ab-impianti-srl.comovee.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:34:09:c0:27:fb:8a:8c:64:bf:37:28:b3:73:08:62:df:86 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ab-impianti-srl.comovee.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:34:09:c0:27:fb:8a:8c:64:bf:37:28:b3:73:08:62:df:86
Serial Number (int): 279044501659071564959957528179399320592262
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0a:24:12:9f:5b:62:ea:81:8f:d8:d2:e8:b3:92:21:d2:9b:f5:4e:fe
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 33:0f:44:aa:21:f9:3d:55:52:43:c7:23:4d:db:19:14:b6:a7:7f:4d
Fingerprint (sha256): b2:6d:45:a0:99:72:b8:e4:d3:a4:92:6b:eb:6e:f0:2e:36:b4:89:e6:9e:70:b2:3d:42:e0:03:7d:a1:10:d1:a3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ab-impianti-srl.comovee.it

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ab-impianti-srl.comovee.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ab-impianti-srl.comovee.it
ace.comovee.de
acticall.comovee.fr
ahold.comovee.net
airliquide.comovee.nl
alliander.comovee.nl
altrans.comovee.net
alutronic.comovee.de
amazon-es.comovee.net
apetito-ag.comovee.net
arvato-distribution.comovee.net
atnt.comovee.net
bank-deutsches-kraftfahrzeuggewerbe.comovee.net
bechtel.comovee.net
big-direkt-gesund.comovee.net
blechwaren-limburg.comovee.net
bnp-paritest.comovee.net
brookings.comovee.net
cargobull.comovee.net
ceramtec.comovee.de
ch-dracenie.comovee.net
cho.comovee.net
cnh-industrial.comovee.net
cnhi.comovee.it
cofely.comovee.net
colgate-palmolive.comovee.net
covoiturekiabi.comovee.net
credit-agricole-centre-loire.comovee.fr
ctco.comovee.net
currenta.comovee.net
cycloon.comovee.nl
dachser.comovee.net
deutsche-lufthansa-ag.comovee.net
drivemx.comovee.net
eisenmann.comovee.net
emc2.comovee.fr
emerson-electric.comovee.net
enterprise-france.comovee.net
eph.comovee.mx
eurotunnel.comovee.net
ey-de.comovee.net
fasterminds.comovee.net
ferromex.comovee.net
ge-brazil.comovee.net
ge.comovee.net
gonvarri.comovee.net
grand-dax.comovee.fr
groupecarso.comovee.fr
hennessy.comovee.net
hilti.comovee.net
ienova.comovee.mx
lendlease.comovee.net
liazon.comovee.net
lisea.comovee.net
liverpool.comovee.mx
lw.comovee.net
mbfrance.comovee.net
mcdonalds-canada.comovee.net
mdc-power.comovee.net
nagel-group.comovee.de
neiu.comovee.net
nestle-en-france.comovee.net
nevs.comovee.net
novagile.comovee.net
novonordisk.comovee.net
oce-technologies.comovee.net
pays-pyrenees-mediterranee.comovee.fr
pepsico.comovee.mx
pg.comovee.net
primokont.comovee.de
pwclu.comovee.net
redblue.comovee.de
rnv.comovee.net
roche.comovee.mx
ruag.comovee.net
rxante.comovee.net
schueco.comovee.net
schwarzgruppe.comovee.net
septeo.comovee.fr
septeo.comovee.net
sgd-perfumery.comovee.net
sms-group.comovee.net
stadt-bornheim.comovee.de
stadtwerke-pfaffenhofen-adilm.comovee.net
suez.comovee.es
suez.comovee.net
sumitomo.comovee.net
summerfest.comovee.net
swarthmore.comovee.net
sysware.comovee.de
tally.comovee.net
tecnico-lisbon.comovee.net
vaude.comovee.net
visiativ.comovee.fr
vitrox.comovee.net
volaris.comovee.net
vw-otlg.comovee.net
wfp.comovee.net
yaskawa.comovee.net
zeppelin.comovee.de

Other certificates including the domain name comovee.it

(limited to 100 certificates)
www.comovee.com
*.comovee.it
ace.dev.comovee.it
ab-impianti-srl.comovee.it
comovee.com
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
*.comovee.it
2u.comovee.net
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
comovee.com
comovee.com
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
comovee.com
8ktd.comovee.nl
www.comovee.com
www.comovee.com
comovee.com
www.comovee.com
ab-impianti-srl.comovee.it
www.comovee.com
ab-impianti-srl.comovee.it
www.comovee.com
www.comovee.com
comovee.com
comovee.com
www.comovee.com
www.comovee.com
www.comovee.com
ab-impianti-srl.dev.comovee.it
comovee.com
comovee.com
2u.comovee.net
ab-impianti-srl.comovee.it
www.comovee.com
adialon.comovee.net
ab-impianti-srl.comovee.it
comovee.com
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
ab-impianti-srl.dev.comovee.it
2u.comovee.net
www.comovee.com
ab-impianti-srl.comovee.it
www.comovee.com
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
2u.comovee.net
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it

Certificate

The complete raw certificate details for ab-impianti-srl.comovee.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279044501659071564959957528179399320592262
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-28 18:13:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-26 18:13:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ab-impianti-srl.comovee.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 689234699478133247596087101757681729486063179108167288383532131573449929601341762971744203282179735142515180016111270461681146859088114486936571690734306524176261770444184987358169409143105914687702888142135888320641088659333867361136127209305708295676063333096444265378563222430543546883094513174370678933591742980756068853437812123263331590214402188092589280540598430774326966450523665541315071493870267080344387065277574201655662217817051113933226538985897119862700145395233426674309484903140430413292129959365566994937378580672409136070877237636778487605081699419837476615934947065781909539020974638115728190584910072034070986105991653735127982984802552509723922071249457058542163160173204111069991875112972990378105850499641048868658531696317460288319020019013857231858175732028656415457683736255886831448500239874708112114442865941091101489758946608483937427840845761943343604243857109384010259780029216122581546039025392512305684220661146371564381852081826777867065897664079860129857420659532199923462303894070353270256773741683684266340037336498866873189394328102588692099283087590205942847548287894362853065936641892844287692192797733475376383614252388694093887863975359797513678382924277277981715854295503450668627870352183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a24129f5b62ea818fd8d2e8b39221d29bf54efe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2309 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ab-impianti-srl.comovee.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ace.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acticall.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahold.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airliquide.comovee.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliander.comovee.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altrans.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alutronic.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazon-es.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apetito-ag.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvato-distribution.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atnt.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bank-deutsches-kraftfahrzeuggewerbe.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bechtel.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'big-direkt-gesund.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blechwaren-limburg.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp-paritest.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brookings.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cargobull.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceramtec.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch-dracenie.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cho.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnh-industrial.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnhi.comovee.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cofely.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colgate-palmolive.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covoiturekiabi.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credit-agricole-centre-loire.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctco.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'currenta.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cycloon.comovee.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dachser.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutsche-lufthansa-ag.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drivemx.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eisenmann.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emc2.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emerson-electric.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterprise-france.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eph.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurotunnel.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ey-de.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fasterminds.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferromex.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge-brazil.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gonvarri.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grand-dax.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupecarso.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hennessy.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilti.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ienova.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lendlease.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liazon.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lisea.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liverpool.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lw.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbfrance.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdonalds-canada.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdc-power.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nagel-group.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neiu.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestle-en-france.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nevs.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novagile.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novonordisk.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oce-technologies.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pays-pyrenees-mediterranee.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pepsico.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primokont.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwclu.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redblue.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rnv.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruag.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxante.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schueco.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwarzgruppe.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'septeo.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'septeo.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgd-perfumery.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms-group.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadt-bornheim.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadtwerke-pfaffenhofen-adilm.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suez.comovee.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suez.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumitomo.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summerfest.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swarthmore.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sysware.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tally.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnico-lisbon.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaude.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visiativ.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitrox.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volaris.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vw-otlg.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfp.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaskawa.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeppelin.comovee.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000164e24f4b48000004030046304402203b61bb6bf08d6a82b14b6e5c4922c1a9c6e505254b48d1a1f61d6c3b3ed07ebb022004f9e72cbc3ce1f44da84ae030636809e98644f90fc708452cc0985a2a3ec307007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164e24f4b37000004030047304502205862b78f875851b32b528d9eeb3a18fed05d105fa52bc79b9cb17896aaab1ea3022100ba2c129679ac65b2d3bb4e5785497e98aba0b0259f60fdcd47175cf385920889
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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