kiosk.vidaglobal.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:55:3d:2e:47:28:a3:9f:cf:8d:4a:3b:e1:54:32:4b:f9:6d was issued on by Let's Encrypt.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kiosk.vidaglobal.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:55:3d:2e:47:28:a3:9f:cf:8d:4a:3b:e1:54:32:4b:f9:6d
Serial Number (int): 290342182180229729420358158334187822381421
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 48:cd:83:81:7d:62:b7:92:89:61:b8:b6:a6:59:58:4f:12:c2:53:d7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e5:4d:eb:b7:21:8f:a9:a5:8a:0c:3f:72:28:e5:c2:c7:23:9e:d5:23
Fingerprint (sha256): a5:0a:c3:d1:a2:a7:e8:3c:93:70:2b:6e:c9:5d:c0:38:27:53:e3:bb:1b:f5:ee:69:b7:31:1b:f7:c8:ec:92:95

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kiosk.vidaglobal.de

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kiosk.vidaglobal.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bibliothek.explicare.doctor
brochure.ntpwarranty.com
brochures.keepmoat.com
catalogo.strap.com.br
chef-magazine.com
eatsmarter.kiosk.plus
ebooks.royalafricansafaris.com
emag.diamondworld.net
emag.indianjeweller.in
emags.avr-verlagsobjekte.de
epaper.logistik-news.at
flyer.aqua-dome.at
grazia.kiosk.plus
info.independenceaustralia.com.au
kataloge.teppich-stark.de
kiosk.am-weststrand.com
kiosk.der-kleine-georg.de
kiosk.kip-tape.com
kiosk.shopdecormagazines.com
kiosk.verbaende.com
kiosk.vidaglobal.de
magazin.lifechannel.ch
magazin.tellz.me
magazine.ausemergencyservices.com.au
magazine.cioa.com
magazine.elektropraktiker.de
magazine.inversionesciel.com
magazine.iuoe.org
magazine.mpdunne.com
magazine.roarkidsmagazine.com
magazine.suncoastergroup.com
mitteilungsblatt.seifert-medien.de
news.vdmno.de
publications.cwgc.org
publikationen.contipark.de
quals.truebeck.com
read.rapidrivermagazine.com
tagesspiegel.kiosk.plus
webkiosk.leveldesigngroup.com
webkiosks.corshamprint.co.uk
webkiosks.plaskettcollege.com
wirbeicontipark.contipark.de
www.brochures.venturamarketing.ie
www.magazines.thederbeian.com
yumpu.testact.de

Other certificates including the domain name vidaglobal.de

(limited to 100 certificates)
kiosque.flp.ch
test.phcsystem.com
www.magbooks.icsl.org.in
produktkatalog.mwf-technik.de
magazines.somma.co.za
magazin.nivea.de
kiosk.astrosofa.com
magazines.somma.co.za
start.andernach-wirtschaft.de
kiosk.citytipp.org
travelshop.accessconsciousness.com
onlinecatalog.custom-chrome-europe.com
kiosque.flp.ch
kiosk.vidaglobal.de
www.vidaglobal.co.uk
vitadoor.mediaflip.de
epaper-en.glasmarte.at
magazine.legacylighthouse.org
kiosk.velototal.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
magazines.somma.co.za
magazine.legacylighthouse.org
kiosk.vidaglobal.de
www.vidaglobal.co.uk
test.phcsystem.com
start.andernach-wirtschaft.de
epapers.juenglingverlag.de
kiosk.vidaglobal.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
epaper-en.glasmarte.at
magazines.somma.co.za
kiosk.vidaglobal.de
test.phcsystem.com
test.phcsystem.com
epaper-en.glasmarte.at
magazine.legacylighthouse.org
test.phcsystem.com
epaper-en.glasmarte.at
magazine.legacylighthouse.org
magazines.somma.co.za
kiosk.flp.de
onlinecatalog.custom-chrome-europe.com
webkiosk.die-bank.de
kiosk.flp.ch
kiosk.vidaglobal.de
www.magbooks.icsl.org.in
katalog.lemo-schuh.ch
kiosk.vidaglobal.de
magazines.somethinggoodmagazines.com
www.vidaglobal.co.uk
kiosque.flp.ch
webkiosk.alpenpark.de
onlinecatalog.custom-chrome-europe.com
kiosk.vidaglobal.de
test.phcsystem.com
start.andernach-wirtschaft.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
start.andernach-wirtschaft.de
kataloge.basoeinkaufsverbund.de
epaper-en.glasmarte.at
epaper-en.glasmarte.at
magazines.somma.co.za
webkiosk.alpenpark.de
magazine.legacylighthouse.org
magazine.legacylighthouse.org
epapers.juenglingverlag.de
kiosque.flp.ch
kiosk.velototal.de
kiosk.astrosofa.com
www.magbooks.icsl.org.in
kiosk.flp.ch
kiosk.astrosofa.com
magazines.somma.co.za
start.andernach-wirtschaft.de
katalog.lemo-schuh.ch
katalog.lemo-schuh.ch
magazines.somma.co.za
katalog.lemo-schuh.ch
kiosk.velototal.de
www.magbooks.icsl.org.in
webkiosk.alpenpark.de
kiosk.flp.de
kiosk.velototal.de
moebel-brameyer.mediaflip.de
kiosk.velototal.de
kiosk.velototal.de
kiosk.flp.de
webkiosk.alpenpark.de
epaper-en.glasmarte.at
magazine.legacylighthouse.org
magazines.somma.co.za
magazin.plusperfekt.de
epaper-en.glasmarte.at
webkiosk.alpenpark.de
magazines.somethinggoodmagazines.com
katalog.lemo-schuh.ch

Certificate

The complete raw certificate details for kiosk.vidaglobal.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj3no2uIeWE4E+wA1piz
C7CvbFvBSEJkMEj1nTOTDIr+QgrYfGVFbZ0Vm/IsHF4uLVzsWKLbugtyT7GPd/QW
726Beda3uDQXAYYdoiIaYoby0OY5RNXq3i77UkjtssImSzeZ6MYTZQNNfJceBzpq
tlWJYoBhLvpVWUP0lUgds6e0ZN638j8jKthU2aUHb8/qAPwfYIjr/UnnH6lt48G+
tGwgS7FaSj5YuHVBP10NREBmZLqqhyZKYQAWcqHggm0WxR2s8zdrJ2e8Es0Q4qIb
5bhSqffnsug7Mimd1WsOhikzNSVBcbDSlMPSQRKmWV/Qaj4eDgRLrKcfzhAjpb3F
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290342182180229729420358158334187822381421
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-31 19:03:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 19:03:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kiosk.vidaglobal.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23510851136715282465567320145676833201823179636604150171530372817193164562215689760187779206652689791974101292342053632274941777721867004049701547795499024815720961077108170316889363475624300857414114520640025881693772740503213383888520179585162197778674996532861982982956451930611187341103030375290925675747336279640090390817708751004859778711322178765920627433234813378401782778919880870130949351956624117171746088353554975559588027532601761023041353974593201004245926749527576143698408671520607197723245398426404434913133544102987405594229133953622700025927290546924947252720197679124418518034629419208454172427573
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							48cd83817d62b7928961b8b6a659584f12c253d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliothek.explicare.doctor'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochure.ntpwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.keepmoat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogo.strap.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chef-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatsmarter.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebooks.royalafricansafaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emag.diamondworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emag.indianjeweller.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emags.avr-verlagsobjekte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.logistik-news.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.aqua-dome.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grazia.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.independenceaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.teppich-stark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.am-weststrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.der-kleine-georg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.kip-tape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.shopdecormagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.verbaende.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.vidaglobal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.lifechannel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.tellz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.ausemergencyservices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.cioa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.elektropraktiker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.inversionesciel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.iuoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.mpdunne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.roarkidsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.suncoastergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitteilungsblatt.seifert-medien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.vdmno.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publications.cwgc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publikationen.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quals.truebeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.rapidrivermagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagesspiegel.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.leveldesigngroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.corshamprint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.plaskettcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wirbeicontipark.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brochures.venturamarketing.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazines.thederbeian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yumpu.testact.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e236a6cc90000040300473045022100b7a7e1d034a381f407ef81874f77e47e98741473b58256db73730389867e86c102206abdb341b92bb8d0f88c968c9e4999916176ecf3b7ec104dbf2f278c085d17240075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e236a6e64000004030046304402207223b25838d4cae661c35bfc70da8dcfdb5059e5275840334cfc8ccf6e35826802204d356b6ce4f15b221701f24a36407d39ccc3e19caf5807b51c87bde9c946e792
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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