magazine.cioa.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8a:9e:73:b0:c7:b4:cb:cc:b5:44:0e:e0:6b:ff:a1:c8:a8 was issued on by Let's Encrypt.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=magazine.cioa.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8a:9e:73:b0:c7:b4:cb:cc:b5:44:0e:e0:6b:ff:a1:c8:a8
Serial Number (int): 308506443153369444374361825820256313133224
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1d:13:96:ad:78:55:11:dc:05:45:57:94:0a:e7:e7:34:bb:af:25:d9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7c:d8:c2:f1:1b:18:a1:ce:38:99:80:3b:d4:ba:31:8d:9c:c3:d3:2e
Fingerprint (sha256): 6b:af:40:1c:0a:26:30:9e:63:28:2a:ba:2b:7e:ad:ac:fe:50:7b:b2:12:63:8f:9f:82:77:b8:09:b5:c2:f1:8e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate magazine.cioa.com

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magazine.cioa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bibliothek.explicare.doctor
brochure.ntpwarranty.com
brochures.keepmoat.com
brochures.waterrower.co.uk
catalogo.strap.com.br
chapters.transamericanheroes.com
chef-magazine.com
documents.zettlerelectronics.com
dokumente.zettlerelectronics.com
dvgforum-022019.dvg.de
eatsmarter.kiosk.plus
ebooks.royalafricansafaris.com
emags.avr-verlagsobjekte.de
epaper.bioplasticsmagazine.com
epaper.keim.com
expose.hoepfnerimmobilien.de
flyer.aqua-dome.at
grazia.kiosk.plus
info.independenceaustralia.com.au
katalog.diewe.de
kataloge.westfalen-urlaubsreisen.de
kiosk.am-weststrand.com
kiosk.antalis-verpackungen.de
kiosk.ath-heinl.de
kiosk.kip-tape.com
kiosk.prometheaneditions.com
kiosk.shopdecormagazines.com
kiosk.verbaende.com
kundenmagazin.derpart.com
lpdigitalbooks.learnersplatform.com
magazin.films-home.de
magazin.tellz.me
magazin.volkswagen.ba
magazin.wirtungutes.de
magazine.ausemergencyservices.com.au
magazine.cioa.com
magazine.elektropraktiker.de
magazine.iuoe.org
magazine.roarkidsmagazine.com
media.hirschmann-automotive.com
mitteilungsblatt.seifert-medien.de
miwi.halle.ihk.de
news.vdmno.de
prospekt.sonderpreis-baumarkt.de
prospekte.hkl-baumaschinen.at
publications.cwgc.org
publikationen.contipark.de
read.rapidrivermagazine.com
specials.klickparts.com
tagesspiegel.kiosk.plus
test.schauspiegel.com
webkiosk.artandpictures.nl
webkiosk.keim.com
webkiosk.mwk-koeln.de
webkiosk.wandelkrant.be
webkiosk.ww-events-online.de
webkiosks.corshamprint.co.uk
webweb.webberz.ch
wirbeicontipark.contipark.de
worldwide.i-am-magazine.com
www.brochures.venturamarketing.ie
www.dreamchasezurs.com
www.magazine.e-motec.net
www.magazines.thederbeian.com
yumpu.testact.de

Other certificates including the domain name cioa.com

(limited to 100 certificates)
webmail.cioa.com
www.magbooks.icsl.org.in
produktkatalog.mwf-technik.de
magazines.somma.co.za
magazines.somma.co.za
magazine.suncoastergroup.com
onlinecatalog.custom-chrome-europe.com
kiosk.vidaglobal.de
www.cioa.com
webmail.cioa.com
vitadoor.mediaflip.de
epaper-en.glasmarte.at
magazine.legacylighthouse.org
kiosk.der-kleine-georg.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
magazines.somma.co.za
magazine.legacylighthouse.org
kiosk.vidaglobal.de
start.andernach-wirtschaft.de
bitly.cioa.com
kiosk.der-kleine-georg.de
quals.truebeck.com
epapers.juenglingverlag.de
kiosk.vidaglobal.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
bitly.cioa.com
epaper-en.glasmarte.at
magazines.somma.co.za
bitly.cioa.com
www.cioa.com
kiosk.vidaglobal.de
quals.truebeck.com
emag.indianjeweller.in
epaper-en.glasmarte.at
magazine.legacylighthouse.org
epaper-en.glasmarte.at
magazine.legacylighthouse.org
magazines.somma.co.za
onlinecatalog.custom-chrome-europe.com
kiosk.vidaglobal.de
www.magbooks.icsl.org.in
katalog.lemo-schuh.ch
kiosk.vidaglobal.de
magazines.somethinggoodmagazines.com
webkiosk.alpenpark.de
onlinecatalog.custom-chrome-europe.com
kiosk.vidaglobal.de
start.andernach-wirtschaft.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
sni.cloudflaressl.com
start.andernach-wirtschaft.de
kataloge.basoeinkaufsverbund.de
webmail.cioa.com
epaper-en.glasmarte.at
epaper-en.glasmarte.at
magazine.inversionesciel.com
magazines.somma.co.za
webkiosk.alpenpark.de
magazine.legacylighthouse.org
magazine.legacylighthouse.org
bitly.cioa.com
epapers.juenglingverlag.de
www.magbooks.icsl.org.in
www.cioa.com
magazines.somma.co.za
start.andernach-wirtschaft.de
kiosk.der-kleine-georg.de
webmail.cioa.com
kiosk.der-kleine-georg.de
katalog.lemo-schuh.ch
katalog.lemo-schuh.ch
magazines.somma.co.za
katalog.lemo-schuh.ch
www.magbooks.icsl.org.in
webkiosk.alpenpark.de
webmail.cioa.com
bitly.cioa.com
magazine.cioa.com
webkiosk.alpenpark.de
epaper-en.glasmarte.at
magazine.legacylighthouse.org
magazines.somma.co.za
webmail.cioa.com
epaper-en.glasmarte.at
webkiosk.alpenpark.de
magazines.somethinggoodmagazines.com
katalog.lemo-schuh.ch
katalog.lemo-schuh.ch
epaper-en.glasmarte.at
www.magbooks.icsl.org.in
bitly.cioa.com
webkiosk.alpenpark.de
bitly.cioa.com
magazine.legacylighthouse.org
bitly.cioa.com
handelsblatt.kiosk.plus
quals.truebeck.com

Certificate

The complete raw certificate details for magazine.cioa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMBTCCCu2gAwIBAgISA4qec7DHtMvMtUQO4Gv/ocioMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjgxMTA0MDBaFw0y
MDA1MjgxMTA0MDBaMBwxGjAYBgNVBAMTEW1hZ2F6aW5lLmNpb2EuY29tMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6V2EwIYRYCo78knjejdVEtWaKR3C
vEOwwaT7hdCHlhWeRdA3Fm/dPcIfqG/ftjKPAkRWDtr6X5jEy8AnBFZfsWnZ0Yzy
GHiEncJ45xUqt0kP8J804SuYhgmvT9OOhRhKFIxyDB2eQrYZ/uQBObEsmkto9klq
N9n/jbCf54+lSHCJthJlpoy5vZhSOXZgkxhlWSyCRoyXBeKbRw64Dw8DyvSGsJ/L
CxU/Nzp8r3N47GTkZNQOctmrkks9XkxHaovDbqCt7N/i+cya/SZAajwDnPn+U+EV
zDdKYzNs0oLe3hs27Ma9xm/h8Jlmmag+xC8oMgHHZh0M2Mb5ntKSam3/SwIDAQAB
o4IJETCCCQ0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQdE5ateFUR3AVFV5QK5+c0
u68l2TAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcB
AQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlw
dC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlw
dC5vcmcvMIIGxgYDVR0RBIIGvTCCBrmCG2JpYmxpb3RoZWsuZXhwbGljYXJlLmRv
Y3RvcoIYYnJvY2h1cmUubnRwd2FycmFudHkuY29tghZicm9jaHVyZXMua2VlcG1v
YXQuY29tghpicm9jaHVyZXMud2F0ZXJyb3dlci5jby51a4IVY2F0YWxvZ28uc3Ry
YXAuY29tLmJygiBjaGFwdGVycy50cmFuc2FtZXJpY2FuaGVyb2VzLmNvbYIRY2hl
Zi1tYWdhemluZS5jb22CIGRvY3VtZW50cy56ZXR0bGVyZWxlY3Ryb25pY3MuY29t
giBkb2t1bWVudGUuemV0dGxlcmVsZWN0cm9uaWNzLmNvbYIWZHZnZm9ydW0tMDIy
MDE5LmR2Zy5kZYIVZWF0c21hcnRlci5raW9zay5wbHVzgh5lYm9va3Mucm95YWxh
ZnJpY2Fuc2FmYXJpcy5jb22CG2VtYWdzLmF2ci12ZXJsYWdzb2JqZWt0ZS5kZYIe
ZXBhcGVyLmJpb3BsYXN0aWNzbWFnYXppbmUuY29tgg9lcGFwZXIua2VpbS5jb22C
HGV4cG9zZS5ob2VwZm5lcmltbW9iaWxpZW4uZGWCEmZseWVyLmFxdWEtZG9tZS5h
dIIRZ3JhemlhLmtpb3NrLnBsdXOCIWluZm8uaW5kZXBlbmRlbmNlYXVzdHJhbGlh
LmNvbS5hdYIQa2F0YWxvZy5kaWV3ZS5kZYIja2F0YWxvZ2Uud2VzdGZhbGVuLXVy
bGF1YnNyZWlzZW4uZGWCF2tpb3NrLmFtLXdlc3RzdHJhbmQuY29tgh1raW9zay5h
bnRhbGlzLXZlcnBhY2t1bmdlbi5kZYISa2lvc2suYXRoLWhlaW5sLmRlghJraW9z
ay5raXAtdGFwZS5jb22CHGtpb3NrLnByb21ldGhlYW5lZGl0aW9ucy5jb22CHGtp
b3NrLnNob3BkZWNvcm1hZ2F6aW5lcy5jb22CE2tpb3NrLnZlcmJhZW5kZS5jb22C
GWt1bmRlbm1hZ2F6aW4uZGVycGFydC5jb22CI2xwZGlnaXRhbGJvb2tzLmxlYXJu
ZXJzcGxhdGZvcm0uY29tghVtYWdhemluLmZpbG1zLWhvbWUuZGWCEG1hZ2F6aW4u
dGVsbHoubWWCFW1hZ2F6aW4udm9sa3N3YWdlbi5iYYIWbWFnYXppbi53aXJ0dW5n
dXRlcy5kZYIkbWFnYXppbmUuYXVzZW1lcmdlbmN5c2VydmljZXMuY29tLmF1ghFt
YWdhemluZS5jaW9hLmNvbYIcbWFnYXppbmUuZWxla3Ryb3ByYWt0aWtlci5kZYIR
bWFnYXppbmUuaXVvZS5vcmeCHW1hZ2F6aW5lLnJvYXJraWRzbWFnYXppbmUuY29t
gh9tZWRpYS5oaXJzY2htYW5uLWF1dG9tb3RpdmUuY29tgiJtaXR0ZWlsdW5nc2Js
YXR0LnNlaWZlcnQtbWVkaWVuLmRlghFtaXdpLmhhbGxlLmloay5kZYINbmV3cy52
ZG1uby5kZYIgcHJvc3Bla3Quc29uZGVycHJlaXMtYmF1bWFya3QuZGWCHXByb3Nw
ZWt0ZS5oa2wtYmF1bWFzY2hpbmVuLmF0ghVwdWJsaWNhdGlvbnMuY3dnYy5vcmeC
GnB1Ymxpa2F0aW9uZW4uY29udGlwYXJrLmRlghtyZWFkLnJhcGlkcml2ZXJtYWdh
emluZS5jb22CF3NwZWNpYWxzLmtsaWNrcGFydHMuY29tghd0YWdlc3NwaWVnZWwu
a2lvc2sucGx1c4IVdGVzdC5zY2hhdXNwaWVnZWwuY29tghp3ZWJraW9zay5hcnRh
bmRwaWN0dXJlcy5ubIIRd2Via2lvc2sua2VpbS5jb22CFXdlYmtpb3NrLm13ay1r
b2Vsbi5kZYIXd2Via2lvc2sud2FuZGVsa3JhbnQuYmWCHHdlYmtpb3NrLnd3LWV2
ZW50cy1vbmxpbmUuZGWCHHdlYmtpb3Nrcy5jb3JzaGFtcHJpbnQuY28udWuCEXdl
YndlYi53ZWJiZXJ6LmNoghx3aXJiZWljb250aXBhcmsuY29udGlwYXJrLmRlght3
b3JsZHdpZGUuaS1hbS1tYWdhemluZS5jb22CIXd3dy5icm9jaHVyZXMudmVudHVy
YW1hcmtldGluZy5pZYIWd3d3LmRyZWFtY2hhc2V6dXJzLmNvbYIYd3d3Lm1hZ2F6
aW5lLmUtbW90ZWMubmV0gh13d3cubWFnYXppbmVzLnRoZWRlcmJlaWFuLmNvbYIQ
eXVtcHUudGVzdGFjdC5kZTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf
EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCC
AQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEA
KQaNsgiaN9kTAAABcIuump4AAAQDAEcwRQIgN74SmdSBEkynmfWYMSWrJGCKVr2m
s0a3PhQKPCdx6ugCIQDrKd+oX/nfhVmTtXFTudOF1L76rxcNm8vw40hecEphZwB1
AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAABcIuumqcAAAQDAEYw
RAIgaYbrKkTxuOsVLwLq+XA0BtMHSQJ6DyVgn9X6W5QGseICIHXJ5ETiqUTeI4Ll
iUFqN/u6HmXi4XHuhLRfE/t3P0GWMA0GCSqGSIb3DQEBCwUAA4IBAQBal4U+HMdZ
cBH59Jkr7zBoq0RHGsac9O+KQTGiJh92O9X0x5WQM7mlMfxcLA4o2vS9140Ty9Hj
mjOvOdU97+WUNZ7FbSBJWROJ9buPLWB6jNHx/beQlE/Obs3U8UREgjLSpPgss3At
rx9UstuspQVrObHFmBFr50022M2Wkxj3p2noPnv6TisL8OjoT0o58BiMNOXhUR+J
qjxunNjD00ke3FRwonkFK+jEhVIuPxJIrcLLM+z+tzyOJrMVqjUG5+j+dMh1tO7R
G1Vw2fbvENFSby2V5p4Ss8kuc4Veu+6H80gUJ4b1ORhN7+CAy5AO0QBySdNAoZ16
BydbgO/KaD56
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6V2EwIYRYCo78knjejdV
EtWaKR3CvEOwwaT7hdCHlhWeRdA3Fm/dPcIfqG/ftjKPAkRWDtr6X5jEy8AnBFZf
sWnZ0YzyGHiEncJ45xUqt0kP8J804SuYhgmvT9OOhRhKFIxyDB2eQrYZ/uQBObEs
mkto9klqN9n/jbCf54+lSHCJthJlpoy5vZhSOXZgkxhlWSyCRoyXBeKbRw64Dw8D
yvSGsJ/LCxU/Nzp8r3N47GTkZNQOctmrkks9XkxHaovDbqCt7N/i+cya/SZAajwD
nPn+U+EVzDdKYzNs0oLe3hs27Ma9xm/h8Jlmmag+xC8oMgHHZh0M2Mb5ntKSam3/
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308506443153369444374361825820256313133224
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-28 11:04:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-28 11:04:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magazine.cioa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29459640779104957945816084183032451116636939618956297697083463984531714958166901954095605615077312156911944298663595690460405289354187179398403135966884678635560418450543896258758689877831347072718105304020920991088701956076700987130318020617291926198959837602563138746330406307976214508029731584776159901004261440712543078356773402845329930075010145664885024339940847033906395977516264259307707794769956465901966023720099611291110206028950555528487982418355340429362464097813017250718745925740227888384108730096599814782352060876248605876429589477225914350375125678336329116075216093248311075374788011457271567351627
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d1396ad785511dc054557940ae7e734bbaf25d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1725 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliothek.explicare.doctor'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochure.ntpwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.keepmoat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.waterrower.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogo.strap.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chapters.transamericanheroes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chef-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documents.zettlerelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dokumente.zettlerelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvgforum-022019.dvg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatsmarter.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebooks.royalafricansafaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emags.avr-verlagsobjekte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.bioplasticsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.keim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expose.hoepfnerimmobilien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.aqua-dome.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grazia.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.independenceaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalog.diewe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.westfalen-urlaubsreisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.am-weststrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.antalis-verpackungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.ath-heinl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.kip-tape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.prometheaneditions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.shopdecormagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.verbaende.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundenmagazin.derpart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpdigitalbooks.learnersplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.films-home.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.tellz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.volkswagen.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.wirtungutes.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.ausemergencyservices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.cioa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.elektropraktiker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.iuoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.roarkidsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.hirschmann-automotive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitteilungsblatt.seifert-medien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miwi.halle.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.vdmno.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospekt.sonderpreis-baumarkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospekte.hkl-baumaschinen.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publications.cwgc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publikationen.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.rapidrivermagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'specials.klickparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagesspiegel.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.schauspiegel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.artandpictures.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.keim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.mwk-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.wandelkrant.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.ww-events-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.corshamprint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webweb.webberz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wirbeicontipark.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldwide.i-am-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brochures.venturamarketing.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamchasezurs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazine.e-motec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazines.thederbeian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yumpu.testact.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001708bae9a9e0000040300473045022037be1299d481124ca799f5983125ab24608a56bda6b346b73e140a3c2771eae8022100eb29dfa85ff9df855993b57153b9d385d4befaaf170d9bcbf0e3485e704a616700750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001708bae9aa7000004030046304402206986eb2a44f1b8eb152f02eaf9703406d30749027a0f25609fd5fa5b9406b1e2022075c9e444e2a944de2382e589416a37fbba1e65e2e171ee84b45f13fb773f4196
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005a97853e1cc7597011f9f4992bef3068ab44471ac69cf4ef8a4131a2261f763bd5f4c7959033b9a531fc5c2c0e28daf4bdd78d13cbd1e39a33af39d53defe594359ec56d2049591389f5bb8f2d607a8cd1f1fdb790944fce6ecdd4f144448232d2a4f82cb3702daf1f54b2dbaca5056b39b1c598116be74d36d8cd969318f7a769e83e7bfa4e2b0bf0e8e84f4a39f0188c34e5e1511f89aa3c6e9cd8c3d3491edc5470a279052be8c485522e3f1248adc2cb33ecfeb73c8e26b315aa3506e7e8fe74c875b4eed11b5570d9f6ef10d1526f2d95e69e12b3c92e73855ebbee87f348142786f539184defe080cb900ed1007249d340a19d7a07275b80efca683e7a