visitstarnberg.com
Issued by R3
About this certificate
This digital certificate with serial number 03:60:9a:38:3c:2c:ca:47:0f:a0:d8:24:97:66:e2:62:69:0e was issued on by Let's Encrypt.
With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=visitstarnberg.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:60:9a:38:3c:2c:ca:47:0f:a0:d8:24:97:66:e2:62:69:0eSerial Number (int): 294208958120159004676377556484347866016014
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 3e:7a:b5:3c:f4:23:2b:4f:28:a3:3e:a7:21:31:3d:28:35:36:7b:a9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 47:57:06:a2:e8:c8:96:ff:48:be:ed:cc:a4:cc:b3:83:da:44:8f:9c
Fingerprint (sha256): 75:e9:3f:40:0b:6f:3d:46:9f:3c:3c:68:7e:c2:29:06:c1:b3:ac:56:90:2e:c9:cf:cf:d1:2e:72:6c:6f:47:62
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate visitstarnberg.com
99
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for visitstarnberg.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
visitaix.com
visitaixlesbains.com
visitajaccio.com
visitalbertville.com
visitangouleme.com
visitarcachon.com
visitauxerre.com
visitbastia.com
visitbelfort.com
visitblaye.com
visitblois.com
visitboulognebillancourt.com
visitboulognesurmer.com
visitbourges.com
visitbrest.com
visitcaen.com
visitcagnes.com
visitchambery.com
visitchartres.com
visitcherbourg.com
visitclermontferrand.com
visitdinard.com
visitengadin.com
visitetretat.com
visitevian.com
visitfecamp.com
visitfribourg.com
visitlabaule.com
visitlarochelle.com
visitlemans.com
visitmeaux.com
visitmeudon.com
visitneuchatel.com
visitneuilly.com
visitpau.com
visitperpignan.com
visitquimper.com
visitroubaix.com
visitrueil.com
visitsaintcloud.com
visitsaintdenis.com
visitsaintemilion.com
visitsaintetienne.com
visitsaintjeandeluz.com
visitsaintmalo.com
visitstarnberg.com
visitsuresnes.com
visittarbes.com
visitthionville.com
visittourcoing.com
visittrouville.com
visitvalence.com
visitvichy.com
www.visitaix.com
www.visitaixlesbains.com
www.visitajaccio.com
www.visitalbertville.com
www.visitangouleme.com
www.visitarcachon.com
www.visitauxerre.com
www.visitbastia.com
www.visitbelfort.com
www.visitblaye.com
www.visitblois.com
www.visitboulognebillancourt.com
www.visitboulognesurmer.com
www.visitbourges.com
www.visitbrest.com
www.visitcaen.com
www.visitcagnes.com
www.visitchambery.com
www.visitchartres.com
www.visitcherbourg.com
www.visitclermontferrand.com
www.visitevian.com
www.visitfecamp.com
www.visitlabaule.com
www.visitlemans.com
www.visitmeaux.com
www.visitmeudon.com
www.visitneuilly.com
www.visitperpignan.com
www.visitquimper.com
www.visitroubaix.com
www.visitrueil.com
www.visitsaintcloud.com
www.visitsaintdenis.com
www.visitsaintemilion.com
www.visitsaintetienne.com
www.visitsaintjeandeluz.com
www.visitsaintmalo.com
www.visitstarnberg.com
www.visitsuresnes.com
www.visittarbes.com
www.visitthionville.com
www.visittourcoing.com
www.visittrouville.com
www.visitvalence.com
www.visitvichy.com
visitaixlesbains.com
visitajaccio.com
visitalbertville.com
visitangouleme.com
visitarcachon.com
visitauxerre.com
visitbastia.com
visitbelfort.com
visitblaye.com
visitblois.com
visitboulognebillancourt.com
visitboulognesurmer.com
visitbourges.com
visitbrest.com
visitcaen.com
visitcagnes.com
visitchambery.com
visitchartres.com
visitcherbourg.com
visitclermontferrand.com
visitdinard.com
visitengadin.com
visitetretat.com
visitevian.com
visitfecamp.com
visitfribourg.com
visitlabaule.com
visitlarochelle.com
visitlemans.com
visitmeaux.com
visitmeudon.com
visitneuchatel.com
visitneuilly.com
visitpau.com
visitperpignan.com
visitquimper.com
visitroubaix.com
visitrueil.com
visitsaintcloud.com
visitsaintdenis.com
visitsaintemilion.com
visitsaintetienne.com
visitsaintjeandeluz.com
visitsaintmalo.com
visitstarnberg.com
visitsuresnes.com
visittarbes.com
visitthionville.com
visittourcoing.com
visittrouville.com
visitvalence.com
visitvichy.com
www.visitaix.com
www.visitaixlesbains.com
www.visitajaccio.com
www.visitalbertville.com
www.visitangouleme.com
www.visitarcachon.com
www.visitauxerre.com
www.visitbastia.com
www.visitbelfort.com
www.visitblaye.com
www.visitblois.com
www.visitboulognebillancourt.com
www.visitboulognesurmer.com
www.visitbourges.com
www.visitbrest.com
www.visitcaen.com
www.visitcagnes.com
www.visitchambery.com
www.visitchartres.com
www.visitcherbourg.com
www.visitclermontferrand.com
www.visitevian.com
www.visitfecamp.com
www.visitlabaule.com
www.visitlemans.com
www.visitmeaux.com
www.visitmeudon.com
www.visitneuilly.com
www.visitperpignan.com
www.visitquimper.com
www.visitroubaix.com
www.visitrueil.com
www.visitsaintcloud.com
www.visitsaintdenis.com
www.visitsaintemilion.com
www.visitsaintetienne.com
www.visitsaintjeandeluz.com
www.visitsaintmalo.com
www.visitstarnberg.com
www.visitsuresnes.com
www.visittarbes.com
www.visitthionville.com
www.visittourcoing.com
www.visittrouville.com
www.visitvalence.com
www.visitvichy.com
Other certificates including the domain name visitstarnberg.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for visitstarnberg.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIM+DCCC+CgAwIBAgISA2CaODwsykcPoNgkl2biYmkOMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMDUxMzMxMDNaFw0yNDA0MDQxMzMxMDJaMB0xGzAZBgNVBAMT EnZpc2l0c3Rhcm5iZXJnLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKIw9eVU4Ga2Nxu14i6/zQr7qm+1JOyu2BV2Po/KM3Zi5lVlDrk3gsVyBOnM WcMb1KJOcClgA6VFhRwWqRpXRLMQDVGQ8MosEfdZmVA1X6eemg8RGyJT6uT1EY5b 4lV0AEpJJBAd7y2ztB/SSUMZXgFeep6aXg52qqjzwkhO4Iry2ttB48sCbc/AtNpc itOsdc2xZsDymZDZzCqAHgDjUq31WEB9Vzuy55cfRpOFn75sOPOg6JindYwcj0sB heta3lpOIbw0Jer++N5IhFC4j/KLN0xmBrYci+yDcs5S0uRT5mAelyoSGCOHRQ2V Xv2RY6igF20OnBuVsPk++5LWE5cCAwEAAaOCChswggoXMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUPnq1PPQjK08ooz6nITE9KDU2e6kwHwYDVR0jBBgwFoAUFC6zF7dY VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy Lm9yZy8wgggkBgNVHREEgggbMIIIF4IMdmlzaXRhaXguY29tghR2aXNpdGFpeGxl c2JhaW5zLmNvbYIQdmlzaXRhamFjY2lvLmNvbYIUdmlzaXRhbGJlcnR2aWxsZS5j b22CEnZpc2l0YW5nb3VsZW1lLmNvbYIRdmlzaXRhcmNhY2hvbi5jb22CEHZpc2l0 YXV4ZXJyZS5jb22CD3Zpc2l0YmFzdGlhLmNvbYIQdmlzaXRiZWxmb3J0LmNvbYIO dmlzaXRibGF5ZS5jb22CDnZpc2l0YmxvaXMuY29tghx2aXNpdGJvdWxvZ25lYmls bGFuY291cnQuY29tghd2aXNpdGJvdWxvZ25lc3VybWVyLmNvbYIQdmlzaXRib3Vy Z2VzLmNvbYIOdmlzaXRicmVzdC5jb22CDXZpc2l0Y2Flbi5jb22CD3Zpc2l0Y2Fn bmVzLmNvbYIRdmlzaXRjaGFtYmVyeS5jb22CEXZpc2l0Y2hhcnRyZXMuY29tghJ2 aXNpdGNoZXJib3VyZy5jb22CGHZpc2l0Y2xlcm1vbnRmZXJyYW5kLmNvbYIPdmlz aXRkaW5hcmQuY29tghB2aXNpdGVuZ2FkaW4uY29tghB2aXNpdGV0cmV0YXQuY29t gg52aXNpdGV2aWFuLmNvbYIPdmlzaXRmZWNhbXAuY29tghF2aXNpdGZyaWJvdXJn LmNvbYIQdmlzaXRsYWJhdWxlLmNvbYITdmlzaXRsYXJvY2hlbGxlLmNvbYIPdmlz aXRsZW1hbnMuY29tgg52aXNpdG1lYXV4LmNvbYIPdmlzaXRtZXVkb24uY29tghJ2 aXNpdG5ldWNoYXRlbC5jb22CEHZpc2l0bmV1aWxseS5jb22CDHZpc2l0cGF1LmNv bYISdmlzaXRwZXJwaWduYW4uY29tghB2aXNpdHF1aW1wZXIuY29tghB2aXNpdHJv dWJhaXguY29tgg52aXNpdHJ1ZWlsLmNvbYITdmlzaXRzYWludGNsb3VkLmNvbYIT dmlzaXRzYWludGRlbmlzLmNvbYIVdmlzaXRzYWludGVtaWxpb24uY29tghV2aXNp dHNhaW50ZXRpZW5uZS5jb22CF3Zpc2l0c2FpbnRqZWFuZGVsdXouY29tghJ2aXNp dHNhaW50bWFsby5jb22CEnZpc2l0c3Rhcm5iZXJnLmNvbYIRdmlzaXRzdXJlc25l cy5jb22CD3Zpc2l0dGFyYmVzLmNvbYITdmlzaXR0aGlvbnZpbGxlLmNvbYISdmlz aXR0b3VyY29pbmcuY29tghJ2aXNpdHRyb3V2aWxsZS5jb22CEHZpc2l0dmFsZW5j ZS5jb22CDnZpc2l0dmljaHkuY29tghB3d3cudmlzaXRhaXguY29tghh3d3cudmlz aXRhaXhsZXNiYWlucy5jb22CFHd3dy52aXNpdGFqYWNjaW8uY29tghh3d3cudmlz aXRhbGJlcnR2aWxsZS5jb22CFnd3dy52aXNpdGFuZ291bGVtZS5jb22CFXd3dy52 aXNpdGFyY2FjaG9uLmNvbYIUd3d3LnZpc2l0YXV4ZXJyZS5jb22CE3d3dy52aXNp dGJhc3RpYS5jb22CFHd3dy52aXNpdGJlbGZvcnQuY29tghJ3d3cudmlzaXRibGF5 ZS5jb22CEnd3dy52aXNpdGJsb2lzLmNvbYIgd3d3LnZpc2l0Ym91bG9nbmViaWxs YW5jb3VydC5jb22CG3d3dy52aXNpdGJvdWxvZ25lc3VybWVyLmNvbYIUd3d3LnZp c2l0Ym91cmdlcy5jb22CEnd3dy52aXNpdGJyZXN0LmNvbYIRd3d3LnZpc2l0Y2Fl bi5jb22CE3d3dy52aXNpdGNhZ25lcy5jb22CFXd3dy52aXNpdGNoYW1iZXJ5LmNv bYIVd3d3LnZpc2l0Y2hhcnRyZXMuY29tghZ3d3cudmlzaXRjaGVyYm91cmcuY29t ghx3d3cudmlzaXRjbGVybW9udGZlcnJhbmQuY29tghJ3d3cudmlzaXRldmlhbi5j b22CE3d3dy52aXNpdGZlY2FtcC5jb22CFHd3dy52aXNpdGxhYmF1bGUuY29tghN3 d3cudmlzaXRsZW1hbnMuY29tghJ3d3cudmlzaXRtZWF1eC5jb22CE3d3dy52aXNp dG1ldWRvbi5jb22CFHd3dy52aXNpdG5ldWlsbHkuY29tghZ3d3cudmlzaXRwZXJw aWduYW4uY29tghR3d3cudmlzaXRxdWltcGVyLmNvbYIUd3d3LnZpc2l0cm91YmFp eC5jb22CEnd3dy52aXNpdHJ1ZWlsLmNvbYIXd3d3LnZpc2l0c2FpbnRjbG91ZC5j b22CF3d3dy52aXNpdHNhaW50ZGVuaXMuY29tghl3d3cudmlzaXRzYWludGVtaWxp b24uY29tghl3d3cudmlzaXRzYWludGV0aWVubmUuY29tght3d3cudmlzaXRzYWlu dGplYW5kZWx1ei5jb22CFnd3dy52aXNpdHNhaW50bWFsby5jb22CFnd3dy52aXNp dHN0YXJuYmVyZy5jb22CFXd3dy52aXNpdHN1cmVzbmVzLmNvbYITd3d3LnZpc2l0 dGFyYmVzLmNvbYIXd3d3LnZpc2l0dGhpb252aWxsZS5jb22CFnd3dy52aXNpdHRv dXJjb2luZy5jb22CFnd3dy52aXNpdHRyb3V2aWxsZS5jb22CFHd3dy52aXNpdHZh bGVuY2UuY29tghJ3d3cudmlzaXR2aWNoeS5jb20wEwYDVR0gBAwwCjAIBgZngQwB AgEwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQA7U3d1Pi25gE6LMFsG/kA7Z9hP w/THvQANLXJv4frUFwAAAYzaCN2lAAAEAwBGMEQCIHwssfKOW64s/qoQMcJHduSv NdgFT3KiJmo1bDd4KrwyAiBDHXV36DRyjNxSDzeTOctsQAYDn+14ZfOqAjpOPgpe dAB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjNoI35EAAAQD AEYwRAIgHVeP1prixK/8EtkBUwUeqj3IZlD9/mNjG4RTjhDXYGICID0xdCUR0fQe K/tiZWJZ0SVrgUVYnxuOpfNxrGhZvj2XMA0GCSqGSIb3DQEBCwUAA4IBAQCDlpmK 7RVRrHL8UZeFSSz9zUxEmD2GA3ulZN2hyUcZUwTdvElly41GZV6Vapao9vq7tnXX 333Jw7Fal7cLEmWhEWoF30lhI/wL+Q+bfJwI6o+RViGHubzDPyMqYmcFmfyJGVO/ gkuRNWO9kzC+hr+vGXH45q8WQLJuNGpQmmQQOgMtog1f5830gEoBE7ZH7vzm5z98 66KWut9QUwPNzUKwQI80PRnhiub/d924I1nnRMtMmcMMmDpy5in5TNB7OJPuSw8G 8nGiILtGdGuPWklWaT2hWuBeGCdUHmtma8diD417rU/H1A5+XQGc7hjwdm+trxyu 3YEE9EsvcKdotCH3 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojD15VTgZrY3G7XiLr/N Cvuqb7Uk7K7YFXY+j8ozdmLmVWUOuTeCxXIE6cxZwxvUok5wKWADpUWFHBapGldE sxANUZDwyiwR91mZUDVfp56aDxEbIlPq5PURjlviVXQASkkkEB3vLbO0H9JJQxle AV56nppeDnaqqPPCSE7givLa20HjywJtz8C02lyK06x1zbFmwPKZkNnMKoAeAONS rfVYQH1XO7Lnlx9Gk4Wfvmw486DomKd1jByPSwGF61reWk4hvDQl6v743kiEULiP 8os3TGYGthyL7INyzlLS5FPmYB6XKhIYI4dFDZVe/ZFjqKAXbQ6cG5Ww+T77ktYT lwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 294208958120159004676377556484347866016014 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 13:31:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 13:31:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'visitstarnberg.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20474748741960928296220982935967980934685340920974152206586697817768739318530768172684847588432490329996785966176033897248482708055996051029223973103757271373227559670320052601655203636948855431610415960455200946550514062887407657177898411865892852701725054593114420844872232731235043734096138351980909661936432104347613225000474285634980614510558493138007768019286718936466331353789969788834781690048300840409155790080015189315122549789906681134805821785727297215464028744082849221729845289329095834285932122905837995630241301711120413642054441847908243349565514257686932596067926279497237604419713314220271658734487 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3e7ab53cf4232b4f28a33ea721313d2835367ba9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2075 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitaix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitaixlesbains.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitajaccio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitalbertville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitangouleme.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitarcachon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitauxerre.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitbastia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitbelfort.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitblaye.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitblois.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitboulognebillancourt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitboulognesurmer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitbourges.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitbrest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitcaen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitcagnes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitchambery.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitchartres.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitcherbourg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitclermontferrand.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitdinard.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitengadin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitetretat.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitevian.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitfecamp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitfribourg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitlabaule.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitlarochelle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitlemans.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitmeaux.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitmeudon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitneuchatel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitneuilly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitpau.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitperpignan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitquimper.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitroubaix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitrueil.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintcloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintdenis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintemilion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintetienne.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintjeandeluz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintmalo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitstarnberg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsuresnes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visittarbes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitthionville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visittourcoing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visittrouville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitvalence.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitvichy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitaix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitaixlesbains.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitajaccio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitalbertville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitangouleme.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitarcachon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitauxerre.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitbastia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitbelfort.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitblaye.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitblois.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitboulognebillancourt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitboulognesurmer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitbourges.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitbrest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitcaen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitcagnes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitchambery.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitchartres.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitcherbourg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitclermontferrand.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitevian.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitfecamp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitlabaule.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitlemans.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitmeaux.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitmeudon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitneuilly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitperpignan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitquimper.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitroubaix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitrueil.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintcloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintdenis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintemilion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintetienne.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintjeandeluz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintmalo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitstarnberg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsuresnes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visittarbes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitthionville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visittourcoing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visittrouville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitvalence.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitvichy.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cda08dda5000004030046304402207c2cb1f28e5bae2cfeaa1031c24776e4af35d8054f72a2266a356c37782abc320220431d7577e834728cdc520f379339cb6c4006039fed7865f3aa023a4e3e0a5e7400750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cda08df91000004030046304402201d578fd69ae2c4affc12d90153051eaa3dc86650fdfe63631b84538e10d7606202203d31742511d1f41e2bfb62656259d1256b8145589f1b8ea5f371ac6859be3d97 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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