kiosk.der-kleine-georg.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:69:5b:bf:5f:e8:d9:f8:25:45:a1:b0:1c:77:8a:09:b6:25 was issued on by Let's Encrypt.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kiosk.der-kleine-georg.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:69:5b:bf:5f:e8:d9:f8:25:45:a1:b0:1c:77:8a:09:b6:25
Serial Number (int): 297188459743572990387001877010656296285733
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b9:0e:6f:9a:9b:c0:5c:8e:3d:80:de:8d:5f:46:a2:8c:50:aa:c4:ad
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8a:76:68:07:43:99:b9:0d:42:28:b6:bb:15:51:ee:0c:86:c8:f5:76
Fingerprint (sha256): 41:af:ee:1a:d2:72:c3:9d:3d:94:1e:fb:69:2e:71:a3:ab:aa:f9:9d:26:b7:eb:39:59:dc:88:d5:ca:4d:f0:65

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kiosk.der-kleine-georg.de

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kiosk.der-kleine-georg.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bibliothek.explicare.doctor
brochure.ntpwarranty.com
brochures.keepmoat.com
brochures.waterrower.co.uk
catalogo.strap.com.br
chapters.transamericanheroes.com
chef-magazine.com
documents.zettlerelectronics.com
dokumente.zettlerelectronics.com
dvgforum-022019.dvg.de
eatsmarter.kiosk.plus
ebooks.royalafricansafaris.com
emags.avr-verlagsobjekte.de
epaper.logistik-news.at
flyer.aqua-dome.at
grazia.kiosk.plus
info.independenceaustralia.com.au
kataloge.teppich-stark.de
kataloge.westfalen-urlaubsreisen.de
kiosk.am-weststrand.com
kiosk.antalis-verpackungen.de
kiosk.der-kleine-georg.de
kiosk.kip-tape.com
kiosk.shopdecormagazines.com
kiosk.verbaende.com
kundenmagazin.derpart.com
magazin.tellz.me
magazin.volkswagen.ba
magazine.ausemergencyservices.com.au
magazine.cioa.com
magazine.elektropraktiker.de
magazine.inversionesciel.com
magazine.iuoe.org
magazine.mpdunne.com
magazine.roarkidsmagazine.com
magazine.suncoastergroup.com
mitteilungsblatt.seifert-medien.de
miwi.halle.ihk.de
news.vdmno.de
prospekte.hkl-baumaschinen.at
publications.cwgc.org
publikationen.contipark.de
quals.truebeck.com
read.rapidrivermagazine.com
tagesspiegel.kiosk.plus
webkiosk.artandpictures.nl
webkiosk.leveldesigngroup.com
webkiosk.mwk-koeln.de
webkiosk.ww-events-online.de
webkiosks.corshamprint.co.uk
webkiosks.plaskettcollege.com
webweb.webberz.ch
wirbeicontipark.contipark.de
www.brochures.venturamarketing.ie
www.magazine.e-motec.net
www.magazines.thederbeian.com
yumpu.testact.de

Other certificates including the domain name der-kleine-georg.de

(limited to 100 certificates)
kiosque.flp.ch
test.phcsystem.com
www.magbooks.icsl.org.in
produktkatalog.mwf-technik.de
magazines.somma.co.za
magazin.nivea.de
kiosk.astrosofa.com
magazines.somma.co.za
travelshop.accessconsciousness.com
onlinecatalog.custom-chrome-europe.com
kiosque.flp.ch
kiosk.vidaglobal.de
vitadoor.mediaflip.de
epaper-en.glasmarte.at
magazine.legacylighthouse.org
kiosk.velototal.de
kiosk.der-kleine-georg.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
magazines.somma.co.za
magazine.legacylighthouse.org
kiosk.vidaglobal.de
test.phcsystem.com
start.andernach-wirtschaft.de
kiosk.der-kleine-georg.de
epapers.juenglingverlag.de
kiosk.vidaglobal.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
epaper-en.glasmarte.at
magazines.somma.co.za
kiosk.vidaglobal.de
emag.indianjeweller.in
test.phcsystem.com
test.phcsystem.com
epaper-en.glasmarte.at
magazine.legacylighthouse.org
test.phcsystem.com
epaper-en.glasmarte.at
magazine.legacylighthouse.org
magazines.somma.co.za
kiosk.flp.de
onlinecatalog.custom-chrome-europe.com
webkiosk.die-bank.de
kiosk.flp.ch
kiosk.vidaglobal.de
der-kleine-georg.de
www.magbooks.icsl.org.in
katalog.lemo-schuh.ch
kiosk.vidaglobal.de
magazines.somethinggoodmagazines.com
kiosque.flp.ch
webkiosk.alpenpark.de
onlinecatalog.custom-chrome-europe.com
kiosk.vidaglobal.de
test.phcsystem.com
start.andernach-wirtschaft.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
start.andernach-wirtschaft.de
kataloge.basoeinkaufsverbund.de
epaper-en.glasmarte.at
epaper-en.glasmarte.at
magazines.somma.co.za
webkiosk.alpenpark.de
magazine.legacylighthouse.org
magazine.legacylighthouse.org
epapers.juenglingverlag.de
kiosque.flp.ch
kiosk.velototal.de
kiosk.astrosofa.com
www.magbooks.icsl.org.in
kiosk.flp.ch
kiosk.astrosofa.com
der-kleine-georg.de
magazines.somma.co.za
start.andernach-wirtschaft.de
kiosk.der-kleine-georg.de
kiosk.der-kleine-georg.de
katalog.lemo-schuh.ch
katalog.lemo-schuh.ch
magazines.somma.co.za
katalog.lemo-schuh.ch
kiosk.velototal.de
www.magbooks.icsl.org.in
webkiosk.alpenpark.de
kiosk.flp.de
kiosk.velototal.de
kiosk.velototal.de
katalog.klickparts.com
kiosk.velototal.de
kiosk.flp.de
webkiosk.alpenpark.de
epaper-en.glasmarte.at
magazine.legacylighthouse.org
magazines.somma.co.za
magazin.plusperfekt.de
epaper-en.glasmarte.at
webkiosk.alpenpark.de

Certificate

The complete raw certificate details for kiosk.der-kleine-georg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILRjCCCi6gAwIBAgISA2lbv1/o2fglRaGwHHeKCbYlMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjkxMTAzMDRaFw0y
MDAzMjgxMTAzMDRaMCQxIjAgBgNVBAMTGWtpb3NrLmRlci1rbGVpbmUtZ2Vvcmcu
ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWYz9RdSi9ur1bQmFI
0TTXPAplTJAoqWK7vbLrKD25LXFQ1zNJLR0zM/mW8Euds67nboUivRr/J/CmZJSY
Abg/hLYaLgep2za6uETIHyKH94ZOKzdizYRvh1LoAUaH/2hsEME74x0ZMwwm2gpC
Nee5XGvUAWLdQlpZXVK0w0P8frtWSz7r3AhQIoMMaNeqpoIQ8Jm5DQLz/onjM2ON
u+ga+GHQW/OcF0DbKn/D8tzWGR3hyvIfICPtRQ/h0Dp4ymokQiL+pfk3vmxZSxGU
OJ2atULQeOpXtZRrHK3JKMZNum0tW+9Gpit/NcqxMuY5auo1LExP/h82Av8rfe39
E923AgMBAAGjgghKMIIIRjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLkOb5qbwFyO
PYDejV9GooxQqsStMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wggX+BgNVHREEggX1MIIF8YIbYmlibGlvdGhlay5leHBs
aWNhcmUuZG9jdG9yghhicm9jaHVyZS5udHB3YXJyYW50eS5jb22CFmJyb2NodXJl
cy5rZWVwbW9hdC5jb22CGmJyb2NodXJlcy53YXRlcnJvd2VyLmNvLnVrghVjYXRh
bG9nby5zdHJhcC5jb20uYnKCIGNoYXB0ZXJzLnRyYW5zYW1lcmljYW5oZXJvZXMu
Y29tghFjaGVmLW1hZ2F6aW5lLmNvbYIgZG9jdW1lbnRzLnpldHRsZXJlbGVjdHJv
bmljcy5jb22CIGRva3VtZW50ZS56ZXR0bGVyZWxlY3Ryb25pY3MuY29tghZkdmdm
b3J1bS0wMjIwMTkuZHZnLmRlghVlYXRzbWFydGVyLmtpb3NrLnBsdXOCHmVib29r
cy5yb3lhbGFmcmljYW5zYWZhcmlzLmNvbYIbZW1hZ3MuYXZyLXZlcmxhZ3NvYmpl
a3RlLmRlghdlcGFwZXIubG9naXN0aWstbmV3cy5hdIISZmx5ZXIuYXF1YS1kb21l
LmF0ghFncmF6aWEua2lvc2sucGx1c4IhaW5mby5pbmRlcGVuZGVuY2VhdXN0cmFs
aWEuY29tLmF1ghlrYXRhbG9nZS50ZXBwaWNoLXN0YXJrLmRlgiNrYXRhbG9nZS53
ZXN0ZmFsZW4tdXJsYXVic3JlaXNlbi5kZYIXa2lvc2suYW0td2VzdHN0cmFuZC5j
b22CHWtpb3NrLmFudGFsaXMtdmVycGFja3VuZ2VuLmRlghlraW9zay5kZXIta2xl
aW5lLWdlb3JnLmRlghJraW9zay5raXAtdGFwZS5jb22CHGtpb3NrLnNob3BkZWNv
cm1hZ2F6aW5lcy5jb22CE2tpb3NrLnZlcmJhZW5kZS5jb22CGWt1bmRlbm1hZ2F6
aW4uZGVycGFydC5jb22CEG1hZ2F6aW4udGVsbHoubWWCFW1hZ2F6aW4udm9sa3N3
YWdlbi5iYYIkbWFnYXppbmUuYXVzZW1lcmdlbmN5c2VydmljZXMuY29tLmF1ghFt
YWdhemluZS5jaW9hLmNvbYIcbWFnYXppbmUuZWxla3Ryb3ByYWt0aWtlci5kZYIc
bWFnYXppbmUuaW52ZXJzaW9uZXNjaWVsLmNvbYIRbWFnYXppbmUuaXVvZS5vcmeC
FG1hZ2F6aW5lLm1wZHVubmUuY29tgh1tYWdhemluZS5yb2Fya2lkc21hZ2F6aW5l
LmNvbYIcbWFnYXppbmUuc3VuY29hc3Rlcmdyb3VwLmNvbYIibWl0dGVpbHVuZ3Ni
bGF0dC5zZWlmZXJ0LW1lZGllbi5kZYIRbWl3aS5oYWxsZS5paGsuZGWCDW5ld3Mu
dmRtbm8uZGWCHXByb3NwZWt0ZS5oa2wtYmF1bWFzY2hpbmVuLmF0ghVwdWJsaWNh
dGlvbnMuY3dnYy5vcmeCGnB1Ymxpa2F0aW9uZW4uY29udGlwYXJrLmRlghJxdWFs
cy50cnVlYmVjay5jb22CG3JlYWQucmFwaWRyaXZlcm1hZ2F6aW5lLmNvbYIXdGFn
ZXNzcGllZ2VsLmtpb3NrLnBsdXOCGndlYmtpb3NrLmFydGFuZHBpY3R1cmVzLm5s
gh13ZWJraW9zay5sZXZlbGRlc2lnbmdyb3VwLmNvbYIVd2Via2lvc2subXdrLWtv
ZWxuLmRlghx3ZWJraW9zay53dy1ldmVudHMtb25saW5lLmRlghx3ZWJraW9za3Mu
Y29yc2hhbXByaW50LmNvLnVrgh13ZWJraW9za3MucGxhc2tldHRjb2xsZWdlLmNv
bYIRd2Vid2ViLndlYmJlcnouY2iCHHdpcmJlaWNvbnRpcGFyay5jb250aXBhcmsu
ZGWCIXd3dy5icm9jaHVyZXMudmVudHVyYW1hcmtldGluZy5pZYIYd3d3Lm1hZ2F6
aW5lLmUtbW90ZWMubmV0gh13d3cubWFnYXppbmVzLnRoZWRlcmJlaWFuLmNvbYIQ
eXVtcHUudGVzdGFjdC5kZTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf
EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCC
AQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKES
EoQYdZaBcUVYAAABb1GJ02UAAAQDAEcwRQIgEMxhnzK5zFVo/3wJcd1DURwvIVcF
n54uKzICxMnzrUQCIQCUDhdXKdoNMXcdaFRHv/Ll/5waMeiWZb3fWhhPnoY8SQB2
ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABb1GJ1UwAAAQDAEcw
RQIgDQx3zv5NNAtOvDOWWmCnxE2wF6yZgoXOdZGrvnXITpsCIQCGa2UQOu6OK3Is
0689jw5OVZPYP+yN/b/Ud/4RxQbbQDANBgkqhkiG9w0BAQsFAAOCAQEAR2YuukSw
+LGqFuvwD3EemXhtWpX4jeRDFrTcRXPhTVVxQXDrZr4MRZk+7gck0mPA9nIiiGZg
P9SPswKD4KROUwkN9y0Jr7RU5caBEjJhmKFmmByQPg6TZ3feFLELLLbiOusLgzy1
hx9a6IGHKi0+c4A6sCFh7DxGe5R8mUQBqg9CDPoCmh2FL4UZ2CzQZcy50SNflETV
xM9nQYoLEG2Tj8gXk22b1ryKjhCSzyPD7MZEA9UuccgzCY7FSAuhyFMG3QJSpvB8
YeYbWjC9prZNRmG42Q/ASCKWHVD3TO/FgPg25ied2GV/OjKKrYq+ZemUTeCaLQ5f
JaQs1RH1+uUErQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmM/UXUovbq9W0JhSNE0
1zwKZUyQKKliu72y6yg9uS1xUNczSS0dMzP5lvBLnbOu526FIr0a/yfwpmSUmAG4
P4S2Gi4Hqds2urhEyB8ih/eGTis3Ys2Eb4dS6AFGh/9obBDBO+MdGTMMJtoKQjXn
uVxr1AFi3UJaWV1StMND/H67Vks+69wIUCKDDGjXqqaCEPCZuQ0C8/6J4zNjjbvo
Gvhh0FvznBdA2yp/w/Lc1hkd4cryHyAj7UUP4dA6eMpqJEIi/qX5N75sWUsRlDid
mrVC0HjqV7WUaxytySjGTbptLVvvRqYrfzXKsTLmOWrqNSxMT/4fNgL/K33t/RPd
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297188459743572990387001877010656296285733
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 11:03:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-28 11:03:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kiosk.der-kleine-georg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18984686430677506616333103945786440283970906409725795504974544272129117361650757632785108535948475776802183388599946434973177003147562586945496027184071234156366071804052427671065658381624696403515560906147352484815350465492202225097624991662828296303652477500140061847180877679377320807069773772196027130210982964912761730111322021677523365202557364874775680878929348049881263725180080159156039725586863531949748922165642456945117159781471968698738336659690833695687568870949689161166783102248370449364396932336940762547304557939069917130215366501225309899607738877143985495815766211939004886791370934705475959381431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b90e6f9a9bc05c8e3d80de8d5f46a28c50aac4ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1525 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliothek.explicare.doctor'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochure.ntpwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.keepmoat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.waterrower.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogo.strap.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chapters.transamericanheroes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chef-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documents.zettlerelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dokumente.zettlerelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvgforum-022019.dvg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatsmarter.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebooks.royalafricansafaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emags.avr-verlagsobjekte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.logistik-news.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.aqua-dome.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grazia.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.independenceaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.teppich-stark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.westfalen-urlaubsreisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.am-weststrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.antalis-verpackungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.der-kleine-georg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.kip-tape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.shopdecormagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.verbaende.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundenmagazin.derpart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.tellz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.volkswagen.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.ausemergencyservices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.cioa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.elektropraktiker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.inversionesciel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.iuoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.mpdunne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.roarkidsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.suncoastergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitteilungsblatt.seifert-medien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miwi.halle.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.vdmno.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospekte.hkl-baumaschinen.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publications.cwgc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publikationen.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quals.truebeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.rapidrivermagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagesspiegel.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.artandpictures.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.leveldesigngroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.mwk-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.ww-events-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.corshamprint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.plaskettcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webweb.webberz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wirbeicontipark.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brochures.venturamarketing.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazine.e-motec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazines.thederbeian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yumpu.testact.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f5189d3650000040300473045022010cc619f32b9cc5568ff7c0971dd43511c2f2157059f9e2e2b3202c4c9f3ad44022100940e175729da0d31771d685447bff2e5ff9c1a31e89665bddf5a184f9e863c49007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f5189d54c000004030047304502200d0c77cefe4d340b4ebc33965a60a7c44db017ac998285ce7591abbe75c84e9b022100866b65103aee8e2b722cd3af3d8f0e4e5593d83fec8dfdbfd477fe11c506db40
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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