ab-impianti-srl.comovee.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3f:b0:b8:da:85:a2:ba:3f:3a:1b:c6:13:25:bb:e2:25:67 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ab-impianti-srl.comovee.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3f:b0:b8:da:85:a2:ba:3f:3a:1b:c6:13:25:bb:e2:25:67
Serial Number (int): 283009550853332979680814834857535338587495
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0a:53:50:08:90:91:df:07:2d:9c:da:ac:e2:6d:f5:bb:83:27:93:28
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 03:f6:ef:9b:b5:4b:6c:13:a9:8d:cb:3e:51:c4:08:de:df:d2:6d:cf
Fingerprint (sha256): 28:ad:bb:6e:6e:18:54:cc:8d:a1:0d:ba:bb:ab:58:7c:de:26:46:18:94:4b:73:e0:92:79:8c:70:82:8c:8f:b2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate ab-impianti-srl.comovee.it

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ab-impianti-srl.comovee.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ab-impianti-srl.comovee.it
ace.comovee.de
acticall.comovee.fr
ahold.comovee.net
airliquide.comovee.nl
alliander.comovee.nl
altrans.comovee.net
alutronic.comovee.de
amazon-es.comovee.net
arvato-distribution.comovee.net
atnt.comovee.net
bank-deutsches-kraftfahrzeuggewerbe.comovee.net
bank-leumi.comovee.net
bechtel.comovee.net
big-direkt-gesund.comovee.net
blechwaren-limburg.comovee.net
bnp-paritest.comovee.net
bornheim.comovee.de
cargobull.comovee.net
ceramtec.comovee.de
ch-dracenie.comovee.net
cho.comovee.net
cnh-industrial.comovee.net
cnhi.comovee.it
cofely.comovee.net
colgate-palmolive.comovee.net
covoiturekiabi.comovee.net
ctco.comovee.net
currenta.comovee.net
cycloon.comovee.nl
dachser.comovee.net
deutsche-lufthansa-ag.comovee.net
dormagen.comovee.de
drivemx.comovee.net
eisenmann.comovee.net
emc2.comovee.fr
emerson-electric.comovee.net
enterprise-france.comovee.net
eph.comovee.mx
ey-de.comovee.net
fantasy.comovee.net
fasterminds.comovee.net
ferromex.comovee.net
ge-brazil.comovee.net
gens.comovee.fr
gonvarri.comovee.net
grand-dax.comovee.fr
groupecarso.comovee.fr
hennessy.comovee.net
hilti.comovee.net
ienova.comovee.mx
lendlease.comovee.net
lessebo.samakning.se
liazon.comovee.net
linde.comovee.de
liverpool.comovee.mx
lok-leipzig.comovee.net
lw.comovee.net
mcdonalds-canada.comovee.net
mdc-power.comovee.net
nagel-group.comovee.de
neiu.comovee.net
nevs.comovee.net
novagile.comovee.net
orkelljunga.samakning.se
pays-pyrenees-mediterranee.comovee.fr
pepsico.comovee.mx
pg.comovee.net
ponant.comovee.fr
primokont.comovee.de
pwclu.comovee.net
redblue.comovee.de
rnv.comovee.net
roche.comovee.mx
rockinleuben.comovee.net
ruag.comovee.net
rxante.comovee.net
schueco.comovee.net
schwarzgruppe.comovee.net
sgd-perfumery.comovee.net
skitaos.comovee.net
sms-group.comovee.net
stadt-bornheim.comovee.de
stadtwerke-pfaffenhofen-adilm.comovee.net
suez.comovee.es
suez.comovee.net
sumitomo.comovee.net
summerfest.comovee.net
swarthmore.comovee.net
sysware.comovee.de
tally.comovee.net
tecnico---lisbon.comovee.net
teton.comovee.net
unitedpercussion.comovee.net
vaude.comovee.net
visiativ.comovee.fr
volaris.comovee.net
vw-otlg.comovee.net
wfp.comovee.net
yaskawa.comovee.net

Other certificates including the domain name comovee.it

(limited to 100 certificates)

Certificate

The complete raw certificate details for ab-impianti-srl.comovee.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283009550853332979680814834857535338587495
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-12 09:03:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-11 09:03:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ab-impianti-srl.comovee.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 696336458553010180634341678611489496381121211986705988333816036850154898459670403063072897089139055821506110994632716916771719312652510687485565242665388501506789203708984669550286377208286827519409716455293054743192980168188711905700210048198842476022764811906933828883671313816319956036945060007307821115065900112873210173452979386609795047868584475261538410809277814859255477197258036810673504752166571469524204239218414166955339237017309042799703782799502963211940890410397464490469893285174353217688861152264845936705703613979657357518004749477690207620827567481372880117542185568545836975071278804013416557510617376982316931457654076941019453437137201827869839094130278286180141528583103537234180882060625236521676303071087794582814585351376432495624195842722357088199806595585905398640657755346898955405203047811029074657508220938366348096400661215966606862252864464664545646572834918160331895789683404921483875866747078050571188524597689600785163940605675249617089944489047108811934151028227236804462182870896812365484927819559049080357386870278924207169438713163549647087168445732209599272787847396811583216405120158962630152015699833577842852991998768466018756305227806935224054606933026785273631283986952168076701595546431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a5350089091df072d9cdaace26df5bb83279328
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2287 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ab-impianti-srl.comovee.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ace.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acticall.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahold.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airliquide.comovee.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliander.comovee.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altrans.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alutronic.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazon-es.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvato-distribution.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atnt.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bank-deutsches-kraftfahrzeuggewerbe.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bank-leumi.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bechtel.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'big-direkt-gesund.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blechwaren-limburg.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp-paritest.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bornheim.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cargobull.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceramtec.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch-dracenie.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cho.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnh-industrial.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnhi.comovee.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cofely.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colgate-palmolive.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covoiturekiabi.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctco.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'currenta.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cycloon.comovee.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dachser.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutsche-lufthansa-ag.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dormagen.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drivemx.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eisenmann.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emc2.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emerson-electric.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterprise-france.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eph.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ey-de.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasy.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fasterminds.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferromex.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge-brazil.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gens.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gonvarri.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grand-dax.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupecarso.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hennessy.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilti.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ienova.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lendlease.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lessebo.samakning.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liazon.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linde.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liverpool.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lok-leipzig.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lw.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdonalds-canada.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdc-power.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nagel-group.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neiu.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nevs.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novagile.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orkelljunga.samakning.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pays-pyrenees-mediterranee.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pepsico.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponant.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primokont.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwclu.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redblue.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rnv.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockinleuben.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruag.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxante.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schueco.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwarzgruppe.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgd-perfumery.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skitaos.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms-group.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadt-bornheim.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadtwerke-pfaffenhofen-adilm.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suez.comovee.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suez.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumitomo.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summerfest.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swarthmore.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sysware.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tally.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnico---lisbon.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teton.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedpercussion.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaude.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visiativ.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volaris.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vw-otlg.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfp.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaskawa.comovee.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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