magazine.legacylighthouse.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:df:fd:e3:83:4e:17:a4:48:ef:dd:5e:9a:01:8b:ba:8d:08 was issued on by Let's Encrypt.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=magazine.legacylighthouse.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:df:fd:e3:83:4e:17:a4:48:ef:dd:5e:9a:01:8b:ba:8d:08
Serial Number (int): 337557301616153259931897437135444287065352
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 04:70:ba:91:a1:1a:99:df:dc:92:f3:dd:c0:09:5b:c6:f4:8b:a6:c8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 94:33:5e:b2:2c:9d:ed:5b:c2:4f:ed:90:44:4e:0f:7e:13:98:d0:81
Fingerprint (sha256): 24:d5:37:b3:43:cb:5c:9a:83:e0:3c:93:33:03:cc:c3:16:3e:16:65:a2:be:d2:de:c3:ad:00:4f:d3:d5:6c:2e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate magazine.legacylighthouse.org

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magazine.legacylighthouse.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bibliothek.explicare.doctor
brochure.ntpwarranty.com
brochures.keepmoat.com
brochures.waterrower.co.uk
catalogo.strap.com.br
chapters.transamericanheroes.com
chef-magazine.com
documents.zettlerelectronics.com
dokumente.zettlerelectronics.com
dvgforum-022019.dvg.de
eatsmarter.kiosk.plus
ebooks.royalafricansafaris.com
emag.diamondworld.net
emag.indianjeweller.in
emags.avr-verlagsobjekte.de
epaper.logistik-news.at
flyer.aqua-dome.at
grazia.kiosk.plus
info.independenceaustralia.com.au
kataloge.teppich-stark.de
kataloge.westfalen-urlaubsreisen.de
kiosk.am-weststrand.com
kiosk.antalis-verpackungen.de
kiosk.der-kleine-georg.de
kiosk.kip-tape.com
kiosk.shopdecormagazines.com
kiosk.verbaende.com
kiosk.vidaglobal.de
magazin.tellz.me
magazine.ausemergencyservices.com.au
magazine.cioa.com
magazine.elektropraktiker.de
magazine.inversionesciel.com
magazine.iuoe.org
magazine.legacylighthouse.org
magazine.mpdunne.com
magazine.roarkidsmagazine.com
magazine.suncoastergroup.com
magazines.somethinggoodmagazines.com
mitteilungsblatt.seifert-medien.de
news.vdmno.de
prospekte.hkl-baumaschinen.at
publications.cwgc.org
publikationen.contipark.de
quals.truebeck.com
read.rapidrivermagazine.com
tagesspiegel.kiosk.plus
webkiosk.artandpictures.nl
webkiosk.leveldesigngroup.com
webkiosk.mwk-koeln.de
webkiosks.corshamprint.co.uk
webkiosks.plaskettcollege.com
wirbeicontipark.contipark.de
www.brochures.venturamarketing.ie
www.magazine.e-motec.net
www.magazines.thederbeian.com
yumpu.testact.de

Other certificates including the domain name legacylighthouse.org

(limited to 100 certificates)
www.magbooks.icsl.org.in
produktkatalog.mwf-technik.de
magazines.somma.co.za
magazin.nivea.de
magazines.somma.co.za
kiosk.citytipp.org
travelshop.accessconsciousness.com
onlinecatalog.custom-chrome-europe.com
vitadoor.mediaflip.de
epaper-en.glasmarte.at
magazine.legacylighthouse.org
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
magazines.somma.co.za
magazine.legacylighthouse.org
start.andernach-wirtschaft.de
epapers.juenglingverlag.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
epaper-en.glasmarte.at
magazines.somma.co.za
epaper-en.glasmarte.at
magazine.legacylighthouse.org
epaper-en.glasmarte.at
magazine.legacylighthouse.org
magazines.somma.co.za
onlinecatalog.custom-chrome-europe.com
www.sblaettle.at
www.magbooks.icsl.org.in
katalog.lemo-schuh.ch
webkiosk.alpenpark.de
onlinecatalog.custom-chrome-europe.com
start.andernach-wirtschaft.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
start.andernach-wirtschaft.de
kataloge.basoeinkaufsverbund.de
epaper-en.glasmarte.at
epaper-en.glasmarte.at
magazines.somma.co.za
webkiosk.alpenpark.de
magazine.legacylighthouse.org
magazine.legacylighthouse.org
epapers.juenglingverlag.de
www.magbooks.icsl.org.in
www.sblaettle.at
magazines.somma.co.za
start.andernach-wirtschaft.de
katalog.lemo-schuh.ch
katalog.lemo-schuh.ch
magazines.somma.co.za
katalog.lemo-schuh.ch
www.magbooks.icsl.org.in
webkiosk.alpenpark.de
katalog.klickparts.com
webkiosk.alpenpark.de
epaper-en.glasmarte.at
magazine.legacylighthouse.org
magazines.somma.co.za
magazin.plusperfekt.de
epaper-en.glasmarte.at
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
katalog.lemo-schuh.ch
epaper-en.glasmarte.at
www.magbooks.icsl.org.in
webkiosk.alpenpark.de
magazine.legacylighthouse.org
handelsblatt.kiosk.plus
magazine.legacylighthouse.org
magazine.legacylighthouse.org
katalog.klickparts.com
magazine.legacylighthouse.org
katalog.klickparts.com
vitadoor.mediaflip.de
epaper.grillzeit.at
onlinecatalog.custom-chrome-europe.com
epaper.grillzeit.at
katalog.lemo-schuh.ch
epaper-en.glasmarte.at
www.magbooks.icsl.org.in
onlinecatalog.custom-chrome-europe.com
magazine.legacylighthouse.org
berliner-kurier1.kiosk.plus
magazine.legacylighthouse.org
webkiosk.alpenpark.de
kiosk.citytipp.org
publikationen.stbverband-koeln.de
start.andernach-wirtschaft.de
epaper-en.glasmarte.at
publikationen.stbverband-koeln.de
vitadoor.mediaflip.de
travelshop.accessconsciousness.com
webkiosk.alpenpark.de
ebook.frcemexambookstore.co.uk
onlinecatalog.custom-chrome-europe.com
katalog.klickparts.com
webkiosk.alpenpark.de
epaper-en.glasmarte.at

Certificate

The complete raw certificate details for magazine.legacylighthouse.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulx3onO9Sv/Cp654PQSi
B3B4FuDJhjGKrGGG3zyIUFFTzvfvMyilrU4+zssr8cGgOkTeqFLZjbflpritWIjq
ebdk3yKyxlv+xAhAGPm+ZVR9mtb1+eB9wwXe4B0oWb1XrTpDzYdBTrlLRgRGZ0lI
No37s6qOGmMD64Lo2yxmBlOZ2l07HAJsWcsc+lLpXnG8q74rEClwkcgKCWb90KmR
xn3PQTshVlq9Im1ay3/6NybOyntDMqoIT43/Ylk45qAnLM9ByPIGPyLYFbAkAG10
e6lviwwy2CwGHq6saYVe61n3GjTCNZdwA3+QcOrShl4nvaprUBopZn9Wypd5Xis8
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337557301616153259931897437135444287065352
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-09 11:07:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-08 11:07:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magazine.legacylighthouse.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23525922059883364781082495192531537963661221654561473778444432588962640684914863989272820230481007793070246665503602614248351594115337036312377841141788950136265735868124799339030010802075504643988224830171914882091502339838423871967234896163292276762874213094260084650470337287013535228502713979139425155043318226552923222960086321370344138811778985178511836524656971405200800442281096209671153760740918732106301536208810169697112075542471853606556038986660967322842731196835624694562493910472128082668213560366634646112679562260752128347954396156086886434176723110971041695781838401664945317920227510616357218237659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0470ba91a11a99dfdc92f3ddc0095bc6f48ba6c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1544 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliothek.explicare.doctor'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochure.ntpwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.keepmoat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.waterrower.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogo.strap.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chapters.transamericanheroes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chef-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documents.zettlerelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dokumente.zettlerelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvgforum-022019.dvg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatsmarter.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebooks.royalafricansafaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emag.diamondworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emag.indianjeweller.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emags.avr-verlagsobjekte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.logistik-news.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.aqua-dome.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grazia.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.independenceaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.teppich-stark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.westfalen-urlaubsreisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.am-weststrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.antalis-verpackungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.der-kleine-georg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.kip-tape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.shopdecormagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.verbaende.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.vidaglobal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.tellz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.ausemergencyservices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.cioa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.elektropraktiker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.inversionesciel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.iuoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.legacylighthouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.mpdunne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.roarkidsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.suncoastergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazines.somethinggoodmagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitteilungsblatt.seifert-medien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.vdmno.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospekte.hkl-baumaschinen.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publications.cwgc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publikationen.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quals.truebeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.rapidrivermagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagesspiegel.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.artandpictures.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.leveldesigngroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.mwk-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.corshamprint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.plaskettcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wirbeicontipark.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brochures.venturamarketing.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazine.e-motec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazines.thederbeian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yumpu.testact.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016eea8e8ac70000040300473045022100e3a3cddea179e2c707f09e0df8712ef5ada03d62a1678397a99393989d03946a022030a28a908255ed928b9bb178dae55339e361ad144a398058e3247e2df5a85b7b007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016eea8e8abc000004030046304402207e9bb14dc20af9a4c0f1a454d9d7b6a104b330c88d58663c7c23cbfc9d92215f022008fe3d13dc20793b58b2f5810cb182efde3d982f5e3b201d8a380415bac217bc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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