ab-impianti-srl.comovee.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4a:d6:64:34:2f:48:5f:6a:f7:50:b6:85:eb:7f:5e:85:e5 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ab-impianti-srl.comovee.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4a:d6:64:34:2f:48:5f:6a:f7:50:b6:85:eb:7f:5e:85:e5
Serial Number (int): 286802728026645433017575982318559111841253
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 67:1a:5a:3c:a9:d9:d0:a1:4f:43:c9:91:e6:05:38:a6:c9:2d:49:5b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 04:d1:14:b6:88:3b:ea:9f:c4:b2:5e:04:79:b1:d9:5d:ba:ef:5a:14
Fingerprint (sha256): 22:fa:17:22:28:8f:e3:f7:ea:02:c1:43:7a:12:62:23:7f:68:a4:4e:3b:e6:7e:6f:9f:50:a9:8e:85:ea:71:bb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate ab-impianti-srl.comovee.it

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ab-impianti-srl.comovee.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ab-impianti-srl.comovee.it
ace.comovee.de
acticall.comovee.fr
ahold.comovee.net
airliquide.comovee.nl
alliander.comovee.nl
allonshy.hennessy.com
alutronic.comovee.de
amazon-es.comovee.net
arvato-distribution.comovee.net
bank-deutsches-kraftfahrzeuggewerbe.comovee.net
bank-leumi.comovee.net
big-direkt-gesund.comovee.net
blechwaren-limburg.comovee.net
bnp-paritest.comovee.net
bornheim.comovee.de
cargobull.comovee.net
carpool.summerfest.com
ceramtec.comovee.de
cho.comovee.net
cofely.comovee.net
colgate-palmolive.comovee.net
comparteauto.liverpool.com.mx
ctco.comovee.net
currenta.comovee.net
dachser.comovee.net
deutsche-lufthansa-ag.comovee.net
dormagen.comovee.de
drive.cargobull.com
drive.hilti.com
drive.nagel-group.com
drive.redblue.de
drive.sysware.de
drivemx.comovee.net
eisenmann.comovee.net
emc2.comovee.fr
emerson-electric.comovee.net
enterprise-france.comovee.net
eph.comovee.mx
ey-de.comovee.net
fantasy.comovee.net
fasterminds.comovee.net
ge-brazil.comovee.net
gens.comovee.fr
go.tetonscience.org
gonvarri.comovee.net
groupecarso.comovee.fr
hennessy.comovee.net
hilti.comovee.net
ienova.comovee.mx
lendlease.comovee.net
lessebo.samakning.se
liazon.comovee.net
linde.comovee.de
liverpool.comovee.mx
lok-leipzig.comovee.net
lw.comovee.net
mcdonalds-canada.comovee.net
mdc-power.comovee.net
mfz.lok-leipzig.com
mitfahren.bornheim.de
mitfahren.rockinleuben.de
mitfahrportal.bornheim.de
nagel-group.comovee.de
neiu.comovee.net
nevs.comovee.net
novagile.comovee.net
orkelljunga.samakning.se
pays-pyrenees-mediterranee.comovee.fr
pepsico.comovee.mx
pg.comovee.net
ponant.comovee.fr
primokont.comovee.de
redblue.comovee.de
rnv.comovee.net
rockinleuben.comovee.net
ruag.comovee.net
rxante.comovee.net
schueco.comovee.net
schwarzgruppe.comovee.net
skitaos.comovee.net
sms-group.comovee.net
stadt-bornheim.comovee.de
stadtwerke-pfaffenhofen-adilm.comovee.net
suez.comovee.es
suez.comovee.net
sumitomo.comovee.net
summerfest.comovee.net
sysware.comovee.de
tally.comovee.net
tecnico---lisbon.comovee.net
teton.comovee.net
unitedpercussion.comovee.net
vaude.comovee.net
volaris.comovee.net
vw-otlg.comovee.net
wfp.comovee.net
www.fahr-mit.currenta.de
yaskawa.comovee.net

Other certificates including the domain name comovee.it

(limited to 100 certificates)

Certificate

The complete raw certificate details for ab-impianti-srl.comovee.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsOEMOrJ4FgiFWG30YJZ7
pvdQPDdF7feCLZijBeJhPTPmEfmj8BjGfdxwc6ODuGDosLVIJ9Ghkav4bwQrojNO
ZnF0IfOwRPjfWVgVdgXq96HzAMPrtLFdF+kTfAeb/lNrXTNh7afcYL+HosHqNc64
lrp40dlvJsjCYH2AsRD/+hO2jIP1t+9mBprque/kGd7yAkxvnS0jbiMLciA1BxBh
Bv6f5TfkwScMJVxlWAU53SzY/Q5CSnZwcIVOOhbNomBvQRZL1bDgo2WAvH2LRhwi
cYl2egQ+9BcAyUtv+qoSqWk3CPCZQcyZonhjtCznb5+q4aBnTkWFdfwgXoBJMoE5
nioOczFZO9Epwiwxep0D/wh75ZtcUrrbLZ1AJ+KkBSqH9KSgQsBf5coOurTdUJwQ
GSOrna3hPopXxaAr9CpUlQfaPT8F5FB8CbmSKWVClTMitMTlPyN9OjmLAdT/Iwvr
wLAjAvY5pywSnzpLGpm7T0XEX21C9n9iPyy3hYyyQ64w6FNwUR38BxM/RbriqRXy
QCcq2ta7yAbnNc+vGQM2BDshXTwtQ7lwnDJmBwCdZazd5Tr5K+QZuZHrpXnstLvT
56Sf7PB/kO3b9qbvFo8fWs3odosY5kQ5AiCXWx4dqbV09ztdG3WNt3jPkfhM5SoU
TQdjKok8Iy6nyfJm2pH9/dkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286802728026645433017575982318559111841253
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-12 20:59:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-12 20:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ab-impianti-srl.comovee.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 721603741918974473714054544698396693745424104092191540322342916371573761070538622381821325601164665869015842127711702502838244394256714816291804776777246271885105589742981985474395386446877534171159223889147173765321840730068538363122842848915326897800090641042806124162613900571036827872341113287265531264147496390461385286498718713819735841343762168168424763888439943490959622471768791103236943793842252846715569350036173643789356879159768438521846833565205040907927733919676590436934671519283018540931419672474891781532907006158426067940270097304872944524950963714720506454924195193717637141646937324201907035881554042935970421488862791819039906838751958523002112104665107913703838178301024287994027750813106904770425558181130623470769508032752104267770732752228202144659816369043308159582362667948075136088323810511046040913060609094352343803623826358730005501674089941747036054269329346767964172377253180408926369858305060064781549495301381232583517326524528141755445477058605216651449843720481873842735556440591874358287921927067017476771251588357272196247349376225816473709292703974998158360875504250062620733298734668502304484800050264508362817526020474569940091119358661587041627077742799704120812087887399364130843754626521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							671a5a3ca9d9d0a14f43c991e60538a6c92d495b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ab-impianti-srl.comovee.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ace.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acticall.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahold.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airliquide.comovee.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliander.comovee.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allonshy.hennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alutronic.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazon-es.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvato-distribution.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bank-deutsches-kraftfahrzeuggewerbe.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bank-leumi.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'big-direkt-gesund.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blechwaren-limburg.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp-paritest.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bornheim.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cargobull.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carpool.summerfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceramtec.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cho.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cofely.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colgate-palmolive.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comparteauto.liverpool.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctco.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'currenta.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dachser.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutsche-lufthansa-ag.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dormagen.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.cargobull.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.hilti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.nagel-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.redblue.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.sysware.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drivemx.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eisenmann.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emc2.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emerson-electric.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterprise-france.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eph.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ey-de.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasy.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fasterminds.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge-brazil.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gens.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.tetonscience.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gonvarri.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupecarso.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hennessy.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilti.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ienova.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lendlease.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lessebo.samakning.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liazon.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linde.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liverpool.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lok-leipzig.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lw.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdonalds-canada.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdc-power.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfz.lok-leipzig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitfahren.bornheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitfahren.rockinleuben.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitfahrportal.bornheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nagel-group.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neiu.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nevs.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novagile.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orkelljunga.samakning.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pays-pyrenees-mediterranee.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pepsico.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponant.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primokont.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redblue.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rnv.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockinleuben.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruag.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxante.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schueco.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwarzgruppe.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skitaos.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms-group.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadt-bornheim.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadtwerke-pfaffenhofen-adilm.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suez.comovee.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suez.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumitomo.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summerfest.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sysware.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tally.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnico---lisbon.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teton.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedpercussion.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaude.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volaris.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vw-otlg.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfp.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fahr-mit.currenta.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaskawa.comovee.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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