magazine.legacylighthouse.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4e:2e:e5:e7:d6:f3:04:7c:8d:a1:90:ef:db:ae:20:6e:5c was issued on by Let's Encrypt.

With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=magazine.legacylighthouse.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4e:2e:e5:e7:d6:f3:04:7c:8d:a1:90:ef:db:ae:20:6e:5c
Serial Number (int): 287941220641167306198559804841751071452764
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 11:32:0c:5b:c6:00:3a:fc:4f:08:6f:af:0e:e8:0c:b1:6e:8b:fd:df
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1f:70:d6:32:75:36:3e:bf:ef:51:25:b0:c2:e2:f0:08:e2:71:78:08
Fingerprint (sha256): b0:76:ac:53:ce:f0:97:2c:a1:d4:fc:cd:2e:01:8e:7e:8f:9a:d5:95:c9:46:2a:90:34:42:8a:89:43:21:fc:04

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate magazine.legacylighthouse.org

54

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magazine.legacylighthouse.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bibliothek.explicare.doctor
brochure.ntpwarranty.com
brochures.keepmoat.com
brochures.waterrower.co.uk
catalogo.strap.com.br
chapters.transamericanheroes.com
chef-magazine.com
documents.zettlerelectronics.com
eatsmarter.kiosk.plus
ebooks.royalafricansafaris.com
emag.diamondworld.net
emag.indianjeweller.in
emags.avr-verlagsobjekte.de
epaper.logistik-news.at
flyer.aqua-dome.at
grazia.kiosk.plus
info.independenceaustralia.com.au
kataloge.teppich-stark.de
kataloge.westfalen-urlaubsreisen.de
kiosk.am-weststrand.com
kiosk.der-kleine-georg.de
kiosk.kip-tape.com
kiosk.shopdecormagazines.com
kiosk.verbaende.com
kiosk.vidaglobal.de
magazin.lifechannel.ch
magazin.tellz.me
magazine.ausemergencyservices.com.au
magazine.cioa.com
magazine.elektropraktiker.de
magazine.innovami.com
magazine.inversionesciel.com
magazine.iuoe.org
magazine.legacylighthouse.org
magazine.mpdunne.com
magazine.roarkidsmagazine.com
magazine.suncoastergroup.com
magazines.somethinggoodmagazines.com
mitteilungsblatt.seifert-medien.de
news.vdmno.de
publications.cwgc.org
publikationen.contipark.de
quals.truebeck.com
read.rapidrivermagazine.com
tagesspiegel.kiosk.plus
webkiosk.leveldesigngroup.com
webkiosk.mwk-koeln.de
webkiosks.corshamprint.co.uk
webkiosks.plaskettcollege.com
wirbeicontipark.contipark.de
www.brochures.venturamarketing.ie
www.magazine.e-motec.net
www.magazines.thederbeian.com
yumpu.testact.de

Other certificates including the domain name legacylighthouse.org

(limited to 100 certificates)
www.magbooks.icsl.org.in
produktkatalog.mwf-technik.de
magazines.somma.co.za
magazin.nivea.de
magazines.somma.co.za
kiosk.citytipp.org
travelshop.accessconsciousness.com
onlinecatalog.custom-chrome-europe.com
vitadoor.mediaflip.de
epaper-en.glasmarte.at
magazine.legacylighthouse.org
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
magazines.somma.co.za
magazine.legacylighthouse.org
start.andernach-wirtschaft.de
epapers.juenglingverlag.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
travelshop.accessconsciousness.com
epaper-en.glasmarte.at
magazines.somma.co.za
epaper-en.glasmarte.at
magazine.legacylighthouse.org
epaper-en.glasmarte.at
magazine.legacylighthouse.org
magazines.somma.co.za
onlinecatalog.custom-chrome-europe.com
www.sblaettle.at
www.magbooks.icsl.org.in
katalog.lemo-schuh.ch
webkiosk.alpenpark.de
onlinecatalog.custom-chrome-europe.com
start.andernach-wirtschaft.de
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
start.andernach-wirtschaft.de
kataloge.basoeinkaufsverbund.de
epaper-en.glasmarte.at
epaper-en.glasmarte.at
magazines.somma.co.za
webkiosk.alpenpark.de
magazine.legacylighthouse.org
magazine.legacylighthouse.org
epapers.juenglingverlag.de
www.magbooks.icsl.org.in
www.sblaettle.at
magazines.somma.co.za
start.andernach-wirtschaft.de
katalog.lemo-schuh.ch
katalog.lemo-schuh.ch
magazines.somma.co.za
katalog.lemo-schuh.ch
www.magbooks.icsl.org.in
webkiosk.alpenpark.de
katalog.klickparts.com
webkiosk.alpenpark.de
epaper-en.glasmarte.at
magazine.legacylighthouse.org
magazines.somma.co.za
magazin.plusperfekt.de
epaper-en.glasmarte.at
webkiosk.alpenpark.de
katalog.lemo-schuh.ch
katalog.lemo-schuh.ch
epaper-en.glasmarte.at
www.magbooks.icsl.org.in
webkiosk.alpenpark.de
magazine.legacylighthouse.org
handelsblatt.kiosk.plus
magazine.legacylighthouse.org
magazine.legacylighthouse.org
katalog.klickparts.com
magazine.legacylighthouse.org
katalog.klickparts.com
vitadoor.mediaflip.de
epaper.grillzeit.at
onlinecatalog.custom-chrome-europe.com
epaper.grillzeit.at
katalog.lemo-schuh.ch
epaper-en.glasmarte.at
www.magbooks.icsl.org.in
onlinecatalog.custom-chrome-europe.com
magazine.legacylighthouse.org
berliner-kurier1.kiosk.plus
magazine.legacylighthouse.org
webkiosk.alpenpark.de
kiosk.citytipp.org
publikationen.stbverband-koeln.de
start.andernach-wirtschaft.de
epaper-en.glasmarte.at
publikationen.stbverband-koeln.de
vitadoor.mediaflip.de
travelshop.accessconsciousness.com
webkiosk.alpenpark.de
ebook.frcemexambookstore.co.uk
onlinecatalog.custom-chrome-europe.com
katalog.klickparts.com
webkiosk.alpenpark.de
epaper-en.glasmarte.at

Certificate

The complete raw certificate details for magazine.legacylighthouse.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbot8Lkr100hnnH3dy4f
1WwUdZdWO2y7/LXvDqkWI8PMT5Y3I0ceubNW3Xr9o4OSB+TfOb75WK/3+x63IP20
1L6thpLSbfXX91UEtZtEoLviPNYbInnFAWVmfvxBv6N6mPm1VsWWNbfmslP36aoB
txx9MvWCk0eecgp8VahC8ewaaglV7P3SOFjZ4aZEU9TPsPAX93pkLtDqMqYiiOHk
+r1wyXcCC9kX2c268PaNM0G/2I9VyqZPiBJq1wzn6dDMx71hTr/xjsiggj/7atKZ
bd+t36IgLAs9yo+C3nZr03iQ2OCjxZvCafsaeaUlr+fdndn+jmOPpAWI5E4dV2Xu
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287941220641167306198559804841751071452764
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-17 11:03:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-15 11:03:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magazine.legacylighthouse.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24960754589026487750002898856339247641602990007533726434655811622794826561173619534521335661085994793531442280393105636668174433240384644551336586143882837384198536629020552302543644978988565334900675482384624386655945376354117919202705372407937356904252756585837735645126745516822045401992518493017287528114805318644755179424154286792152751825985646520994584332237783392291754071733469586691498075570029070124546058943963954501626226662063076719677603478022334451566771459041636005040858133446647559607525674698852699640975060760313528297640903008914049655842072521289905812355629461606197461942930879531507886976593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11320c5bc6003afc4f086faf0ee80cb16e8bfddf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1443 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliothek.explicare.doctor'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochure.ntpwarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.keepmoat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochures.waterrower.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogo.strap.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chapters.transamericanheroes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chef-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documents.zettlerelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatsmarter.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebooks.royalafricansafaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emag.diamondworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emag.indianjeweller.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emags.avr-verlagsobjekte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.logistik-news.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.aqua-dome.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grazia.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.independenceaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.teppich-stark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kataloge.westfalen-urlaubsreisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.am-weststrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.der-kleine-georg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.kip-tape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.shopdecormagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.verbaende.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.vidaglobal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.lifechannel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.tellz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.ausemergencyservices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.cioa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.elektropraktiker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.innovami.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.inversionesciel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.iuoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.legacylighthouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.mpdunne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.roarkidsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.suncoastergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazines.somethinggoodmagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitteilungsblatt.seifert-medien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.vdmno.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publications.cwgc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publikationen.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quals.truebeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.rapidrivermagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagesspiegel.kiosk.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.leveldesigngroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.mwk-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.corshamprint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.plaskettcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wirbeicontipark.contipark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brochures.venturamarketing.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazine.e-motec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazines.thederbeian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yumpu.testact.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e793edc8f000004030047304502205e8b1e30a12f4e772e372e842277f63fc2eabe67fb3bf78efa8bb9192b1da9f0022100c8cc077fb34f2c78e6e9799771081ac724d9cd53779b3a52be44b43e4653a82800760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e793edcc30000040300473045022069543b584631ec598f1f00d06a9f922f56b35d73fa41b698f0978bf0f2b57332022100c3728a69c09837afa996a3ab17289f842307bdc83b8bd9e02722d8cbf37c4c0e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00497fbb1c42c81434ae52ae6c329f982936ed8924c21401938b0222009ac3d25a26029c9f50ca1d176a3a0d8f829d824aacc1d7a40e3a3245406009bdcbee6e17df4ab7c3f02bb065c705ea6010761a170aef4c4f5b070d33d72979580c4f41b9abd0d8cf7861572608171ccf6e4c03c146569821df8bc059f2d0ae436e8f58b6d58a401284af1f1709271d4644cd9ffd364440a07f39d18432e135e168aed921df6ad3283da37acea08c5a96c76a38fe1ec9ba6f33a793b76a69703d90807918d4aa1738ec9e341c3fbbff3ef5e54d6433b7e30753e046435803cc3ec24a9346267159f2a4f4e8222f57328e824930e73ffc1fee5b08836e7ce99d84c7d94136