kiosk.vidaglobal.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f2:79:6d:9d:5b:d9:db:a0:c2:01:d4:c0:78:7e:48:47:60 was issued on by Let's Encrypt.

With 47 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kiosk.vidaglobal.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f2:79:6d:9d:5b:d9:db:a0:c2:01:d4:c0:78:7e:48:47:60
Serial Number (int): 343846596329610897537994700300268924847968
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 04:b2:00:62:3a:b2:de:7d:58:b9:2d:65:29:be:41:56:34:4f:2b:21
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ff:aa:dc:2b:92:d9:3d:5b:b7:13:d5:d7:0b:d3:a3:a9:bd:73:4b:fa
Fingerprint (sha256): 30:3c:54:63:0b:5d:7b:da:a4:03:b6:ae:be:d4:6d:a5:b3:a0:43:d8:71:92:f9:32:8f:0a:85:92:51:3f:1c:e5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kiosk.vidaglobal.de

47

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kiosk.vidaglobal.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bibliothek.explicare.doctor
brochure.ntpwarranty.com
brochures.keepmoat.com
catalogo.strap.com.br
chef-magazine.com
eatsmarter.kiosk.plus
ebooks.royalafricansafaris.com
emag.diamondworld.net
emag.indianjeweller.in
emags.avr-verlagsobjekte.de
epaper.logistik-news.at
flyer.aqua-dome.at
grazia.kiosk.plus
info.independenceaustralia.com.au
kataloge.teppich-stark.de
kiosk.am-weststrand.com
kiosk.der-kleine-georg.de
kiosk.kip-tape.com
kiosk.shopdecormagazines.com
kiosk.verbaende.com
kiosk.vidaglobal.de
kioskopro.seguridad-laboral.es
kioskopro.seguritecnia.es
magazin.lifechannel.ch
magazin.tellz.me
magazine.ausemergencyservices.com.au
magazine.cioa.com
magazine.elektropraktiker.de
magazine.inversionesciel.com
magazine.iuoe.org
magazine.mpdunne.com
magazine.roarkidsmagazine.com
magazine.suncoastergroup.com
mitteilungsblatt.seifert-medien.de
news.vdmno.de
publications.cwgc.org
publikationen.contipark.de
quals.truebeck.com
read.rapidrivermagazine.com
tagesspiegel.kiosk.plus
webkiosk.leveldesigngroup.com
webkiosks.corshamprint.co.uk
webkiosks.plaskettcollege.com
wirbeicontipark.contipark.de
www.brochures.venturamarketing.ie
www.magazines.thederbeian.com
yumpu.testact.de

Other certificates including the domain name vidaglobal.de

(limited to 100 certificates)
kiosque.flp.ch
test.phcsystem.com
www.magbooks.icsl.org.in
produktkatalog.mwf-technik.de
magazines.somma.co.za
magazin.nivea.de
kiosk.astrosofa.com
magazines.somma.co.za
kiosk.citytipp.org
travelshop.accessconsciousness.com
onlinecatalog.custom-chrome-europe.com
kiosque.flp.ch
kiosk.vidaglobal.de
www.vidaglobal.co.uk
vitadoor.mediaflip.de
epaper-en.glasmarte.at
magazine.legacylighthouse.org
kiosk.velototal.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
magazines.somma.co.za
magazine.legacylighthouse.org
kiosk.vidaglobal.de
www.vidaglobal.co.uk
test.phcsystem.com
start.andernach-wirtschaft.de
epapers.juenglingverlag.de
kiosk.vidaglobal.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
epaper-en.glasmarte.at
magazines.somma.co.za
kiosk.vidaglobal.de
test.phcsystem.com
test.phcsystem.com
epaper-en.glasmarte.at
magazine.legacylighthouse.org
test.phcsystem.com
epaper-en.glasmarte.at
magazine.legacylighthouse.org
magazines.somma.co.za
kiosk.flp.de
onlinecatalog.custom-chrome-europe.com
webkiosk.die-bank.de
kiosk.flp.ch
kiosk.vidaglobal.de
www.magbooks.icsl.org.in
katalog.lemo-schuh.ch
kiosk.vidaglobal.de
magazines.somethinggoodmagazines.com
www.vidaglobal.co.uk
kiosque.flp.ch
webkiosk.alpenpark.de
onlinecatalog.custom-chrome-europe.com
kiosk.vidaglobal.de
test.phcsystem.com
start.andernach-wirtschaft.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
start.andernach-wirtschaft.de
kataloge.basoeinkaufsverbund.de
epaper-en.glasmarte.at
epaper-en.glasmarte.at
magazines.somma.co.za
webkiosk.alpenpark.de
magazine.legacylighthouse.org
magazine.legacylighthouse.org
epapers.juenglingverlag.de
kiosque.flp.ch
kiosk.velototal.de
kiosk.astrosofa.com
www.magbooks.icsl.org.in
kiosk.flp.ch
kiosk.astrosofa.com
magazines.somma.co.za
start.andernach-wirtschaft.de
katalog.lemo-schuh.ch
katalog.lemo-schuh.ch
magazines.somma.co.za
katalog.lemo-schuh.ch
kiosk.velototal.de
www.magbooks.icsl.org.in
webkiosk.alpenpark.de
kiosk.flp.de
kiosk.velototal.de
moebel-brameyer.mediaflip.de
kiosk.velototal.de
kiosk.velototal.de
kiosk.flp.de
webkiosk.alpenpark.de
epaper-en.glasmarte.at
magazine.legacylighthouse.org
magazines.somma.co.za
magazin.plusperfekt.de
epaper-en.glasmarte.at
webkiosk.alpenpark.de
magazines.somethinggoodmagazines.com
katalog.lemo-schuh.ch
katalog.erima.de

Certificate

The complete raw certificate details for kiosk.vidaglobal.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCYfqi9gh9aAZydii4l7
tBQkmc9g5RS8GZMLRdrWXi1l1R7e+IumKnpaStGc9EUv3fD8dFJFMTJylQJoogc7
2gz5CtjoKmIla8MR8fdK6dZDz52xDi6dIofUSkzYVFmzhSD8GC4CSPeQnvwCmG1N
N9oFB0GMDVHQ1NTK6BSm/KTT1D1kFRn1oyfR1c6vdiELmesZDxuB22dFaImZ5e56
u+ZIJdp9zcRkrBFMA2EYgOwoiFxg5y240u7nWLHhms88HZSfgTVs1nmHqCT1PO59
8lKnK6QqDWB7kXm/A+imlLBlSXEr9Rtrnwe7fEIo27ZYhoHL8WtQHeER7x1aDDIA
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343846596329610897537994700300268924847968
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-31 11:05:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 11:05:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kiosk.vidaglobal.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25266460485697502406463998278138547255076590140924890628473891595807342287866534221534017751807226475885422093355111455210390478477994262918223093071477424479975501883968278179108889248218109144205928088802729487558608457084573616937379049070490120121057139471020281021360341716030276024805169106170557036297771754811964923863874098847263378085498433355016579804771025466432933742496306105169545951648464104716970058646566624837374583604849587041618017220473592076951751922414715675498133556095484608415447618724539576489489916302893591220463510559256279377443089617432576491640255150066706172036917985225295340372019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04b200623ab2de7d58b92d6529be4156344f2b21
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1228 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliothek.explicare.doctor'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochure.ntpwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.keepmoat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogo.strap.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chef-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatsmarter.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebooks.royalafricansafaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emag.diamondworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emag.indianjeweller.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emags.avr-verlagsobjekte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.logistik-news.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.aqua-dome.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grazia.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.independenceaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.teppich-stark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.am-weststrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.der-kleine-georg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.kip-tape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.shopdecormagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.verbaende.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.vidaglobal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kioskopro.seguridad-laboral.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kioskopro.seguritecnia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.lifechannel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.tellz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.ausemergencyservices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.cioa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.elektropraktiker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.inversionesciel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.iuoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.mpdunne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.roarkidsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.suncoastergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitteilungsblatt.seifert-medien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.vdmno.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publications.cwgc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publikationen.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quals.truebeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.rapidrivermagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagesspiegel.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.leveldesigngroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.corshamprint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.plaskettcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wirbeicontipark.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brochures.venturamarketing.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazines.thederbeian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yumpu.testact.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e21b503a500000403004730450221009e110b7210e5f05371052f0da479143a14963d4dc226ff43110e2b6d6039f1a2022018ec0ec46b0173cc94098400bc6ce86f0e1d3651f7f53cfffa72aece16d989c20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e21b503d80000040300483046022100c19f6dadd5af191b3fcd47fa1fcbc562fbb2ffecd0f2a268d4cd27694f0aa989022100cdbc652e18cfa62623a804642aaa06a809105acf5dfb64da7a958ad1e97cc667
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00107fff293f26f0a1749d43779b53e813d53a5132781f8150cc816e44ba5c5f8c813022ae609098318f6074f6781418ed89491fd28df2c6623a3fdde1e6a45b3848a934674648cb86bb10ef47392dfde732c93291662faadb11cd90a0085f00efa57587e982fa2af7a8c761abba37422bb77725be9a9c6d890b28f3f744d9be31fe308a6509e927b852b5d73b08b1faefb2c42a45396d928fcd1213806934a0b9171709a00c45d6bf6a2104d1be646c0b35d2359889d964c029fd4f4121a4b5b7c34e176481867dd3b5d0a472097cd7c8321970c3b52b3a4b4fc7de0b23545c5f6efd816837455490bc6be96c320f06fa7d3ee28280727e8382449b84fc370e1e