access.magicshop.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b6:5a:51:97:00:01:25:68:53:b3:54:c6:a1:40:7e:16:03 was issued on by Let's Encrypt.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=access.magicshop.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b6:5a:51:97:00:01:25:68:53:b3:54:c6:a1:40:7e:16:03
Serial Number (int): 323388302733201928899142627916378533664259
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 96:16:b5:c1:4a:86:ee:26:65:01:15:07:9c:ef:f8:79:be:4d:80:84
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 36:54:8a:a4:5f:6a:99:f2:7f:d3:81:b5:3b:4e:1e:de:3c:81:c1:16
Fingerprint (sha256): 18:83:0d:ab:25:32:de:e6:57:97:62:81:b8:dd:0f:f5:a6:11:e2:c2:ce:d4:77:29:a6:03:5a:de:5c:77:17:f1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate access.magicshop.nl

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for access.magicshop.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

access.magicshop.nl
adfs.magicshop.nl
analytics.magicshop.nl
app.magicshop.nl
apps.magicshop.nl
backup.magicshop.nl
blogs.magicshop.nl
boards.magicshop.nl
box.magicshop.nl
cart.magicshop.nl
chat.magicshop.nl
citrix.magicshop.nl
client.magicshop.nl
clients.magicshop.nl
cms.magicshop.nl
community.magicshop.nl
connect.magicshop.nl
cp.magicshop.nl
developer.magicshop.nl
docs.magicshop.nl
extranet.magicshop.nl
files.magicshop.nl
forums.magicshop.nl
ftp.magicshop.nl
gallery.magicshop.nl
gateway.magicshop.nl
git.magicshop.nl
help.magicshop.nl
host.magicshop.nl
images.magicshop.nl
intranet.magicshop.nl
jenkins.magicshop.nl
jobs.magicshop.nl
materiais.magicshop.nl
mboss.magicshop.nl
mbox.magicshop.nl
members.magicshop.nl
mx.magicshop.nl
my.magicshop.nl
nas.magicshop.nl
new.magicshop.nl
news.magicshop.nl
newsletter.magicshop.nl
pay.magicshop.nl
rds.magicshop.nl
s.magicshop.nl
sandbox.magicshop.nl
server.magicshop.nl
services.magicshop.nl
shop.magicshop.nl
smtp.magicshop.nl
stats.magicshop.nl
status.magicshop.nl
sts.magicshop.nl
support.magicshop.nl
test.magicshop.nl
ts.magicshop.nl
uat.magicshop.nl
vwww.magicshop.nl
w.magicshop.nl
wp.magicshop.nl
ws.magicshop.nl
ww.magicshop.nl
www.analytics.magicshop.nl
www.backup.magicshop.nl
www.blogs.magicshop.nl
www.boards.magicshop.nl
www.box.magicshop.nl
www.cart.magicshop.nl
www.clients.magicshop.nl
www.community.magicshop.nl
www.connect.magicshop.nl
www.cp.magicshop.nl
www.docs.magicshop.nl
www.forums.magicshop.nl
www.gallery.magicshop.nl
www.gateway.magicshop.nl
www.intranet.magicshop.nl
www.magicshop.nl
www.mx.magicshop.nl
www.newsletter.magicshop.nl
www.pay.magicshop.nl
www.server.magicshop.nl
www.services.magicshop.nl
www.smtp.magicshop.nl
www.test.magicshop.nl
www.vwww.magicshop.nl
www.w.magicshop.nl
www.wp.magicshop.nl
www.ww.magicshop.nl
www.www.magicshop.nl
www.wwww.magicshop.nl
www.wx.magicshop.nl

Other certificates including the domain name magicshop.nl

(limited to 100 certificates)
magicshop.nl
access.magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
2.magicshop.nl
magicshop.nl
2.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
2.magicshop.nl
magicshop.nl
magicshop.nl
2.magicshop.nl
blog.magicshop.nl
magicshop.nl
2.magicshop.nl
magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
access.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
2.magicshop.nl
2.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
www.magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
access.magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
2.magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
access.magicshop.nl
magicshop.nl
magicshop.nl
blog.magicshop.nl
access.magicshop.nl
magicshop.nl
magicshop.nl
access.magicshop.nl
magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
access.magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
2.magicshop.nl
blog.magicshop.nl
access.magicshop.nl
access.magicshop.nl
access.magicshop.nl
www.magicshop.nl
access.magicshop.nl

Certificate

The complete raw certificate details for access.magicshop.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M4CxPon+YWTIcQrluKW
wzIWurVevp0tgUq61yBAv0k8liN14UZxZISjYiEHZ/6IVmSA4+Eje9p8quUVf5p2
dh3WfIrKIHdgZa3uOKOk6mJcm1NidaaONwJZNSr3halMcR9G2nOnHBQlaqUhAGw+
LwspN/tg0clXgY2E9kXzQPX/FviRm/fXbte33hvVk6/Sk8o8likBIVzHUdkE+wUs
F1YhKyhZ6rYpeXgjHXq5XFE03eJEyIj6wE/pE1n1tg65jQnmTzUknGdKBS5uBamh
Hd9zlYjwnaTSe42B2HZZapTzeGsX81AmrpArSH3JmSdDTd4LE2QdBlQN3iDKZ01g
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323388302733201928899142627916378533664259
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-09 22:11:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-10 22:11:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'access.magicshop.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26864108373452071066581230911754760857501605961346043852610970639007135481370645769284968911330425584318689625001898897950528819388711411078818990193406021660378438202468153401969801983330317769463714103811947293307154151003838343626256339157850347656740529105689067611104764312555393072437979637068405281266979901675703360177216475997590010032335513813623484732246959455516927570197988469725522796132350120768505594824546805222501079836260779483650360782949256100573240043552903073667477264704982775786375809758275079215963068291486670949242364784007704723216207357774806649901857320317419621140734782545215424913529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9616b5c14a86ee26650115079ceff879be4d8084
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1968 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfs.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boards.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'box.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrix.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forums.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallery.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenkins.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'materiais.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mboss.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbox.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nas.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rds.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vwww.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.analytics.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.backup.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blogs.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boards.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.box.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cart.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clients.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cp.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.docs.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forums.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gallery.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gateway.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intranet.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mx.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newsletter.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pay.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.server.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.services.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smtp.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vwww.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.w.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wp.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ww.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.www.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wwww.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wx.magicshop.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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