t.mailkit.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number c7:72:41:46:bf:24:cc:8c:17:dc:b9:b6:5c:a2:38:b6 was issued on by Sectigo Limited.

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=t.mailkit.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): c7:72:41:46:bf:24:cc:8c:17:dc:b9:b6:5c:a2:38:b6
Serial Number (int): 265109616964822966567000433551051208886
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 0c:29:32:11:f8:e3:88:56:8e:ad:a6:71:13:5f:4d:37:2c:4f:3b:1e
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 7a:12:dc:ff:76:dc:43:34:73:9b:3e:e5:7c:10:9d:c3:d9:45:3c:03
Fingerprint (sha256): 24:8e:c2:bc:30:d5:0f:4f:f7:da:b6:86:7e:5a:7a:6b:4f:f0:e7:fc:c7:eb:3d:06:cc:73:80:dc:b3:96:9f:c2

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate t.mailkit.com

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for t.mailkit.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

t.mailkit.com
t.akce.rent.cz
t.akce.svet-svitidel.cz
t.akcie.rent.sk
t.akcie.svet-svietidiel.sk
t.allianz.cz
t.centropol.cz
t.club.rossmann.cz
t.dedoma.ro
t.dedoma.sk
t.dine4fit.hu
t.dine4fit.pl
t.dobryemail.cz
t.e-kondomy.cz
t.email.bezvasport.cz
t.email.bezvasport.sk
t.emaildemos.com
t.homecredit.cz
t.homecredit.sk
t.info.nm.cz
t.kaloricketabulky.cz
t.kaloricketabulky.sk
t.kartavyhod.drmax.cz
t.ketodiet.cz
t.ketodiet.sk
t.kusmitea.cz
t.love.activate.cz
t.malfini.com
t.mesacnyvypis.sk
t.mesicnivypis.cz
t.mimilatky.cz
t.mnd.cz
t.naturamed.cz
t.naturamed.sk
t.news.3dden.com
t.news.etneteragroup.cz
t.newsletter.drmax.cz
t.newsletter.factcool.com
t.newsletter.rossmann.cz
t.nl.toner.shop
t.nl.tonerpartner.cz
t.nl.tonerpartner.hr
t.nl.tonerpartner.pl
t.nl.tonerpartner.ro
t.nl.tonerpartner.sk
t.nl.tonerpartners.hu
t.notino.at
t.notino.be
t.notino.bg
t.notino.ch
t.notino.co.uk
t.notino.cz
t.notino.de
t.notino.dk
t.notino.ee
t.notino.es
t.notino.fi
t.notino.fr
t.notino.gr
t.notino.hr
t.notino.hu
t.notino.ie
t.notino.it
t.notino.lt
t.notino.lv
t.notino.nl
t.notino.pl
t.notino.pt
t.notino.ro
t.notino.se
t.notino.si
t.notino.sk
t.notino.ua
t.novinky.volkswagen.cz
t.omnivery.com
t.pottenpannen.cz
t.pottenpannen.sk
t.pozvanky.nm.cz
t.prazirna.doubleshot.cz
t.ru.dine4fit.com
t.superlove.sk
t.tablycjakalorijnosti.com.ua

Other certificates including the domain name mailkit.com

(limited to 100 certificates)
t.mailkit.com
*.mailkit.com
t.mailkit.com
*.mailkit.com
t.mailkit.com
u.mailkit.com
mailkit.com
u.mailkit.com
u.mailkit.com
mailkit.com
t.mailkit.com
u.mailkit.com

Certificate

The complete raw certificate details for t.mailkit.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48iF6l75OKU1fQT1aO81
p2vXUdwuTdHgUTLsDXUrw+Am/OjI0QSIvGz7rhvZehBoWSwM1Ikd6lSQQJiYZD3J
H45F0oudllkL8x/vi0HOaEcSnQh88sy1CmPrv/c2GrQFhtArGjXcaoTFL6Lwb2mM
B9xRkYrG8Vmteh6KsJ7hlY5zggN1zvndypS4UdvlCR9IWxSdC7v2aJwuVT5+lNel
Y/CJB7gaYnSZq7LBdZOpyM7WPWVFhjNjowAyXww7a98RFAlTZQrkCogMp6EdbC7U
VUZVu0j+xlDgnDc+apn6v5x7sDfPBX4HHO4SmmZAdLJFHI+BPWvFeFjJVOK63RNi
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265109616964822966567000433551051208886
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 't.mailkit.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28754976856956340318757409575594394058824502629309663717914477130344457319303109859263489874603763962731170636480434320642139622456463353678591797657955744951023363965028185613308511828660666499409441518554686936164478829287449168726486813010046994978661706782533377130525709215552748378711346645211936992166401856577240069933170561557844982494705723192189433393010142145952313984460023861204351485583896979152388337964793826645593645178634750491170382654699443963511026790886018098652300032760071258877059719054273462565365278152642656925156310625804783303443256398419882129898385577595508829950867757234307976094419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c293211f8e388568eada671135f4d372c4f3b1e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000187467014e40000040300483046022100aabb2c3760d0508ed20d5f9271b6126b4276f7ecf48ed5c3b30e00e28b54ecee022100d8886e0801bc17ad0ffe5c8fa214c19b8e55087035cbfd80df3f02ede74f93a50076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001874670154000000403004730450221008904ed70c8adb1f23757057ae186c6fd05d161f1ab4e01a8dc7db4a61a2eabc6022054e2bf568ae388e1cf1f455a9d2d0ff2e6232e9f52579edb37b1fe70a49e3b71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1413 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.mailkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.akce.rent.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.akce.svet-svitidel.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.akcie.rent.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.akcie.svet-svietidiel.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.allianz.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.centropol.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.club.rossmann.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.dedoma.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.dedoma.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.dine4fit.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.dine4fit.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.dobryemail.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.e-kondomy.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.email.bezvasport.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.email.bezvasport.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.emaildemos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.homecredit.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.homecredit.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.info.nm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.kaloricketabulky.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.kaloricketabulky.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.kartavyhod.drmax.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.ketodiet.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.ketodiet.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.kusmitea.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.love.activate.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.malfini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.mesacnyvypis.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.mesicnivypis.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.mimilatky.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.mnd.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.naturamed.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.naturamed.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.news.3dden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.news.etneteragroup.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.newsletter.drmax.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.newsletter.factcool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.newsletter.rossmann.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.toner.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartner.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartner.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartner.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartner.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartner.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartners.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.novinky.volkswagen.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.omnivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pottenpannen.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pottenpannen.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pozvanky.nm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.prazirna.doubleshot.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.ru.dine4fit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.superlove.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.tablycjakalorijnosti.com.ua'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005fab0f825790d82c44ac429eeb32292e501eb17614084a5b7e261924def35119c4bdca88eabb812c9eb97e9f3f158460f3203b643dbf055be320d940e9e339436592022d9f28b47e67decdf4ff514b0698a6f0a5891b64eb400b2fbeaff200501a7d9b3754ba39cb92dee2b121c3bea6d5b92c9651aab04c95bab80f50648b2f61ece1af7eb64d651b839ffd5c088ddb2b9e8b5d77d7d8e83e56eb17df39d1308db34912bddb21144611eb15147bf7e3f7ef6d97a8f0b6610d666ffa9a33fa42138b1b6d6e1c5d0f71dbebec52d9866c70a374f2a6835dbe1a5f165640ccb8beb1a4fa1f3830cda632bb9223161cef13826d188f91ee5cc46ea136961b406f63