magazines.somethinggoodmagazines.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e4:83:b2:d0:26:94:66:1e:d4:cd:73:ef:e9:c3:cb:b5:40 was issued on by Let's Encrypt.

With 61 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=magazines.somethinggoodmagazines.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e4:83:b2:d0:26:94:66:1e:d4:cd:73:ef:e9:c3:cb:b5:40
Serial Number (int): 339096294771341147760762547597117659788608
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0c:f7:25:29:66:f4:d0:59:ba:d9:e2:74:3d:56:af:6d:07:ba:f6:f2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2b:92:29:a4:c4:24:68:c0:d9:f7:9d:68:9c:4c:62:5c:d5:17:32:49
Fingerprint (sha256): a2:90:ae:4c:43:88:69:d6:71:c7:74:7c:3c:1f:ab:6c:af:a8:d0:33:a9:62:8b:49:95:09:70:d3:9c:2e:cd:53

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate magazines.somethinggoodmagazines.com

61

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magazines.somethinggoodmagazines.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bibliothek.explicare.doctor
brochure.ntpwarranty.com
brochures.keepmoat.com
brochures.waterrower.co.uk
catalogo.strap.com.br
chapters.transamericanheroes.com
chef-magazine.com
documents.zettlerelectronics.com
dokumente.zettlerelectronics.com
dvgforum-022019.dvg.de
eatsmarter.kiosk.plus
ebooks.royalafricansafaris.com
emags.avr-verlagsobjekte.de
epaper.logistik-news.at
flyer.aqua-dome.at
grazia.kiosk.plus
info.independenceaustralia.com.au
katalog.diewe.de
kataloge.teppich-stark.de
kataloge.westfalen-urlaubsreisen.de
kiosk.am-weststrand.com
kiosk.antalis-verpackungen.de
kiosk.der-kleine-georg.de
kiosk.kip-tape.com
kiosk.shopdecormagazines.com
kiosk.verbaende.com
kiosk.vidaglobal.de
kundenmagazin.derpart.com
magazin.tellz.me
magazin.volkswagen.ba
magazine.ausemergencyservices.com.au
magazine.cioa.com
magazine.elektropraktiker.de
magazine.inversionesciel.com
magazine.iuoe.org
magazine.mpdunne.com
magazine.roarkidsmagazine.com
magazine.suncoastergroup.com
magazines.andadev.com
magazines.somethinggoodmagazines.com
media.hirschmann-automotive.com
mitteilungsblatt.seifert-medien.de
miwi.halle.ihk.de
news.vdmno.de
prospekte.hkl-baumaschinen.at
publications.cwgc.org
publikationen.contipark.de
quals.truebeck.com
read.rapidrivermagazine.com
tagesspiegel.kiosk.plus
webkiosk.artandpictures.nl
webkiosk.leveldesigngroup.com
webkiosk.mwk-koeln.de
webkiosk.ww-events-online.de
webkiosks.corshamprint.co.uk
webweb.webberz.ch
wirbeicontipark.contipark.de
www.brochures.venturamarketing.ie
www.magazine.e-motec.net
www.magazines.thederbeian.com
yumpu.testact.de

Other certificates including the domain name somethinggoodmagazines.com

(limited to 100 certificates)
kiosque.flp.ch
test.phcsystem.com
www.magbooks.icsl.org.in
magazines.somma.co.za
magazin.nivea.de
kiosk.astrosofa.com
magazines.somma.co.za
kiosk.citytipp.org
travelshop.accessconsciousness.com
kiosque.flp.ch
vitadoor.mediaflip.de
magazine.legacylighthouse.org
kiosk.velototal.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
magazines.somma.co.za
magazine.legacylighthouse.org
test.phcsystem.com
epapers.juenglingverlag.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
epaper-en.glasmarte.at
test.phcsystem.com
test.phcsystem.com
magazine.legacylighthouse.org
test.phcsystem.com
magazine.legacylighthouse.org
www.somethinggoodmagazines.com
www.magbooks.icsl.org.in
katalog.lemo-schuh.ch
somethinggoodmagazines.com
magazines.somethinggoodmagazines.com
kiosque.flp.ch
webkiosk.alpenpark.de
onlinecatalog.custom-chrome-europe.com
test.phcsystem.com
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
kataloge.basoeinkaufsverbund.de
epaper-en.glasmarte.at
epaper-en.glasmarte.at
magazines.somma.co.za
magazine.legacylighthouse.org
magazine.legacylighthouse.org
epapers.juenglingverlag.de
kiosque.flp.ch
kiosk.velototal.de
www.magbooks.icsl.org.in
kiosk.astrosofa.com
katalog.lemo-schuh.ch
katalog.lemo-schuh.ch
katalog.lemo-schuh.ch
kiosk.velototal.de
www.magbooks.icsl.org.in
kiosk.velototal.de
kiosk.velototal.de
webkiosk.alpenpark.de
magazine.legacylighthouse.org
magazines.somma.co.za
magazin.plusperfekt.de
epaper-en.glasmarte.at
www.somethinggoodmagazines.com
magazines.somethinggoodmagazines.com
katalog.lemo-schuh.ch
kiosk.velototal.de
katalog.lemo-schuh.ch
test.phcsystem.com
www.magbooks.icsl.org.in
webkiosk.alpenpark.de
magazine.legacylighthouse.org
test.phcsystem.com
magazine.legacylighthouse.org
kiosque.flp.ch
test.phcsystem.com
magazine.legacylighthouse.org
kiosk.velototal.de
kiosk.velototal.de
kiosk.velototal.de
kiosk.velototal.de
somethinggoodmagazines.com
magazine.legacylighthouse.org
test.phcsystem.com
vitadoor.mediaflip.de
kiosk.velototal.de
onlinecatalog.custom-chrome-europe.com
kiosque.flp.ch
magazines.somethinggoodmagazines.com
katalog.lemo-schuh.ch
epaper-en.glasmarte.at
www.magbooks.icsl.org.in
test.phcsystem.com
magazine.legacylighthouse.org
berliner-kurier1.kiosk.plus
magazine.legacylighthouse.org
kiosque.flp.ch
webkiosk.alpenpark.de
kiosk.citytipp.org
publikationen.stbverband-koeln.de
test.phcsystem.com

Certificate

The complete raw certificate details for magazines.somethinggoodmagazines.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtYPWE3vsOvctClPxHPU
nCqjW85fKf4bbssUrhAsVeYTM3epf0mcXtbket/jvez8xmP33s3NK7Qusr0V+iG4
Ht2q9oyn1Ojw4oZAVoahf5woOJsHyEPFTjMW+cX8CNKNCs9R1N7uV0ZqM9AX8exy
/fX4mZst9YQOqOy4jpOgTkGuGmDheLfK5K5GyRMbFBBqjwfJxAGMLSwNU6eOcR6a
NKEf3k1xMutgexoUg9OhIl7GcR7fcX/wgVLibRL3s2RMAc5qQ32hzdNvy27xEguQ
Wi7RBFBbKr1M45n5QJY/c4N0RGvpAJFveANUlbPkCRxYosYNgZha1tvLf8pzBIPX
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339096294771341147760762547597117659788608
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-12 19:04:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-11 19:04:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magazines.somethinggoodmagazines.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24090834834700684587751911344722460229320918229729089052445988051506136165407577374027423821981392578056207926630957121684567187583545995633586757376485599386390188930441863721350863724464029975491760233487601132254522268021726449114681018977506876917803220235260400644437527383330694280437017197871001157247814150193529059253454289063127893405954578655446674850132202085531149521397277128422485253004286113414012528727399104196289092699208901700616384275750969126661118176901541645610188075897548999052499914577488370255035201882829753031844423048608310789102710176364859330885127542365018951048734726877914465556387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0cf7252966f4d059bad9e2743d56af6d07baf6f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1627 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliothek.explicare.doctor'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochure.ntpwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.keepmoat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.waterrower.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogo.strap.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chapters.transamericanheroes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chef-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documents.zettlerelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dokumente.zettlerelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvgforum-022019.dvg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatsmarter.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebooks.royalafricansafaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emags.avr-verlagsobjekte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.logistik-news.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.aqua-dome.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grazia.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.independenceaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalog.diewe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.teppich-stark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.westfalen-urlaubsreisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.am-weststrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.antalis-verpackungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.der-kleine-georg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.kip-tape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.shopdecormagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.verbaende.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.vidaglobal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundenmagazin.derpart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.tellz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.volkswagen.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.ausemergencyservices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.cioa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.elektropraktiker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.inversionesciel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.iuoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.mpdunne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.roarkidsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.suncoastergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazines.andadev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazines.somethinggoodmagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.hirschmann-automotive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitteilungsblatt.seifert-medien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miwi.halle.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.vdmno.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospekte.hkl-baumaschinen.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publications.cwgc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publikationen.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quals.truebeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.rapidrivermagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagesspiegel.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.artandpictures.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.leveldesigngroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.mwk-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.ww-events-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.corshamprint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webweb.webberz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wirbeicontipark.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brochures.venturamarketing.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazine.e-motec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazines.thederbeian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yumpu.testact.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f9b5b711900000403004730450220264bd8f28bb6638e6142c3ebacb077005a15361388f0e469ac9f551309572bf3022100944078a9a0c66facc9ec711854fc61852ceaeb710cbcbbb93caf1a051dd80ea9007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f9b5b71080000040300483046022100b28f6e9f27b9166fee95bcd0df4a8f0ab94c7693140b91f7383a050c6fd97ade022100ef40586f7f130931e4781ba35dfc610bcb8a17715fdd3eb3bd793c553246e5a1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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