihk.de
news.vdmno.de
prospekte.hkl-baumaschinen.at
publications.cwgc.org
publikationen.contipark.de
quals.truebeck.com
read.rapidrivermagazine.com
tagesspiegel.kiosk.plus
webkiosk.artandpictures.nl
webkiosk.leveldesigngroup.com
webkiosk.mwk-koeln.de
webkiosk.ww-events-online.de
webkiosks.corshamprint.co.uk
webkiosks.plaskettcollege.com
webweb.webberz.ch
wirbeicontipark.contipark.de
www.brochures.venturamarketing.ie
www.magazine.e-motec.net
www.magazines.thederbeian.com
yumpu.testact.de

Other certificates including the domain name der-kleine-georg.de

(limited to 100 certificates)
kiosque.flp.ch
test.phcsystem.com
www.magbooks.icsl.org.in
produktkatalog.mwf-technik.de
magazines.somma.co.za
magazin.nivea.de
kiosk.astrosofa.com
magazines.somma.co.za
travelshop.accessconsciousness.com
onlinecatalog.custom-chrome-europe.com
kiosque.flp.ch
kiosk.vidaglobal.de
vitadoor.mediaflip.de
epaper-en.glasmarte.at
magazine.legacylighthouse.org
kiosk.velototal.de
kiosk.der-kleine-georg.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
magazines.somma.co.za
magazine.legacylighthouse.org
kiosk.vidaglobal.de
test.phcsystem.com
start.andernach-wirtschaft.de
kiosk.der-kleine-georg.de
epapers.juenglingverlag.de
kiosk.vidaglobal.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
epaper-en.glasmarte.at
magazines.somma.co.za
kiosk.vidaglobal.de
emag.indianjeweller.in
test.phcsystem.com
test.phcsystem.com
epaper-en.glasmarte.at
magazine.legacylighthouse.org
test.phcsystem.com
epaper-en.glasmarte.at
magazine.legacylighthouse.org
magazines.somma.co.za
kiosk.flp.de
onlinecatalog.custom-chrome-europe.com
webkiosk.die-bank.de
kiosk.flp.ch
kiosk.vidaglobal.de
der-kleine-georg.de
www.magbooks.icsl.org.in
katalog.lemo-schuh.ch
kiosk.vidaglobal.de
magazines.somethinggoodmagazines.com
kiosque.flp.ch
webkiosk.alpenpark.de
onlinecatalog.custom-chrome-europe.com
kiosk.vidaglobal.de
test.phcsystem.com
start.andernach-wirtschaft.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
start.andernach-wirtschaft.de
kataloge.basoeinkaufsverbund.de
epaper-en.glasmarte.at
epaper-en.glasmarte.at
magazines.somma.co.za
webkiosk.alpenpark.de
magazine.legacylighthouse.org
magazine.legacylighthouse.org
epapers.juenglingverlag.de
kiosque.flp.ch
kiosk.velototal.de
kiosk.astrosofa.com
www.magbooks.icsl.org.in
kiosk.flp.ch
kiosk.astrosofa.com
der-kleine-georg.de
magazines.somma.co.za
start.andernach-wirtschaft.de
kiosk.der-kleine-georg.de
kiosk.der-kleine-georg.de
katalog.lemo-schuh.ch
katalog.lemo-schuh.ch
magazines.somma.co.za
katalog.lemo-schuh.ch
kiosk.velototal.de
www.magbooks.icsl.org.in
webkiosk.alpenpark.de
kiosk.flp.de
kiosk.velototal.de
kiosk.velototal.de
katalog.klickparts.com
kiosk.velototal.de
kiosk.flp.de
webkiosk.alpenpark.de
epaper-en.glasmarte.at
magazine.legacylighthouse.org
magazines.somma.co.za
magazin.plusperfekt.de
epaper-en.glasmarte.at
webkiosk.alpenpark.de

Certificate

The complete raw certificate details for kiosk.der-kleine-georg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fta7IOYR/dQILFV4ntm
4MkSHG48RohqeDP5zYl2nu11biDxNa0/Ls/HIMjj/5pxenhBLban1bLSDVigI7A9
kamtzahtAevdede6aOJ4Z/NDpn9VsP/35kdcwugoZjNBCZLBrX2kVKkWbvARHSe/
UnBDZRcvnKn6howzboSmrAlBByQ0Y7g8UNNjUxrlDdtar7H/aFW70efcH9C6dfI0
rCaxfY2oV1wbAr3k6E6iCi7gyvuD554L4+/ftmPfvdZPtYU2j5wD6Cx/GZ0cVC90
XVj7CRhgSWKdIMU6B+AQYJaLsbRLbch/V+4YT8RwuMbjSP2I0OoFVbMEnsBUXerF
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335523125812834886869385756831480963511567
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-01 11:04:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-31 11:04:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kiosk.der-kleine-georg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26507753592532215516872553604347280960839920330164731510824667457514231930055755527276111645782005623113372081273515222514861942083977711698666483099924559314093973177271594276217163543192400085704032850868183463217903479492312743049269563330410144413088029237408732167133845629172397373154586390085117469312815960200317326784064274632322884826081708275865283596202540971531729646650860666030870592745874038469064278034968702445123410869177805978896922163642701887098757890440859222188115110204051584899900231518079084991675478594022356592031111275287075413704395595775443668936561639565403727390114550802720699893171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd84acd28d46dfd77e86ab3dc2c76ebb2d5a4db0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1525 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliothek.explicare.doctor'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochure.ntpwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.keepmoat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.waterrower.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogo.strap.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chapters.transamericanheroes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chef-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documents.zettlerelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dokumente.zettlerelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvgforum-022019.dvg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatsmarter.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebooks.royalafricansafaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emags.avr-verlagsobjekte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.logistik-news.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.aqua-dome.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grazia.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.independenceaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.teppich-stark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.westfalen-urlaubsreisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.am-weststrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.antalis-verpackungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.der-kleine-georg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.kip-tape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.shopdecormagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.verbaende.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundenmagazin.derpart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.tellz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.volkswagen.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.ausemergencyservices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.cioa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.elektropraktiker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.inversionesciel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.iuoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.mpdunne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.roarkidsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.suncoastergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitteilungsblatt.seifert-medien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miwi.halle.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.vdmno.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospekte.hkl-baumaschinen.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publications.cwgc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publikationen.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quals.truebeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.rapidrivermagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagesspiegel.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.artandpictures.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.leveldesigngroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.mwk-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.ww-events-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.corshamprint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.plaskettcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webweb.webberz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wirbeicontipark.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brochures.venturamarketing.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazine.e-motec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazines.thederbeian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yumpu.testact.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f60fe4a200000040300463044022053bc10578f5fd030f5551674a9a6f5d27db50d34d401dea0bc2004197abf6b0d02202cb14f0a416c942f1ff0fb869040dd6f45cc7958e0bd14d9d27f89efe0df5f5e00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f60fe4a1f0000040300473045022073812b6eb773fe5b590048e465bf7157c33b3c60504c85de4802f9d83ec58953022100903be32a0713aa1b50301b1d778b036c733790598dc8c3a037e756cf15beb597
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0086a24879c485aacbd1ce89df4642049727bc176768559fe96329f589bc2959791b1e371de2e5f6d6ada3f1a874eea60982ec6b036d1c8efb3cadf0a901474ed2a4146588f10674af66db27b21fbd60b6112460b6df92b1896e37afd1da7bcfe5f65d3096b51d1b4d706fbb1c03ae778a5e48c25de33ff4f8945b7305a0185f6cf1f7e76e7bf218383ce76025a30b2e23da1fa27ad18e12d4416721634ad06c460ead7fb6dadde8b1fa7c468dace3fcf237e4e1879787fcedda131ef4bc70c3d01cd60c7d2b06ad1c5da7289d96959a0d0f58dad7400074f71f6995dbb32568797f2d7506223a636a498771b3a8a5eb8d5b1e38998442bd95a3255a8ebfbeffc1