u.mailkit.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 88:dc:04:e0:f1:81:e2:c2:f4:a7:4c:c4:52:46:aa:75 was issued on by Sectigo Limited.

With 59 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=u.mailkit.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 88:dc:04:e0:f1:81:e2:c2:f4:a7:4c:c4:52:46:aa:75
Serial Number (int): 181917411687115948243884857371528702581
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 5e:ff:a3:50:a4:23:16:c4:49:06:b1:c1:43:bb:99:9c:75:78:70:70
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 68:19:60:a5:87:03:90:1e:ea:fb:1b:ef:a7:67:a9:1d:c6:8e:07:bc
Fingerprint (sha256): ae:7a:09:15:7e:b2:0c:15:6c:84:79:95:45:01:bb:e6:29:bd:3f:2a:be:36:ba:dd:24:54:eb:16:a7:b9:ed:bd

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate u.mailkit.com

59

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for u.mailkit.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

u.mailkit.com
u.club.rossmann.cz
u.dedoma.ro
u.dedoma.sk
u.dine4fit.hu
u.dine4fit.pl
u.dobryemail.cz
u.e-kondomy.cz
u.emaildemos.com
u.homecredit.cz
u.homecredit.sk
u.kaloricketabulky.cz
u.kaloricketabulky.sk
u.kartavyhod.drmax.cz
u.ketodiet.cz
u.ketodiet.sk
u.kusmitea.cz
u.love.activate.cz
u.mesacnyvypis.sk
u.mesicnivypis.cz
u.mimilatky.cz
u.mnd.cz
u.naturamed.cz
u.naturamed.sk
u.news.astratex-shop.ch
u.news.astratex.at
u.news.astratex.bg
u.news.astratex.cz
u.news.astratex.de
u.news.astratex.gr
u.news.astratex.hr
u.news.astratex.hu
u.news.astratex.pl
u.news.astratex.ro
u.news.astratex.si
u.news.astratex.sk
u.news.astratex.ua
u.news.etneteragroup.cz
u.newsletter.drmax.cz
u.newsletter.rossmann.cz
u.nl.toner.shop
u.nl.tonerpartner.cz
u.nl.tonerpartner.hr
u.nl.tonerpartner.pl
u.nl.tonerpartner.ro
u.nl.tonerpartner.sk
u.nl.tonerpartners.hu
u.notamiq.com
u.omnivery.com
u.pottenpannen.cz
u.pottenpannen.sk
u.pozvanky.nm.cz
u.prazirna.doubleshot.cz
u.superlove.sk
u.tablicakalorijnosti.ru
u.tablycjakalorijnosti.com.ua
u.travelking.cz
u.travelking.hu
u.travelking.sk

Other certificates including the domain name mailkit.com

(limited to 100 certificates)
t.mailkit.com
*.mailkit.com
t.mailkit.com
*.mailkit.com
t.mailkit.com
u.mailkit.com
mailkit.com
u.mailkit.com
u.mailkit.com
mailkit.com
t.mailkit.com
u.mailkit.com

Certificate

The complete raw certificate details for u.mailkit.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGcjC32JLs4oGwRmRSq9
QhHvCxRXiUoosMaZB3MGvkyGo811dKVKdXZlmxHszSUWOmFT1KXILQG4zbe9aVtJ
+K2hfNIZ3wLFZ6aXA7Z5T4bJVIzvSqND+t/B0JiTAH/JXirGScDMxMKsUDj3/Mm4
jQxnjRFFuqUr3mPPnzUvf4MEmDwqtxcHLp92JGk6P5jg4J1DtsIAvgX0QPNo+cyG
MnatvgixI+DwWKHyq54QvD2Pqfk1ZjKp/Y9cYLDO47rbEqV+de7DOjwNKeLJdgkl
3+Q9Vp2ScNTPjlkIaobPB23R7iuANhwxhaOC6IC7cgvldKnKaOOgMakNt7M67RiJ
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 181917411687115948243884857371528702581
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'u.mailkit.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20753940712433700840126440288149304003354474029868529457445881989701578374053253131867199976222589395802488805391711842359178093034405867070481658271228682267746402344982538340596313441682379931874655678253709934490016708863669652396654095586879184462110121595995702854401130967614384534756257811332271374832982751511779156986662828116900989198826330989497097351874826159168353763143107629145862638294379657861081997716614632635159765558447600843095053947408422520389590160267371689592073730744893322284410484638085781450183569476800734796460235367419439932842164338082910621964526147046121261503480427771408357558641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5effa350a42316c44906b1c143bb999c75787070
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							016600750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017d7a7eebc1000004030046304402207e0f08b942e6eebe9579144add9fbb460c0a8ff9e4fe5d5d4418926388542b3102203d179b014d5e92e2efceaffdfd9ae77a3ad2f296d6919378a27d82cd252900c000750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017d7a7eeb85000004030046304402201af6d8070675df22a1d8db8a8a72c6163707e84e15f5a3a1b0b9ff8eed41aedf02206f5a57054d3a2f49f15146fb57de78f9cd917bf1067f9d8fc612d3d846536b810076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017d7a7eeb63000004030047304502202b5e79f1946993b9f63c93faaa652e099a38cf150d4a2f833bcf86701fca456c022100e4f18f823968cf602457cbc1d05da35d7f059c9f3bcc563e7283937b44d4810c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1136 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.mailkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.club.rossmann.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.dedoma.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.dedoma.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.dine4fit.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.dine4fit.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.dobryemail.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.e-kondomy.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.emaildemos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.homecredit.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.homecredit.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.kaloricketabulky.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.kaloricketabulky.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.kartavyhod.drmax.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.ketodiet.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.ketodiet.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.kusmitea.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.love.activate.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.mesacnyvypis.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.mesicnivypis.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.mimilatky.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.mnd.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.naturamed.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.naturamed.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.news.astratex-shop.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.news.astratex.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.news.astratex.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.news.astratex.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.news.astratex.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.news.astratex.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.news.astratex.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.news.astratex.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.news.astratex.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.news.astratex.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.news.astratex.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.news.astratex.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.news.astratex.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.news.etneteragroup.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.newsletter.drmax.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.newsletter.rossmann.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.toner.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartner.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartner.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartner.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartner.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartner.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartners.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notamiq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.omnivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.pottenpannen.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.pottenpannen.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.pozvanky.nm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.prazirna.doubleshot.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.superlove.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.tablicakalorijnosti.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.tablycjakalorijnosti.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.travelking.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.travelking.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.travelking.sk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0049f6b497afbd06fe9846cb7b4134073cf9021a877d0cd29cc60e74830c6d479f53d1e008f87a1feee9b015543c26774d0e53f162ad5604beed3b4dfff411b3c8db8069af7e5dacd40734c3cb0fbd7ce4188beb4faaa006f99494acc9b6a8e88eb131f098d2a0d54fcc2f9972c86859014ad94122de1ac26987bd55505e67f475f9279ad4b4d4db1cf917d9fb874e058ea49970087311b406ea789b759bf0a68b8f3e6ec3197b285c1f15ff100e5a47251d8f4bac8ec94b00d02014034a24c8df37a7e4a6044e6ec2360dc06e84560702494104505c1ed6c6f454083586d8d216470de661426a36e02210ed224e38bedd23215f7dd64be25ff47c7fc60a3f4109