ab-impianti-srl.comovee.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:09:88:68:1a:13:44:c8:cf:57:0e:7a:13:5f:c6:36:34:37 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ab-impianti-srl.comovee.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:09:88:68:1a:13:44:c8:cf:57:0e:7a:13:5f:c6:36:34:37
Serial Number (int): 264580714632738494819512354589709409072183
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bb:ed:71:7d:71:be:97:5e:ca:cc:ef:af:13:02:1e:e4:64:e3:c7:30
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 27:fb:d7:14:02:a3:1a:c5:14:de:44:93:4b:d1:c3:af:0b:7c:17:f1
Fingerprint (sha256): 7b:ff:f2:c8:28:76:e3:cb:07:9f:a1:6e:7b:4f:30:2e:ca:96:f8:9d:a2:74:3d:3e:c0:b1:8a:0f:10:e8:ff:b1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate ab-impianti-srl.comovee.it

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ab-impianti-srl.comovee.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ab-impianti-srl.comovee.it
ace.comovee.de
acticall.comovee.fr
ahold.comovee.net
airliquide.comovee.nl
alliander.comovee.nl
altrans.comovee.net
alutronic.comovee.de
amazon-es.comovee.net
arvato-distribution.comovee.net
atnt.comovee.net
bank-deutsches-kraftfahrzeuggewerbe.comovee.net
bank-leumi.comovee.net
bechtel.comovee.net
big-direkt-gesund.comovee.net
blechwaren-limburg.comovee.net
bnp-paritest.comovee.net
bornheim.comovee.de
cargobull.comovee.net
ceramtec.comovee.de
ch-dracenie.comovee.net
cho.comovee.net
cnh-industrial.comovee.net
cnhi.comovee.it
cofely.comovee.net
colgate-palmolive.comovee.net
covoiturekiabi.comovee.net
ctco.comovee.net
currenta.comovee.net
cycloon.comovee.nl
dachser.comovee.net
deutsche-lufthansa-ag.comovee.net
dormagen.comovee.de
drivemx.comovee.net
eisenmann.comovee.net
emc2.comovee.fr
emerson-electric.comovee.net
enterprise-france.comovee.net
eph.comovee.mx
ey-de.comovee.net
fantasy.comovee.net
fasterminds.comovee.net
ferromex.comovee.net
ge-brazil.comovee.net
gens.comovee.fr
gonvarri.comovee.net
grand-dax.comovee.fr
groupecarso.comovee.fr
hennessy.comovee.net
hilti.comovee.net
ienova.comovee.mx
lendlease.comovee.net
lessebo.samakning.se
liazon.comovee.net
linde.comovee.de
liverpool.comovee.mx
lok-leipzig.comovee.net
lw.comovee.net
mcdonalds-canada.comovee.net
mdc-power.comovee.net
nagel-group.comovee.de
neiu.comovee.net
nevs.comovee.net
novagile.comovee.net
orkelljunga.samakning.se
pays-pyrenees-mediterranee.comovee.fr
pepsico.comovee.mx
pg.comovee.net
ponant.comovee.fr
primokont.comovee.de
pwclu.comovee.net
redblue.comovee.de
rnv.comovee.net
roche.comovee.mx
rockinleuben.comovee.net
ruag.comovee.net
rxante.comovee.net
schueco.comovee.net
schwarzgruppe.comovee.net
sgd-perfumery.comovee.net
skitaos.comovee.net
sms-group.comovee.net
stadt-bornheim.comovee.de
stadtwerke-pfaffenhofen-adilm.comovee.net
suez.comovee.es
suez.comovee.net
sumitomo.comovee.net
summerfest.comovee.net
swarthmore.comovee.net
sysware.comovee.de
tally.comovee.net
tecnico---lisbon.comovee.net
teton.comovee.net
unitedpercussion.comovee.net
vaude.comovee.net
visiativ.comovee.fr
volaris.comovee.net
vw-otlg.comovee.net
wfp.comovee.net
yaskawa.comovee.net

Other certificates including the domain name comovee.it

(limited to 100 certificates)

Certificate

The complete raw certificate details for ab-impianti-srl.comovee.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264580714632738494819512354589709409072183
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-13 08:12:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-11 08:12:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ab-impianti-srl.comovee.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 872429042980521006807807956184505860190557469844454487525866552119601995562397653070843661252316868838195441308509338097088652947745605160595519856164879866997183585027988019831889670835039912528216816311835500231974129303058706763611227988110715950296149120266121185997260394975874125361153655220057779461291941132424903682470483715718642986105011676481360780177240190491211879468675847918668474955860836270353880993440164746417926435215209108781738118783823793350459189799630900225527203130182077330274105595128515408107480230751707196272226351690611555499120221950235205225717444904301156126649396553776073546406242246600005841620595799492265586116874545983786358941567674284260429999481920421014717132914042688628722062600124266994718508080391105866232543973040131812936626679292095782618968645069299236083920503061320568675718964877666168685894510596200467759940257496035384572736496611166877468898904103266839869622792173013256942999256181163074760469353202782288173489112575154623213505054812004053562134654001879113410677106563878920399594539740376206475091115074152853389665780571094627266032356369654954526944046366826107593577103250472780047234727829568660912388189154327845480761389662232764085869492668656535066342329719
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bbed717d71be975ecaccefaf13021ee464e3c730
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2287 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ab-impianti-srl.comovee.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ace.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acticall.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahold.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airliquide.comovee.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliander.comovee.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altrans.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alutronic.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazon-es.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvato-distribution.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atnt.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bank-deutsches-kraftfahrzeuggewerbe.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bank-leumi.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bechtel.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'big-direkt-gesund.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blechwaren-limburg.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp-paritest.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bornheim.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cargobull.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceramtec.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch-dracenie.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cho.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnh-industrial.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnhi.comovee.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cofely.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colgate-palmolive.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covoiturekiabi.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctco.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'currenta.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cycloon.comovee.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dachser.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutsche-lufthansa-ag.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dormagen.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drivemx.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eisenmann.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emc2.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emerson-electric.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterprise-france.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eph.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ey-de.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasy.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fasterminds.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferromex.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge-brazil.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gens.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gonvarri.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grand-dax.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupecarso.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hennessy.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilti.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ienova.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lendlease.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lessebo.samakning.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liazon.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linde.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liverpool.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lok-leipzig.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lw.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdonalds-canada.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdc-power.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nagel-group.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neiu.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nevs.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novagile.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orkelljunga.samakning.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pays-pyrenees-mediterranee.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pepsico.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponant.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primokont.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwclu.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redblue.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rnv.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockinleuben.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruag.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxante.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schueco.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwarzgruppe.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgd-perfumery.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skitaos.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms-group.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadt-bornheim.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadtwerke-pfaffenhofen-adilm.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suez.comovee.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suez.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumitomo.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summerfest.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swarthmore.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sysware.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tally.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnico---lisbon.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teton.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedpercussion.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaude.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visiativ.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volaris.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vw-otlg.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfp.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaskawa.comovee.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009984deb3ce220240ec3481a0bc6b8881050fd59e6c0b4bd9e247fa398b13b297066b22914fc086ab3f00604b2d50fd5f5141127dd98073a0a8aec2afbe2e54aba3847ef4ce49b779ead658cd1076b5c14a68d76aeadbb049ff60c67611217e1cc0e4637fb7a0926b8d323fad7c1230b3e9e0bd4aff5f9cf056c09a033d9888b456e230410d1852e01531013d43ce16b4e34f7aee0861c7bf6d3a12529c0e0fdf0df1d73eb550339b677cf4ca462a18060721afc38e676634375aa2956a43168b170269dfc948c62e4ac16278b96fec1c07721b6eb853b06e73e9c0e2683ad8203ac83e27de4b2f5b476b7dbcd6162f4d26bb2ea7ebaf30c48a0d0247aed84038