webkiosks.sm-sport.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:02:21:4c:d9:15:e0:b4:42:54:55:b2:44:11:c7:b9:e6:47 was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=webkiosks.sm-sport.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:02:21:4c:d9:15:e0:b4:42:54:55:b2:44:11:c7:b9:e6:47
Serial Number (int): 262061686070560985704795476132305965803079
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: aa:9d:73:9a:74:74:d2:a6:22:5d:f0:6f:8b:a2:1a:44:4d:88:00:0e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 57:2c:f6:b2:b7:c4:7b:c5:71:5f:cd:0b:2c:16:88:4a:a4:aa:b0:d4
Fingerprint (sha256): 42:b2:55:11:d3:18:6c:ab:cb:ea:8a:12:e3:62:d7:ef:ee:eb:8b:ca:57:51:fb:05:8d:d9:eb:d3:e7:ed:b0:ed

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate webkiosks.sm-sport.de

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webkiosks.sm-sport.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

catalogues.hampel-auctions.com
ebook.aft-international.de
epaper-fr.transgourmet.ch
epaper-it.transgourmet.ch
epaper.pt-magazin.de
epaper.transgourmet.ch
frauendorfer.mediaflip.de
hochglanzmagazine.buendnermedienverlag.ch
hoffmann-moebel.mediaflip.de
hummerich.mediaflip.de
impact.advocare.com
jobst-wohnwelt.mediaflip.de
kataloge.garten-bronder-kataloge.de
kataloge.germannauktionen.ch
kataloge.hampel-auctions.com
kataloge.kuebler-sport.de
kataloge.larimarhotel.at
kataloge.nice-n-hard.de
kataloge.vonbohlenimmobilien.de
lemagazine.jaguar.fr
lemagazine.landrover.com
m.tailormadewebsite.solutions
magazin.em-chiemgau.de
magazin.jaguar.com
magazin.landrover.com
magazin.zibibbo.de
magazine.direktvertrieb.de
magazine.jaguar-me.com
magazine.jaguar.co.jp
magazine.jaguar.com.cn
magazine.jaguar.it
magazine.jaguar.nl
magazine.jaguar.ru
magazine.jaguarkorea.co.kr
magazine.jaguarusa.com
magazine.landrover-me.com
magazine.landrover.co.jp
magazine.landrover.com.cn
magazine.landrover.it
magazine.landrover.nl
magazine.landrover.ru
magazine.landroverkorea.co.kr
magazine.landroverusa.com
moebel-berta.mediaflip.de
moebel-mai.mediaflip.de
moebel-meyer.mediaflip.de
moebel-mmz.mediaflip.de
moebel-vanoepen.mediaflip.de
moebel-zuck.mediaflip.de
moebelberta.mediaflip.de
moebelundobjekt.mediaflip.de
nemann.mediaflip.de
online.meatingpoint-mag.com
pro.seamk.fi
prospekte.moebel-weirauch.de
revista.jaguar.es
revista.jaguarbrasil.com.br
revista.landrover.com
revista.landrover.com.br
ruesen.mediaflip.de
sonavsofab.xp1.com
trop.mediaflip.de
webkiosk.bettenstudio-siesta.de
webkiosk.deinmoment.digital
webkiosk.zoppijuwelier.ch
webkiosks.sm-sport.de
webkiosks.sportausbildung.com
webssl.webberz.at
wohnland-hauber.mediaflip.de
www.bestwaikatoproperty.co.nz
www.cataloguefnac.ma
www.ruhewald.tv

Other certificates including the domain name sm-sport.de

(limited to 100 certificates)
magazin.peak-muenster.de
catalogues.meister.com
kiosk.greater.sydney
webkiosk.wonendoejezo.com
www.hochseescheinkurs.online
webkiosk.wonendoejezo.com
e-paper.moinmoin.de
epaper.abakus-magdeburg.de
webkiosks.sm-sport.de
journal.flyskywork.com
moebel-boeck.mediaflip.de
catalog.sogears.com
prospekte.intersport.de
webkiosk.dein-typ.de
catalogues.meister.com
epaper.glasmarte.at
kataloge.quester.at
kiosk.greater.sydney
www.sm-sport.de
kiosk.greater.sydney
sm-sport.de
berliner-kurier.kiosk.plus
app.langguth.wine
pub.vermoegenszentrum.ch
epapers.gleitz-online.de
epaper.swecon-baumaschinen.de
webkiosk.baeckereibuettner.de
blaetterkatalog.rp-media.de
kiosk.greater.sydney
pub.vermoegenszentrum.ch
berliner-kurier.kiosk.plus
ssl.yumpu.com
kataloge.quester.at
kataloge.fuerholz.de
kurier.leimbacherdruck.ch
kataloge.quester.at
kiosk.greater.sydney
ssl.yumpu.com
berliner-zeitung.kiosk.plus
berliner-zeitung.kiosk.plus
ca.lyreco.de
webkiosk.wonendoejezo.com
kataloge.fuerholz.de
kiosk.greater.sydney
webkiosk.reven.de
kurier.leimbacherdruck.ch
kiosk.greater.sydney
onlinekrant.binnenvaartkrant.nl
pop3.kraemer-praezisionswerkzeuge-kataloge.de
tueren.holzschwab.de
catalogues.meister.com
kataloge.fuerholz.de
www.sm-sport.de
pub.vermoegenszentrum.ch
kataloge.fuerholz.de
app.langguth.wine
baeucke.mediaflip.de
magazin.wiese-rt.de
pop3.kraemer-praezisionswerkzeuge-kataloge.de
webkiosk.reven.de
kataloge.quester.at
outdoor.holzschwab.de
kataloge.quester.at
catalogues.meister.com
spezial.holzschwab.de
kataloge.fuerholz.de
kataloge.quester.at
kataloge.my-workwear.de
webkiosk.sossenheimer-wochenblatt.de
catalog.sogears.com
berliner-kurier.kiosk.plus
spezial.holzschwab.de
webkiosks.sm-sport.de
onlinekrant.binnenvaartkrant.nl
www.magazine-kraftquelle-bgl.de
webkiosk.wonendoejezo.com
catalogues.meister.com
onlinekrant.binnenvaartkrant.nl
weser-wohnwelt.mediaflip.de
ssl.yumpu.com
e-paper.moinmoin.de
www.hochseescheinkurs.online
webkiosks.sm-sport.de
webkiosk.wonendoejezo.com
polsteraktuell.mediaflip.de
kataloge.fuerholz.de
kataloge.fuerholz.de
berliner-kurier.kiosk.plus
kataloge.my-workwear.de
pop3.kraemer-praezisionswerkzeuge-kataloge.de
ssl.yumpu.com
kataloge.fuerholz.de
kiosk.greater.sydney
webkiosk.wonendoejezo.com
kataloge.quester.at
webkiosk.baeckereibuettner.de
boeden.holzschwab.de
epaper.glasmarte.at
ssl.yumpu.com
cf.completesportsnigeria.com

Certificate

The complete raw certificate details for webkiosks.sm-sport.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJv0efRyZLZ/jRtYsqbP
X/U9vpe6/cZv+X7K3zmJwffvUPbF+2Rvu2auKJfysOZs6/5qH5rWHYzRx6pnvqxh
khJNaijEd0pka/GGjFlp9EExfp3g4iajBUoCRy8ogSNJqGDCg8Q0Q3ZW3Ck3RT4I
5kLdCv2GokULQwp3afcRWShqPTW8uSLoZT85nb/ksfEdE4Q5k82OxzFtx33aeFe9
3kJbNVzy0IU4z+u7JxeyVV1Chxh9n9BijDcFyzTAEoWcLhFGGt3UjIXougPyQmA5
Tks849aZO4EmVkz4x9ZUEgnA/94+aHCyFkxlaBqmXEzj0NpNQwrj6AXi13Np4gp6
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262061686070560985704795476132305965803079
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-08 09:03:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-08 09:03:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webkiosks.sm-sport.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23809705603419633647725050016445298806572559948024365533161868042667407701043188854419216719808273437449980886329873793826727966370203168379999540216098947885301427870591180850514767668396424450065778332676900572091752381178539734903911522382148017700448376392314216789111891754530600486885037948147488798499334954597214033671836464722539019459682456146767908611883379609876502827825645435053051199491552251434532943683456764862034456973820370374721512416335898863727391356013122781038018863163373443038672455594754920765008441947314208940701421893235964180282796647114558666082731890445669630394712589844686234614407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa9d739a7474d2a6225df06f8ba21a444d88000e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1859 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogues.hampel-auctions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebook.aft-international.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper-fr.transgourmet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper-it.transgourmet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.pt-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.transgourmet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frauendorfer.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hochglanzmagazine.buendnermedienverlag.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoffmann-moebel.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hummerich.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.advocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobst-wohnwelt.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.garten-bronder-kataloge.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.germannauktionen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.hampel-auctions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.kuebler-sport.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.larimarhotel.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.nice-n-hard.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.vonbohlenimmobilien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemagazine.jaguar.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemagazine.landrover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tailormadewebsite.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.em-chiemgau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.jaguar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.landrover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.zibibbo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.direktvertrieb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.jaguar-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.jaguar.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.jaguar.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.jaguar.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.jaguar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.jaguar.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.jaguarkorea.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.jaguarusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.landrover-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.landrover.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.landrover.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.landrover.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.landrover.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.landrover.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.landroverkorea.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.landroverusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moebel-berta.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moebel-mai.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moebel-meyer.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moebel-mmz.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moebel-vanoepen.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moebel-zuck.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moebelberta.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moebelundobjekt.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nemann.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.meatingpoint-mag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.seamk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospekte.moebel-weirauch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revista.jaguar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revista.jaguarbrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revista.landrover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revista.landrover.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruesen.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonavsofab.xp1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trop.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.bettenstudio-siesta.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.deinmoment.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.zoppijuwelier.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.sm-sport.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.sportausbildung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webssl.webberz.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wohnland-hauber.mediaflip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestwaikatoproperty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cataloguefnac.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruhewald.tv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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