visitstarnberg.com
Issued by R3
About this certificate
This digital certificate with serial number 04:1d:db:e7:96:63:15:6e:99:43:5f:5d:3e:44:82:b6:ed:e6 was issued on by Let's Encrypt.
With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=visitstarnberg.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:1d:db:e7:96:63:15:6e:99:43:5f:5d:3e:44:82:b6:ed:e6Serial Number (int): 358609635769611081675755600235071020658150
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 83:93:a6:09:b5:f3:25:98:6e:67:3c:b3:51:e8:12:c0:bf:6a:65:2e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 9d:f8:a9:e9:5b:25:9d:65:b5:7d:5c:7a:4d:0f:6a:3a:6d:7f:83:a5
Fingerprint (sha256): aa:32:98:15:ca:fe:b3:77:0f:35:9a:ee:87:60:7c:4a:19:ad:00:fd:35:c2:36:4f:05:94:02:c4:c1:44:f2:e4
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate visitstarnberg.com
99
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for visitstarnberg.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
visitaix.com
visitajaccio.com
visitalbertville.com
visitangouleme.com
visitarcachon.com
visitauxerre.com
visitbastia.com
visitbelfort.com
visitblaye.com
visitblois.com
visitboulognebillancourt.com
visitboulognesurmer.com
visitbourges.com
visitbrest.com
visitcaen.com
visitcagnes.com
visitchambery.com
visitchartres.com
visitcherbourg.com
visitclermontferrand.com
visitdinard.com
visitengadin.com
visitetretat.com
visitevian.com
visitfecamp.com
visitfribourg.com
visitgap.com
visitlarochelle.com
visitlemans.com
visitlorient.com
visitmeaux.com
visitmeudon.com
visitnanterre.com
visitneuchatel.com
visitneuilly.com
visitnevers.com
visitpau.com
visitrueil.com
visitsaintcloud.com
visitsaintdenis.com
visitsaintemilion.com
visitsaintetienne.com
visitsaintjeandeluz.com
visitsaintmalo.com
visitstarnberg.com
visitsuresnes.com
visittarbes.com
visitthionville.com
visittourcoing.com
visittrouville.com
visitvalence.com
visitvalenciennes.com
visitvichy.com
www.visitaix.com
www.visitajaccio.com
www.visitalbertville.com
www.visitangouleme.com
www.visitarcachon.com
www.visitauxerre.com
www.visitbastia.com
www.visitbelfort.com
www.visitblaye.com
www.visitblois.com
www.visitboulognebillancourt.com
www.visitboulognesurmer.com
www.visitbourges.com
www.visitbrest.com
www.visitcaen.com
www.visitcagnes.com
www.visitchambery.com
www.visitchartres.com
www.visitcherbourg.com
www.visitclermontferrand.com
www.visitevian.com
www.visitfecamp.com
www.visitgap.com
www.visitlemans.com
www.visitlorient.com
www.visitmeaux.com
www.visitmeudon.com
www.visitnanterre.com
www.visitneuilly.com
www.visitnevers.com
www.visitrueil.com
www.visitsaintcloud.com
www.visitsaintdenis.com
www.visitsaintemilion.com
www.visitsaintetienne.com
www.visitsaintjeandeluz.com
www.visitsaintmalo.com
www.visitstarnberg.com
www.visitsuresnes.com
www.visittarbes.com
www.visitthionville.com
www.visittourcoing.com
www.visittrouville.com
www.visitvalence.com
www.visitvalenciennes.com
www.visitvichy.com
visitajaccio.com
visitalbertville.com
visitangouleme.com
visitarcachon.com
visitauxerre.com
visitbastia.com
visitbelfort.com
visitblaye.com
visitblois.com
visitboulognebillancourt.com
visitboulognesurmer.com
visitbourges.com
visitbrest.com
visitcaen.com
visitcagnes.com
visitchambery.com
visitchartres.com
visitcherbourg.com
visitclermontferrand.com
visitdinard.com
visitengadin.com
visitetretat.com
visitevian.com
visitfecamp.com
visitfribourg.com
visitgap.com
visitlarochelle.com
visitlemans.com
visitlorient.com
visitmeaux.com
visitmeudon.com
visitnanterre.com
visitneuchatel.com
visitneuilly.com
visitnevers.com
visitpau.com
visitrueil.com
visitsaintcloud.com
visitsaintdenis.com
visitsaintemilion.com
visitsaintetienne.com
visitsaintjeandeluz.com
visitsaintmalo.com
visitstarnberg.com
visitsuresnes.com
visittarbes.com
visitthionville.com
visittourcoing.com
visittrouville.com
visitvalence.com
visitvalenciennes.com
visitvichy.com
www.visitaix.com
www.visitajaccio.com
www.visitalbertville.com
www.visitangouleme.com
www.visitarcachon.com
www.visitauxerre.com
www.visitbastia.com
www.visitbelfort.com
www.visitblaye.com
www.visitblois.com
www.visitboulognebillancourt.com
www.visitboulognesurmer.com
www.visitbourges.com
www.visitbrest.com
www.visitcaen.com
www.visitcagnes.com
www.visitchambery.com
www.visitchartres.com
www.visitcherbourg.com
www.visitclermontferrand.com
www.visitevian.com
www.visitfecamp.com
www.visitgap.com
www.visitlemans.com
www.visitlorient.com
www.visitmeaux.com
www.visitmeudon.com
www.visitnanterre.com
www.visitneuilly.com
www.visitnevers.com
www.visitrueil.com
www.visitsaintcloud.com
www.visitsaintdenis.com
www.visitsaintemilion.com
www.visitsaintetienne.com
www.visitsaintjeandeluz.com
www.visitsaintmalo.com
www.visitstarnberg.com
www.visitsuresnes.com
www.visittarbes.com
www.visitthionville.com
www.visittourcoing.com
www.visittrouville.com
www.visitvalence.com
www.visitvalenciennes.com
www.visitvichy.com
Other certificates including the domain name visitstarnberg.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for visitstarnberg.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIM7jCCC9agAwIBAgISBB3b55ZjFW6ZQ19dPkSCtu3mMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMDEwOTE3MTVaFw0yNDA1MDEwOTE3MTRaMB0xGzAZBgNVBAMT EnZpc2l0c3Rhcm5iZXJnLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALdC7QdKV1k6lrQH0B2kx8nVMVFZwvTIDU5m353HNiG4FzKIhjDJCtzdhccr SxYXG7DX/7rYi30iik7WOuwDwY9uZzR0+D2AO9EN2YcIg6Al4pScjYaRDrfWNjLm 0p5R+m/ctCxPe7cK52nyJR3ny/izXIScH3qCLJTnC1nCzeNlVrnIynKDG4mfOK2r Q8dLzo/ohGcPOktOPrgkQWXDzLylrBEzs3eaSKv29S1CBJfTV/rSIt4KEBsFD7MB rDHGa1riQdPGgIZ4cWbpsp2xv+jAWA4EBzkeJOMXXw/4KNEs/Yk6a+heDg4OC5/S BLVsmfi/P3uGAsgnWezlSKktNjUCAwEAAaOCChEwggoNMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUg5OmCbXzJZhuZzyzUegSwL9qZS4wHwYDVR0jBBgwFoAUFC6zF7dY VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy Lm9yZy8wgggaBgNVHREEgggRMIIIDYIMdmlzaXRhaXguY29tghB2aXNpdGFqYWNj aW8uY29tghR2aXNpdGFsYmVydHZpbGxlLmNvbYISdmlzaXRhbmdvdWxlbWUuY29t ghF2aXNpdGFyY2FjaG9uLmNvbYIQdmlzaXRhdXhlcnJlLmNvbYIPdmlzaXRiYXN0 aWEuY29tghB2aXNpdGJlbGZvcnQuY29tgg52aXNpdGJsYXllLmNvbYIOdmlzaXRi bG9pcy5jb22CHHZpc2l0Ym91bG9nbmViaWxsYW5jb3VydC5jb22CF3Zpc2l0Ym91 bG9nbmVzdXJtZXIuY29tghB2aXNpdGJvdXJnZXMuY29tgg52aXNpdGJyZXN0LmNv bYINdmlzaXRjYWVuLmNvbYIPdmlzaXRjYWduZXMuY29tghF2aXNpdGNoYW1iZXJ5 LmNvbYIRdmlzaXRjaGFydHJlcy5jb22CEnZpc2l0Y2hlcmJvdXJnLmNvbYIYdmlz aXRjbGVybW9udGZlcnJhbmQuY29tgg92aXNpdGRpbmFyZC5jb22CEHZpc2l0ZW5n YWRpbi5jb22CEHZpc2l0ZXRyZXRhdC5jb22CDnZpc2l0ZXZpYW4uY29tgg92aXNp dGZlY2FtcC5jb22CEXZpc2l0ZnJpYm91cmcuY29tggx2aXNpdGdhcC5jb22CE3Zp c2l0bGFyb2NoZWxsZS5jb22CD3Zpc2l0bGVtYW5zLmNvbYIQdmlzaXRsb3JpZW50 LmNvbYIOdmlzaXRtZWF1eC5jb22CD3Zpc2l0bWV1ZG9uLmNvbYIRdmlzaXRuYW50 ZXJyZS5jb22CEnZpc2l0bmV1Y2hhdGVsLmNvbYIQdmlzaXRuZXVpbGx5LmNvbYIP dmlzaXRuZXZlcnMuY29tggx2aXNpdHBhdS5jb22CDnZpc2l0cnVlaWwuY29tghN2 aXNpdHNhaW50Y2xvdWQuY29tghN2aXNpdHNhaW50ZGVuaXMuY29tghV2aXNpdHNh aW50ZW1pbGlvbi5jb22CFXZpc2l0c2FpbnRldGllbm5lLmNvbYIXdmlzaXRzYWlu dGplYW5kZWx1ei5jb22CEnZpc2l0c2FpbnRtYWxvLmNvbYISdmlzaXRzdGFybmJl cmcuY29tghF2aXNpdHN1cmVzbmVzLmNvbYIPdmlzaXR0YXJiZXMuY29tghN2aXNp dHRoaW9udmlsbGUuY29tghJ2aXNpdHRvdXJjb2luZy5jb22CEnZpc2l0dHJvdXZp bGxlLmNvbYIQdmlzaXR2YWxlbmNlLmNvbYIVdmlzaXR2YWxlbmNpZW5uZXMuY29t gg52aXNpdHZpY2h5LmNvbYIQd3d3LnZpc2l0YWl4LmNvbYIUd3d3LnZpc2l0YWph Y2Npby5jb22CGHd3dy52aXNpdGFsYmVydHZpbGxlLmNvbYIWd3d3LnZpc2l0YW5n b3VsZW1lLmNvbYIVd3d3LnZpc2l0YXJjYWNob24uY29tghR3d3cudmlzaXRhdXhl cnJlLmNvbYITd3d3LnZpc2l0YmFzdGlhLmNvbYIUd3d3LnZpc2l0YmVsZm9ydC5j b22CEnd3dy52aXNpdGJsYXllLmNvbYISd3d3LnZpc2l0YmxvaXMuY29tgiB3d3cu dmlzaXRib3Vsb2duZWJpbGxhbmNvdXJ0LmNvbYIbd3d3LnZpc2l0Ym91bG9nbmVz dXJtZXIuY29tghR3d3cudmlzaXRib3VyZ2VzLmNvbYISd3d3LnZpc2l0YnJlc3Qu Y29tghF3d3cudmlzaXRjYWVuLmNvbYITd3d3LnZpc2l0Y2FnbmVzLmNvbYIVd3d3 LnZpc2l0Y2hhbWJlcnkuY29tghV3d3cudmlzaXRjaGFydHJlcy5jb22CFnd3dy52 aXNpdGNoZXJib3VyZy5jb22CHHd3dy52aXNpdGNsZXJtb250ZmVycmFuZC5jb22C End3dy52aXNpdGV2aWFuLmNvbYITd3d3LnZpc2l0ZmVjYW1wLmNvbYIQd3d3LnZp c2l0Z2FwLmNvbYITd3d3LnZpc2l0bGVtYW5zLmNvbYIUd3d3LnZpc2l0bG9yaWVu dC5jb22CEnd3dy52aXNpdG1lYXV4LmNvbYITd3d3LnZpc2l0bWV1ZG9uLmNvbYIV d3d3LnZpc2l0bmFudGVycmUuY29tghR3d3cudmlzaXRuZXVpbGx5LmNvbYITd3d3 LnZpc2l0bmV2ZXJzLmNvbYISd3d3LnZpc2l0cnVlaWwuY29tghd3d3cudmlzaXRz YWludGNsb3VkLmNvbYIXd3d3LnZpc2l0c2FpbnRkZW5pcy5jb22CGXd3dy52aXNp dHNhaW50ZW1pbGlvbi5jb22CGXd3dy52aXNpdHNhaW50ZXRpZW5uZS5jb22CG3d3 dy52aXNpdHNhaW50amVhbmRlbHV6LmNvbYIWd3d3LnZpc2l0c2FpbnRtYWxvLmNv bYIWd3d3LnZpc2l0c3Rhcm5iZXJnLmNvbYIVd3d3LnZpc2l0c3VyZXNuZXMuY29t ghN3d3cudmlzaXR0YXJiZXMuY29tghd3d3cudmlzaXR0aGlvbnZpbGxlLmNvbYIW d3d3LnZpc2l0dG91cmNvaW5nLmNvbYIWd3d3LnZpc2l0dHJvdXZpbGxlLmNvbYIU d3d3LnZpc2l0dmFsZW5jZS5jb22CGXd3dy52aXNpdHZhbGVuY2llbm5lcy5jb22C End3dy52aXNpdHZpY2h5LmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQIGCisG AQQB1nkCBAIEgfMEgfAA7gB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s5 2IRzAAABjWQsNcIAAAQDAEYwRAIgZyr/nouVJtALnc70GQHbSbOew3Z+5sGRizrA DhVEcTUCIH7DCKX5GqtFwX4VLX+8LJvdDkApjPLNz3V/meaG3FveAHUAouK/1h7e Ly8HoNZObTen3GVDsMa1LqLat4r4mm31F9gAAAGNZCw1wgAABAMARjBEAiBe8psD yYDxIYNtfWwbWa2oeQDd9v7cJniCpm+NI5UxJgIgHtpa/E90ZTf2m1BYUwJBsPu2 eDtV8SlMsjCeUK14vyQwDQYJKoZIhvcNAQELBQADggEBAFXVV21J4lmtpIlRt2UN rjNU5a/S/LneEZdNaXjCByNK0h4z586AMUCqsJmUz4+lQvEwVRNZ88jThZl/D9Ug wn1W1e9tEzHnXM5KIXjSC/8LJlpdFs/3PCDOVwEewHZsTh60R6gnaiquNEt2YgC/ HypUkt4HGys5+5qAkShMn3MxExCphzCKgqK5g5CNw939RIKe9n2t6ikb6RG4M6vB 2L5dsGBOB+/Q8fuMhPMvHO0NTvOFr+0VqwpgG2AHb3JQTWVKoAVt0da6biYlvycg 0tKfuQZ9zrqn1U7I626VExyGHDA6zQJM7SYkpQ5tevriZCay503MA40WGOh15iRE +bs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0LtB0pXWTqWtAfQHaTH ydUxUVnC9MgNTmbfncc2IbgXMoiGMMkK3N2FxytLFhcbsNf/utiLfSKKTtY67APB j25nNHT4PYA70Q3ZhwiDoCXilJyNhpEOt9Y2MubSnlH6b9y0LE97twrnafIlHefL +LNchJwfeoIslOcLWcLN42VWucjKcoMbiZ84ratDx0vOj+iEZw86S04+uCRBZcPM vKWsETOzd5pIq/b1LUIEl9NX+tIi3goQGwUPswGsMcZrWuJB08aAhnhxZumynbG/ 6MBYDgQHOR4k4xdfD/go0Sz9iTpr6F4ODg4Ln9IEtWyZ+L8/e4YCyCdZ7OVIqS02 NQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 358609635769611081675755600235071020658150 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-01 09:17:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-01 09:17:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'visitstarnberg.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23134612196392661738252294654329608323550100480485676487245409968091412694909632302358491224798458913785438749836920403816792661434349155699271587868264872639794063298435735116607323436541667718525106774590749085687682469198282318772029093149346063573842499202959026628453608233759769755836161964995109702872535302109375002090407255203726301137789598472349104476142259629921877816231090529673660012939110645095507677404030195454605214060481489267367826882191439902110142393986315844190659231187110289529620592508600475321571968267965950092296216903667172524244259695101767410283475416271114737871248546204805743064629 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8393a609b5f325986e673cb351e812c0bf6a652e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2065 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitaix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitajaccio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitalbertville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitangouleme.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitarcachon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitauxerre.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitbastia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitbelfort.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitblaye.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitblois.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitboulognebillancourt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitboulognesurmer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitbourges.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitbrest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitcaen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitcagnes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitchambery.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitchartres.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitcherbourg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitclermontferrand.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitdinard.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitengadin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitetretat.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitevian.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitfecamp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitfribourg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitgap.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitlarochelle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitlemans.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitlorient.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitmeaux.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitmeudon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitnanterre.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitneuchatel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitneuilly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitnevers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitpau.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitrueil.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintcloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintdenis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintemilion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintetienne.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintjeandeluz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintmalo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitstarnberg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsuresnes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visittarbes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitthionville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visittourcoing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visittrouville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitvalence.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitvalenciennes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitvichy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitaix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitajaccio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitalbertville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitangouleme.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitarcachon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitauxerre.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitbastia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitbelfort.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitblaye.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitblois.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitboulognebillancourt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitboulognesurmer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitbourges.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitbrest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitcaen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitcagnes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitchambery.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitchartres.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitcherbourg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitclermontferrand.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitevian.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitfecamp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitgap.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitlemans.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitlorient.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitmeaux.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitmeudon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitnanterre.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitneuilly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitnevers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitrueil.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintcloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintdenis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintemilion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintetienne.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintjeandeluz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintmalo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitstarnberg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsuresnes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visittarbes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitthionville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visittourcoing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visittrouville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitvalence.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitvalenciennes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitvichy.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d642c35c200000403004630440220672aff9e8b9526d00b9dcef41901db49b39ec3767ee6c1918b3ac00e1544713502207ec308a5f91aab45c17e152d7fbc2c9bdd0e40298cf2cdcf757f99e686dc5bde007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d642c35c2000004030046304402205ef29b03c980f121836d7d6c1b59ada87900ddf6fedc267882a66f8d2395312602201eda5afc4f746537f69b5058530241b0fbb6783b55f1294cb2309e50ad78bf24 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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