www.michelman.de

Issued by R3

About this certificate

This digital certificate with serial number 03:d7:7d:96:1a:c7:4e:70:ba:47:3d:22:59:be:e1:5c:43:3d was issued on by Let's Encrypt.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.michelman.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d7:7d:96:1a:c7:4e:70:ba:47:3d:22:59:be:e1:5c:43:3d
Serial Number (int): 334664499570417734438168680345033726772029
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: db:6d:57:4f:4f:ce:a5:d7:10:9c:f1:e4:42:b5:92:70:36:9e:09:85
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f9:4e:bc:18:17:d5:f8:b4:f6:01:2e:bd:52:ea:71:7d:be:21:f8:fb
Fingerprint (sha256): 59:a3:db:7d:3d:48:15:ca:f6:93:e8:53:a4:eb:94:a5:2e:cc:43:a2:ac:46:04:49:f6:44:3d:fc:8a:67:6e:8c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.michelman.de

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.michelman.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digiprime.com
expandingpaper.com
ftp.michem.com
host.michelman.com
licomer.com
michelman.asia
michelman.be
michelman.com
michelman.com.br
michelman.de
michelman.eu
michelman.net
michelmaninc.com
michem.asia
michem.com
michem.eu
michem.net
michemprime.com
mktweb20.michelman.net
performanceadditives.com
rustban.com
www.digiprime.com
www.expandingpaper.com
www.licomer.com
www.michelman.asia
www.michelman.be
www.michelman.com
www.michelman.com.br
www.michelman.de
www.michelman.eu
www.michelman.net
www.michelmaninc.com
www.michem.asia
www.michem.com
www.michem.eu
www.michem.net
www.michemprime.com
www.performanceadditives.com
www.rustban.com

Other certificates including the domain name michelman.de

(limited to 100 certificates)
www.licomer.com
www.performanceadditives.com
www.michelman-ecronova.de
www.expandingpaper.com
www.michem.com
www.ecronovapolymer.eu
www.expandingpaper.com
www.michemprime.com
www.michelman.de
www.michem.com
www.michem.asia
www.michelman.de
www.michelman-ecronova.com
www.michelman-ecronova.com
www.michelman-ecronova.com
www.ecronovapolymer.com
www.michemprime.com
www.ecronova.de
www.performanceadditives.com
www.licomer.com
www.performanceadditives.com
www.performanceadditives.com
www.michelmaninc.com
www.michem.net
www.ecronova-polymer.de
www.michemprime.com
www.michem.com
www.michelman-ecronova.com
www.michem.com
www.ecronovapolymer.eu

Certificate

The complete raw certificate details for www.michelman.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHxTCCBq2gAwIBAgISA9d9lhrHTnC6Rz0iWb7hXEM9MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA1MTExNTAyMzdaFw0yMzA4MDkxNTAyMzZaMBsxGTAXBgNVBAMT
EHd3dy5taWNoZWxtYW4uZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDZ9qF5ZPCkk1621HwnAEUgjsVWMLzdpkmayc1Bd+6+jURbug/JAkMehEIE4bzt
79HljKsYOL94i2KycDe28OguSUn4Ten3N2hM9PIprz8tSl+vq7f5AAXeEWoWMJjh
L6mXVgy34MlVPR5SajOpEKxdUgdVd9KBiDgzPF9awxNxvX4SE6sdgTzlUtC49pYV
VYvhxz+5X93o+owYQzGEdJMjtMPtghLtPVgtZU4V7HA1/U5z9fR8ermSRbnUpZfs
G3mpLS666868IOQtlI0JmNOdOiYwYq+ahWoWWcrnD/6UZoW8uI/twCrDXPZ1Kpz+
wMy4W+/QCFlfuMVl7vxojKYRAgMBAAGjggTqMIIE5jAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFNttV09PzqXXEJzx5EK1knA2ngmFMB8GA1UdIwQYMBaAFBQusxe3WFbL
rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov
L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v
cmcvMIICuQYDVR0RBIICsDCCAqyCDWRpZ2lwcmltZS5jb22CEmV4cGFuZGluZ3Bh
cGVyLmNvbYIOZnRwLm1pY2hlbS5jb22CEmhvc3QubWljaGVsbWFuLmNvbYILbGlj
b21lci5jb22CDm1pY2hlbG1hbi5hc2lhggxtaWNoZWxtYW4uYmWCDW1pY2hlbG1h
bi5jb22CEG1pY2hlbG1hbi5jb20uYnKCDG1pY2hlbG1hbi5kZYIMbWljaGVsbWFu
LmV1gg1taWNoZWxtYW4ubmV0ghBtaWNoZWxtYW5pbmMuY29tggttaWNoZW0uYXNp
YYIKbWljaGVtLmNvbYIJbWljaGVtLmV1ggptaWNoZW0ubmV0gg9taWNoZW1wcmlt
ZS5jb22CFm1rdHdlYjIwLm1pY2hlbG1hbi5uZXSCGHBlcmZvcm1hbmNlYWRkaXRp
dmVzLmNvbYILcnVzdGJhbi5jb22CEXd3dy5kaWdpcHJpbWUuY29tghZ3d3cuZXhw
YW5kaW5ncGFwZXIuY29tgg93d3cubGljb21lci5jb22CEnd3dy5taWNoZWxtYW4u
YXNpYYIQd3d3Lm1pY2hlbG1hbi5iZYIRd3d3Lm1pY2hlbG1hbi5jb22CFHd3dy5t
aWNoZWxtYW4uY29tLmJyghB3d3cubWljaGVsbWFuLmRlghB3d3cubWljaGVsbWFu
LmV1ghF3d3cubWljaGVsbWFuLm5ldIIUd3d3Lm1pY2hlbG1hbmluYy5jb22CD3d3
dy5taWNoZW0uYXNpYYIOd3d3Lm1pY2hlbS5jb22CDXd3dy5taWNoZW0uZXWCDnd3
dy5taWNoZW0ubmV0ghN3d3cubWljaGVtcHJpbWUuY29tghx3d3cucGVyZm9ybWFu
Y2VhZGRpdGl2ZXMuY29tgg93d3cucnVzdGJhbi5jb20wTAYDVR0gBEUwQzAIBgZn
gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s
ZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQC3Pvsk35xN
unXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYgLjM6tAAAEAwBGMEQCIBJKl85L
YbO7tve+YhvT+V62H2UYudn8o/GgYITK+JSRAiALlZ61QwgWuUILlQLxoWU8f32r
MowQMMmZl63V17Qh8QB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutS
AAABiAuMzr0AAAQDAEcwRQIhANW3FIF6DVNsuMAfG3P7HlMsthuLAmHlI2or1hFp
XzIsAiBS6LSUnADWsokwIAuLYPAoh3RYREO+AGtHc53ihTSSzjANBgkqhkiG9w0B
AQsFAAOCAQEAFV/mBkFLkWiQBearZkjK6oYkyYgqxuXaANlr7iSDTm4P5jg9v6b/
r5N2ID74Zutp2xy6gxlF8UTwBZxKFaqYMyxjTVjVuuQ+j2rDyy5IZkRjshNEHm4a
2HUBy+TizCxKBFQP7iwNQx++044/arms9+sUoCkWShOQb+aEocDd+9m7hUhsa2lr
+/5u1pBaH5vcgS9DPRaUq/m1YsXEcjhmkLHCd9tjTIyxeMvz3FYknasK/aki2zJz
i57YxsGrZBdSvmPADCgfbdxTIS/aNL6i1XNq7goM/fkabJRam4rNwGIOM/IeI9Pb
2z9G2xGU5WLViCQiJpshYF2mkVEzWuXngw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2faheWTwpJNettR8JwBF
II7FVjC83aZJmsnNQXfuvo1EW7oPyQJDHoRCBOG87e/R5YyrGDi/eItisnA3tvDo
LklJ+E3p9zdoTPTyKa8/LUpfr6u3+QAF3hFqFjCY4S+pl1YMt+DJVT0eUmozqRCs
XVIHVXfSgYg4MzxfWsMTcb1+EhOrHYE85VLQuPaWFVWL4cc/uV/d6PqMGEMxhHST
I7TD7YIS7T1YLWVOFexwNf1Oc/X0fHq5kkW51KWX7Bt5qS0uuuvOvCDkLZSNCZjT
nTomMGKvmoVqFlnK5w/+lGaFvLiP7cAqw1z2dSqc/sDMuFvv0AhZX7jFZe78aIym
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334664499570417734438168680345033726772029
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-11 15:02:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-09 15:02:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.michelman.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27515330337461395413137594461245875714036497069784994431367901012149425280060435154087369745621353353674415704339298594489264783299235402840852563904929117371147087449131998787767189611571868575834772460881212973307111691382439353196171540335903990719785613218822342060845532460216002497336382149775605816629394834597493502963368179937812577726581480689759344533808653800557264689293997613966717232275580437752342053669913071930729550044215480603391811884822140178669882824865503801154095045040574154313128968237743034688403195427983366810561602092079085141975202661599897055420794923769697377266845716803814756754961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							db6d574f4fcea5d7109cf1e442b59270369e0985
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (688 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digiprime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expandingpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.michem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host.michelman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licomer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelman.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelman.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelman.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelman.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelman.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelman.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelmaninc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michem.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michem.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michem.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michemprime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mktweb20.michelman.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performanceadditives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rustban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digiprime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expandingpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licomer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelman.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelman.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelman.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelman.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelman.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelman.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelmaninc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michem.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michem.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michem.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michemprime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.performanceadditives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rustban.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001880b8ccead00000403004630440220124a97ce4b61b3bbb6f7be621bd3f95eb61f6518b9d9fca3f1a06084caf8949102200b959eb5430816b9420b9502f1a1653c7f7dab328c1030c99997add5d7b421f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001880b8ccebd0000040300473045022100d5b714817a0d536cb8c01f1b73fb1e532cb61b8b0261e5236a2bd611695f322c022052e8b4949c00d6b28930200b8b60f0288774584443be006b47739de2853492ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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