www.magbooks.icsl.org.in

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:dd:ef:88:d2:e6:95:2a:fb:f7:80:29:20:6e:a8:09:72:6b was issued on by Let's Encrypt.

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.magbooks.icsl.org.in

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:dd:ef:88:d2:e6:95:2a:fb:f7:80:29:20:6e:a8:09:72:6b
Serial Number (int): 423969942737508402018441835127220153709163
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d4:90:b3:a4:77:3e:a6:9d:4d:39:c5:ab:7f:a5:8d:13:79:ed:9c:0f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 75:f4:7b:76:3a:85:5d:92:aa:ec:03:72:6f:05:fb:16:6b:0d:45:24
Fingerprint (sha256): 44:d5:7b:42:e0:08:fa:cc:e7:b2:69:ad:e1:e9:d0:f4:e6:32:3a:58:ba:3c:f5:3c:6b:d3:df:18:d3:2c:48:ab

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.magbooks.icsl.org.in

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.magbooks.icsl.org.in

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bibliothek.explicare.doctor
brochure.ntpwarranty.com
brochures.keepmoat.com
catalogo.strap.com.br
chef-magazine.com
eatsmarter.kiosk.plus
ebook.frcemexambookstore.co.uk
ebooks.royalafricansafaris.com
emag.diamondworld.net
emag.indianjeweller.in
emags.avr-verlagsobjekte.de
epaper.grillzeit.at
epaper.logistik-news.at
flyer.aqua-dome.at
grazia.kiosk.plus
info.independenceaustralia.com.au
kataloge.teppich-stark.de
kiosk.am-weststrand.com
kiosk.der-kleine-georg.de
kiosk.kip-tape.com
kiosk.verbaende.com
kiosk.vidaglobal.de
magazin.tellz.me
magazine.ausemergencyservices.com.au
magazine.cioa.com
magazine.elektropraktiker.de
magazine.inversionesciel.com
magazine.iuoe.org
magazine.legacylighthouse.org
magazine.mpdunne.com
magazine.roarkidsmagazine.com
magazine.suncoastergroup.com
magazines.somethinggoodmagazines.com
news.vdmno.de
onlinecatalog.custom-chrome-europe.com
publikationen.contipark.de
quals.truebeck.com
read.rapidrivermagazine.com
tagesspiegel.kiosk.plus
webkiosk.leveldesigngroup.com
webkiosks.corshamprint.co.uk
webkiosks.plaskettcollege.com
wirbeicontipark.contipark.de
www.brochures.venturamarketing.ie
www.magazines.thederbeian.com
www.magbooks.icsl.org.in

Other certificates including the domain name icsl.org.in

(limited to 100 certificates)
kiosque.flp.ch
test.phcsystem.com
www.magbooks.icsl.org.in
magazines.somma.co.za
magazin.nivea.de
kiosk.astrosofa.com
magazines.somma.co.za
kiosk.citytipp.org
travelshop.accessconsciousness.com
magazin.ferienmagazin-deutschland.de
kiosque.flp.ch
vitadoor.mediaflip.de
epaper-en.glasmarte.at
kiosk.velototal.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
magazines.somma.co.za
test.phcsystem.com
start.andernach-wirtschaft.de
epapers.juenglingverlag.de
www.icsl.org.in
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
epaper-en.glasmarte.at
magazines.somma.co.za
fall-magazine.robinsonlightingandbath.com
test.phcsystem.com
test.phcsystem.com
epaper-en.glasmarte.at
test.phcsystem.com
epaper-en.glasmarte.at
magazines.somma.co.za
magazin.ferienmagazin-deutschland.de
kiosk.flp.de
webkiosk.die-bank.de
kiosk.flp.ch
www.sblaettle.at
www.magbooks.icsl.org.in
katalog.lemo-schuh.ch
kiosque.flp.ch
webkiosk.alpenpark.de
test.phcsystem.com
start.andernach-wirtschaft.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
start.andernach-wirtschaft.de
kataloge.basoeinkaufsverbund.de
icsl.org.in
epaper-en.glasmarte.at
epaper-en.glasmarte.at
magazines.somma.co.za
webkiosk.alpenpark.de
icsl.org.in
epapers.juenglingverlag.de
kiosque.flp.ch
kiosk.velototal.de
kiosk.astrosofa.com
www.magbooks.icsl.org.in
kiosk.flp.ch
icsl.org.in
kiosk.astrosofa.com
www.sblaettle.at
magazines.somma.co.za
start.andernach-wirtschaft.de
katalog.lemo-schuh.ch
katalog.lemo-schuh.ch
magazines.somma.co.za
katalog.lemo-schuh.ch
kiosk.velototal.de
www.icsl.org.in
www.magbooks.icsl.org.in
webkiosk.alpenpark.de
kiosk.flp.de
kiosk.velototal.de
kiosk.velototal.de
kiosk.velototal.de
kiosk.flp.de
webkiosk.alpenpark.de
epaper-en.glasmarte.at
magazines.somma.co.za
magazin.plusperfekt.de
epaper-en.glasmarte.at
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
kiosk.velototal.de
katalog.lemo-schuh.ch
epaper-en.glasmarte.at
test.phcsystem.com
www.magbooks.icsl.org.in
icsl.org.in
webkiosk.alpenpark.de
test.phcsystem.com
kiosk.astrosofa.com
kiosque.flp.ch
test.phcsystem.com
kiosk.velototal.de
kiosk.velototal.de
idee.elite-consulting.eu
kiosk.velototal.de

Certificate

The complete raw certificate details for www.magbooks.icsl.org.in in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKGTCCCQGgAwIBAgISBN3viNLmlSr794ApIG6oCXJrMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDYxMTAzMTZaFw0y
MDAxMDQxMTAzMTZaMCMxITAfBgNVBAMTGHd3dy5tYWdib29rcy5pY3NsLm9yZy5p
bjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVWzK+cNpZGM0HZ/1Th
fBRTdPVV/xgwZCbeTsQiBMvAMHJVeYNWnHF2x+8WXvtZca/E2csWXokMfCxW1kSp
uLt019hoEzdxhCGZdPgb9YIYlmWgoPE9LnOmRMSWc52Qbtsre3KkVdrvypznu+s1
HGpf61XpzlGJaJR6LXAjspMlPfF+FWDlxVwvFw0dKyn9erm56nbHp/cee3i2yVZ1
ptZj07JqpRSXIt2HP5QZUn3aUiIoX+mIlmq8nUiW9WxanUdXgesi4gyMcbRMoTh9
hT/D1MiR7YaikXjj356VGpUICe7VXWpBH/FKAzzVuqwRv2wPYbWgtDtcXs1OFL5r
E7sCAwEAAaOCBx4wggcaMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU1JCzpHc+pp1N
OcWrf6WNE3ntnA8wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzCCBNMGA1UdEQSCBMowggTGghtiaWJsaW90aGVrLmV4cGxp
Y2FyZS5kb2N0b3KCGGJyb2NodXJlLm50cHdhcnJhbnR5LmNvbYIWYnJvY2h1cmVz
LmtlZXBtb2F0LmNvbYIVY2F0YWxvZ28uc3RyYXAuY29tLmJyghFjaGVmLW1hZ2F6
aW5lLmNvbYIVZWF0c21hcnRlci5raW9zay5wbHVzgh5lYm9vay5mcmNlbWV4YW1i
b29rc3RvcmUuY28udWuCHmVib29rcy5yb3lhbGFmcmljYW5zYWZhcmlzLmNvbYIV
ZW1hZy5kaWFtb25kd29ybGQubmV0ghZlbWFnLmluZGlhbmpld2VsbGVyLmlughtl
bWFncy5hdnItdmVybGFnc29iamVrdGUuZGWCE2VwYXBlci5ncmlsbHplaXQuYXSC
F2VwYXBlci5sb2dpc3Rpay1uZXdzLmF0ghJmbHllci5hcXVhLWRvbWUuYXSCEWdy
YXppYS5raW9zay5wbHVzgiFpbmZvLmluZGVwZW5kZW5jZWF1c3RyYWxpYS5jb20u
YXWCGWthdGFsb2dlLnRlcHBpY2gtc3RhcmsuZGWCF2tpb3NrLmFtLXdlc3RzdHJh
bmQuY29tghlraW9zay5kZXIta2xlaW5lLWdlb3JnLmRlghJraW9zay5raXAtdGFw
ZS5jb22CE2tpb3NrLnZlcmJhZW5kZS5jb22CE2tpb3NrLnZpZGFnbG9iYWwuZGWC
EG1hZ2F6aW4udGVsbHoubWWCJG1hZ2F6aW5lLmF1c2VtZXJnZW5jeXNlcnZpY2Vz
LmNvbS5hdYIRbWFnYXppbmUuY2lvYS5jb22CHG1hZ2F6aW5lLmVsZWt0cm9wcmFr
dGlrZXIuZGWCHG1hZ2F6aW5lLmludmVyc2lvbmVzY2llbC5jb22CEW1hZ2F6aW5l
Lml1b2Uub3Jngh1tYWdhemluZS5sZWdhY3lsaWdodGhvdXNlLm9yZ4IUbWFnYXpp
bmUubXBkdW5uZS5jb22CHW1hZ2F6aW5lLnJvYXJraWRzbWFnYXppbmUuY29tghxt
YWdhemluZS5zdW5jb2FzdGVyZ3JvdXAuY29tgiRtYWdhemluZXMuc29tZXRoaW5n
Z29vZG1hZ2F6aW5lcy5jb22CDW5ld3MudmRtbm8uZGWCJm9ubGluZWNhdGFsb2cu
Y3VzdG9tLWNocm9tZS1ldXJvcGUuY29tghpwdWJsaWthdGlvbmVuLmNvbnRpcGFy
ay5kZYIScXVhbHMudHJ1ZWJlY2suY29tghtyZWFkLnJhcGlkcml2ZXJtYWdhemlu
ZS5jb22CF3RhZ2Vzc3BpZWdlbC5raW9zay5wbHVzgh13ZWJraW9zay5sZXZlbGRl
c2lnbmdyb3VwLmNvbYIcd2Via2lvc2tzLmNvcnNoYW1wcmludC5jby51a4Idd2Vi
a2lvc2tzLnBsYXNrZXR0Y29sbGVnZS5jb22CHHdpcmJlaWNvbnRpcGFyay5jb250
aXBhcmsuZGWCIXd3dy5icm9jaHVyZXMudmVudHVyYW1hcmtldGluZy5pZYIdd3d3
Lm1hZ2F6aW5lcy50aGVkZXJiZWlhbi5jb22CGHd3dy5tYWdib29rcy5pY3NsLm9y
Zy5pbjBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkC
BAIEgfQEgfEA7wB1AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAAB
baDz0YUAAAQDAEYwRAIgIkMIgwNEfg9Gsnjbi8jjNWPRSufLiMuM/gN0AgmDSCcC
IBcnrLAZ0SBmdvkgn9CL4OzgS2pzfaQxGzcjEgwrLpajAHYAsh4FzIuizYogTodm
+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFtoPPTRgAABAMARzBFAiBK0hRyJ5yYaFz8
jyvdsItmkAmDFQWxKyHGHjm9hnLGLAIhAL9qkBH/qJvGU7DdG26Ufnj+qs9Q0GFi
5ghLxZn421dKMA0GCSqGSIb3DQEBCwUAA4IBAQAIQPZ7CXtt1pIEDImcZFyOYHhj
Dt89+elddeLHN+yz5zJUl5FqhwZo957XvwZ9BOxzE5kAkYe3m4vlUikRr6dN+NNY
8OBcpXO3728htg8StwOIivI4/PV0VIjBBXcYRtdYlrh3zP3BJ+oLCPlZKwBKp8lI
kbaKwXMORgXhxGFo6BAioPcDMP/eBJsHAe4xDZaT5GqJmguPXW/6W8cTlku6yL75
8jYRlID8i69SFMnG+XHOnsZCJabY8vmyAkA2IWWZ7iAV5zRDUkmiIHTPJCECMrfp
oH+f19iN/qqZY0sdu5NbMOofxPJrEtzJHWiEoKyC4JDp3JRmyqlBADk0OJDu
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVbMr5w2lkYzQdn/VOF8
FFN09VX/GDBkJt5OxCIEy8AwclV5g1accXbH7xZe+1lxr8TZyxZeiQx8LFbWRKm4
u3TX2GgTN3GEIZl0+Bv1ghiWZaCg8T0uc6ZExJZznZBu2yt7cqRV2u/KnOe76zUc
al/rVenOUYlolHotcCOykyU98X4VYOXFXC8XDR0rKf16ubnqdsen9x57eLbJVnWm
1mPTsmqlFJci3Yc/lBlSfdpSIihf6YiWarydSJb1bFqdR1eB6yLiDIxxtEyhOH2F
P8PUyJHthqKReOPfnpUalQgJ7tVdakEf8UoDPNW6rBG/bA9htaC0O1xezU4UvmsT
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423969942737508402018441835127220153709163
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-06 11:03:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-04 11:03:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.magbooks.icsl.org.in'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24911748533955743013589399728743377744826212079918428673943897741110894251628158341748878208421559230710500399649552158652973208103745704843676359088762207732602580210275567744814840164463766079408920051664811285023011928827103460750702575843200899937734680831450330074802003230654964419486207548966825871176976310824455975119251105466380870602735551924955137852374461504356443573360660741531195943095252970649008716557769102379461375092797065799126363032257737358776171858666044504681233097785647089760634335783481697019979433151487170636229881116769723026317976590232148391659276253157949884322650067565438237873083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d490b3a4773ea69d4d39c5ab7fa58d1379ed9c0f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1226 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliothek.explicare.doctor'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochure.ntpwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.keepmoat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogo.strap.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chef-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatsmarter.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebook.frcemexambookstore.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebooks.royalafricansafaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emag.diamondworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emag.indianjeweller.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emags.avr-verlagsobjekte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.grillzeit.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.logistik-news.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.aqua-dome.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grazia.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.independenceaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.teppich-stark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.am-weststrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.der-kleine-georg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.kip-tape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.verbaende.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.vidaglobal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.tellz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.ausemergencyservices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.cioa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.elektropraktiker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.inversionesciel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.iuoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.legacylighthouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.mpdunne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.roarkidsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.suncoastergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazines.somethinggoodmagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.vdmno.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinecatalog.custom-chrome-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publikationen.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quals.truebeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.rapidrivermagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagesspiegel.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.leveldesigngroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.corshamprint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.plaskettcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wirbeicontipark.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brochures.venturamarketing.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazines.thederbeian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magbooks.icsl.org.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016da0f3d185000004030046304402202243088303447e0f46b278db8bc8e33563d14ae7cb88cb8cfe0374020983482702201727acb019d1206676f9209fd08be0ece04b6a737da4311b3723120c2b2e96a3007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016da0f3d346000004030047304502204ad21472279c98685cfc8f2bddb08b669009831505b12b21c61e39bd8672c62c022100bf6a9011ffa89bc653b0dd1b6e947e78feaacf50d06162e6084bc599f8db574a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000840f67b097b6dd692040c899c645c8e6078630edf3df9e95d75e2c737ecb3e7325497916a870668f79ed7bf067d04ec731399009187b79b8be5522911afa74df8d358f0e05ca573b7ef6f21b60f12b703888af238fcf5745488c105771846d75896b877ccfdc127ea0b08f9592b004aa7c94891b68ac1730e4605e1c46168e81022a0f70330ffde049b0701ee310d9693e46a899a0b8f5d6ffa5bc713964bbac8bef9f236119480fc8baf5214c9c6f971ce9ec64225a6d8f2f9b2024036216599ee2015e734435249a22074cf24210232b7e9a07f9fd7d88dfeaa99634b1dbb935b30ea1fc4f26b12dcc91d6884a0ac82e090e9dc9466caa9410039343890ee