magazine.legacylighthouse.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bf:de:00:bd:e0:6a:73:94:99:94:97:38:4b:61:88:d5:a2 was issued on by Let's Encrypt.

With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=magazine.legacylighthouse.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bf:de:00:bd:e0:6a:73:94:99:94:97:38:4b:61:88:d5:a2
Serial Number (int): 326625882343399706417775432097592766944674
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f8:1e:2f:c6:4d:b5:d4:72:de:3b:52:5b:95:6a:d4:93:40:33:f6:3f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): af:2a:4e:a3:55:72:5e:1f:2b:e7:28:40:ca:eb:47:25:83:94:59:ef
Fingerprint (sha256): 38:42:88:99:65:ff:3a:cc:d6:59:ae:40:5a:5c:4d:fe:77:47:87:e8:55:b4:a0:8a:41:2e:32:c9:3b:25:08:e7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate magazine.legacylighthouse.org

54

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magazine.legacylighthouse.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bibliothek.explicare.doctor
brochure.ntpwarranty.com
brochures.keepmoat.com
brochures.waterrower.co.uk
catalogo.strap.com.br
chapters.transamericanheroes.com
chef-magazine.com
documents.zettlerelectronics.com
dokumente.zettlerelectronics.com
eatsmarter.kiosk.plus
ebooks.royalafricansafaris.com
emag.diamondworld.net
emag.indianjeweller.in
emags.avr-verlagsobjekte.de
epaper.logistik-news.at
flyer.aqua-dome.at
grazia.kiosk.plus
info.independenceaustralia.com.au
kataloge.teppich-stark.de
kataloge.westfalen-urlaubsreisen.de
kiosk.am-weststrand.com
kiosk.der-kleine-georg.de
kiosk.kip-tape.com
kiosk.shopdecormagazines.com
kiosk.verbaende.com
kiosk.vidaglobal.de
magazin.tellz.me
magazine.ausemergencyservices.com.au
magazine.cioa.com
magazine.elektropraktiker.de
magazine.inversionesciel.com
magazine.iuoe.org
magazine.legacylighthouse.org
magazine.mpdunne.com
magazine.roarkidsmagazine.com
magazine.suncoastergroup.com
magazines.somethinggoodmagazines.com
mitteilungsblatt.seifert-medien.de
news.vdmno.de
publications.cwgc.org
publikationen.contipark.de
quals.truebeck.com
read.rapidrivermagazine.com
tagesspiegel.kiosk.plus
webkiosk.artandpictures.nl
webkiosk.leveldesigngroup.com
webkiosk.mwk-koeln.de
webkiosks.corshamprint.co.uk
webkiosks.plaskettcollege.com
wirbeicontipark.contipark.de
www.brochures.venturamarketing.ie
www.magazine.e-motec.net
www.magazines.thederbeian.com
yumpu.testact.de

Other certificates including the domain name legacylighthouse.org

(limited to 100 certificates)
www.magbooks.icsl.org.in
produktkatalog.mwf-technik.de
magazines.somma.co.za
magazin.nivea.de
magazines.somma.co.za
kiosk.citytipp.org
travelshop.accessconsciousness.com
onlinecatalog.custom-chrome-europe.com
vitadoor.mediaflip.de
epaper-en.glasmarte.at
magazine.legacylighthouse.org
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
magazines.somma.co.za
magazine.legacylighthouse.org
start.andernach-wirtschaft.de
epapers.juenglingverlag.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
epaper-en.glasmarte.at
magazines.somma.co.za
epaper-en.glasmarte.at
magazine.legacylighthouse.org
epaper-en.glasmarte.at
magazine.legacylighthouse.org
magazines.somma.co.za
onlinecatalog.custom-chrome-europe.com
www.sblaettle.at
www.magbooks.icsl.org.in
katalog.lemo-schuh.ch
webkiosk.alpenpark.de
onlinecatalog.custom-chrome-europe.com
start.andernach-wirtschaft.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
start.andernach-wirtschaft.de
kataloge.basoeinkaufsverbund.de
epaper-en.glasmarte.at
epaper-en.glasmarte.at
magazines.somma.co.za
webkiosk.alpenpark.de
magazine.legacylighthouse.org
magazine.legacylighthouse.org
epapers.juenglingverlag.de
www.magbooks.icsl.org.in
www.sblaettle.at
magazines.somma.co.za
start.andernach-wirtschaft.de
katalog.lemo-schuh.ch
katalog.lemo-schuh.ch
magazines.somma.co.za
katalog.lemo-schuh.ch
www.magbooks.icsl.org.in
webkiosk.alpenpark.de
katalog.klickparts.com
webkiosk.alpenpark.de
epaper-en.glasmarte.at
magazine.legacylighthouse.org
magazines.somma.co.za
magazin.plusperfekt.de
epaper-en.glasmarte.at
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
katalog.lemo-schuh.ch
epaper-en.glasmarte.at
www.magbooks.icsl.org.in
webkiosk.alpenpark.de
magazine.legacylighthouse.org
handelsblatt.kiosk.plus
magazine.legacylighthouse.org
magazine.legacylighthouse.org
katalog.klickparts.com
magazine.legacylighthouse.org
katalog.klickparts.com
vitadoor.mediaflip.de
epaper.grillzeit.at
onlinecatalog.custom-chrome-europe.com
epaper.grillzeit.at
katalog.lemo-schuh.ch
epaper-en.glasmarte.at
www.magbooks.icsl.org.in
onlinecatalog.custom-chrome-europe.com
magazine.legacylighthouse.org
berliner-kurier1.kiosk.plus
magazine.legacylighthouse.org
webkiosk.alpenpark.de
kiosk.citytipp.org
publikationen.stbverband-koeln.de
start.andernach-wirtschaft.de
epaper-en.glasmarte.at
publikationen.stbverband-koeln.de
vitadoor.mediaflip.de
travelshop.accessconsciousness.com
webkiosk.alpenpark.de
ebook.frcemexambookstore.co.uk
onlinecatalog.custom-chrome-europe.com
katalog.klickparts.com
webkiosk.alpenpark.de
epaper-en.glasmarte.at

Certificate

The complete raw certificate details for magazine.legacylighthouse.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn72uZU9DRwpcApTFd4a2
i2X4B5KT0RZgINASdSj88mqUIl/x+/hpD4uwHfn+Voue9RiLhnAzGpcjfYJQ6csx
zToenmWLTFbtpp1Ig6aiFzHBzHOqonV7C4nlSCtGilrJHhjO095aJuV3pSL2gGpu
OrR9uZ7q128ONBe2fGXY/BBo5HMVFB3uZX1NhSqgGX614X4H5dmnAgNh7pRoFPzV
R4QiOPzXILlF3dsVyXUtX9yAuvKP+iJRmKXwRyJ9tu0dKB4pIiKeY8g/rTaD69A6
FVD+B8NYQ9I/+v+LgsP7jPTug9ckytkr895Ijk7tcbq/RbsyrbWVEXW2Z+IK1UqE
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326625882343399706417775432097592766944674
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-30 11:03:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-28 11:03:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magazine.legacylighthouse.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20165425791882642268446393121224453984151144636998425718417896308579882941567215586179382555048359457578388159899965659632049198867060515317135443851107249379593898918461918961399204240352200374017184169856890751449616154078725776722140411600807987300327017726597643760509815468076593007559048945578997609367123546038244972952583397780657773254062894995613820908330084215133877210664309724053171092011171672981124543975022362184565395200300557671793573686244337232561258497834222931803005307142889476015879493592146858394639554934868975414140260170296576608694074016163716684355976361420341344662307795576441824511117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f81e2fc64db5d472de3b525b956ad4934033f63f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1458 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliothek.explicare.doctor'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochure.ntpwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.keepmoat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.waterrower.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogo.strap.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chapters.transamericanheroes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chef-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documents.zettlerelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dokumente.zettlerelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatsmarter.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebooks.royalafricansafaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emag.diamondworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emag.indianjeweller.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emags.avr-verlagsobjekte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.logistik-news.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.aqua-dome.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grazia.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.independenceaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.teppich-stark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.westfalen-urlaubsreisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.am-weststrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.der-kleine-georg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.kip-tape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.shopdecormagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.verbaende.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.vidaglobal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.tellz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.ausemergencyservices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.cioa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.elektropraktiker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.inversionesciel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.iuoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.legacylighthouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.mpdunne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.roarkidsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.suncoastergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazines.somethinggoodmagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitteilungsblatt.seifert-medien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.vdmno.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publications.cwgc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publikationen.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quals.truebeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.rapidrivermagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagesspiegel.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.artandpictures.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.leveldesigngroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.mwk-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.corshamprint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.plaskettcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wirbeicontipark.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brochures.venturamarketing.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazine.e-motec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazines.thederbeian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yumpu.testact.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ebc3162ff000004030047304502201984adf467951a3d31ac2f8ee9a4399de423dd4be956be4b2587b0a3a2597ab8022100befbd69a958c71c0c4acaebdb0ce3444de4a902538d13c1966771893d07d4aa300760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ebc3163400000040300473045022008489b52c3cd784cae2792549370c75d435415855680cf6120e90dee5cdaa7d90221008fa9ee0736817dc710c20dda89d0c2467ca1875a0115e4930490f0b7dbb56f15
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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