t.mailkit.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 51:da:6e:44:36:b0:a6:f6:cf:9d:a0:9c:55:3f:c9:db was issued on by Sectigo Limited.

With 59 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=t.mailkit.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 51:da:6e:44:36:b0:a6:f6:cf:9d:a0:9c:55:3f:c9:db
Serial Number (int): 108801624843235980722249907711149853147
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 0c:29:32:11:f8:e3:88:56:8e:ad:a6:71:13:5f:4d:37:2c:4f:3b:1e
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): a4:10:c1:c6:75:ae:13:5c:4f:78:73:ce:88:fd:5f:ad:9b:24:54:ee
Fingerprint (sha256): 33:45:1b:0e:a8:1e:26:0c:85:e2:b1:4e:44:64:00:71:13:9f:b7:98:6e:f9:13:d3:dd:1a:1a:b2:fc:e6:d0:c0

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate t.mailkit.com

59

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for t.mailkit.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

t.mailkit.com
t.club.rossmann.cz
t.dedoma.ro
t.dedoma.sk
t.dine4fit.hu
t.dine4fit.pl
t.dobryemail.cz
t.e-kondomy.cz
t.emaildemos.com
t.homecredit.cz
t.homecredit.sk
t.kaloricketabulky.cz
t.kaloricketabulky.sk
t.kartavyhod.drmax.cz
t.ketodiet.cz
t.ketodiet.sk
t.kusmitea.cz
t.love.activate.cz
t.mesacnyvypis.sk
t.mesicnivypis.cz
t.mimilatky.cz
t.mnd.cz
t.naturamed.cz
t.naturamed.sk
t.news.astratex-shop.ch
t.news.astratex.at
t.news.astratex.bg
t.news.astratex.cz
t.news.astratex.de
t.news.astratex.gr
t.news.astratex.hr
t.news.astratex.hu
t.news.astratex.pl
t.news.astratex.ro
t.news.astratex.si
t.news.astratex.sk
t.news.astratex.ua
t.news.etneteragroup.cz
t.newsletter.drmax.cz
t.newsletter.rossmann.cz
t.nl.toner.shop
t.nl.tonerpartner.cz
t.nl.tonerpartner.hr
t.nl.tonerpartner.pl
t.nl.tonerpartner.ro
t.nl.tonerpartner.sk
t.nl.tonerpartners.hu
t.notamiq.com
t.omnivery.com
t.pottenpannen.cz
t.pottenpannen.sk
t.pozvanky.nm.cz
t.prazirna.doubleshot.cz
t.superlove.sk
t.tablicakalorijnosti.ru
t.tablycjakalorijnosti.com.ua
t.travelking.cz
t.travelking.hu
t.travelking.sk

Other certificates including the domain name mailkit.com

(limited to 100 certificates)
t.mailkit.com
*.mailkit.com
t.mailkit.com
*.mailkit.com
t.mailkit.com
u.mailkit.com
mailkit.com
u.mailkit.com
u.mailkit.com
mailkit.com
t.mailkit.com
u.mailkit.com

Certificate

The complete raw certificate details for t.mailkit.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKhjCCCW6gAwIBAgIQUdpuRDawpvbPnaCcVT/J2zANBgkqhkiG9w0BAQsFADCB
jzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD
Ey5TZWN0aWdvIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENB
MB4XDTIxMTIwMjAwMDAwMFoXDTIyMDkyMzIzNTk1OVowGDEWMBQGA1UEAxMNdC5t
YWlsa2l0LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOPIhepe
+TilNX0E9WjvNadr11HcLk3R4FEy7A11K8PgJvzoyNEEiLxs+64b2XoQaFksDNSJ
HepUkECYmGQ9yR+ORdKLnZZZC/Mf74tBzmhHEp0IfPLMtQpj67/3Nhq0BYbQKxo1
3GqExS+i8G9pjAfcUZGKxvFZrXoeirCe4ZWOc4IDdc753cqUuFHb5QkfSFsUnQu7
9micLlU+fpTXpWPwiQe4GmJ0mauywXWTqcjO1j1lRYYzY6MAMl8MO2vfERQJU2UK
5AqIDKehHWwu1FVGVbtI/sZQ4Jw3PmqZ+r+ce7A3zwV+BxzuEppmQHSyRRyPgT1r
xXhYyVTiut0TYtMCAwEAAaOCB1IwggdOMB8GA1UdIwQYMBaAFI2MXsRUrYrhd+mb
+ZsF4bgBjWHhMB0GA1UdDgQWBBQMKTIR+OOIVo6tpnETX003LE87HjAOBgNVHQ8B
Af8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICBzAlMCMGCCsGAQUFBwIBFhdo
dHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgEwgYQGCCsGAQUFBwEBBHgw
djBPBggrBgEFBQcwAoZDaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNB
RG9tYWluVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNydDAjBggrBgEFBQcwAYYX
aHR0cDovL29jc3Auc2VjdGlnby5jb20wggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoB
aAB3AEalVet1+pEgMLWiiWn0830RLEF0vv1JuIWr8vxw/m1HAAABfXpAQcYAAAQD
AEgwRgIhAJAugW9D9uvhQbJDue4MD4wxK/jSXN5s0/hToJq8Md01AiEA2tFZxdtG
0uPSAZCVqyZWsAMaKFFSMcEs4VTp2+/omrMAdgBByMqx3yJGShDGoToJQodeTjGL
GwPr60vHaPCQYpYG9gAAAX16QEGHAAAEAwBHMEUCIBTLscSSpZS5yp9Hkurls0d6
EFjDqv3wwMgLDEaYxmzhAiEAiMjcdW2PX9NW5I4evwMz6xt1pMQcnkQTKGG1iXrr
mloAdQApeb7wnjk5IfBWc59jpXflvld9nGAK+PlNXSZcJV3HhAAAAX16QEGHAAAE
AwBGMEQCIEeJkXIHlgZle2yU/ZdkZcPCldeQLgTkNtgzfO0/Fli/AiBk5kiUAmwD
cIbdW0maxft/0rVHtJQkAwg23ARALaiJ7DCCBHkGA1UdEQSCBHAwggRsgg10Lm1h
aWxraXQuY29tghJ0LmNsdWIucm9zc21hbm4uY3qCC3QuZGVkb21hLnJvggt0LmRl
ZG9tYS5za4INdC5kaW5lNGZpdC5odYINdC5kaW5lNGZpdC5wbIIPdC5kb2JyeWVt
YWlsLmN6gg50LmUta29uZG9teS5jeoIQdC5lbWFpbGRlbW9zLmNvbYIPdC5ob21l
Y3JlZGl0LmN6gg90LmhvbWVjcmVkaXQuc2uCFXQua2Fsb3JpY2tldGFidWxreS5j
eoIVdC5rYWxvcmlja2V0YWJ1bGt5LnNrghV0LmthcnRhdnlob2QuZHJtYXguY3qC
DXQua2V0b2RpZXQuY3qCDXQua2V0b2RpZXQuc2uCDXQua3VzbWl0ZWEuY3qCEnQu
bG92ZS5hY3RpdmF0ZS5jeoIRdC5tZXNhY255dnlwaXMuc2uCEXQubWVzaWNuaXZ5
cGlzLmN6gg50Lm1pbWlsYXRreS5jeoIIdC5tbmQuY3qCDnQubmF0dXJhbWVkLmN6
gg50Lm5hdHVyYW1lZC5za4IXdC5uZXdzLmFzdHJhdGV4LXNob3AuY2iCEnQubmV3
cy5hc3RyYXRleC5hdIISdC5uZXdzLmFzdHJhdGV4LmJnghJ0Lm5ld3MuYXN0cmF0
ZXguY3qCEnQubmV3cy5hc3RyYXRleC5kZYISdC5uZXdzLmFzdHJhdGV4LmdyghJ0
Lm5ld3MuYXN0cmF0ZXguaHKCEnQubmV3cy5hc3RyYXRleC5odYISdC5uZXdzLmFz
dHJhdGV4LnBsghJ0Lm5ld3MuYXN0cmF0ZXgucm+CEnQubmV3cy5hc3RyYXRleC5z
aYISdC5uZXdzLmFzdHJhdGV4LnNrghJ0Lm5ld3MuYXN0cmF0ZXgudWGCF3QubmV3
cy5ldG5ldGVyYWdyb3VwLmN6ghV0Lm5ld3NsZXR0ZXIuZHJtYXguY3qCGHQubmV3
c2xldHRlci5yb3NzbWFubi5jeoIPdC5ubC50b25lci5zaG9wghR0Lm5sLnRvbmVy
cGFydG5lci5jeoIUdC5ubC50b25lcnBhcnRuZXIuaHKCFHQubmwudG9uZXJwYXJ0
bmVyLnBsghR0Lm5sLnRvbmVycGFydG5lci5yb4IUdC5ubC50b25lcnBhcnRuZXIu
c2uCFXQubmwudG9uZXJwYXJ0bmVycy5odYINdC5ub3RhbWlxLmNvbYIOdC5vbW5p
dmVyeS5jb22CEXQucG90dGVucGFubmVuLmN6ghF0LnBvdHRlbnBhbm5lbi5za4IQ
dC5wb3p2YW5reS5ubS5jeoIYdC5wcmF6aXJuYS5kb3VibGVzaG90LmN6gg50LnN1
cGVybG92ZS5za4IYdC50YWJsaWNha2Fsb3Jpam5vc3RpLnJ1gh10LnRhYmx5Y2ph
a2Fsb3Jpam5vc3RpLmNvbS51YYIPdC50cmF2ZWxraW5nLmN6gg90LnRyYXZlbGtp
bmcuaHWCD3QudHJhdmVsa2luZy5zazANBgkqhkiG9w0BAQsFAAOCAQEAXDUkjEAi
fK1Dmv4RgoFnzWX1xT7K9GfOu1+296TJQwNKe9FJt3qc3kv7YXkXCS2vHlKQVRMo
TPcVM21jlqF8jCsHgA+g3vBk89DEeY+XxXl1rFsIVLuK0k+sSooXZzLxljge4j9C
YKz+ifie4Ru3d44+Cbwy+JTNovsUUBVLEesURScbDMRvTluayRzWB4bgtlDv1FtE
DUyGJtUWIEEibPlePtv9mLHMh60fEWw2tmC1eDASrjau3UTHxRf7MaajV9/iG3Bq
qbNJQFY4khKg0hxE1mKcPq9deLb/MZG/3aUkUYaB0/yxkgFSw5Hz/63hW+iALU0t
Djq+owwxOZfleA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48iF6l75OKU1fQT1aO81
p2vXUdwuTdHgUTLsDXUrw+Am/OjI0QSIvGz7rhvZehBoWSwM1Ikd6lSQQJiYZD3J
H45F0oudllkL8x/vi0HOaEcSnQh88sy1CmPrv/c2GrQFhtArGjXcaoTFL6Lwb2mM
B9xRkYrG8Vmteh6KsJ7hlY5zggN1zvndypS4UdvlCR9IWxSdC7v2aJwuVT5+lNel
Y/CJB7gaYnSZq7LBdZOpyM7WPWVFhjNjowAyXww7a98RFAlTZQrkCogMp6EdbC7U
VUZVu0j+xlDgnDc+apn6v5x7sDfPBX4HHO4SmmZAdLJFHI+BPWvFeFjJVOK63RNi
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 108801624843235980722249907711149853147
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 't.mailkit.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28754976856956340318757409575594394058824502629309663717914477130344457319303109859263489874603763962731170636480434320642139622456463353678591797657955744951023363965028185613308511828660666499409441518554686936164478829287449168726486813010046994978661706782533377130525709215552748378711346645211936992166401856577240069933170561557844982494705723192189433393010142145952313984460023861204351485583896979152388337964793826645593645178634750491170382654699443963511026790886018098652300032760071258877059719054273462565365278152642656925156310625804783303443256398419882129898385577595508829950867757234307976094419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c293211f8e388568eada671135f4d372c4f3b1e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							016800770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017d7a4041c60000040300483046022100902e816f43f6ebe141b243b9ee0c0f8c312bf8d25cde6cd3f853a09abc31dd35022100dad159c5db46d2e3d2019095ab2656b0031a28515231c12ce154e9dbefe89ab300760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017d7a4041870000040300473045022014cbb1c492a594b9ca9f4792eae5b3477a1058c3aafdf0c0c80b0c4698c66ce102210088c8dc756d8f5fd356e48e1ebf0333eb1b75a4c41c9e44132861b5897aeb9a5a0075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017d7a4041870000040300463044022047899172079606657b6c94fd976465c3c295d7902e04e436d8337ced3f1658bf022064e64894026c037086dd5b499ac5fb7fd2b547b49424030836dc04402da889ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1136 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.mailkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.club.rossmann.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.dedoma.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.dedoma.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.dine4fit.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.dine4fit.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.dobryemail.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.e-kondomy.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.emaildemos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.homecredit.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.homecredit.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.kaloricketabulky.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.kaloricketabulky.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.kartavyhod.drmax.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.ketodiet.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.ketodiet.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.kusmitea.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.love.activate.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.mesacnyvypis.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.mesicnivypis.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.mimilatky.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.mnd.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.naturamed.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.naturamed.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.news.astratex-shop.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.news.astratex.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.news.astratex.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.news.astratex.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.news.astratex.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.news.astratex.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.news.astratex.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.news.astratex.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.news.astratex.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.news.astratex.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.news.astratex.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.news.astratex.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.news.astratex.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.news.etneteragroup.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.newsletter.drmax.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.newsletter.rossmann.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.toner.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartner.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartner.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartner.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartner.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartner.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartners.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notamiq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.omnivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pottenpannen.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pottenpannen.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pozvanky.nm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.prazirna.doubleshot.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.superlove.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.tablicakalorijnosti.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.tablycjakalorijnosti.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.travelking.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.travelking.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.travelking.sk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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