webkiosk.alpenpark.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1c:ba:0e:12:25:f6:e3:22:7c:68:8d:90:c8:af:d3:5c:8d was issued on by Let's Encrypt.

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=webkiosk.alpenpark.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1c:ba:0e:12:25:f6:e3:22:7c:68:8d:90:c8:af:d3:5c:8d
Serial Number (int): 271112073536530253536983437105240053341325
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 91:4c:93:6d:1d:48:43:7e:86:45:e6:16:8d:4c:00:48:c9:24:e8:bc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): aa:bc:47:27:2d:1b:37:4f:50:fb:f7:7a:0e:84:94:82:4d:f9:7d:01
Fingerprint (sha256): 80:f6:48:2b:72:ec:5d:b7:28:65:df:82:84:24:f6:4b:74:ff:19:91:87:76:a0:2a:69:3d:66:4b:26:81:e4:61

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate webkiosk.alpenpark.de

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webkiosk.alpenpark.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bibliothek.explicare.doctor
brochure.ntpwarranty.com
brochures.keepmoat.com
catalogo.strap.com.br
chef-magazine.com
eatsmarter.kiosk.plus
ebook.frcemexambookstore.co.uk
ebooks.royalafricansafaris.com
emag.diamondworld.net
emag.indianjeweller.in
emagazin.hotelstyle.at
emags.avr-verlagsobjekte.de
epaper.grillzeit.at
epaper.logistik-news.at
grazia.kiosk.plus
info.independenceaustralia.com.au
kataloge.teppich-stark.de
kiosk.am-weststrand.com
kiosk.der-kleine-georg.de
kiosk.kip-tape.com
kiosk.verbaende.com
kiosk.vidaglobal.de
magazin.tellz.me
magazine.ausemergencyservices.com.au
magazine.cioa.com
magazine.elektropraktiker.de
magazine.inversionesciel.com
magazine.iuoe.org
magazine.legacylighthouse.org
magazine.mpdunne.com
magazine.roarkidsmagazine.com
magazine.suncoastergroup.com
magazines.somethinggoodmagazines.com
news.vdmno.de
onlinecatalog.custom-chrome-europe.com
publikationen.contipark.de
quals.truebeck.com
tagesspiegel.kiosk.plus
webkiosk.alpenpark.de
webkiosk.leveldesigngroup.com
webkiosks.corshamprint.co.uk
webkiosks.plaskettcollege.com
wirbeicontipark.contipark.de
www.brochures.venturamarketing.ie
www.magazines.thederbeian.com
www.magbooks.icsl.org.in

Other certificates including the domain name alpenpark.de

(limited to 100 certificates)
kiosque.flp.ch
test.phcsystem.com
produktkatalog.mwf-technik.de
magazines.somma.co.za
magazin.nivea.de
kiosk.astrosofa.com
magazines.somma.co.za
kiosk.citytipp.org
travelshop.accessconsciousness.com
magazin.ferienmagazin-deutschland.de
kiosque.flp.ch
vitadoor.mediaflip.de
epaper-en.glasmarte.at
kiosk.velototal.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
magazines.somma.co.za
test.phcsystem.com
start.andernach-wirtschaft.de
epapers.juenglingverlag.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
epaper-en.glasmarte.at
magazines.somma.co.za
fall-magazine.robinsonlightingandbath.com
alpenpark.de
test.phcsystem.com
test.phcsystem.com
epaper-en.glasmarte.at
test.phcsystem.com
epaper-en.glasmarte.at
magazines.somma.co.za
magazin.ferienmagazin-deutschland.de
kiosk.flp.de
webkiosk.die-bank.de
kiosk.flp.ch
www.sblaettle.at
katalog.lemo-schuh.ch
kiosque.flp.ch
webkiosk.alpenpark.de
test.phcsystem.com
start.andernach-wirtschaft.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
start.andernach-wirtschaft.de
kataloge.basoeinkaufsverbund.de
epaper-en.glasmarte.at
epaper-en.glasmarte.at
magazines.somma.co.za
webkiosk.alpenpark.de
epapers.juenglingverlag.de
kiosque.flp.ch
kiosk.velototal.de
kiosk.astrosofa.com
kiosk.flp.ch
kiosk.astrosofa.com
www.sblaettle.at
magazines.somma.co.za
start.andernach-wirtschaft.de
katalog.lemo-schuh.ch
katalog.lemo-schuh.ch
magazines.somma.co.za
magazin.hotelbb.de
katalog.lemo-schuh.ch
kiosk.velototal.de
webkiosk.alpenpark.de
kiosk.flp.de
kiosk.velototal.de
moebel-brameyer.mediaflip.de
kiosk.velototal.de
katalog.klickparts.com
kiosk.velototal.de
kiosk.flp.de
handelsblatt.kiosk.plus
webkiosk.alpenpark.de
epaper-en.glasmarte.at
magazines.somma.co.za
magazin.plusperfekt.de
epaper-en.glasmarte.at
*.alpenpark.de
epaper.immobilienboerse-ag.ch
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
kiosk.velototal.de
publikationen.jugend-bildung.landkreis.gr
katalog.lemo-schuh.ch
epaper-en.glasmarte.at
test.phcsystem.com
katalog.gartenmode.de
webkiosk.alpenpark.de
test.phcsystem.com
handelsblatt.kiosk.plus
kiosk.astrosofa.com
kiosque.flp.ch
test.phcsystem.com
kiosk.velototal.de
kiosk.velototal.de
idee.elite-consulting.eu
kiosk.velototal.de

Certificate

The complete raw certificate details for webkiosk.alpenpark.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Px33ZrI6RJT5bl5UZjz
l6y3CbNkYgV11hsrGfjv8EEIlAXSzKQQbjc+/NObdPI+DlJyy+RJA6+YO9y+RLsN
I5/dkNSzVPIQGiBMtWP4ejZ7Q5XlHVfouOubwlMu9Gj2U7zgmZm7BOz8mxVCZc4N
/So2o4vbD7YpaYQdm46EgPbJ7QoEvqumKNBl0B6zgUsRGOiZN1hTf+nw+4UhbKgq
Rr8/iRl8XR+NUDK8IAdwcq+nWlgGGJcmTfiStGCOaz0rff7L9oeHZe7ZMZJhp/Jp
cy+3uMC4DPh7g0pBaS13KFs7HfZTrCZK4w/XxdO57MwysN7QNVFyGEQQbteCvj6C
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271112073536530253536983437105240053341325
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-20 09:00:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-19 09:00:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webkiosk.alpenpark.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29916736693876680205479311158189206873003603904085868268839910663039732782624550540661263855187100310648695769558688863152711651503669822441262714704699297686795598940118006850154347900835400487266515004697035765210125692173251888458325552143385755161551151284968714697853143167071252550590004735482168182399087170544095362881478346666778234514412479959859129036945472540694182800485681401539937838646129809394115951139328678951156912331564882007879494182298333801271025176645385441526060044739842335179195327387096568441955531217172023946863395920094322091614825353383897792968810729876483967713404976654069647966909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							914c936d1d48437e8645e6168d4c0048c924e8bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1224 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliothek.explicare.doctor'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochure.ntpwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.keepmoat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogo.strap.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chef-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatsmarter.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebook.frcemexambookstore.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebooks.royalafricansafaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emag.diamondworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emag.indianjeweller.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emagazin.hotelstyle.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emags.avr-verlagsobjekte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.grillzeit.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.logistik-news.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grazia.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.independenceaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.teppich-stark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.am-weststrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.der-kleine-georg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.kip-tape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.verbaende.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.vidaglobal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.tellz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.ausemergencyservices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.cioa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.elektropraktiker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.inversionesciel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.iuoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.legacylighthouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.mpdunne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.roarkidsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.suncoastergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazines.somethinggoodmagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.vdmno.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinecatalog.custom-chrome-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publikationen.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quals.truebeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagesspiegel.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.alpenpark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.leveldesigngroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.corshamprint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.plaskettcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wirbeicontipark.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brochures.venturamarketing.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazines.thederbeian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magbooks.icsl.org.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d4e1d3d5a000004030047304502206d8934bb022d5d0159a94bfc28d65dd52c181f9a35ffdbbfeb6124d02732ee3002210085782d736c434f00968f3682e0e0e6f2278dc1a82ccad6a5f4cf1eaca9aa363e007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d4e1d3f7b0000040300473045022100db7afa5bc153c0938049c91d500694f7f7f29d1762ea033e8a802210afd61edc0220382a7b1d7addbdf9171cec502454aeb1ab4fe1a3e35fde54258e6a77d104df06
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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