access.magicshop.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5f:e0:c7:51:ea:fa:2d:ce:c2:01:39:d7:1e:e0:e6:07:dd was issued on by Let's Encrypt.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=access.magicshop.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5f:e0:c7:51:ea:fa:2d:ce:c2:01:39:d7:1e:e0:e6:07:dd
Serial Number (int): 293962464652392558109747446985640873691101
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ea:dd:fa:0f:31:36:cf:c0:b9:a7:b0:e7:13:04:f6:54:6c:ce:f8:ad
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c0:f6:6b:13:c9:81:bf:d0:58:fd:f1:bf:dd:37:1a:d1:d7:1d:1c:e0
Fingerprint (sha256): 2a:00:49:2b:a9:7a:3e:23:7f:75:56:20:4b:81:31:12:ed:ed:0e:c0:90:55:a8:01:97:4a:93:ec:c3:39:ef:f6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate access.magicshop.nl

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for access.magicshop.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

access.magicshop.nl
apps.magicshop.nl
box.magicshop.nl
chat.magicshop.nl
client.magicshop.nl
clients.magicshop.nl
connect.magicshop.nl
deploy.magicshop.nl
development.magicshop.nl
events.magicshop.nl
extranet.magicshop.nl
gallery.magicshop.nl
gateway.magicshop.nl
git.magicshop.nl
groups.magicshop.nl
host.magicshop.nl
int.magicshop.nl
intranet.magicshop.nl
lists.magicshop.nl
mboss.magicshop.nl
mbox.magicshop.nl
members.magicshop.nl
mx.magicshop.nl
my.magicshop.nl
new.magicshop.nl
news.magicshop.nl
sandbox.magicshop.nl
stats.magicshop.nl
status.magicshop.nl
sts.magicshop.nl
support.magicshop.nl
test.magicshop.nl
ts.magicshop.nl
uat.magicshop.nl
vwww.magicshop.nl
w.magicshop.nl
wordpress.magicshop.nl
ws.magicshop.nl
ww.magicshop.nl
www-test.magicshop.nl
www.access.magicshop.nl
www.apps.magicshop.nl
www.box.magicshop.nl
www.cart.magicshop.nl
www.chat.magicshop.nl
www.client.magicshop.nl
www.clients.magicshop.nl
www.community.magicshop.nl
www.connect.magicshop.nl
www.deploy.magicshop.nl
www.direct.magicshop.nl
www.extranet.magicshop.nl
www.gallery.magicshop.nl
www.groups.magicshop.nl
www.intranet.magicshop.nl
www.magicshop.nl
www.members.magicshop.nl
www.mx.magicshop.nl
www.news.magicshop.nl
www.pay.magicshop.nl
www.photos.magicshop.nl
www.test.magicshop.nl
www.ts.magicshop.nl
www.vwww.magicshop.nl
www.w.magicshop.nl
www.ww.magicshop.nl
www.www.magicshop.nl
www.wwww.magicshop.nl
wwww.magicshop.nl
wx.magicshop.nl

Other certificates including the domain name magicshop.nl

(limited to 100 certificates)
magicshop.nl
access.magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
2.magicshop.nl
magicshop.nl
2.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
2.magicshop.nl
magicshop.nl
magicshop.nl
2.magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
2.magicshop.nl
magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
access.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
2.magicshop.nl
2.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
www.magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
access.magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
2.magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
access.magicshop.nl
magicshop.nl
magicshop.nl
blog.magicshop.nl
access.magicshop.nl
magicshop.nl
magicshop.nl
access.magicshop.nl
www.magicshop.nl
magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
access.magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
magicshop.nl
magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
blog.magicshop.nl
2.magicshop.nl
blog.magicshop.nl
access.magicshop.nl
access.magicshop.nl
access.magicshop.nl

Certificate

The complete raw certificate details for access.magicshop.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyflLqFkumu4pwzF2qbln
ZZunS3c3nyMXKbiE3b7Zf6QsXllfi3j9g+FKKldahsXphNjCH2b4ruSkc3f5zi0X
rA41wBTy583H/UoMVwODd5zCTAAsAzfmWKeLtgXPfV3xJzUztJNd4eiv1R5NdPpN
hCHJiOlPw73uSMFcxjM6+TDib4lCkNeydchaaK/e9+L8dIuFb1K2mNKWqRLpW8Fk
o4lT+fTfLzR04UnL2scrCTA3VdFV5q1U7jEv2iae0Z8IZXxY9UZq/SOSIwewnNHm
GeuHrQ8Nqc23Czea9nlNXWHgNQ32FN9lbRfF+U7BYHLDsu5uZ6grO08wxRDtk3qQ
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293962464652392558109747446985640873691101
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-05 21:41:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-03 21:41:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'access.magicshop.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25496831509486115766452927311629331541029215011363841812288931725835221222121843680091823157101036648810735869729125972033948153455825030871675723949441540194679267491190847872903715197773002007539366868994195864904549599189159830940759334893450412815521345403610563811842296701155317462866674776727737966534495147669660016896900180553855907646211121800053325406497475408528270994860599681495192148742243954418905185171848487252732161852696835880113937203920756309476930729411851103068832180248384362007245510928503108963351156180789592447299103696383835502202116893984433716186991723302085431268941270580575845650641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eaddfa0f3136cfc0b9a7b0e71304f6546ccef8ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1505 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'box.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deploy.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallery.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mboss.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbox.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vwww.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordpress.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.access.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apps.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.box.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cart.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chat.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.client.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clients.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deploy.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.direct.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extranet.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gallery.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.groups.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intranet.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.members.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mx.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.news.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pay.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photos.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ts.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vwww.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.w.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ww.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.www.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wwww.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwww.magicshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wx.magicshop.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001646c9b8fd60000040300483046022100bc40b6fd7830e5f9976bb037de42ba09d4c239b642af4457b2efc16906cbf86d022100d12308a022778c888b6b6f2b09ef0ff541b1064e47c0133b828295aec81691c9007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001646c9b8fea00000403004630440220493c1c5bb3a8c7fce009173119c67ab9d4e8908ed069a218684affa0509bb7ae0220491b81ba3761d4c96e784704a0dccd2b49221569752b727907254e6f27c05e03
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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