www.vaillant.com

- Vaillant GmbH -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 0b:f4:85:b7:fe:1c:9a:66:76:9e:cd:f4:bd:40:23:df was issued on by Symantec Corporation.

With 52 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Vaillant GmbH

Organization: Vaillant GmbH
State / Province: Nordrhein-Westfalen
Locality: Remscheid
Country: DE

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:f4:85:b7:fe:1c:9a:66:76:9e:cd:f4:bd:40:23:df
Serial Number (int): 15891140524991369877968093480927372255
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): bf:8a:aa:34:f2:2c:b3:48:22:cd:9b:25:53:c8:66:e8:a5:b7:c6:07
Fingerprint (sha256): 96:8a:aa:25:6c:ea:53:af:af:82:5d:23:a0:7c:dd:81:7d:e9:0f:8d:15:9d:06:6f:73:3c:0c:db:87:7c:b3:88

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate www.vaillant.com

52

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vaillant.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.protherm.ru
www.saunierduval.fr
www.protherm.sk
www.protherm.cn
cdn01l.protherm.cn
www.vaillant.it
www.hermann-saunierduval.it
www.vaillant.es
www.demirdokum.com.tr
www.saunierduval.at
www.vaillant.be
www.vaillant.hu
www.vaillant.info
www.protherm.eu
www.vaillant.cz
www.vaillant.si
www.bulex.be
www.saunierduval.ro
tools.vaillantchina.cn
imprint.vaillantchina.cn
cdn01l.vaillantchina.cn
www.vaillant.rs
www.vaillant.hr
www.protherm.cz
www.saunierduval.hu
www.vaillant.no
www.vaillant.ru
www.protherm.ua
www.vaillant.dk
career.vaillant-group.com
cdn01l.vaillant-group.com
www.vaillant-group.com
www.vaillant.de
www.awb.nl
www.vaillant.pl
www.vaillant.ua
cdn01l.vaillant.cn
www.vaillant.cn
www.vaillant.ch
www.vaillant.sk
www.saunierduval.com
www.vaillant.com.tr
www.vaillant.co.uk
www.saunierduval.es
www.vaillant.se
www.vaillant.nl
www.vaillant.fr
www.vaillant.at
www.glow-worm.co.uk
vaillant.com
kr.vaillant.com
www.vaillant.com

Other certificates including the domain name vaillant.com

(limited to 100 certificates)
sip.eb-com.com
pool04.eb-com.com
quick-tools.app
sip.eb-com.com
pool04.eb-com.com
sip.eb-com.com
pool04.eb-com.com
www.vaillant.com
sync.vaillant-group.com
pool04.eb-com.com
pool04.eb-com.com
*.app.vaillant.com
pool04.eb-com.com
sip.eb-com.com
sip.eb-com.com
www.vaillant.lt
www.vaillant.com
*.vaillant.com
sip.eb-com.com
www.vaillant-group.com
www.vaillant.com
pool04.eb-com.com
pool04.eb-com.com
www.vaillant.lt
vodras.com
sip.eb-com.com
pool04.eb-com.com
sip.eb-com.com
sip.eb-com.com
www.vaillant.com
pool04.eb-com.com
smart.vaillant.com
smart.vaillant.com
pool04.eb-com.com
auropower.vaillant.com
sip.eb-com.com
pool04.eb-com.com
sip.eb-com.com
pool04.eb-com.com
pool04.eb-com.com
sip.eb-com.com
*.vaillant.com
auropower.vaillant.com
pool04.eb-com.com
pool04.eb-com.com
www.vaillant.de
sip.eb-com.com
sip.eb-com.com
sip.eb-com.com
sip.eb-com.com
sip.eb-com.com
pool04.eb-com.com
sip.eb-com.com
www.vaillant.com
sip.eb-com.com
pool04.eb-com.com
www.vaillant.com
www.vaillant.com
pool04.eb-com.com
pool04.eb-com.com
sip.eb-com.com
www.vaillant.com
www.vaillant.com
elopack.vaillant.com
pool04.eb-com.com
www.vaillant.com
sip.eb-com.com
pool04.eb-com.com
sip.eb-com.com
*.app.vaillant.com
pool04.eb-com.com
sip.eb-com.com
sip.eb-com.com
www.vaillant.com
pool04.eb-com.com
www.vaillant.com
*.vaillant.com
*.vaillant.com
*.app.vaillant.com
sync.vaillant-group.com
sip.eb-com.com
pool04.eb-com.com
www.vaillant.com
pool04.eb-com.com
pool04.eb-com.com
pool04.eb-com.com
pool04.eb-com.com
pool04.eb-com.com
sip.eb-com.com
pool04.eb-com.com
pool04.eb-com.com
*.app.vaillant.com
sip.eb-com.com
auropower.vaillant.com
sync.vaillant-group.com
pool04.eb-com.com
auropower.vaillant.com
www.vaillant-group.com
sip.eb-com.com
sip.eb-com.com

Certificate

The complete raw certificate details for www.vaillant.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJuTCCCKGgAwIBAgIQC/SFt/4cmmZ2ns30vUAj3zANBgkqhkiG9w0BAQsFADB+
MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd
BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj
IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE3MDcwODAwMDAwMFoX
DTE4MDcwODIzNTk1OVowcjELMAkGA1UEBhMCREUxHDAaBgNVBAgME05vcmRyaGVp
bi1XZXN0ZmFsZW4xEjAQBgNVBAcMCVJlbXNjaGVpZDEWMBQGA1UECgwNVmFpbGxh
bnQgR21iSDEZMBcGA1UEAwwQd3d3LnZhaWxsYW50LmNvbTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAME+zuPlbAUqt3kpZLtBxBiSDcgg8ZxlcIeZnZ0I
40oInPabb2kw/c27DnYQCmqUuyLWfZFIOrMJyANvEBXrofnMCUerYM7kQCDyXMqS
wkAVF936JjLh0yAstCZRtlLEU0AJzVH0H4CbWVcIw36eIE0NH0egR35GZvy1zU7V
Fon4W+KPy/CD0nPxsiGJ5w5+ErDNB5nR/Supbi00k+5z8LhjfjIYux1eLVWTx49n
MvK7iUQtkfEBfMld2kAwFJPtMcVmhliuWPl0NAl/mslNXLMQykh3vzEwppjKuESy
IUsg3NtHfC1YBcNrbb8D3DKwuYNXb57Q+tHyTZyUKIs6m9ECAwEAAaOCBj0wggY5
MIID6AYDVR0RBIID3zCCA9uCD3d3dy5wcm90aGVybS5ydYITd3d3LnNhdW5pZXJk
dXZhbC5mcoIPd3d3LnByb3RoZXJtLnNrgg93d3cucHJvdGhlcm0uY26CEmNkbjAx
bC5wcm90aGVybS5jboIPd3d3LnZhaWxsYW50Lml0ght3d3cuaGVybWFubi1zYXVu
aWVyZHV2YWwuaXSCD3d3dy52YWlsbGFudC5lc4IVd3d3LmRlbWlyZG9rdW0uY29t
LnRyghN3d3cuc2F1bmllcmR1dmFsLmF0gg93d3cudmFpbGxhbnQuYmWCD3d3dy52
YWlsbGFudC5odYIRd3d3LnZhaWxsYW50LmluZm+CD3d3dy5wcm90aGVybS5ldYIP
d3d3LnZhaWxsYW50LmN6gg93d3cudmFpbGxhbnQuc2mCDHd3dy5idWxleC5iZYIT
d3d3LnNhdW5pZXJkdXZhbC5yb4IWdG9vbHMudmFpbGxhbnRjaGluYS5jboIYaW1w
cmludC52YWlsbGFudGNoaW5hLmNughdjZG4wMWwudmFpbGxhbnRjaGluYS5jboIP
d3d3LnZhaWxsYW50LnJzgg93d3cudmFpbGxhbnQuaHKCD3d3dy5wcm90aGVybS5j
eoITd3d3LnNhdW5pZXJkdXZhbC5odYIPd3d3LnZhaWxsYW50Lm5vgg93d3cudmFp
bGxhbnQucnWCD3d3dy5wcm90aGVybS51YYIPd3d3LnZhaWxsYW50LmRrghljYXJl
ZXIudmFpbGxhbnQtZ3JvdXAuY29tghljZG4wMWwudmFpbGxhbnQtZ3JvdXAuY29t
ghZ3d3cudmFpbGxhbnQtZ3JvdXAuY29tgg93d3cudmFpbGxhbnQuZGWCCnd3dy5h
d2IubmyCD3d3dy52YWlsbGFudC5wbIIPd3d3LnZhaWxsYW50LnVhghJjZG4wMWwu
dmFpbGxhbnQuY26CD3d3dy52YWlsbGFudC5jboIPd3d3LnZhaWxsYW50LmNogg93
d3cudmFpbGxhbnQuc2uCFHd3dy5zYXVuaWVyZHV2YWwuY29tghN3d3cudmFpbGxh
bnQuY29tLnRyghJ3d3cudmFpbGxhbnQuY28udWuCE3d3dy5zYXVuaWVyZHV2YWwu
ZXOCD3d3dy52YWlsbGFudC5zZYIPd3d3LnZhaWxsYW50Lm5sgg93d3cudmFpbGxh
bnQuZnKCD3d3dy52YWlsbGFudC5hdIITd3d3Lmdsb3ctd29ybS5jby51a4IMdmFp
bGxhbnQuY29tgg9rci52YWlsbGFudC5jb22CEHd3dy52YWlsbGFudC5jb20wCQYD
VR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwYQYDVR0gBFowWDBWBgZngQwBAgIwTDAj
BggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5bWNiLmNvbS9jcHMwJQYIKwYBBQUHAgIw
GQwXaHR0cHM6Ly9kLnN5bWNiLmNvbS9ycGEwKwYDVR0fBCQwIjAgoB6gHIYaaHR0
cDovL3NzLnN5bWNiLmNvbS9zcy5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMB8GA1UdIwQYMBaAFF9gz2GQVd+EQxSKYCqy9Xr0QxjvMFcGCCsGAQUF
BwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3NzLnN5bWNkLmNvbTAmBggrBgEF
BQcwAoYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcnQwggEFBgorBgEEAdZ5AgQC
BIH2BIHzAPEAdwDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAAAV0i
H/GVAAAEAwBIMEYCIQDzXM956w56Lgm4GPM6ZZXVCRN2PEDdiGYV64Z8V4oxNwIh
AJMWaMf3VkJJONRG0v70QBwcX17GKStAlUJe+Gke4LN8AHYApLkJkLQYWBSHuxOi
zGdwCjw1mAT5G9+443fNDsgN3BAAAAFdIh/xzQAABAMARzBFAiAn6zgVY8yYipLB
mf5x5LBNRDHgAgc/Xh+EGrI0y6NKHwIhAIPpN4te/I5SeHG49JkL+T22f68Fv6c8
NWdA7XkDpcsSMA0GCSqGSIb3DQEBCwUAA4IBAQAsTYMRkV8TkAbXRywwwaMlPjgF
hXvUAU3pVr/2of/6nyjD59Iyne7RiUUR5XBlt8ht0nrzUFJ6LQ1I0FsOKhvuu5FF
iogkWseg2v94ZEupL07qu1WLJ7+s5J6lKHHyHur6B1EFCGHkerc+U/wgi/Th1zg3
hUHRGp1Y3YSI0hEWzmpcmTobE2APVOw+eb7ak8d+7AnKVR5SYFbV5qEVPCv0FodA
DpJ5xlIBX9QqGHrCMryG8sB+3j4XlQbFiGC8H3wQNvndze+yhPt+fgrndtijcYhB
ikNLO/iIcSs17/H0l3a8FZ9bu6vvr49h6o7jrEce/D3Q40Pq/mIpzag0DzJP
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT7O4+VsBSq3eSlku0HE
GJINyCDxnGVwh5mdnQjjSgic9ptvaTD9zbsOdhAKapS7ItZ9kUg6swnIA28QFeuh
+cwJR6tgzuRAIPJcypLCQBUX3fomMuHTICy0JlG2UsRTQAnNUfQfgJtZVwjDfp4g
TQ0fR6BHfkZm/LXNTtUWifhb4o/L8IPSc/GyIYnnDn4SsM0HmdH9K6luLTST7nPw
uGN+Mhi7HV4tVZPHj2cy8ruJRC2R8QF8yV3aQDAUk+0xxWaGWK5Y+XQ0CX+ayU1c
sxDKSHe/MTCmmMq4RLIhSyDc20d8LVgFw2ttvwPcMrC5g1dvntD60fJNnJQoizqb
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15891140524991369877968093480927372255
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Remscheid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vaillant GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.vaillant.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24394964718908281044608192116365224453688715524162349693828519695584539900269592571228799435599780757158830279775769202582756213780412786861788313887035928792676420745099229693301012042571341286273172124740501017094447821090709082435981721357986852163929175586661727748119054263675774905688429359123712815522689066508748326902715078982556154519261483527031592662296956139056714784333763791305370333697985257815211598843887494143192399562645211829639742651344479235473560670469368257648944718753979477185277044753853229403750628935207226935746591969275570891305596843540266463037268556773253067633069592374857189465041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (991 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protherm.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saunierduval.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protherm.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protherm.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn01l.protherm.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hermann-saunierduval.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demirdokum.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saunierduval.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protherm.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bulex.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saunierduval.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tools.vaillantchina.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imprint.vaillantchina.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn01l.vaillantchina.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protherm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saunierduval.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protherm.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.vaillant-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn01l.vaillant-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn01l.vaillant.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saunierduval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saunierduval.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glow-worm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaillant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kr.vaillant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaillant.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015d221ff1950000040300483046022100f35ccf79eb0e7a2e09b818f33a6595d50913763c40dd886615eb867c578a3137022100931668c7f756424938d446d2fef4401c1c5f5ec6292b4095425ef8691ee0b37c007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015d221ff1cd0000040300473045022027eb381563cc988a92c199fe71e4b04d4431e002073f5e1f841ab234cba34a1f02210083e9378b5efc8e527871b8f4990bf93db67faf05bfa73c356740ed7903a5cb12
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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