client.semago.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:32:3b:54:14:45:f6:b9:6d:95:cd:60:0d:e3:6d:fc:b1:e1 was issued on by Let's Encrypt.

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=client.semago.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:32:3b:54:14:45:f6:b9:6d:95:cd:60:0d:e3:6d:fc:b1:e1
Serial Number (int): 278429837157206382842774187767057811812833
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 78:80:45:23:80:01:e2:57:e1:d2:89:39:da:d4:0f:a8:32:ed:76:0f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d7:51:9d:c7:c2:10:53:9e:73:3b:e2:bd:9a:98:41:e7:14:57:51:e3
Fingerprint (sha256): 9f:d2:d5:c3:d8:99:73:bb:a9:1b:db:57:ad:47:ad:6e:e8:74:b5:78:88:4b:6c:17:6f:a2:f7:e2:c3:27:43:69

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate client.semago.eu

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for client.semago.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

accounting.keytodata.com
accounts.acme-bsc.co.uk
accounts.cre8ive.group
accounts.electricblu.co.uk
accounts.jdds.ltd
accounts.letsoperate.com
accounts.recro.ae
accounts.safron.cc
accounts.theomegagroup.co.uk
accountshub.spcb.co.uk
areacliente.ipsoideas.com
banking.supertrust.co.uk
billing.ikentoo.com
billing.passbolt.com
billing.sallnet.com
books.10atm.com
books.3dxs.eu
books.altitudeproaerial.com
books.anyflux.com
books.aorai-conseils.com
books.atum3d.com
books.axoscience.com
books.begeleidwonennederland.nl
books.bethebiz.lu
books.bytekmarketing.it
books.canvasjet.com
books.collectiv4.be
books.gbafurniture.com
books.hub-grade.com
books.lextone.eu
books.madsense.com
books.nicefall.com
books.nortonandco.uk
books.pace-it.de
books.recro.ae
books.savourrecords.com
books.sudolio.io
books.sudolio.sk
books.sumaccountants.com
books.theservice-centre.co.uk
books.webshotel.com
books.xellz.com
books.zingrae.com
buchhaltung.aufundab.eu
buchhaltung.gastrosoft.de
buchhaltung.levatis.com
buchhaltung.marxup.de
buchhaltung.saascom.de
business.dataengi.com
client.agelecprotection.com
client.ecm-im.be
client.semago.eu
client.supportinfo.ch
clients.bizlabs.co
clientspace.aurait.co.uk
cp.acurasystems.co.uk
customer.abelionni.com
customer.zohobooks.eu
factura.nubexo.com
facturacion.argrupo.es
facturation.ticeo.fr
facture.evocion.fr
factures.elyazalee.com
finance.billyard.de
finance.reflektis.com
finance.themediacompany.be
imwenterprises.wizmotions.com
invoice.opti-cloud.eu
invoice.trainingcoursecompany.co.uk
kundenzugang.levcons.info
members.medicaldefensesociety.com
monespace.uppo.fr
my.exposure-systems.com
mypronto.prontofoodservice.com
office.wsrn.de
one.drotek.com
paiements.amahe.be
portail-client1.dawisey.com
quotes.turremgroup.com
sales.sedna.de
simplexnext.kissen.be
zimmplify.wizmotions.com

Other certificates including the domain name semago.eu

(limited to 100 certificates)
books.anyflux.com
sni95305.cloudflaressl.com
sni95305.cloudflaressl.com
books.anyflux.com
sni95305.cloudflaressl.com
sni.cloudflaressl.com
sni95305.cloudflaressl.com
books.anyflux.com
erp.yourchannel.es
sni95305.cloudflaressl.com
sni95305.cloudflaressl.com
sni95305.cloudflaressl.com
books.anyflux.com
*.semago.eu
sni95305.cloudflaressl.com
accounts.active-insight.com
sni95305.cloudflaressl.com
sni95305.cloudflaressl.com
*.semago.eu
sni95305.cloudflaressl.com
sni95305.cloudflaressl.com
books.kaf.ltd
dashboard.agenturhemp.de
*.semago.eu
sni95305.cloudflaressl.com
sni95305.cloudflaressl.com
kundencenter.rudolph-itnetworks.de
sni95305.cloudflaressl.com
sni95305.cloudflaressl.com
books.oodleschineseho.com
sni95305.cloudflaressl.com
sni95305.cloudflaressl.com
administratie.stickybandits.nl
sni95305.cloudflaressl.com
sni95305.cloudflaressl.com
sni95305.cloudflaressl.com
clients.axeltra.com
sni95305.cloudflaressl.com
books.anyflux.com
mon-compte.prezens.fr
client.semago.eu
books.anyflux.com
sni.cloudflaressl.com
books.anyflux.com
my.42nerds.com
sni95305.cloudflaressl.com
sni95305.cloudflaressl.com
books.anyflux.com
books.parteam.fr
clientaccess.tristella.co.za
sni95305.cloudflaressl.com
sni95305.cloudflaressl.com
*.semago.eu
files.drockmeeschter.lu
client.hardingsurveyors.co.uk
sni95305.cloudflaressl.com
accounts.baglietto.co.uk
books.serapion.net
sni95305.cloudflaressl.com
accounts.balancemyhormones.co.uk
client.reatec.ch
sni95305.cloudflaressl.com
sni95305.cloudflaressl.com
*.semago.eu
*.semago.eu
sni95305.cloudflaressl.com
accounts.3bz.co.uk
customer.purity-clean.co.uk
accounts.forfusion.com
sni95305.cloudflaressl.com
sni95305.cloudflaressl.com

Certificate

The complete raw certificate details for client.semago.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEfGZbx6jbB27APE6PPR
hzyAUaLFgkz3lgVkk/M+DG/LXFdlL/luWx6VHXhTURNSB3irGUMfTA68pKtu+4v3
gkZpkRSaIbiEKagGc2dcBGvjbDiAadqWobwwP/zBxjBsW95CTWwCKqlCjtUP0172
3kwe62R4XhxSZUtKh1f5M9IylztKSrp/NcDPhcd4eTD1MqZhdIxhmHOy6cI0xcYc
8XEQ6g/0zziW4ueJAJrqtfG62mjsnVLl76Ft7kUb6H7K8VwlCNMOlqrlH3DGyf2W
scODMOPx/CZMFsR6VT1SQmLvzVpFFToHibmTR2hjLJP19x25xh6z+2Pao38kHKLL
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278429837157206382842774187767057811812833
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-28 02:14:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-26 02:14:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'client.semago.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17203803042026101637421634566340337705367550248302724143578528985391470186751658668155428057023170363019575107637176666716002450898847929665363719658523503233492661941632747145400089089828448760306379272787755893574327252607223588542770643233336027332761510518809298044035468766595959213587827211252281966078141768647168998684831680572268538226865396518812889822157240459981928199523072980241028135351222737285588563116640347576188775625186986967143141354445816831070619760162879252322548209218469715014792032047256182818560226505391989032830364966657451323831981187213438558594509289194923279016355427792983249046321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							788045238001e257e1d28939dad40fa832ed760f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1893 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounting.keytodata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.acme-bsc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.cre8ive.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.electricblu.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.jdds.ltd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.letsoperate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.recro.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.safron.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.theomegagroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accountshub.spcb.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'areacliente.ipsoideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banking.supertrust.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billing.ikentoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billing.passbolt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billing.sallnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.10atm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.3dxs.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.altitudeproaerial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.anyflux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.aorai-conseils.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.atum3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.axoscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.begeleidwonennederland.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.bethebiz.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.bytekmarketing.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.canvasjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.collectiv4.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.gbafurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.hub-grade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.lextone.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.madsense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.nicefall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.nortonandco.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.pace-it.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.recro.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.savourrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.sudolio.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.sudolio.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.sumaccountants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.theservice-centre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.webshotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.xellz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.zingrae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buchhaltung.aufundab.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buchhaltung.gastrosoft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buchhaltung.levatis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buchhaltung.marxup.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buchhaltung.saascom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.dataengi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.agelecprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.ecm-im.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.semago.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.supportinfo.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.bizlabs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientspace.aurait.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.acurasystems.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.abelionni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.zohobooks.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factura.nubexo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facturacion.argrupo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facturation.ticeo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facture.evocion.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factures.elyazalee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance.billyard.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance.reflektis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance.themediacompany.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imwenterprises.wizmotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invoice.opti-cloud.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invoice.trainingcoursecompany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundenzugang.levcons.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.medicaldefensesociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monespace.uppo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.exposure-systems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypronto.prontofoodservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office.wsrn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one.drotek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paiements.amahe.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portail-client1.dawisey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotes.turremgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.sedna.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplexnext.kissen.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zimmplify.wizmotions.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001657e86c85f0000040300483046022100f24a190b0bbefe9d774f066df42745f2d834d8d58009cc1b59012690ddd0efec022100faa61c10223d39469389e7c99f3d2b214b60f46337ef4b6b70b2e1dd643b64af007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001657e86c8730000040300473045022044eeaf9ec62fbd7141194ecc8ba974472e231eb073cc15402e1a876237f2e35b022100beb9e5b8f63241626b0734112ad215649c18b9c3ff45a70233e5cd5e1b661844
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006cf0c1b266ed8bd61ff1d03befe852c3b03b97ea77143eac416778a2e0d583d7c0a0d503c0ab6eeb38c2c092620ebe9b4eb15a394b8f86b68e3e2245d0af048ed384cf29b3367c3c25807bcc99d16d1ce221775ffcb17328f16e9d9eb6d62944ae2e5df3eca8216b8f758a5a065aa1ed8e2eaec7cd5440c730792999b62b489d669aca22d4ff05f0832863a6e74589b931fa0f5ff0334787a6d6107320398bdc1baba5bba4a7454c1471d9b0990c8e44b6fea3a7dcf0e2d728f26fcdf53b28c24a4b884ca0ce96f0ea6d7b52741c051222dfffcd8738893aa273e757b45ad7a2b9f2d895cf1a05be72136ac37a6ccb2794aabbac6e4c6d33ac2d0fa8562a91e3