visitstarnberg.com
Issued by R3
About this certificate
This digital certificate with serial number 03:62:e1:3f:aa:77:ab:64:52:d8:b6:27:eb:0e:cc:26:1a:3d was issued on by Let's Encrypt.
With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=visitstarnberg.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:62:e1:3f:aa:77:ab:64:52:d8:b6:27:eb:0e:cc:26:1a:3dSerial Number (int): 294983936624777230305300877793396898798141
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c9:b7:31:93:10:ef:33:34:69:25:1e:b8:90:74:fe:68:72:5c:f8:fe
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): b6:9b:4b:0b:96:e9:c3:9c:e9:e0:aa:1a:9c:4e:28:b9:ac:74:df:f8
Fingerprint (sha256): 3d:af:0f:8a:b8:e2:c5:5e:76:98:83:c8:bf:94:36:72:36:68:01:79:63:eb:cd:19:f5:0e:9d:f6:14:7b:a3:f3
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate visitstarnberg.com
99
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for visitstarnberg.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
visitaix.com
visitaixlesbains.com
visitajaccio.com
visitalbertville.com
visitangouleme.com
visitarcachon.com
visitauxerre.com
visitbastia.com
visitbelfort.com
visitblaye.com
visitblois.com
visitboulognebillancourt.com
visitboulognesurmer.com
visitbourges.com
visitbrest.com
visitcaen.com
visitchartres.com
visitcherbourg.com
visitclermontferrand.com
visitdinard.com
visitengadin.com
visitetretat.com
visitevian.com
visitfecamp.com
visitfribourg.com
visitlabaule.com
visitlarochelle.com
visitlemans.com
visitlorient.com
visitmeaux.com
visitmeudon.com
visitnanterre.com
visitneuchatel.com
visitneuilly.com
visitnevers.com
visitpau.com
visitperpignan.com
visitquimper.com
visitroubaix.com
visitrueil.com
visitsaintcloud.com
visitsaintemilion.com
visitsaintetienne.com
visitsaintjeandeluz.com
visitsaintmalo.com
visitsaumur.com
visitstarnberg.com
visitsuresnes.com
visittarbes.com
visittourcoing.com
visittrouville.com
visitvalenciennes.com
visitvichy.com
www.visitaix.com
www.visitaixlesbains.com
www.visitajaccio.com
www.visitalbertville.com
www.visitangouleme.com
www.visitarcachon.com
www.visitauxerre.com
www.visitbastia.com
www.visitbelfort.com
www.visitblaye.com
www.visitblois.com
www.visitboulognebillancourt.com
www.visitboulognesurmer.com
www.visitbourges.com
www.visitbrest.com
www.visitcaen.com
www.visitchartres.com
www.visitcherbourg.com
www.visitclermontferrand.com
www.visitevian.com
www.visitfecamp.com
www.visitlabaule.com
www.visitlemans.com
www.visitlorient.com
www.visitmeaux.com
www.visitmeudon.com
www.visitnanterre.com
www.visitneuilly.com
www.visitnevers.com
www.visitperpignan.com
www.visitquimper.com
www.visitroubaix.com
www.visitrueil.com
www.visitsaintcloud.com
www.visitsaintemilion.com
www.visitsaintetienne.com
www.visitsaintjeandeluz.com
www.visitsaintmalo.com
www.visitsaumur.com
www.visitstarnberg.com
www.visitsuresnes.com
www.visittarbes.com
www.visittourcoing.com
www.visittrouville.com
www.visitvalenciennes.com
www.visitvichy.com
visitaixlesbains.com
visitajaccio.com
visitalbertville.com
visitangouleme.com
visitarcachon.com
visitauxerre.com
visitbastia.com
visitbelfort.com
visitblaye.com
visitblois.com
visitboulognebillancourt.com
visitboulognesurmer.com
visitbourges.com
visitbrest.com
visitcaen.com
visitchartres.com
visitcherbourg.com
visitclermontferrand.com
visitdinard.com
visitengadin.com
visitetretat.com
visitevian.com
visitfecamp.com
visitfribourg.com
visitlabaule.com
visitlarochelle.com
visitlemans.com
visitlorient.com
visitmeaux.com
visitmeudon.com
visitnanterre.com
visitneuchatel.com
visitneuilly.com
visitnevers.com
visitpau.com
visitperpignan.com
visitquimper.com
visitroubaix.com
visitrueil.com
visitsaintcloud.com
visitsaintemilion.com
visitsaintetienne.com
visitsaintjeandeluz.com
visitsaintmalo.com
visitsaumur.com
visitstarnberg.com
visitsuresnes.com
visittarbes.com
visittourcoing.com
visittrouville.com
visitvalenciennes.com
visitvichy.com
www.visitaix.com
www.visitaixlesbains.com
www.visitajaccio.com
www.visitalbertville.com
www.visitangouleme.com
www.visitarcachon.com
www.visitauxerre.com
www.visitbastia.com
www.visitbelfort.com
www.visitblaye.com
www.visitblois.com
www.visitboulognebillancourt.com
www.visitboulognesurmer.com
www.visitbourges.com
www.visitbrest.com
www.visitcaen.com
www.visitchartres.com
www.visitcherbourg.com
www.visitclermontferrand.com
www.visitevian.com
www.visitfecamp.com
www.visitlabaule.com
www.visitlemans.com
www.visitlorient.com
www.visitmeaux.com
www.visitmeudon.com
www.visitnanterre.com
www.visitneuilly.com
www.visitnevers.com
www.visitperpignan.com
www.visitquimper.com
www.visitroubaix.com
www.visitrueil.com
www.visitsaintcloud.com
www.visitsaintemilion.com
www.visitsaintetienne.com
www.visitsaintjeandeluz.com
www.visitsaintmalo.com
www.visitsaumur.com
www.visitstarnberg.com
www.visitsuresnes.com
www.visittarbes.com
www.visittourcoing.com
www.visittrouville.com
www.visitvalenciennes.com
www.visitvichy.com
Other certificates including the domain name visitstarnberg.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for visitstarnberg.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIM9TCCC92gAwIBAgISA2LhP6p3q2RS2LYn6w7MJho9MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMjcxNjE3MDhaFw0yNDAzMjYxNjE3MDdaMB0xGzAZBgNVBAMT EnZpc2l0c3Rhcm5iZXJnLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANkfE1kiH/Gd4YfaOQeqwUrFEFkDYvfgheig9lVXafC4XSodxX1OGeRgM3++ HNPpXF59u8nXSHAeliMENBPZyG+o9WN8wqjVT2iYvb/Eha7ji+exO79MOO0QWs2n FYh2QSSVKCYwPxPh7vTQnNg+Ks2/+qhJ5QrIXGYO+yFaAxZuZaN0wwUxb+6fPvMp 52W6Lo4y2KaONPgnRbG3BJMEHd+7BCCZDL5GPhYRphUIMo8U90mrDnsIK2aaOFRe etmdo0uxdNdIxxpFoPeq7e9dJvxgNSDGZQNDYq35lMnMlj8nR+2KZU5QUiFDWhhj t2ux8pUwuSvZuj3sfCy7lc1VXA0CAwEAAaOCChgwggoUMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUybcxkxDvMzRpJR64kHT+aHJc+P4wHwYDVR0jBBgwFoAUFC6zF7dY VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy Lm9yZy8wggggBgNVHREEgggXMIIIE4IMdmlzaXRhaXguY29tghR2aXNpdGFpeGxl c2JhaW5zLmNvbYIQdmlzaXRhamFjY2lvLmNvbYIUdmlzaXRhbGJlcnR2aWxsZS5j b22CEnZpc2l0YW5nb3VsZW1lLmNvbYIRdmlzaXRhcmNhY2hvbi5jb22CEHZpc2l0 YXV4ZXJyZS5jb22CD3Zpc2l0YmFzdGlhLmNvbYIQdmlzaXRiZWxmb3J0LmNvbYIO dmlzaXRibGF5ZS5jb22CDnZpc2l0YmxvaXMuY29tghx2aXNpdGJvdWxvZ25lYmls bGFuY291cnQuY29tghd2aXNpdGJvdWxvZ25lc3VybWVyLmNvbYIQdmlzaXRib3Vy Z2VzLmNvbYIOdmlzaXRicmVzdC5jb22CDXZpc2l0Y2Flbi5jb22CEXZpc2l0Y2hh cnRyZXMuY29tghJ2aXNpdGNoZXJib3VyZy5jb22CGHZpc2l0Y2xlcm1vbnRmZXJy YW5kLmNvbYIPdmlzaXRkaW5hcmQuY29tghB2aXNpdGVuZ2FkaW4uY29tghB2aXNp dGV0cmV0YXQuY29tgg52aXNpdGV2aWFuLmNvbYIPdmlzaXRmZWNhbXAuY29tghF2 aXNpdGZyaWJvdXJnLmNvbYIQdmlzaXRsYWJhdWxlLmNvbYITdmlzaXRsYXJvY2hl bGxlLmNvbYIPdmlzaXRsZW1hbnMuY29tghB2aXNpdGxvcmllbnQuY29tgg52aXNp dG1lYXV4LmNvbYIPdmlzaXRtZXVkb24uY29tghF2aXNpdG5hbnRlcnJlLmNvbYIS dmlzaXRuZXVjaGF0ZWwuY29tghB2aXNpdG5ldWlsbHkuY29tgg92aXNpdG5ldmVy cy5jb22CDHZpc2l0cGF1LmNvbYISdmlzaXRwZXJwaWduYW4uY29tghB2aXNpdHF1 aW1wZXIuY29tghB2aXNpdHJvdWJhaXguY29tgg52aXNpdHJ1ZWlsLmNvbYITdmlz aXRzYWludGNsb3VkLmNvbYIVdmlzaXRzYWludGVtaWxpb24uY29tghV2aXNpdHNh aW50ZXRpZW5uZS5jb22CF3Zpc2l0c2FpbnRqZWFuZGVsdXouY29tghJ2aXNpdHNh aW50bWFsby5jb22CD3Zpc2l0c2F1bXVyLmNvbYISdmlzaXRzdGFybmJlcmcuY29t ghF2aXNpdHN1cmVzbmVzLmNvbYIPdmlzaXR0YXJiZXMuY29tghJ2aXNpdHRvdXJj b2luZy5jb22CEnZpc2l0dHJvdXZpbGxlLmNvbYIVdmlzaXR2YWxlbmNpZW5uZXMu Y29tgg52aXNpdHZpY2h5LmNvbYIQd3d3LnZpc2l0YWl4LmNvbYIYd3d3LnZpc2l0 YWl4bGVzYmFpbnMuY29tghR3d3cudmlzaXRhamFjY2lvLmNvbYIYd3d3LnZpc2l0 YWxiZXJ0dmlsbGUuY29tghZ3d3cudmlzaXRhbmdvdWxlbWUuY29tghV3d3cudmlz aXRhcmNhY2hvbi5jb22CFHd3dy52aXNpdGF1eGVycmUuY29tghN3d3cudmlzaXRi YXN0aWEuY29tghR3d3cudmlzaXRiZWxmb3J0LmNvbYISd3d3LnZpc2l0YmxheWUu Y29tghJ3d3cudmlzaXRibG9pcy5jb22CIHd3dy52aXNpdGJvdWxvZ25lYmlsbGFu Y291cnQuY29tght3d3cudmlzaXRib3Vsb2duZXN1cm1lci5jb22CFHd3dy52aXNp dGJvdXJnZXMuY29tghJ3d3cudmlzaXRicmVzdC5jb22CEXd3dy52aXNpdGNhZW4u Y29tghV3d3cudmlzaXRjaGFydHJlcy5jb22CFnd3dy52aXNpdGNoZXJib3VyZy5j b22CHHd3dy52aXNpdGNsZXJtb250ZmVycmFuZC5jb22CEnd3dy52aXNpdGV2aWFu LmNvbYITd3d3LnZpc2l0ZmVjYW1wLmNvbYIUd3d3LnZpc2l0bGFiYXVsZS5jb22C E3d3dy52aXNpdGxlbWFucy5jb22CFHd3dy52aXNpdGxvcmllbnQuY29tghJ3d3cu dmlzaXRtZWF1eC5jb22CE3d3dy52aXNpdG1ldWRvbi5jb22CFXd3dy52aXNpdG5h bnRlcnJlLmNvbYIUd3d3LnZpc2l0bmV1aWxseS5jb22CE3d3dy52aXNpdG5ldmVy cy5jb22CFnd3dy52aXNpdHBlcnBpZ25hbi5jb22CFHd3dy52aXNpdHF1aW1wZXIu Y29tghR3d3cudmlzaXRyb3ViYWl4LmNvbYISd3d3LnZpc2l0cnVlaWwuY29tghd3 d3cudmlzaXRzYWludGNsb3VkLmNvbYIZd3d3LnZpc2l0c2FpbnRlbWlsaW9uLmNv bYIZd3d3LnZpc2l0c2FpbnRldGllbm5lLmNvbYIbd3d3LnZpc2l0c2FpbnRqZWFu ZGVsdXouY29tghZ3d3cudmlzaXRzYWludG1hbG8uY29tghN3d3cudmlzaXRzYXVt dXIuY29tghZ3d3cudmlzaXRzdGFybmJlcmcuY29tghV3d3cudmlzaXRzdXJlc25l cy5jb22CE3d3dy52aXNpdHRhcmJlcy5jb22CFnd3dy52aXNpdHRvdXJjb2luZy5j b22CFnd3dy52aXNpdHRyb3V2aWxsZS5jb22CGXd3dy52aXNpdHZhbGVuY2llbm5l cy5jb22CEnd3dy52aXNpdHZpY2h5LmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCC AQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9 AA0tcm/h+tQXAAABjKxHsFYAAAQDAEYwRAIgGraPBZt3WPUnLX3VhtO+YKlDE7Id eRsXVw46BUmGFF4CIBlxGdzGV7nk7d+N6s+cxhBOym5dJApm/HrCYoxXX+jKAHYA ouK/1h7eLy8HoNZObTen3GVDsMa1LqLat4r4mm31F9gAAAGMrEewWwAABAMARzBF AiEAy4O2zA9zNOKn6Pdr5mP9mfWVZYh60+4ImHfMcyCHbQQCIHyumCx84raqy35k sWRXbeTgozZLyHu5B1cq2OIInLJfMA0GCSqGSIb3DQEBCwUAA4IBAQCzW4dULM17 utRgLn5l4mOohnDea3lOuwHZahckaV0D1Oa1Yz2OSHJQBjqxY85FNT1/KiiEki2g bxV7yEOScoHjUjpYMNiqpcHDkiv+nFPYOXMEHrCEkntBpG+lYpK2QQx/mfGxDdEA mwO83yCxXZMnCNAkPhiily1wJVuMhZwBJC0dhVYoLwAlKyC0V92hx76IYuwpRgqp z1WEt4mQuc8I+Vz7/zCwHFzIsVAdeGxhSi2ZrDqJCjaYtdNoeMYg2oyd9eYfHKoR 1FaV2gs1Q5IerTRXUlkKOgHRpuh4xqc17JJc5v7z328q+AwcJf5SZqFbmbux8RwE 1NEsRTT0dLjI -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R8TWSIf8Z3hh9o5B6rB SsUQWQNi9+CF6KD2VVdp8LhdKh3FfU4Z5GAzf74c0+lcXn27yddIcB6WIwQ0E9nI b6j1Y3zCqNVPaJi9v8SFruOL57E7v0w47RBazacViHZBJJUoJjA/E+Hu9NCc2D4q zb/6qEnlCshcZg77IVoDFm5lo3TDBTFv7p8+8ynnZboujjLYpo40+CdFsbcEkwQd 37sEIJkMvkY+FhGmFQgyjxT3SasOewgrZpo4VF562Z2jS7F010jHGkWg96rt710m /GA1IMZlA0NirfmUycyWPydH7YplTlBSIUNaGGO3a7HylTC5K9m6Pex8LLuVzVVc DQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 294983936624777230305300877793396898798141 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 16:17:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 16:17:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'visitstarnberg.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27409036116680029711145813069139636903561218249181032439859791469812920783907596391541505524558513780973100146050541968986702756274113214060869492195910192326541789051676748189478235543784779733762696957358992688819569535083922452232594276696984859719686093837412897838131175116296540462546427233423955059191133583230287119854149846919312415538850281949607477133909019929097244237477342425135203428799119205951512784342661309068453309587897698497728761335663463949747346472892041061366385834069846998904111285264921832751357804742801607237344727543137047429877214289977318828725372872779051445255591429733029156051981 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c9b7319310ef333469251eb89074fe68725cf8fe . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2071 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitaix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitaixlesbains.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitajaccio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitalbertville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitangouleme.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitarcachon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitauxerre.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitbastia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitbelfort.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitblaye.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitblois.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitboulognebillancourt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitboulognesurmer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitbourges.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitbrest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitcaen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitchartres.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitcherbourg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitclermontferrand.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitdinard.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitengadin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitetretat.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitevian.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitfecamp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitfribourg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitlabaule.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitlarochelle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitlemans.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitlorient.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitmeaux.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitmeudon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitnanterre.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitneuchatel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitneuilly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitnevers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitpau.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitperpignan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitquimper.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitroubaix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitrueil.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintcloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintemilion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintetienne.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintjeandeluz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintmalo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaumur.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitstarnberg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsuresnes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visittarbes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visittourcoing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visittrouville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitvalenciennes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitvichy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitaix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitaixlesbains.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitajaccio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitalbertville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitangouleme.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitarcachon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitauxerre.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitbastia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitbelfort.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitblaye.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitblois.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitboulognebillancourt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitboulognesurmer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitbourges.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitbrest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitcaen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitchartres.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitcherbourg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitclermontferrand.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitevian.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitfecamp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitlabaule.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitlemans.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitlorient.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitmeaux.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitmeudon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitnanterre.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitneuilly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitnevers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitperpignan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitquimper.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitroubaix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitrueil.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintcloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintemilion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintetienne.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintjeandeluz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintmalo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaumur.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitstarnberg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsuresnes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visittarbes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visittourcoing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visittrouville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitvalenciennes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitvichy.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cac47b056000004030046304402201ab68f059b7758f5272d7dd586d3be60a94313b21d791b17570e3a054986145e0220197119dcc657b9e4eddf8deacf9cc6104eca6e5d240a66fc7ac2628c575fe8ca007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cac47b05b0000040300473045022100cb83b6cc0f7334e2a7e8f76be663fd99f59565887ad3ee089877cc7320876d0402207cae982c7ce2b6aacb7e64b164576de4e0a3364bc87bb907572ad8e2089cb25f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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