hetmagazine.landrover.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d5:c7:79:fb:7f:30:fc:5e:4e:85:1e:d4:92:52:ed:39:be was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hetmagazine.landrover.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d5:c7:79:fb:7f:30:fc:5e:4e:85:1e:d4:92:52:ed:39:be
Serial Number (int): 421194437621243907808055001688617134143934
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 83:e4:4b:6a:9b:d6:1a:08:ee:8a:d1:42:61:b9:f8:2a:4b:36:ea:cd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b6:9b:fd:75:e5:2e:69:8f:74:20:cd:1a:f5:14:3e:55:f0:ff:99:56
Fingerprint (sha256): 24:a0:c3:b4:f1:5b:43:3d:a3:e1:61:14:53:88:60:e7:4a:85:0f:f6:22:3f:20:28:67:1d:b1:91:5f:47:02:a0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hetmagazine.landrover.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hetmagazine.landrover.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2connect.2plan.com
aktion.kunsmann-wittlich.de
catalogs.goeweil.com
catalogue-fr.reisenthel.com
catalogue.reisenthel.com
catalogues.hampel-auctions.com
collectionslibrary.crestawards.org
dein.limo-journal.de
discoverylibrary.crestawards.org
ebook.aft-international.de
ebooks.werkzeug-direkt.com
einrichtungspartnerring.mediaflip.de
epaper-fr.transgourmet.ch
epaper-it.transgourmet.ch
epaper.mediaradius.it
epaper.pt-magazin.de
epaper.transgourmet.ch
epaper.treffpunkt-bau.eu
epaper.weita.ch
frauendorfer.mediaflip.de
heimfrost.mediaflip.de
hetmagazine.jaguar.com
hetmagazine.landrover.com
hochglanzmagazine.buendnermedienverlag.ch
hoffmann-moebel.mediaflip.de
hummerich.mediaflip.de
jobst-wohnwelt.mediaflip.de
katalog.eisen-pfeiffer.de
katalog.hefele.de
katalog.pmeurotrading.com
katalog.reisenthel.com
katalog.seglerbedarf.de
katalog.unzerbrechbar.de
kataloge.askoe-online.de
kataloge.germannauktionen.ch
kataloge.hampel-auctions.com
kataloge.kuebler-sport.de
kataloge.larimarhotel.at
kataloge.nice-n-hard.de
kataloge.oldtimer-journal.de
kataloge.reisewelt-neuhof.de
kataloge.vonbohlenimmobilien.de
kleining.mediaflip.de
kwo-olbernhau.mediaflip.de
lemagazine.jaguar.com
lemagazine.landrover.com
library.marinaworld.co.uk
logo-moebel.mediaflip.de
magazin.em-chiemgau.de
magazin.jaguar.com
magazin.tourismus.li
magazin.zibibbo.de
magazine.cvd-mediengruppe.de
magazine.direktvertrieb.de
magazine.grossglockner.at
magazine.jaguar-me.com
magazine.jaguar.co.jp
magazine.jaguar.com.cn
magazine.jaguar.it
magazine.jaguar.ru
magazine.jaguarkorea.co.kr
magazine.jaguarusa.com
magazine.landrover.co.jp
magazine.landrover.it
magazine.landrover.ru
magazine.landroverkorea.co.kr
medien.koinno-bmwi.de
mobila.mediaflip.de
moebel-berta.mediaflip.de
moebel-mai.mediaflip.de
moebel-meyer.mediaflip.de
moebel-mmz.mediaflip.de
moebel-zuck.mediaflip.de
moebelundobjekt.mediaflip.de
nemann.mediaflip.de
polster-beck.mediaflip.de
pressespiegel.cantienica.de
primarylibrary.crestawards.org
pro.seamk.fi
prospekte.lokale-rabatte.de
prospekte.moebel-weirauch.de
revista.jaguar.es
revista.jaguarbrasil.com.br
revista.landrover.com
ruesen.mediaflip.de
secondarylibrary.crestawards.org
sonavsofab.xp1.com
trop.mediaflip.de
webkiosk.apomediaverlag.at
webkiosk.bettenstudio-siesta.de
webkiosk.holz-speckmann.de
webkiosk.lichtakzente.at
webkiosk.mediabiz.at
webkiosk.musikermagazin.de
webkiosk.theaterverlage.ch
webkiosk.tkmparkett.de
webkiosks.binzel-abicor.com
wohnland-hauber.mediaflip.de
www.insignia.ecogreen.property
www.ruhewald.tv

Other certificates including the domain name landrover.com

(limited to 100 certificates)
bosnia.jaguar.com
www.experience.landrover.com
magazin.peak-muenster.de
qaforms.landrover.com
catalogues.meister.com
kiosk.greater.sydney
www.experience.landrover.com
magazine.landroverusa.com
training.landrover.com
www.hochseescheinkurs.online
approved.lt.landrover.com
dominicanrepublic.landrover.com
qaforms.landrover.com
www.landrover.com
www.landrover.com
online-katalog.baude.com
origin-lrdxforms.landrover.com
approved.ie.landrover.com
lemagazine.landrover.com
e-paper.moinmoin.de
apps.us.landrover.com
epaper.abakus-magdeburg.de
webkiosks.sm-sport.de
apps.us.landrover.com
lrccaw.live.incontrol.landrover.com
journal.flyskywork.com
www.landrover.com
www.landrover.com
bolivia.jaguar.com
admin.experience.landrover.com
moebel-boeck.mediaflip.de
publikationen.kreis-goerlitz.de
www.landrover.com
www.landrover.com
pim.incontrol.landrover.com
approved.cy.landrover.com
chile.jaguar.com
catalog.sogears.com
*.landrover.com
approved.gi.landrover.com
approved.br.landrover.com
prospekte.intersport.de
webkiosk.dein-typ.de
magazin.landrover.com
catalogues.meister.com
shop.landrover.com
incontrol.landrover.com
ecuador.landrover.com
albania.jaguar.com
www.landrover.com
approved.lk.landrover.com
lrccaw.incontrol.landrover.com
experience.landrover.com
online-katalog.baude.com
topixqa2.landrover.jlrext.com
epaper.glasmarte.at
*.landrover.com
smetrics.landrover.com
magazine.landrover.com.cn
approved.ro.landrover.com
kataloge.quester.at
www.jaguar.gt
bibliothek.bregenzerfestspiele.com
kiosk.greater.sydney
apps.us.landrover.com
training.landrover.com
wwwqa.ownerinfo.jaguar.com
approved.id.landrover.com
www.landrover.com
webkiosk.mvz-atrium.de
kiosk.greater.sydney
www.landrover.com
www.landrover.com
ecuador.landrover.com
berliner-kurier.kiosk.plus
app.langguth.wine
pub.vermoegenszentrum.ch
jaguarlandrover.com
epapers.gleitz-online.de
epaper.swecon-baumaschinen.de
gear.landrover.com
webkiosk.baeckereibuettner.de
online-katalog.baude.com
oshqa.jaguar.com
www.jaguar.gt
www.landrover.com
blaetterkatalog.rp-media.de
bibliothek.bregenzerfestspiele.com
search.accessories.landrover.com
apps.us.landrover.com
katalog.ud-shop.de
webkiosk.mvz-atrium.de
www.landrover.com
albania.jaguar.com
kiosk.greater.sydney
approved.jp.landrover.com
www.landrover.com
osh.jaguar.com
pub.vermoegenszentrum.ch
berliner-kurier.kiosk.plus

Certificate

The complete raw certificate details for hetmagazine.landrover.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR0G1zCFOanFpAPKdXqT
8rSUGXN1+7tbNg5ZXHtlUeiTs3jHTV3fpi/2ahVvzsSXgrGZ9ayWVlM/SXepN1RB
zIYXwA/txkQzMn32hA2orxhmYIU46S3UxR2RdIEs6/TWbdcOQNcUyXAyUFDFlBr3
VEcNVQi8jXTMcQzZqg2bDQdob1gwm+FnVqu/c/pWvGSAkO3echhqpUl8JJ6JOdn2
AwAgmsOqeWwLSkZrYIdNL190aggzu7doQMd7EXB7uUR5VlJjH7q47t/exp18Tz+D
iapJqWnyiHQ/USipUPSdUHQEptG6AmiN/6ckT8Sd2QNNv8zkbX8gHKtzoB1BmhLn
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421194437621243907808055001688617134143934
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-12 07:05:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-11 07:05:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hetmagazine.landrover.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25388212907794045688048118474491861453619029229745551340630959444930596720659933880595684834545338954058154013098823048174521306058719436351243393182929985254061081338949528704870243419666598596722825802857389648367714699212021384036272162168089802884200868686974749724035829467510792416411864156288649238679938882912897010456107144360023022801861669050975909966802669771428328763680073935802100605029542848279558158368041820274740803390758920591106210973631716915624827462649212332691008276059027015749451200476986777619093074901553360319043072659247439104688652941412783927367668117734375616145024991862696587749133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83e44b6a9bd61a08ee8ad14261b9f82a4b36eacd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2613 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2connect.2plan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aktion.kunsmann-wittlich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogs.goeweil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogue-fr.reisenthel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogue.reisenthel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogues.hampel-auctions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectionslibrary.crestawards.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dein.limo-journal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverylibrary.crestawards.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebook.aft-international.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebooks.werkzeug-direkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'einrichtungspartnerring.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper-fr.transgourmet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper-it.transgourmet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.mediaradius.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.pt-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.transgourmet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.treffpunkt-bau.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.weita.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frauendorfer.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heimfrost.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hetmagazine.jaguar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hetmagazine.landrover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hochglanzmagazine.buendnermedienverlag.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoffmann-moebel.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hummerich.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobst-wohnwelt.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalog.eisen-pfeiffer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalog.hefele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalog.pmeurotrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalog.reisenthel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalog.seglerbedarf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalog.unzerbrechbar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.askoe-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.germannauktionen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.hampel-auctions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.kuebler-sport.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.larimarhotel.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.nice-n-hard.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.oldtimer-journal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.reisewelt-neuhof.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.vonbohlenimmobilien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kleining.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwo-olbernhau.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemagazine.jaguar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemagazine.landrover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.marinaworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logo-moebel.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.em-chiemgau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.jaguar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.tourismus.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.zibibbo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.cvd-mediengruppe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.direktvertrieb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.grossglockner.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.jaguar-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.jaguar.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.jaguar.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.jaguar.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.jaguar.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.jaguarkorea.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.jaguarusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.landrover.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.landrover.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.landrover.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.landroverkorea.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medien.koinno-bmwi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobila.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moebel-berta.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moebel-mai.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moebel-meyer.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moebel-mmz.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moebel-zuck.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moebelundobjekt.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nemann.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polster-beck.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressespiegel.cantienica.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primarylibrary.crestawards.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.seamk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospekte.lokale-rabatte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospekte.moebel-weirauch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revista.jaguar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revista.jaguarbrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revista.landrover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruesen.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secondarylibrary.crestawards.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonavsofab.xp1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trop.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.apomediaverlag.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.bettenstudio-siesta.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.holz-speckmann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.lichtakzente.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.mediabiz.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.musikermagazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.theaterverlage.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.tkmparkett.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.binzel-abicor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wohnland-hauber.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insignia.ecogreen.property'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruhewald.tv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a2500000165ccd04cdf0000040300463044022077a885b7ae7803e0a4bd2797878edf87dea920c3f3bc293773b13d964351cdb00220141abd52318de054368c1d7909da9f2d221fbc9d39af72bb6fcda48234bbb2d80076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000165ccd04d1a0000040300473045022100c61c679cd7e8ad03184ca34c26a001d6c28128a37e795effb17d60e47408a4af02203e1599d00df995027ec2fcfaec64486245ba06996880bd4a03c35a71d31b85c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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