magazine.roarkidsmagazine.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3b:8c:ce:54:5a:9e:72:dc:8c:ee:fb:97:04:bf:bb:c9:d7 was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=magazine.roarkidsmagazine.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3b:8c:ce:54:5a:9e:72:dc:8c:ee:fb:97:04:bf:bb:c9:d7
Serial Number (int): 281600680687080834504548516125615991802327
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: db:ec:00:33:3d:a5:19:44:e1:31:73:9f:74:b3:a7:d5:36:72:89:1e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8a:9d:b7:c8:69:f2:7d:21:8a:59:29:72:d1:08:4b:14:42:74:f0:0b
Fingerprint (sha256): 2a:3f:5b:f9:e3:6c:7f:bd:96:49:fe:11:06:33:6a:cb:b8:85:e3:b0:f0:11:fb:4a:65:12:d7:05:ec:aa:6c:e4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate magazine.roarkidsmagazine.com

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magazine.roarkidsmagazine.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bibliothek.explicare.doctor
brochures.waterrower.co.uk
catalogo.strap.com.br
chapters.transamericanheroes.com
chef-magazine.com
documents.zettlerelectronics.com
dokumente.zettlerelectronics.com
dvgforum-022019.dvg.de
eatsmarter.kiosk.plus
ebooks.royalafricansafaris.com
emags.avr-verlagsobjekte.de
epaper.bioplasticsmagazine.com
epaper.keim.com
expose.hoepfnerimmobilien.de
flyer.aqua-dome.at
grazia.kiosk.plus
info.independenceaustralia.com.au
katalog.diewe.de
kataloge.westfalen-urlaubsreisen.de
kiosk.antalis-verpackungen.de
kiosk.ath-heinl.de
kiosk.graviantbooks.com
kiosk.kip-tape.com
kiosk.prometheaneditions.com
kiosk.shopdecormagazines.com
kundenmagazin.derpart.com
lpdigitalbooks.learnersplatform.com
magazin.films-home.de
magazin.volkswagen.ba
magazin.wirtungutes.de
magazine.ausemergencyservices.com.au
magazine.elektropraktiker.de
magazine.iuoe.org
magazine.roarkidsmagazine.com
magazine.well-hotel.at
media.hirschmann-automotive.com
mitteilungsblatt.seifert-medien.de
miwi.halle.ihk.de
news.vdmno.de
prospekt.sonderpreis-baumarkt.de
prospekte.hkl-baumaschinen.at
prospekte.ostbayern-tourismus.de
publications.cwgc.org
read.jaimemagazine.com
read.rapidrivermagazine.com
specials.klickparts.com
tagesspiegel.kiosk.plus
test.schauspiegel.com
webkiosk.angelina-schulze.com
webkiosk.annaghmoreagencies.com
webkiosk.artandpictures.nl
webkiosk.keim.com
webkiosk.mwk-koeln.de
webkiosk.wandelkrant.be
webkiosk.ww-events-online.de
webkiosks.corshamprint.co.uk
webweb.webberz.ch
worldwide.i-am-magazine.com
www.brochures.venturamarketing.ie
www.dreamchasezurs.com
www.magazine.e-motec.net
www.magazines.thederbeian.com
www.transport-press.bg
www.uykusuzdigital.info
www.vkguiasdigitais.com.br
yumpu.testact.de

Other certificates including the domain name roarkidsmagazine.com

(limited to 100 certificates)
www.magbooks.icsl.org.in
magazines.somma.co.za
magazines.somma.co.za
magazine.suncoastergroup.com
onlinecatalog.custom-chrome-europe.com
kiosk.vidaglobal.de
www.roarkidsmagazine.com
vitadoor.mediaflip.de
magazine.legacylighthouse.org
kiosk.der-kleine-georg.de
magazines.somma.co.za
magazine.legacylighthouse.org
kiosk.vidaglobal.de
kiosk.der-kleine-georg.de
quals.truebeck.com
kiosk.vidaglobal.de
webkiosk.alpenpark.de
magazin.tellz.me
epaper-en.glasmarte.at
kiosk.vidaglobal.de
quals.truebeck.com
emag.indianjeweller.in
publikationen.contipark.de
roarkidsmagazine.com
magazine.legacylighthouse.org
magazine.legacylighthouse.org
onlinecatalog.custom-chrome-europe.com
magazine.roarkidsmagazine.com
kiosk.vidaglobal.de
www.magbooks.icsl.org.in
kiosk.vidaglobal.de
magazines.somethinggoodmagazines.com
webkiosk.alpenpark.de
onlinecatalog.custom-chrome-europe.com
kiosk.vidaglobal.de
webkiosk.alpenpark.de
epaper-en.glasmarte.at
epaper-en.glasmarte.at
magazine.inversionesciel.com
magazines.somma.co.za
magazine.legacylighthouse.org
magazine.legacylighthouse.org
roarkidsmagazine.com
www.magbooks.icsl.org.in
kiosk.der-kleine-georg.de
kiosk.der-kleine-georg.de
wirbeicontipark.contipark.de
www.magbooks.icsl.org.in
webkiosk.alpenpark.de
magazine.cioa.com
webkiosk.alpenpark.de
magazine.legacylighthouse.org
magazines.somma.co.za
epaper-en.glasmarte.at
magazines.somethinggoodmagazines.com
www.magbooks.icsl.org.in
webkiosk.alpenpark.de
roarkidsmagazine.com
brochure.ntpwarranty.com
magazine.legacylighthouse.org
quals.truebeck.com
magazine.legacylighthouse.org
magazine.legacylighthouse.org
magazine.legacylighthouse.org
roarkidsmagazine.com
vitadoor.mediaflip.de
epaper.grillzeit.at
onlinecatalog.custom-chrome-europe.com
magazines.somethinggoodmagazines.com
epaper.grillzeit.at
brochures.keepmoat.com
kiosk.vidaglobal.de
epaper-en.glasmarte.at
www.magbooks.icsl.org.in
onlinecatalog.custom-chrome-europe.com
magazine.cioa.com
magazine.legacylighthouse.org
berliner-kurier1.kiosk.plus
magazine.legacylighthouse.org
webkiosk.alpenpark.de
start.andernach-wirtschaft.de
epaper-en.glasmarte.at
kiosk.vidaglobal.de
vitadoor.mediaflip.de
webkiosk.alpenpark.de
ebook.frcemexambookstore.co.uk
onlinecatalog.custom-chrome-europe.com
webkiosk.alpenpark.de
kiosk.der-kleine-georg.de
magazines.somma.co.za
webkiosk.alpenpark.de
emag.indianjeweller.in
kiosk.der-kleine-georg.de
epaper-en.glasmarte.at
emag.indianjeweller.in
webkiosk.alpenpark.de
kataloge.basoeinkaufsverbund.de
onlinecatalog.custom-chrome-europe.com
magazine.legacylighthouse.org
roarkidsmagazine.com

Certificate

The complete raw certificate details for magazine.roarkidsmagazine.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMSzCCCzOgAwIBAgISAzuMzlRannLcjO77lwS/u8nXMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMzExMTA3MzBaFw0y
MDA2MjkxMTA3MzBaMCgxJjAkBgNVBAMTHW1hZ2F6aW5lLnJvYXJraWRzbWFnYXpp
bmUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9TtKnrL7bCb
kviW0d20KUkV39sis1QrXFJyE4OQ+EU7PLl8ZslhtHzv8fOnUryc9sOBdspRmgHP
dfizyoZhVwgCdoq+kpVPFLelqlhuALf1SuXh9yyMcmvkkRlh1JjqB5Lfsjy6zrw+
q4Ka3/Q8pMLOAfgk09WvJEf3qKLKHty3fEsmdEFgGUZ61l4dJnSlQKpztwAuYNMb
TxbOWDSX5PP97xh3velbCtd1J3r2tMvInG2LdTU81DJ3CJFt4fS+Ie+ssaF0xibu
OBDfHYM3zxaFk6c+qRkHkq6dE525UfoJp33CfYndjsohShgaybzlsg9nMaWPwRlR
Csjv74a6vQIDAQABo4IJSzCCCUcwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTb7AAz
PaUZROExc590s6fVNnKJHjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMIIG/wYDVR0RBIIG9jCCBvKCG2JpYmxpb3RoZWsu
ZXhwbGljYXJlLmRvY3RvcoIaYnJvY2h1cmVzLndhdGVycm93ZXIuY28udWuCFWNh
dGFsb2dvLnN0cmFwLmNvbS5icoIgY2hhcHRlcnMudHJhbnNhbWVyaWNhbmhlcm9l
cy5jb22CEWNoZWYtbWFnYXppbmUuY29tgiBkb2N1bWVudHMuemV0dGxlcmVsZWN0
cm9uaWNzLmNvbYIgZG9rdW1lbnRlLnpldHRsZXJlbGVjdHJvbmljcy5jb22CFmR2
Z2ZvcnVtLTAyMjAxOS5kdmcuZGWCFWVhdHNtYXJ0ZXIua2lvc2sucGx1c4IeZWJv
b2tzLnJveWFsYWZyaWNhbnNhZmFyaXMuY29tghtlbWFncy5hdnItdmVybGFnc29i
amVrdGUuZGWCHmVwYXBlci5iaW9wbGFzdGljc21hZ2F6aW5lLmNvbYIPZXBhcGVy
LmtlaW0uY29tghxleHBvc2UuaG9lcGZuZXJpbW1vYmlsaWVuLmRlghJmbHllci5h
cXVhLWRvbWUuYXSCEWdyYXppYS5raW9zay5wbHVzgiFpbmZvLmluZGVwZW5kZW5j
ZWF1c3RyYWxpYS5jb20uYXWCEGthdGFsb2cuZGlld2UuZGWCI2thdGFsb2dlLndl
c3RmYWxlbi11cmxhdWJzcmVpc2VuLmRlgh1raW9zay5hbnRhbGlzLXZlcnBhY2t1
bmdlbi5kZYISa2lvc2suYXRoLWhlaW5sLmRlghdraW9zay5ncmF2aWFudGJvb2tz
LmNvbYISa2lvc2sua2lwLXRhcGUuY29tghxraW9zay5wcm9tZXRoZWFuZWRpdGlv
bnMuY29tghxraW9zay5zaG9wZGVjb3JtYWdhemluZXMuY29tghlrdW5kZW5tYWdh
emluLmRlcnBhcnQuY29tgiNscGRpZ2l0YWxib29rcy5sZWFybmVyc3BsYXRmb3Jt
LmNvbYIVbWFnYXppbi5maWxtcy1ob21lLmRlghVtYWdhemluLnZvbGtzd2FnZW4u
YmGCFm1hZ2F6aW4ud2lydHVuZ3V0ZXMuZGWCJG1hZ2F6aW5lLmF1c2VtZXJnZW5j
eXNlcnZpY2VzLmNvbS5hdYIcbWFnYXppbmUuZWxla3Ryb3ByYWt0aWtlci5kZYIR
bWFnYXppbmUuaXVvZS5vcmeCHW1hZ2F6aW5lLnJvYXJraWRzbWFnYXppbmUuY29t
ghZtYWdhemluZS53ZWxsLWhvdGVsLmF0gh9tZWRpYS5oaXJzY2htYW5uLWF1dG9t
b3RpdmUuY29tgiJtaXR0ZWlsdW5nc2JsYXR0LnNlaWZlcnQtbWVkaWVuLmRlghFt
aXdpLmhhbGxlLmloay5kZYINbmV3cy52ZG1uby5kZYIgcHJvc3Bla3Quc29uZGVy
cHJlaXMtYmF1bWFya3QuZGWCHXByb3NwZWt0ZS5oa2wtYmF1bWFzY2hpbmVuLmF0
giBwcm9zcGVrdGUub3N0YmF5ZXJuLXRvdXJpc211cy5kZYIVcHVibGljYXRpb25z
LmN3Z2Mub3JnghZyZWFkLmphaW1lbWFnYXppbmUuY29tghtyZWFkLnJhcGlkcml2
ZXJtYWdhemluZS5jb22CF3NwZWNpYWxzLmtsaWNrcGFydHMuY29tghd0YWdlc3Nw
aWVnZWwua2lvc2sucGx1c4IVdGVzdC5zY2hhdXNwaWVnZWwuY29tgh13ZWJraW9z
ay5hbmdlbGluYS1zY2h1bHplLmNvbYIfd2Via2lvc2suYW5uYWdobW9yZWFnZW5j
aWVzLmNvbYIad2Via2lvc2suYXJ0YW5kcGljdHVyZXMubmyCEXdlYmtpb3NrLmtl
aW0uY29tghV3ZWJraW9zay5td2sta29lbG4uZGWCF3dlYmtpb3NrLndhbmRlbGty
YW50LmJlghx3ZWJraW9zay53dy1ldmVudHMtb25saW5lLmRlghx3ZWJraW9za3Mu
Y29yc2hhbXByaW50LmNvLnVrghF3ZWJ3ZWIud2ViYmVyei5jaIIbd29ybGR3aWRl
LmktYW0tbWFnYXppbmUuY29tgiF3d3cuYnJvY2h1cmVzLnZlbnR1cmFtYXJrZXRp
bmcuaWWCFnd3dy5kcmVhbWNoYXNlenVycy5jb22CGHd3dy5tYWdhemluZS5lLW1v
dGVjLm5ldIIdd3d3Lm1hZ2F6aW5lcy50aGVkZXJiZWlhbi5jb22CFnd3dy50cmFu
c3BvcnQtcHJlc3MuYmeCF3d3dy51eWt1c3V6ZGlnaXRhbC5pbmZvghp3d3cudmtn
dWlhc2RpZ2l0YWlzLmNvbS5icoIQeXVtcHUudGVzdGFjdC5kZTBMBgNVHSAERTBD
MAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8v
Y3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AG9T
dqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABcTB9TKcAAAQDAEcwRQIg
AyMruinDlMmyv7mS4t4M0haIKGh6VS6Xws8T9WtXdyUCIQCJuD11TUVSNB9gmPww
ewvRIZdG9YHbfvUgEO4ccqIYRgB2AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxh
Ohpp06IcAAABcTB9TLgAAAQDAEcwRQIhAO0koq8ydIiJ2LozsyDX8dcxZ48nC1ag
kQPDrLMTmB+eAiBmCT6e1hKuGoSeDG1ZUFr9phKfllTo0Gj8ZooCTe4dqDANBgkq
hkiG9w0BAQsFAAOCAQEAH7Df+S0uPBMqmqlC3DypCi90EgXE3s21jn6A3MIfz9/m
yoCNrxJCaaQ2lM/YH0+Z66poSgvtuPXeNtUhjJ7ffQlnjRkRUJ4vdm6vyl3neJuR
MsJ4L0oYtR8ZaevoX9/DkFRIjX54D2WljAJtqt+x/pKapqsxZk9drh6MRtlvCLDt
NEy33num127LHR7EAqEz2PpSqVvs0f/4kAPd6/oFwOOxB+ZYXY4Jbq+KspDt63Da
wm1LxL1nMAPclM2dDB4WUwfb7A/MjS79C+ka+GdvW7a1hspNiksB6S2vjgepTCxQ
rzbhPlr0wNtZsMm3IIzGwPMR9l5hwLvfs6RP+DtX/Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9TtKnrL7bCbkviW0d20
KUkV39sis1QrXFJyE4OQ+EU7PLl8ZslhtHzv8fOnUryc9sOBdspRmgHPdfizyoZh
VwgCdoq+kpVPFLelqlhuALf1SuXh9yyMcmvkkRlh1JjqB5Lfsjy6zrw+q4Ka3/Q8
pMLOAfgk09WvJEf3qKLKHty3fEsmdEFgGUZ61l4dJnSlQKpztwAuYNMbTxbOWDSX
5PP97xh3velbCtd1J3r2tMvInG2LdTU81DJ3CJFt4fS+Ie+ssaF0xibuOBDfHYM3
zxaFk6c+qRkHkq6dE525UfoJp33CfYndjsohShgaybzlsg9nMaWPwRlRCsjv74a6
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281600680687080834504548516125615991802327
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-31 11:07:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-29 11:07:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magazine.roarkidsmagazine.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23711560964335685792048358596587558245087987117297784684644177819997667235900838984743514465864045375400003974185596441679280238239197880685213010600930835653387397113755928772040157599424796621903585701855099636205399568958479873204083601539496695734370884830809463996262192278811907243397464248188956393727338367741365270106481119344533481579269692215667561664431999983733011691830493629712478724927037954799782952100422395149616841455222843077034498815833276786816441365441646227052312958223636539405053446252556356804406871502887665610943493060833036021778866084311233068630484661712710846035169839352331100404413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dbec00333da51944e131739f74b3a7d53672891e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1782 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliothek.explicare.doctor'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.waterrower.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogo.strap.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chapters.transamericanheroes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chef-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documents.zettlerelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dokumente.zettlerelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvgforum-022019.dvg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatsmarter.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebooks.royalafricansafaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emags.avr-verlagsobjekte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.bioplasticsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.keim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expose.hoepfnerimmobilien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.aqua-dome.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grazia.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.independenceaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalog.diewe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.westfalen-urlaubsreisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.antalis-verpackungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.ath-heinl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.graviantbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.kip-tape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.prometheaneditions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.shopdecormagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundenmagazin.derpart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpdigitalbooks.learnersplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.films-home.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.volkswagen.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.wirtungutes.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.ausemergencyservices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.elektropraktiker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.iuoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.roarkidsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.well-hotel.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.hirschmann-automotive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitteilungsblatt.seifert-medien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miwi.halle.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.vdmno.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospekt.sonderpreis-baumarkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospekte.hkl-baumaschinen.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospekte.ostbayern-tourismus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publications.cwgc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.jaimemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.rapidrivermagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'specials.klickparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagesspiegel.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.schauspiegel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.angelina-schulze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.annaghmoreagencies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.artandpictures.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.keim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.mwk-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.wandelkrant.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.ww-events-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.corshamprint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webweb.webberz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldwide.i-am-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brochures.venturamarketing.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamchasezurs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazine.e-motec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazines.thederbeian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transport-press.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uykusuzdigital.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vkguiasdigitais.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yumpu.testact.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000171307d4ca70000040300473045022003232bba29c394c9b2bfb992e2de0cd2168828687a552e97c2cf13f56b57772502210089b83d754d4552341f6098fc307b0bd1219746f581db7ef52010ee1c72a2184600760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000171307d4cb80000040300473045022100ed24a2af32748889d8ba33b320d7f1d731678f270b56a09103c3acb313981f9e022066093e9ed612ae1a849e0c6d59505afda6129f9654e8d068fc668a024dee1da8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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