webkiosks.sufijournal.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9b:4d:dd:ac:61:0d:85:e0:d5:ce:33:1b:77:27:61:fb:df was issued on by Let's Encrypt.

With 27 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=webkiosks.sufijournal.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9b:4d:dd:ac:61:0d:85:e0:d5:ce:33:1b:77:27:61:fb:df
Serial Number (int): 314184126217571145241801007840221909351391
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 19:b5:2f:d1:29:50:e3:ec:3d:ea:55:6e:34:c8:be:01:60:e5:cb:85
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9b:68:4d:a9:3b:4e:a0:a8:6d:a3:ee:7e:a5:17:e2:69:dd:b0:2f:31
Fingerprint (sha256): df:bc:ba:11:cc:b3:f0:88:8c:61:dc:c5:99:0b:d6:aa:c5:ed:89:d0:6e:38:c4:02:41:31:ce:d2:9c:8e:5d:36

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate webkiosks.sufijournal.org

27

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webkiosks.sufijournal.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

andermatter.andermatt-swissalps.ch
autodiscover.epaper-poonen.neuer-bund-verlag.de
catalogues.alfacareinternational.com
ebook.aimara.ch
epaper.bielbienne.com
fu-kiosk.futuriststeam.co.uk
gastro.papstar.de
katalog.isa-racing.com
katalog.promondo.de
kiosk.heinmedia.eu
kiosk.ownersclub.immo
kiosk.rattpack.eu
kiosk.visionen.com
lies.buchaktuell.de
magazine.arbeit-und-arbeitsrecht.de
magazine.infoboard.de
media.auvesy.com
neubau-projekte.vr-immoservice-mainfranken.de
oldnick.thesatanicwarlock.com
online.gitaliamagazine.it
print.werwaswo.eu
programme.holiday-event.de
publikationen.ehs-verlag.de
read.citymatters.london
webkiosk.quittenprojekt-bergstrasse.de
webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com
webkiosks.sufijournal.org

Other certificates including the domain name sufijournal.org

(limited to 100 certificates)
www.revistacipcisa.com
broschuere.bildkunstakademie.de
kataloge.vitaltours.de
digiprospekt.freyplus.de
kiosk.dolcevita-magazin.ch
ssl378030.cloudflaressl.com
ssl378029.cloudflaressl.com
catalogs.k7-pro.com
webkiosks.zaubertopf-club.de
ssl378030.cloudflaressl.com
blaetterkatalog.kleentex.eu
ssl378031.cloudflaressl.com
immobilienmagazin.steinauer-immo.ch
ssl378031.cloudflaressl.com
magazine.montana-cans.com
app.procycling.de
magazine.montana-cans.com
ssl378031.cloudflaressl.com
digital.queencityconnections.com
ssl378031.cloudflaressl.com
magazine.montana-cans.com
ssl378031.cloudflaressl.com
publications.nursingald.com
ssl378031.cloudflaressl.com
flyer.medion-fabrikverkauf.de
www.maryspubs.com
ebooks.teammelanie.nz
webkiosk.magazinmarley.de
digital.queencityconnections.com
egsk.weita.ch
blaetterkatalog.kleentex.eu
ssl378029.cloudflaressl.com
ssl378030.cloudflaressl.com
angebote.dersteirerhof.at
magazine.biss.team
read.africanphotomag.co.ke
ssl378030.cloudflaressl.com
ssl378031.cloudflaressl.com
ssl378030.cloudflaressl.com
kiosk.leuchtfeuer-verlag.com
ssl378030.cloudflaressl.com
ssl378031.cloudflaressl.com
kataloge.triplex-fischer.de
ssl378031.cloudflaressl.com
ssl378031.cloudflaressl.com
publikationen.kmu.org
kurse.bdb-musikakademie.de
ssl378030.cloudflaressl.com
app.worldofmtb.de
epaper.chili-peppers.de
webkiosks.zaubertopf-club.de
magazine.biss.team
digital.queencityconnections.com
kataloge.holzimpraegnierwerk.ch
ssl378030.cloudflaressl.com
digital.queencityconnections.com
digiprospekt.freyplus.de
ssl378031.cloudflaressl.com
digital.queencityconnections.com
publikationen.kmu.org
webkiosk.stephanshof.com
publications.nursingald.com
digital.queencityconnections.com
katalog.hltravel.at
rieswick.mediaflip.de
app.fahrrad-news.com
rieswick.mediaflip.de
webkiosk.stephanshof.com
kiosk.seniorenreisen.de
ssl378031.cloudflaressl.com
immomagazin.wegenerimmobilien.de
ssl378030.cloudflaressl.com
webkiosk.edeka-koehne.de
webkiosks.zaubertopf-club.de
ssl378031.cloudflaressl.com
webkiosk.bm-agrotech.ch
digital.queencityconnections.com
publications.nursingald.com
webkiosk.magazinmarley.de
ssl378031.cloudflaressl.com
ssl378029.cloudflaressl.com
brochures.adipec.com
webkiosk.airhoppark.de
catalogs.k7-pro.com
brochures.hts-touristik.de
publikationen.manres.ch
biblioteca.sciens.com.ar
sufijournal.org
silentreview.faaa.net
ssl378031.cloudflaressl.com
digital.queencityconnections.com
ssl378031.cloudflaressl.com
kurse.bdb-musikakademie.de
publications.nursingald.com
ssl378031.cloudflaressl.com
ssl378031.cloudflaressl.com
sufijournal.org
ssl378031.cloudflaressl.com
magazine.biss.team
webkiosk.bm-agrotech.ch

Certificate

The complete raw certificate details for webkiosks.sufijournal.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJCzCCB/OgAwIBAgISA5tN3axhDYXg1c4zG3cnYfvfMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA4MjExNTA3MDdaFw0x
ODExMTkxNTA3MDdaMCQxIjAgBgNVBAMTGXdlYmtpb3Nrcy5zdWZpam91cm5hbC5v
cmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqh9rpgPYQgu9YMPV9
+xUB+gtKg5cGGPyAdPPewr2KfF/z5SEcmR+S1qoDRkCQvNDod/XIOXV05Os1Tly4
uUPGbjdsakXPrxK2Vv0xPxm07jRYeIF5T/AJI4B8I1bKaOvM1SaZh5HqNnjTIDY1
0Jn4JWtGPv1cTGzpS9RXUnt2+S7QyY0a9TzyAC+pOWCjeQj2rmFt13XugCcZeVn/
/ee5wKkbHI+DvnFPjgrvXnKuAfQJMxa1NDWTatgQdlPz3FczZQrClwovr/LIjWay
FvYgMsj09Y7VaVAn0f8eXRxatORa3a1md5391EQoE7h12tzmDmsufw6QFX03um46
Z3vxAgMBAAGjggYPMIIGCzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFBm1L9EpUOPs
PepVbjTIvgFg5cuFMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wggMPBgNVHREEggMGMIIDAoIiYW5kZXJtYXR0ZXIuYW5k
ZXJtYXR0LXN3aXNzYWxwcy5jaIIvYXV0b2Rpc2NvdmVyLmVwYXBlci1wb29uZW4u
bmV1ZXItYnVuZC12ZXJsYWcuZGWCJGNhdGFsb2d1ZXMuYWxmYWNhcmVpbnRlcm5h
dGlvbmFsLmNvbYIPZWJvb2suYWltYXJhLmNoghVlcGFwZXIuYmllbGJpZW5uZS5j
b22CHGZ1LWtpb3NrLmZ1dHVyaXN0c3RlYW0uY28udWuCEWdhc3Ryby5wYXBzdGFy
LmRlghZrYXRhbG9nLmlzYS1yYWNpbmcuY29tghNrYXRhbG9nLnByb21vbmRvLmRl
ghJraW9zay5oZWlubWVkaWEuZXWCFWtpb3NrLm93bmVyc2NsdWIuaW1tb4IRa2lv
c2sucmF0dHBhY2suZXWCEmtpb3NrLnZpc2lvbmVuLmNvbYITbGllcy5idWNoYWt0
dWVsbC5kZYIjbWFnYXppbmUuYXJiZWl0LXVuZC1hcmJlaXRzcmVjaHQuZGWCFW1h
Z2F6aW5lLmluZm9ib2FyZC5kZYIQbWVkaWEuYXV2ZXN5LmNvbYItbmV1YmF1LXBy
b2pla3RlLnZyLWltbW9zZXJ2aWNlLW1haW5mcmFua2VuLmRlgh1vbGRuaWNrLnRo
ZXNhdGFuaWN3YXJsb2NrLmNvbYIZb25saW5lLmdpdGFsaWFtYWdhemluZS5pdIIR
cHJpbnQud2Vyd2Fzd28uZXWCGnByb2dyYW1tZS5ob2xpZGF5LWV2ZW50LmRlghtw
dWJsaWthdGlvbmVuLmVocy12ZXJsYWcuZGWCF3JlYWQuY2l0eW1hdHRlcnMubG9u
ZG9ugiZ3ZWJraW9zay5xdWl0dGVucHJvamVrdC1iZXJnc3RyYXNzZS5kZYI5d2Vi
a2lvc2suc3Bpcml0dWVsbGUtbGVzZXByb2JlLWxpZWJlcmdvdHQtZ2FuemxvZ2lz
Y2guY29tghl3ZWJraW9za3Muc3VmaWpvdXJuYWwub3JnMIH+BgNVHSAEgfYwgfMw
CAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDov
L2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0
aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRp
ZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQ
b2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9y
eS8wggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwDbdK/uyynssf7KPnFtLOW5qrs2
94Rxg8ddnU83th+/ZAAAAWVdPV43AAAEAwBIMEYCIQCG/lnbXiahVZOluiG5mlx9
qizf3g9aCUq889hVTWJb4wIhAOmijgglh7EztpgzsPgL9OAKQ7ysyuNmkUrmqfqP
QVTzAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFlXT1eTQAA
BAMARzBFAiBYMSREnuGtmO50OU7Cek90ytvRKJ6FuHphKZoOGzihAwIhAKMPTg1A
vy6lLaZ3FGAqr/PugQSQQX6AwfBDNGK3orN0MA0GCSqGSIb3DQEBCwUAA4IBAQBt
pZPu3jsdNNITcHNhkDsTn8FwCB+cfDufSNhkLwfZdO92WfHd5WZIwoC1jJO3D3gO
hIeKVgZsKYZdFzS4XGCzJOx9bzfwKhhZBsidfRG34hNbtrACIaiqGYzciHjLl9AH
MZVwH3GCczHNTKFW4LcmiEBvE9KLUw3jzoB0x5n6XZyhNtjP3hlSGdS2cupWBPlJ
VGbLMaur4APn6G6vKmGg2a6uf+H8iN8QgOG39j5k2ITxGyxrOuzPaedamc7FUu1K
pArqyf15bYx1F9uUI6upwVWEyqs30S5kSjhGNtpjxZY82R0IHOHNpBbaZ/0Elca+
5qDSpJbmIqN5mgSkOevG
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ofa6YD2EILvWDD1ffsV
AfoLSoOXBhj8gHTz3sK9inxf8+UhHJkfktaqA0ZAkLzQ6Hf1yDl1dOTrNU5cuLlD
xm43bGpFz68Stlb9MT8ZtO40WHiBeU/wCSOAfCNWymjrzNUmmYeR6jZ40yA2NdCZ
+CVrRj79XExs6UvUV1J7dvku0MmNGvU88gAvqTlgo3kI9q5hbdd17oAnGXlZ//3n
ucCpGxyPg75xT44K715yrgH0CTMWtTQ1k2rYEHZT89xXM2UKwpcKL6/yyI1mshb2
IDLI9PWO1WlQJ9H/Hl0cWrTkWt2tZned/dREKBO4ddrc5g5rLn8OkBV9N7puOmd7
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314184126217571145241801007840221909351391
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-21 15:07:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-19 15:07:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webkiosks.sufijournal.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29606756021284745740350576756892975621730018966170834184050877732124409793359348628273456114969357593334923042543334388405781382628588036233084193531574044464541883533094893047121649727390132939171462874048258117971999369037998805102129257703436544990934818027201123944146764681565782498394234601689461284603270835093730146202557264656725869485609589597795586597043194402191566856637635476492028341472590478474502865822548692788598945823211241201047900006399851355325898705903152223902194138061295243838750014830880209563085271680878999892700945933716173632877530106742323937195352081078015301800862418763466718804977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							19b52fd12950e3ec3dea556e34c8be0160e5cb85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (774 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andermatter.andermatt-swissalps.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.epaper-poonen.neuer-bund-verlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogues.alfacareinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebook.aimara.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaper.bielbienne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fu-kiosk.futuriststeam.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gastro.papstar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalog.isa-racing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalog.promondo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.heinmedia.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.ownersclub.immo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.rattpack.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.visionen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lies.buchaktuell.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.arbeit-und-arbeitsrecht.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.infoboard.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.auvesy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neubau-projekte.vr-immoservice-mainfranken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldnick.thesatanicwarlock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.gitaliamagazine.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'print.werwaswo.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programme.holiday-event.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publikationen.ehs-verlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.citymatters.london'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.quittenprojekt-bergstrasse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosk.spirituelle-leseprobe-liebergott-ganzlogisch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkiosks.sufijournal.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001655d3d5e37000004030048304602210086fe59db5e26a15593a5ba21b99a5c7daa2cdfde0f5a094abcf3d8554d625be3022100e9a28e082587b133b69833b0f80bf4e00a43bcaccae366914ae6a9fa8f4154f3007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001655d3d5e4d00000403004730450220583124449ee1ad98ee74394ec27a4f74cadbd1289e85b87a61299a0e1b38a103022100a30f4e0d40bf2ea52da67714602aaff3ee810490417e80c1f0433462b7a2b374
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006da593eede3b1d34d213707361903b139fc170081f9c7c3b9f48d8642f07d974ef7659f1dde56648c280b58c93b70f780e84878a56066c29865d1734b85c60b324ec7d6f37f02a185906c89d7d11b7e2135bb6b00221a8aa198cdc8878cb97d0073195701f71827331cd4ca156e0b72688406f13d28b530de3ce8074c799fa5d9ca136d8cfde195219d4b672ea5604f9495466cb31ababe003e7e86eaf2a61a0d9aeae7fe1fc88df1080e1b7f63e64d884f11b2c6b3aeccf69e75a99cec552ed4aa40aeac9fd796d8c7517db9423aba9c15584caab37d12e644a384636da63c5963cd91d081ce1cda416da67fd0495c6bee6a0d2a496e622a3799a04a439ebc6