2.magicshop.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:41:97:d2:4c:3a:4d:18:c1:46:86:fe:5c:08:a6:c0:07:e1 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=2.magicshop.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:41:97:d2:4c:3a:4d:18:c1:46:86:fe:5c:08:a6:c0:07:e1
Serial Number (int): 283657017000927778251649442975241625143265
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ba:a7:64:aa:6c:2d:02:85:7b:64:21:d6:4e:50:14:71:22:69:2e:f7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 05:03:a7:2a:a1:80:e9:86:d2:3d:ff:96:38:bc:41:af:0c:08:c6:3b
Fingerprint (sha256): 27:18:95:19:26:11:63:1a:25:27:4a:ce:a3:c4:d5:d5:03:13:8b:57:62:93:9d:13:d7:c5:f0:8f:ec:7e:c8:48

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 2.magicshop.nl

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 2.magicshop.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2.magicshop.nl
admin.magicshop.nl
apps.magicshop.nl
auth.magicshop.nl
blog.magicshop.nl
board.magicshop.nl
boards.magicshop.nl
cart.magicshop.nl
cdn.magicshop.nl
chat.magicshop.nl
clients.magicshop.nl
cloud.magicshop.nl
cp.magicshop.nl
crm.magicshop.nl
dashboard.magicshop.nl
development.magicshop.nl
docs.magicshop.nl
email.magicshop.nl
exchange.magicshop.nl
forums.magicshop.nl
ftp.magicshop.nl
geleverd.magicshop.nl
gitlab.magicshop.nl
go.magicshop.nl
imap.magicshop.nl
img.magicshop.nl
info.magicshop.nl
jira.magicshop.nl
jobs.magicshop.nl
lyncdiscoverinternal.magicshop.nl
magicshop.nl
mail.magicshop.nl
mail2.magicshop.nl
mboss.magicshop.nl
mbox.magicshop.nl
new.magicshop.nl
news.magicshop.nl
newsletter.magicshop.nl
nextcloud.magicshop.nl
office.magicshop.nl
old.magicshop.nl
online.magicshop.nl
outlook.magicshop.nl
owa.magicshop.nl
piwik.magicshop.nl
preprod.magicshop.nl
prod.magicshop.nl
qa.magicshop.nl
rds.magicshop.nl
s.magicshop.nl
server.magicshop.nl
services.magicshop.nl
shop.magicshop.nl
smtp.magicshop.nl
sslvpn.magicshop.nl
stack.magicshop.nl
stats.magicshop.nl
status.magicshop.nl
sts.magicshop.nl
test.magicshop.nl
ts.magicshop.nl
uat.magicshop.nl
vasthebben.magicshop.nl
vpn.magicshop.nl
w.magicshop.nl
web.magicshop.nl
webmail.magicshop.nl
wordpress.magicshop.nl
wp.magicshop.nl
ws.magicshop.nl
ww.magicshop.nl
www.2.magicshop.nl
www.app.magicshop.nl
www.auth.magicshop.nl
www.backup.magicshop.nl
www.beta.magicshop.nl
www.boards.magicshop.nl
www.cart.magicshop.nl
www.chat.magicshop.nl
www.cloud.magicshop.nl
www.connect.magicshop.nl
www.download.magicshop.nl
www.exchange.magicshop.nl
www.gitlab.magicshop.nl
www.intranet.magicshop.nl
www.m.magicshop.nl
www.magicshop.nl
www.mail.magicshop.nl
www.mail2.magicshop.nl
www.oud.magicshop.nl
www.prod.magicshop.nl
www.server.magicshop.nl
www.services.magicshop.nl
www.smtp.magicshop.nl
www.stage.magicshop.nl
www.sts.magicshop.nl
www.webmail.magicshop.nl
www.ww.magicshop.nl
www.www2.magicshop.nl
www.wwww.magicshop.nl

Other certificates including the domain name magicshop.nl

(limited to 100 certificates)
magicshop.nl
access.magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
2.magicshop.nl
magicshop.nl
2.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
2.magicshop.nl
magicshop.nl
magicshop.nl
2.magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
2.magicshop.nl
magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
access.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
2.magicshop.nl
2.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
www.magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
access.magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
2.magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
access.magicshop.nl
magicshop.nl
magicshop.nl
blog.magicshop.nl
access.magicshop.nl
magicshop.nl
magicshop.nl
access.magicshop.nl
magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
access.magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
2.magicshop.nl
blog.magicshop.nl
access.magicshop.nl
access.magicshop.nl
access.magicshop.nl
www.magicshop.nl

Certificate

The complete raw certificate details for 2.magicshop.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxv3ZshcwmCK+ubriFEtu
wGXV57uhGGRlZLdD5d2MPM1qUPJVrE9n3ntKD8UUXYHXCB3/+Ve++Wwd1t9axqn/
JOKvt3GuInCIlRls559zQNXKEohU4Jq0GjtQTM0BHVs39ZNZjS6Zt8fVHAlTDQCQ
m5PwGnmA3bf64QPE75/0vDVt/dQi6jBcxDOCt8dDiePpzW+Ui1ain6QEZh75I+bb
Wx/U7dF2PUiW6WmCQFiTN0K4lNyR5G/ZbYMRXKD7KLmweWABQ3HjWafJPI7vxonk
MzvoREx8n1GHY2mW03bIETjltrPP3eHgTOn61QCbMstB6eZUC8zp1PHRd6JtUDEv
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283657017000927778251649442975241625143265
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-08 03:17:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-06 03:17:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2.magicshop.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25120362668008000579303795870031156141172641539291636393597070166105286688038738738534307918930229202377539057381966576095498351092488629013238282564969444097787379882580117589264182472948823731845976824594506864060849677432037255232160133129802191422075346934099121316300199014543639492834030991178577624002449510555078377518995357390047338635701506283357788745170641300200483803992846899973316044122213382189491514499227784894524768275789565736344487524004268582540300840610046825981355990803630356197437682247355956845471958100072202168628478340478869669721640247886154726045833168812238496426399857213334122213351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							baa764aa6c2d02857b6421d64e50147122692ef7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2096 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'board.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boards.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forums.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geleverd.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail2.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mboss.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbox.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcloud.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piwik.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rds.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sslvpn.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stack.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vasthebben.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordpress.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.app.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auth.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.backup.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beta.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boards.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cart.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chat.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloud.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.download.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exchange.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gitlab.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intranet.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mail.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mail2.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oud.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.server.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.services.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smtp.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sts.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webmail.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ww.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.www2.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wwww.magicshop.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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