magazine.legacylighthouse.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9b:a1:a0:43:a3:e7:9d:fa:6b:51:c1:78:e5:e2:ea:ce:af was issued on by Let's Encrypt.

With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=magazine.legacylighthouse.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9b:a1:a0:43:a3:e7:9d:fa:6b:51:c1:78:e5:e2:ea:ce:af
Serial Number (int): 314295462514752254760333569571523775876783
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:aa:36:10:90:2a:a2:82:0b:1a:14:6b:73:c0:ae:1a:e5:59:23:77
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 04:64:59:77:3d:6f:3d:04:93:6c:bb:09:e3:bb:c3:4d:e4:56:62:ea
Fingerprint (sha256): 4b:d3:01:82:72:59:32:5f:8a:a7:b1:35:7b:7a:72:bb:29:34:25:df:54:9f:e5:d7:e4:03:c7:2a:eb:76:97:73

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate magazine.legacylighthouse.org

54

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magazine.legacylighthouse.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bibliothek.explicare.doctor
brochure.ntpwarranty.com
brochures.keepmoat.com
brochures.waterrower.co.uk
catalogo.strap.com.br
chapters.transamericanheroes.com
chef-magazine.com
documents.zettlerelectronics.com
eatsmarter.kiosk.plus
ebooks.royalafricansafaris.com
emag.diamondworld.net
emag.indianjeweller.in
emags.avr-verlagsobjekte.de
epaper.logistik-news.at
flyer.aqua-dome.at
grazia.kiosk.plus
info.independenceaustralia.com.au
kataloge.teppich-stark.de
kataloge.westfalen-urlaubsreisen.de
kiosk.am-weststrand.com
kiosk.der-kleine-georg.de
kiosk.kip-tape.com
kiosk.shopdecormagazines.com
kiosk.verbaende.com
kiosk.vidaglobal.de
magazin.lifechannel.ch
magazin.tellz.me
magazine.ausemergencyservices.com.au
magazine.cioa.com
magazine.elektropraktiker.de
magazine.innovami.com
magazine.inversionesciel.com
magazine.iuoe.org
magazine.legacylighthouse.org
magazine.mpdunne.com
magazine.roarkidsmagazine.com
magazine.suncoastergroup.com
magazines.somethinggoodmagazines.com
mitteilungsblatt.seifert-medien.de
news.vdmno.de
publications.cwgc.org
publikationen.contipark.de
quals.truebeck.com
read.rapidrivermagazine.com
tagesspiegel.kiosk.plus
webkiosk.leveldesigngroup.com
webkiosk.mwk-koeln.de
webkiosks.corshamprint.co.uk
webkiosks.plaskettcollege.com
wirbeicontipark.contipark.de
www.brochures.venturamarketing.ie
www.magazine.e-motec.net
www.magazines.thederbeian.com
yumpu.testact.de

Other certificates including the domain name legacylighthouse.org

(limited to 100 certificates)
www.magbooks.icsl.org.in
produktkatalog.mwf-technik.de
magazines.somma.co.za
magazin.nivea.de
magazines.somma.co.za
kiosk.citytipp.org
travelshop.accessconsciousness.com
onlinecatalog.custom-chrome-europe.com
vitadoor.mediaflip.de
epaper-en.glasmarte.at
magazine.legacylighthouse.org
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
magazines.somma.co.za
magazine.legacylighthouse.org
start.andernach-wirtschaft.de
epapers.juenglingverlag.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
epaper-en.glasmarte.at
magazines.somma.co.za
epaper-en.glasmarte.at
magazine.legacylighthouse.org
epaper-en.glasmarte.at
magazine.legacylighthouse.org
magazines.somma.co.za
onlinecatalog.custom-chrome-europe.com
www.sblaettle.at
www.magbooks.icsl.org.in
katalog.lemo-schuh.ch
webkiosk.alpenpark.de
onlinecatalog.custom-chrome-europe.com
start.andernach-wirtschaft.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
start.andernach-wirtschaft.de
kataloge.basoeinkaufsverbund.de
epaper-en.glasmarte.at
epaper-en.glasmarte.at
magazines.somma.co.za
webkiosk.alpenpark.de
magazine.legacylighthouse.org
magazine.legacylighthouse.org
epapers.juenglingverlag.de
www.magbooks.icsl.org.in
www.sblaettle.at
magazines.somma.co.za
start.andernach-wirtschaft.de
katalog.lemo-schuh.ch
katalog.lemo-schuh.ch
magazines.somma.co.za
katalog.lemo-schuh.ch
www.magbooks.icsl.org.in
webkiosk.alpenpark.de
katalog.klickparts.com
webkiosk.alpenpark.de
epaper-en.glasmarte.at
magazine.legacylighthouse.org
magazines.somma.co.za
magazin.plusperfekt.de
epaper-en.glasmarte.at
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
katalog.lemo-schuh.ch
epaper-en.glasmarte.at
www.magbooks.icsl.org.in
webkiosk.alpenpark.de
magazine.legacylighthouse.org
handelsblatt.kiosk.plus
magazine.legacylighthouse.org
magazine.legacylighthouse.org
katalog.klickparts.com
magazine.legacylighthouse.org
katalog.klickparts.com
vitadoor.mediaflip.de
epaper.grillzeit.at
onlinecatalog.custom-chrome-europe.com
epaper.grillzeit.at
katalog.lemo-schuh.ch
epaper-en.glasmarte.at
www.magbooks.icsl.org.in
onlinecatalog.custom-chrome-europe.com
magazine.legacylighthouse.org
berliner-kurier1.kiosk.plus
magazine.legacylighthouse.org
webkiosk.alpenpark.de
kiosk.citytipp.org
publikationen.stbverband-koeln.de
start.andernach-wirtschaft.de
epaper-en.glasmarte.at
publikationen.stbverband-koeln.de
vitadoor.mediaflip.de
travelshop.accessconsciousness.com
webkiosk.alpenpark.de
ebook.frcemexambookstore.co.uk
onlinecatalog.custom-chrome-europe.com
katalog.klickparts.com
webkiosk.alpenpark.de
epaper-en.glasmarte.at

Certificate

The complete raw certificate details for magazine.legacylighthouse.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2FxSEPCJmdfTXv74IEx
sVGHBtw2dVH3ka7oin2+w2sCFslNwztffiC6A16Uj/f8lzmaAWOGEBO9Pds1n98S
59dOJ6h8XU37EzhHF5K0g85VO7nyBx1r6JvKL9ZBZN6Pu19pTEg9iRQWAsXePJhW
23uTAYxkKjrVvQ+vps9Dphrjtsg6l5+actJkd1PcxAf7pyRw8KZFjcEKUPYBTi7s
AAyXKWhGXLceI5aJo+ncK04ql260H4lxQd6YI8C3cp6MfV9M8VjQy7oV3d9vWMoU
6UPdif+NEHyiE27fKfaO3Gwpa3WMSSWePOwyCLPHpRIshR1uaFrr50OLDXY/Uo/7
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314295462514752254760333569571523775876783
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-15 19:07:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-13 19:07:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magazine.legacylighthouse.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25674426600132922629298182423576204835556798213987006364899879188069669729995721204338196378977247563924110226536587907877127579624005397099092473386170573518424357841668174559934383604634277986305166663553069636626107546357606010914620270346928747799578197513285105433662233663186709313311932018884380326935225583661057067941719410711891942998077206036529930138021735043432068325149107799516240519507272199202585940345569088746599998148319456772513801134165703829159519467832373395111795661836456138647725654854595692599131021942500756022145604765631274050270216924923269527124942021147324713521163047189981986552721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39aa3610902aa2820b1a146b73c0ae1ae5592377
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1443 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliothek.explicare.doctor'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochure.ntpwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.keepmoat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.waterrower.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogo.strap.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chapters.transamericanheroes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chef-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documents.zettlerelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatsmarter.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebooks.royalafricansafaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emag.diamondworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emag.indianjeweller.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emags.avr-verlagsobjekte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.logistik-news.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.aqua-dome.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grazia.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.independenceaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.teppich-stark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.westfalen-urlaubsreisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.am-weststrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.der-kleine-georg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.kip-tape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.shopdecormagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.verbaende.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.vidaglobal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.lifechannel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.tellz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.ausemergencyservices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.cioa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.elektropraktiker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.innovami.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.inversionesciel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.iuoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.legacylighthouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.mpdunne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.roarkidsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.suncoastergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazines.somethinggoodmagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitteilungsblatt.seifert-medien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.vdmno.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publications.cwgc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publikationen.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quals.truebeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.rapidrivermagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagesspiegel.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.leveldesigngroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.mwk-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.corshamprint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.plaskettcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wirbeicontipark.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brochures.venturamarketing.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazine.e-motec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazines.thederbeian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yumpu.testact.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e70ad80ac0000040300473045022029cb22be4e9aa142ec919f28011a5646bf45e511ba829ca29f9e9514ae8bc8c7022100c38d834e609fb0da19a5f03331e009712231e44935d066d3a004c7014d018ce30076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e70ad814a00000403004730450221009ff1a1c26e7987175ddc6a69d64fdfab95a319613cff958283fcba866619434e022029476e456949c1b9d41b0f7110458715e033198550ae45a81d3fa82b94401a68
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003720bd8f6714880efee15725fa09192f47196c7dfa2a853fb32596d2fe932614f4051bc3e9abbc56f9eac0f0e6ecc939a2ebba424c1b79b376b2eb5f24d783feb41abea4ddd45c8f667dc20c67bae9855fa4b4deb4d38848c4dad034ce86bb485865fa889a0bf7636abb9a456853a3181a33baeaff8f78b9a197144fe221eded20f508a390ffba25dcf45f15021ede7e22d96aff6929e4cb537636a7a1a3b3ec0781fd85b60742739b53e3254d792b9f514773da815d850ca1e2efe4a7436a9679c056e8f3da2efc1258be9fbdfeea648da71847b6badd53ba2200917fb3645b537a4d0fdce0d04f5fe58ccd68cc47aa25b7f59b6cf034b0cd29e0c08a01ba0e