kiosk.vidaglobal.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:24:5a:94:bb:5c:33:b6:7d:cb:3a:63:53:dc:67:29:97:12 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kiosk.vidaglobal.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:24:5a:94:bb:5c:33:b6:7d:cb:3a:63:53:dc:67:29:97:12
Serial Number (int): 360819711715866068042446902528664727557906
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 81:81:75:35:f2:43:cc:47:04:28:d3:af:64:ba:8c:45:0d:2c:a4:03
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5d:4d:9d:de:4c:c5:e7:f9:90:d0:9b:18:5a:01:aa:69:b3:3d:c0:df
Fingerprint (sha256): af:2a:67:9d:32:df:5d:53:24:cf:66:13:f5:2b:2c:85:e8:ed:ae:b7:c7:03:df:5c:3e:a8:a3:3d:fd:db:9c:5e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kiosk.vidaglobal.de

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kiosk.vidaglobal.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bibliothek.explicare.doctor
brochure.ntpwarranty.com
brochures.keepmoat.com
brochures.waterrower.co.uk
catalogo.strap.com.br
chapters.transamericanheroes.com
chef-magazine.com
documents.zettlerelectronics.com
eatsmarter.kiosk.plus
ebooks.royalafricansafaris.com
emag.diamondworld.net
emag.indianjeweller.in
emags.avr-verlagsobjekte.de
epaper.logistik-news.at
flyer.aqua-dome.at
grazia.kiosk.plus
info.independenceaustralia.com.au
kataloge.teppich-stark.de
kiosk.am-weststrand.com
kiosk.der-kleine-georg.de
kiosk.kip-tape.com
kiosk.shopdecormagazines.com
kiosk.verbaende.com
kiosk.vidaglobal.de
magazin.lifechannel.ch
magazin.tellz.me
magazine.ausemergencyservices.com.au
magazine.cioa.com
magazine.elektropraktiker.de
magazine.innovami.com
magazine.inversionesciel.com
magazine.iuoe.org
magazine.mpdunne.com
magazine.roarkidsmagazine.com
magazine.suncoastergroup.com
mitteilungsblatt.seifert-medien.de
news.vdmno.de
publications.cwgc.org
publikationen.contipark.de
quals.truebeck.com
read.rapidrivermagazine.com
tagesspiegel.kiosk.plus
webkiosk.leveldesigngroup.com
webkiosk.mwk-koeln.de
webkiosks.corshamprint.co.uk
webkiosks.plaskettcollege.com
wirbeicontipark.contipark.de
www.brochures.venturamarketing.ie
www.magazine.e-motec.net
www.magazines.thederbeian.com
yumpu.testact.de

Other certificates including the domain name vidaglobal.de

(limited to 100 certificates)
kiosque.flp.ch
test.phcsystem.com
www.magbooks.icsl.org.in
produktkatalog.mwf-technik.de
magazines.somma.co.za
magazin.nivea.de
kiosk.astrosofa.com
magazines.somma.co.za
start.andernach-wirtschaft.de
kiosk.citytipp.org
travelshop.accessconsciousness.com
onlinecatalog.custom-chrome-europe.com
kiosque.flp.ch
kiosk.vidaglobal.de
www.vidaglobal.co.uk
vitadoor.mediaflip.de
epaper-en.glasmarte.at
magazine.legacylighthouse.org
kiosk.velototal.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
magazines.somma.co.za
magazine.legacylighthouse.org
kiosk.vidaglobal.de
www.vidaglobal.co.uk
test.phcsystem.com
start.andernach-wirtschaft.de
epapers.juenglingverlag.de
kiosk.vidaglobal.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
epaper-en.glasmarte.at
magazines.somma.co.za
kiosk.vidaglobal.de
test.phcsystem.com
test.phcsystem.com
epaper-en.glasmarte.at
magazine.legacylighthouse.org
test.phcsystem.com
epaper-en.glasmarte.at
magazine.legacylighthouse.org
magazines.somma.co.za
kiosk.flp.de
onlinecatalog.custom-chrome-europe.com
webkiosk.die-bank.de
kiosk.flp.ch
kiosk.vidaglobal.de
www.magbooks.icsl.org.in
katalog.lemo-schuh.ch
kiosk.vidaglobal.de
magazines.somethinggoodmagazines.com
www.vidaglobal.co.uk
kiosque.flp.ch
webkiosk.alpenpark.de
onlinecatalog.custom-chrome-europe.com
kiosk.vidaglobal.de
test.phcsystem.com
start.andernach-wirtschaft.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
start.andernach-wirtschaft.de
kataloge.basoeinkaufsverbund.de
epaper-en.glasmarte.at
epaper-en.glasmarte.at
magazines.somma.co.za
webkiosk.alpenpark.de
magazine.legacylighthouse.org
magazine.legacylighthouse.org
epapers.juenglingverlag.de
kiosque.flp.ch
kiosk.velototal.de
kiosk.astrosofa.com
www.magbooks.icsl.org.in
kiosk.flp.ch
kiosk.astrosofa.com
magazines.somma.co.za
start.andernach-wirtschaft.de
katalog.lemo-schuh.ch
katalog.lemo-schuh.ch
magazines.somma.co.za
katalog.lemo-schuh.ch
kiosk.velototal.de
www.magbooks.icsl.org.in
webkiosk.alpenpark.de
kiosk.flp.de
kiosk.velototal.de
moebel-brameyer.mediaflip.de
kiosk.velototal.de
kiosk.velototal.de
kiosk.flp.de
webkiosk.alpenpark.de
epaper-en.glasmarte.at
magazine.legacylighthouse.org
magazines.somma.co.za
magazin.plusperfekt.de
epaper-en.glasmarte.at
webkiosk.alpenpark.de
magazines.somethinggoodmagazines.com
katalog.lemo-schuh.ch

Certificate

The complete raw certificate details for kiosk.vidaglobal.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VL02Z0DzGeGjaJx2Gne
iJhJynLVWChHZGj7/qZAuUOXaVVkZRqAlHo3ZFuYZXX+AO9ZZ4kskkkWvdxycFwf
4yG5tRBLvyafqFplmKzpEX2fkzqGeCDAJJCfwClCWzXgw0Z6bhm4AM32X+emFji1
H4gHSdnQF/Y3/XDbuMnOuMtEQCfGIZRFG95WGbvhmgBcC5yz3zT0pRauut3xT+wC
Hb8AODTGjvrLLeUdzdvTrYFm5reFY5rzltyROFBAPwhpCM0tbxFCrWcBI5LUbCxq
WZI1bmDMlzeGOI9zOdfkeoCGO70q2LEAviqiW+heluVpabof1U4NLsTPhJGOf1j6
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 360819711715866068042446902528664727557906
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-13 11:08:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 11:08:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kiosk.vidaglobal.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28949479185149120232686250877600358592131737034443636683898100067461963126386950684807028698746972296138076119261452970838381634002821910480663287489508622169378201703864945314133818701042452991916476160737991410818728110365374721812877896270086316742532419636290235584854180642064618832656522486078255707210313782503387678652795923779342152852394403501151676652305336162787010066989203154490447475452738784106449905299648081087912788494657951624169904158209523143832556455989840976228867518941327693975721606930968999511202119673623486766026683852475115721005044118656891497739232790025621961844246028202530240526957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81817535f243cc470428d3af64ba8c450d2ca403
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1337 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliothek.explicare.doctor'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochure.ntpwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.keepmoat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.waterrower.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogo.strap.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chapters.transamericanheroes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chef-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documents.zettlerelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatsmarter.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebooks.royalafricansafaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emag.diamondworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emag.indianjeweller.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emags.avr-verlagsobjekte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.logistik-news.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.aqua-dome.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grazia.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.independenceaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.teppich-stark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.am-weststrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.der-kleine-georg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.kip-tape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.shopdecormagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.verbaende.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.vidaglobal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.lifechannel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.tellz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.ausemergencyservices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.cioa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.elektropraktiker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.innovami.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.inversionesciel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.iuoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.mpdunne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.roarkidsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.suncoastergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitteilungsblatt.seifert-medien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.vdmno.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publications.cwgc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publikationen.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quals.truebeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.rapidrivermagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagesspiegel.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.leveldesigngroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.mwk-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.corshamprint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.plaskettcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wirbeicontipark.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brochures.venturamarketing.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazine.e-motec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazines.thederbeian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yumpu.testact.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e64aaab240000040300473045022100f0dcd87be3f2727eb80765078995a73af9d7e7b3becfb3d12ea0ebc347f5086102200ff261dbcab8df593219ae7b3ce55ab55f62d6bc928312f178f2cf56ce88c428007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e64aaab2400000403004630440220243ba1841783ed741a4db0f593701d08b95ee37f167750e385ff40f0b915be2c022050fd805cf68eb5155a39b454d1f9289bbe4e30d2bd9e720e4f97f0983f1bb7d6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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