webkiosk.alpenpark.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1a:51:1f:c3:7d:15:b0:0f:6b:a4:b6:c0:6e:e4:f3:41:58 was issued on by Let's Encrypt.

With 47 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=webkiosk.alpenpark.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1a:51:1f:c3:7d:15:b0:0f:6b:a4:b6:c0:6e:e4:f3:41:58
Serial Number (int): 270292031729066437810611574152559938715992
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c4:5a:2f:a4:92:90:95:52:0a:53:7d:de:89:73:ed:0b:ff:c1:48:24
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3f:d1:04:a1:0b:57:b4:42:61:16:a7:dd:10:1d:0c:98:ec:32:95:36
Fingerprint (sha256): 6e:f6:dd:fd:d4:24:93:fc:8a:95:f6:f8:f9:c8:11:86:f9:04:26:70:63:77:22:43:06:67:87:82:f7:b8:4f:85

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate webkiosk.alpenpark.de

47

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webkiosk.alpenpark.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bibliothek.explicare.doctor
brochure.ntpwarranty.com
brochures.keepmoat.com
catalogo.strap.com.br
chef-magazine.com
eatsmarter.kiosk.plus
ebook.frcemexambookstore.co.uk
ebooks.royalafricansafaris.com
emag.diamondworld.net
emag.indianjeweller.in
emagazin.hotelstyle.at
emags.avr-verlagsobjekte.de
epaper.grillzeit.at
epaper.logistik-news.at
grazia.kiosk.plus
info.independenceaustralia.com.au
kataloge.teppich-stark.de
kiosk.am-weststrand.com
kiosk.der-kleine-georg.de
kiosk.kip-tape.com
kiosk.verbaende.com
kiosk.vidaglobal.de
magazin.tellz.me
magazine.ausemergencyservices.com.au
magazine.cioa.com
magazine.elektropraktiker.de
magazine.inversionesciel.com
magazine.iuoe.org
magazine.legacylighthouse.org
magazine.mpdunne.com
magazine.roarkidsmagazine.com
magazine.suncoastergroup.com
magazines.somethinggoodmagazines.com
news.vdmno.de
onlinecatalog.custom-chrome-europe.com
publikationen.contipark.de
quals.truebeck.com
read.rapidrivermagazine.com
tagesspiegel.kiosk.plus
webkiosk.alpenpark.de
webkiosk.leveldesigngroup.com
webkiosks.corshamprint.co.uk
webkiosks.plaskettcollege.com
wirbeicontipark.contipark.de
www.brochures.venturamarketing.ie
www.magazines.thederbeian.com
www.magbooks.icsl.org.in

Other certificates including the domain name alpenpark.de

(limited to 100 certificates)
kiosque.flp.ch
test.phcsystem.com
produktkatalog.mwf-technik.de
magazines.somma.co.za
magazin.nivea.de
kiosk.astrosofa.com
magazines.somma.co.za
kiosk.citytipp.org
travelshop.accessconsciousness.com
magazin.ferienmagazin-deutschland.de
kiosque.flp.ch
vitadoor.mediaflip.de
epaper-en.glasmarte.at
kiosk.velototal.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
magazines.somma.co.za
test.phcsystem.com
start.andernach-wirtschaft.de
epapers.juenglingverlag.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
epaper-en.glasmarte.at
magazines.somma.co.za
fall-magazine.robinsonlightingandbath.com
alpenpark.de
test.phcsystem.com
test.phcsystem.com
epaper-en.glasmarte.at
test.phcsystem.com
epaper-en.glasmarte.at
magazines.somma.co.za
magazin.ferienmagazin-deutschland.de
kiosk.flp.de
webkiosk.die-bank.de
kiosk.flp.ch
www.sblaettle.at
katalog.lemo-schuh.ch
kiosque.flp.ch
webkiosk.alpenpark.de
test.phcsystem.com
start.andernach-wirtschaft.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
start.andernach-wirtschaft.de
kataloge.basoeinkaufsverbund.de
epaper-en.glasmarte.at
epaper-en.glasmarte.at
magazines.somma.co.za
webkiosk.alpenpark.de
epapers.juenglingverlag.de
kiosque.flp.ch
kiosk.velototal.de
kiosk.astrosofa.com
kiosk.flp.ch
kiosk.astrosofa.com
www.sblaettle.at
magazines.somma.co.za
start.andernach-wirtschaft.de
katalog.lemo-schuh.ch
katalog.lemo-schuh.ch
magazines.somma.co.za
magazin.hotelbb.de
katalog.lemo-schuh.ch
kiosk.velototal.de
webkiosk.alpenpark.de
kiosk.flp.de
kiosk.velototal.de
moebel-brameyer.mediaflip.de
kiosk.velototal.de
katalog.klickparts.com
kiosk.velototal.de
kiosk.flp.de
handelsblatt.kiosk.plus
webkiosk.alpenpark.de
epaper-en.glasmarte.at
magazines.somma.co.za
magazin.plusperfekt.de
epaper-en.glasmarte.at
*.alpenpark.de
epaper.immobilienboerse-ag.ch
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
kiosk.velototal.de
publikationen.jugend-bildung.landkreis.gr
katalog.lemo-schuh.ch
epaper-en.glasmarte.at
test.phcsystem.com
katalog.gartenmode.de
webkiosk.alpenpark.de
test.phcsystem.com
handelsblatt.kiosk.plus
kiosk.astrosofa.com
kiosque.flp.ch
test.phcsystem.com
kiosk.velototal.de
kiosk.velototal.de
idee.elite-consulting.eu
kiosk.velototal.de

Certificate

The complete raw certificate details for webkiosk.alpenpark.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKMjCCCRqgAwIBAgISAxpRH8N9FbAPa6S2wG7k80FYMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjgxMTAzMDJaFw0x
OTEyMjcxMTAzMDJaMCAxHjAcBgNVBAMTFXdlYmtpb3NrLmFscGVucGFyay5kZTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM0LLn8DseP70JJ/6haNu84w
ydhK0ZvCB2NM7nT4uzO7IvD3bH8XRJcA1h3eriUQW3iiEjmQiE+OiTX9S2wR+0nj
piNj4niRXZDxsJ9ttlt5l1srzY9bFAnC+NTPeBzyK5luj9x0Xk/tljTlQFKK83DC
FL1O0/6jevQfi062huadN48RWwyYiuA1o699NcjIGS4gKzh5Dhf0B454Xc8ycOq9
7r2VaxPsIN7vjPDaBF2nYAMTEsKr2WU+E1xiwAwcfREyZ6I1Y0hTi5ZHcegRdDvV
g90dNqoqqrmv8pk6pDGh6clIZ/0JccPt9P4qJBhycw4qX8kAu49PKIAmLUDkZp0C
AwEAAaOCBzowggc2MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUxFovpJKQlVIKU33e
iXPtC//BSCQwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB
BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnLzCCBO4GA1UdEQSCBOUwggThghtiaWJsaW90aGVrLmV4cGxpY2Fy
ZS5kb2N0b3KCGGJyb2NodXJlLm50cHdhcnJhbnR5LmNvbYIWYnJvY2h1cmVzLmtl
ZXBtb2F0LmNvbYIVY2F0YWxvZ28uc3RyYXAuY29tLmJyghFjaGVmLW1hZ2F6aW5l
LmNvbYIVZWF0c21hcnRlci5raW9zay5wbHVzgh5lYm9vay5mcmNlbWV4YW1ib29r
c3RvcmUuY28udWuCHmVib29rcy5yb3lhbGFmcmljYW5zYWZhcmlzLmNvbYIVZW1h
Zy5kaWFtb25kd29ybGQubmV0ghZlbWFnLmluZGlhbmpld2VsbGVyLmlughZlbWFn
YXppbi5ob3RlbHN0eWxlLmF0ghtlbWFncy5hdnItdmVybGFnc29iamVrdGUuZGWC
E2VwYXBlci5ncmlsbHplaXQuYXSCF2VwYXBlci5sb2dpc3Rpay1uZXdzLmF0ghFn
cmF6aWEua2lvc2sucGx1c4IhaW5mby5pbmRlcGVuZGVuY2VhdXN0cmFsaWEuY29t
LmF1ghlrYXRhbG9nZS50ZXBwaWNoLXN0YXJrLmRlghdraW9zay5hbS13ZXN0c3Ry
YW5kLmNvbYIZa2lvc2suZGVyLWtsZWluZS1nZW9yZy5kZYISa2lvc2sua2lwLXRh
cGUuY29tghNraW9zay52ZXJiYWVuZGUuY29tghNraW9zay52aWRhZ2xvYmFsLmRl
ghBtYWdhemluLnRlbGx6Lm1lgiRtYWdhemluZS5hdXNlbWVyZ2VuY3lzZXJ2aWNl
cy5jb20uYXWCEW1hZ2F6aW5lLmNpb2EuY29tghxtYWdhemluZS5lbGVrdHJvcHJh
a3Rpa2VyLmRlghxtYWdhemluZS5pbnZlcnNpb25lc2NpZWwuY29tghFtYWdhemlu
ZS5pdW9lLm9yZ4IdbWFnYXppbmUubGVnYWN5bGlnaHRob3VzZS5vcmeCFG1hZ2F6
aW5lLm1wZHVubmUuY29tgh1tYWdhemluZS5yb2Fya2lkc21hZ2F6aW5lLmNvbYIc
bWFnYXppbmUuc3VuY29hc3Rlcmdyb3VwLmNvbYIkbWFnYXppbmVzLnNvbWV0aGlu
Z2dvb2RtYWdhemluZXMuY29tgg1uZXdzLnZkbW5vLmRlgiZvbmxpbmVjYXRhbG9n
LmN1c3RvbS1jaHJvbWUtZXVyb3BlLmNvbYIacHVibGlrYXRpb25lbi5jb250aXBh
cmsuZGWCEnF1YWxzLnRydWViZWNrLmNvbYIbcmVhZC5yYXBpZHJpdmVybWFnYXpp
bmUuY29tghd0YWdlc3NwaWVnZWwua2lvc2sucGx1c4IVd2Via2lvc2suYWxwZW5w
YXJrLmRlgh13ZWJraW9zay5sZXZlbGRlc2lnbmdyb3VwLmNvbYIcd2Via2lvc2tz
LmNvcnNoYW1wcmludC5jby51a4Idd2Via2lvc2tzLnBsYXNrZXR0Y29sbGVnZS5j
b22CHHdpcmJlaWNvbnRpcGFyay5jb250aXBhcmsuZGWCIXd3dy5icm9jaHVyZXMu
dmVudHVyYW1hcmtldGluZy5pZYIdd3d3Lm1hZ2F6aW5lcy50aGVkZXJiZWlhbi5j
b22CGHd3dy5tYWdib29rcy5pY3NsLm9yZy5pbjBMBgNVHSAERTBDMAgGBmeBDAEC
ATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl
bmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AG9Tdqwx8DEZ2JkA
pFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABbXfAvTwAAAQDAEcwRQIgHaiEcLB5ZmIc
GOG5DY1yNSP4MEqb1HCc0+KUKLXlvGECIQDON+thO28WKBO3P4bc7LtBFGaOWAP+
t9fZ8Bgq0Aw3HAB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAAB
bXfAvTcAAAQDAEcwRQIhALft8tKstI0aHYLV0n/GCPEUOcc5pGXEmWsdFC3aO7Ls
AiBHs8r3wty6lMa+qza/aW6en1InjMRHNPZyi7xFCQ5KMzANBgkqhkiG9w0BAQsF
AAOCAQEARpUqZUyZ1Q+axvoZD9F+e0QvZY98wZ5wURDVHFYels4qNbNgz9yQJoso
wsS5QtK5+LfteO2xfBJsRTAQL8RYZz4e3uEmUNEAxkiIufMX0q55bUOoiVpn/H0G
6mJr8HPIbFoOv7bUWOiSlYDYlTlkXA44GsEzMfWzMsEWeQfzmhB1ezm0sBaj6raZ
Xd9I5Epjr6w61juSwDl0aOYQ2q08XJpwV8j4/nJRwr7vFWQUePDtmXLlOS8qSZXG
LJ/HXVdal7mKV2y36i1zy/HxMwah49H4EJolIfP/YUxt1sRQgXtFJsOJZ3hXPDIe
DmMwVg/fQuE4rGgD69wCHbYBoFWV3A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQsufwOx4/vQkn/qFo27
zjDJ2ErRm8IHY0zudPi7M7si8PdsfxdElwDWHd6uJRBbeKISOZCIT46JNf1LbBH7
SeOmI2PieJFdkPGwn222W3mXWyvNj1sUCcL41M94HPIrmW6P3HReT+2WNOVAUorz
cMIUvU7T/qN69B+LTraG5p03jxFbDJiK4DWjr301yMgZLiArOHkOF/QHjnhdzzJw
6r3uvZVrE+wg3u+M8NoEXadgAxMSwqvZZT4TXGLADBx9ETJnojVjSFOLlkdx6BF0
O9WD3R02qiqqua/ymTqkMaHpyUhn/Qlxw+30/iokGHJzDipfyQC7j08ogCYtQORm
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270292031729066437810611574152559938715992
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 11:03:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 11:03:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webkiosk.alpenpark.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25884366383123258606178464088689270197532940331205285103364122874245416007334250069781975343351796711717907668491318462286802325546094218079583627523617002410800510982242612637487537363822063904228328840254256384358242316967703868445067551211640605091759457526559837972858956324433223311603204122152524191754638688278396136213614440768091456147335715667005001704406187969777351766038608746622876353456740311162636609047801040326533425061128500901185781457414072998577493402400882013676889063065221603777178887947416608735881868646140333961927010503948861467579985694348815169468384191189331118071614706023601637975709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c45a2fa4929095520a537dde8973ed0bffc14824
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1253 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliothek.explicare.doctor'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochure.ntpwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.keepmoat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogo.strap.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chef-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatsmarter.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebook.frcemexambookstore.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebooks.royalafricansafaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emag.diamondworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emag.indianjeweller.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emagazin.hotelstyle.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emags.avr-verlagsobjekte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.grillzeit.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.logistik-news.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grazia.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.independenceaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.teppich-stark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.am-weststrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.der-kleine-georg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.kip-tape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.verbaende.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.vidaglobal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.tellz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.ausemergencyservices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.cioa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.elektropraktiker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.inversionesciel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.iuoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.legacylighthouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.mpdunne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.roarkidsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.suncoastergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazines.somethinggoodmagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.vdmno.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinecatalog.custom-chrome-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publikationen.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quals.truebeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.rapidrivermagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagesspiegel.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.alpenpark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.leveldesigngroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.corshamprint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.plaskettcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wirbeicontipark.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brochures.venturamarketing.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazines.thederbeian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magbooks.icsl.org.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d77c0bd3c000004030047304502201da88470b07966621c18e1b90d8d723523f8304a9bd4709cd3e29428b5e5bc61022100ce37eb613b6f162813b73f86dcecbb4114668e5803feb7d7d9f0182ad00c371c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d77c0bd370000040300473045022100b7edf2d2acb48d1a1d82d5d27fc608f11439c739a465c4996b1d142dda3bb2ec022047b3caf7c2dcba94c6beab36bf696e9e9f52278cc44734f6728bbc45090e4a33
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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