visitstarnberg.com
Issued by R3
About this certificate
This digital certificate with serial number 03:d4:a1:f8:3f:15:67:8f:a6:86:89:1c:b0:5a:33:58:14:94 was issued on by Let's Encrypt.
With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=visitstarnberg.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d4:a1:f8:3f:15:67:8f:a6:86:89:1c:b0:5a:33:58:14:94Serial Number (int): 333692014258949629348549674842941703066772
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 7b:96:c2:eb:3c:13:6f:9b:e7:b7:b2:10:b0:66:f6:93:0b:83:5e:b4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 95:f5:bf:af:22:94:00:93:b3:d6:48:dc:91:d6:94:57:f0:37:34:73
Fingerprint (sha256): e0:74:5e:41:6b:40:66:63:82:21:97:97:54:35:89:ad:4c:04:14:2e:89:af:24:fc:f7:d8:0c:d9:6d:fa:f7:5c
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate visitstarnberg.com
99
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for visitstarnberg.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
visitaix.com
visitaixlesbains.com
visitajaccio.com
visitalbertville.com
visitangouleme.com
visitarcachon.com
visitauxerre.com
visitbastia.com
visitbelfort.com
visitblaye.com
visitblois.com
visitboulognebillancourt.com
visitboulognesurmer.com
visitbourges.com
visitbrest.com
visitcaen.com
visitcagnes.com
visitchambery.com
visitchartres.com
visitcherbourg.com
visitclermontferrand.com
visitdinard.com
visitengadin.com
visitetretat.com
visitevian.com
visitfecamp.com
visitfribourg.com
visitgap.com
visitlabaule.com
visitlarochelle.com
visitlemans.com
visitlorient.com
visitmeaux.com
visitmeudon.com
visitneuchatel.com
visitneuilly.com
visitnevers.com
visitpau.com
visitperpignan.com
visitrueil.com
visitsaintcloud.com
visitsaintdenis.com
visitsaintemilion.com
visitsaintetienne.com
visitsaintjeandeluz.com
visitsaintmalo.com
visitstarnberg.com
visitsuresnes.com
visitthionville.com
visittourcoing.com
visittrouville.com
visitvalence.com
visitvichy.com
www.visitaix.com
www.visitaixlesbains.com
www.visitajaccio.com
www.visitalbertville.com
www.visitangouleme.com
www.visitarcachon.com
www.visitauxerre.com
www.visitbastia.com
www.visitbelfort.com
www.visitblaye.com
www.visitblois.com
www.visitboulognebillancourt.com
www.visitboulognesurmer.com
www.visitbourges.com
www.visitbrest.com
www.visitcaen.com
www.visitcagnes.com
www.visitchambery.com
www.visitchartres.com
www.visitcherbourg.com
www.visitclermontferrand.com
www.visitevian.com
www.visitfecamp.com
www.visitgap.com
www.visitlabaule.com
www.visitlemans.com
www.visitlorient.com
www.visitmeaux.com
www.visitmeudon.com
www.visitneuilly.com
www.visitnevers.com
www.visitperpignan.com
www.visitrueil.com
www.visitsaintcloud.com
www.visitsaintdenis.com
www.visitsaintemilion.com
www.visitsaintetienne.com
www.visitsaintjeandeluz.com
www.visitsaintmalo.com
www.visitstarnberg.com
www.visitsuresnes.com
www.visitthionville.com
www.visittourcoing.com
www.visittrouville.com
www.visitvalence.com
www.visitvichy.com
visitaixlesbains.com
visitajaccio.com
visitalbertville.com
visitangouleme.com
visitarcachon.com
visitauxerre.com
visitbastia.com
visitbelfort.com
visitblaye.com
visitblois.com
visitboulognebillancourt.com
visitboulognesurmer.com
visitbourges.com
visitbrest.com
visitcaen.com
visitcagnes.com
visitchambery.com
visitchartres.com
visitcherbourg.com
visitclermontferrand.com
visitdinard.com
visitengadin.com
visitetretat.com
visitevian.com
visitfecamp.com
visitfribourg.com
visitgap.com
visitlabaule.com
visitlarochelle.com
visitlemans.com
visitlorient.com
visitmeaux.com
visitmeudon.com
visitneuchatel.com
visitneuilly.com
visitnevers.com
visitpau.com
visitperpignan.com
visitrueil.com
visitsaintcloud.com
visitsaintdenis.com
visitsaintemilion.com
visitsaintetienne.com
visitsaintjeandeluz.com
visitsaintmalo.com
visitstarnberg.com
visitsuresnes.com
visitthionville.com
visittourcoing.com
visittrouville.com
visitvalence.com
visitvichy.com
www.visitaix.com
www.visitaixlesbains.com
www.visitajaccio.com
www.visitalbertville.com
www.visitangouleme.com
www.visitarcachon.com
www.visitauxerre.com
www.visitbastia.com
www.visitbelfort.com
www.visitblaye.com
www.visitblois.com
www.visitboulognebillancourt.com
www.visitboulognesurmer.com
www.visitbourges.com
www.visitbrest.com
www.visitcaen.com
www.visitcagnes.com
www.visitchambery.com
www.visitchartres.com
www.visitcherbourg.com
www.visitclermontferrand.com
www.visitevian.com
www.visitfecamp.com
www.visitgap.com
www.visitlabaule.com
www.visitlemans.com
www.visitlorient.com
www.visitmeaux.com
www.visitmeudon.com
www.visitneuilly.com
www.visitnevers.com
www.visitperpignan.com
www.visitrueil.com
www.visitsaintcloud.com
www.visitsaintdenis.com
www.visitsaintemilion.com
www.visitsaintetienne.com
www.visitsaintjeandeluz.com
www.visitsaintmalo.com
www.visitstarnberg.com
www.visitsuresnes.com
www.visitthionville.com
www.visittourcoing.com
www.visittrouville.com
www.visitvalence.com
www.visitvichy.com
Other certificates including the domain name visitstarnberg.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for visitstarnberg.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIM8zCCC9ugAwIBAgISA9Sh+D8VZ4+mhokcsFozWBSUMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMTQyMDMzNDNaFw0yNDA0MTMyMDMzNDJaMB0xGzAZBgNVBAMT EnZpc2l0c3Rhcm5iZXJnLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMoKsnQzWQ4vuv9bv4X1rqxbyC2kvw6PbJGEB/zwsQHqhWztPKbRx0HYgnDi +rIQNtrAnanUZLmBW2OAdqZTQPPRcA6+pcNCPiDttdix5euXeAFb0KXoHI4Pu7w4 mxyPuZMc/RHvThDALAXPgJIRxDgc5ZZUm4ZJ/Mcx4CWD6LusrWLMGywD5PM+XymQ Kc5PjmNomHMC38IplOfXN+s10rRBNd/gLcUXHCHYAfPIE0jMuWvyBJLUNrjawEf2 gqc5Zs+J/ovWd1YeWr5qR/VArACoFHf4sMwh8BSl7ST581h+33oyfononfZf/2CL Bp4j5EgPBlsf/eB/l8VECad1WNUCAwEAAaOCChYwggoSMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUe5bC6zwTb5vnt7IQsGb2kwuDXrQwHwYDVR0jBBgwFoAUFC6zF7dY VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy Lm9yZy8wgggcBgNVHREEgggTMIIID4IMdmlzaXRhaXguY29tghR2aXNpdGFpeGxl c2JhaW5zLmNvbYIQdmlzaXRhamFjY2lvLmNvbYIUdmlzaXRhbGJlcnR2aWxsZS5j b22CEnZpc2l0YW5nb3VsZW1lLmNvbYIRdmlzaXRhcmNhY2hvbi5jb22CEHZpc2l0 YXV4ZXJyZS5jb22CD3Zpc2l0YmFzdGlhLmNvbYIQdmlzaXRiZWxmb3J0LmNvbYIO dmlzaXRibGF5ZS5jb22CDnZpc2l0YmxvaXMuY29tghx2aXNpdGJvdWxvZ25lYmls bGFuY291cnQuY29tghd2aXNpdGJvdWxvZ25lc3VybWVyLmNvbYIQdmlzaXRib3Vy Z2VzLmNvbYIOdmlzaXRicmVzdC5jb22CDXZpc2l0Y2Flbi5jb22CD3Zpc2l0Y2Fn bmVzLmNvbYIRdmlzaXRjaGFtYmVyeS5jb22CEXZpc2l0Y2hhcnRyZXMuY29tghJ2 aXNpdGNoZXJib3VyZy5jb22CGHZpc2l0Y2xlcm1vbnRmZXJyYW5kLmNvbYIPdmlz aXRkaW5hcmQuY29tghB2aXNpdGVuZ2FkaW4uY29tghB2aXNpdGV0cmV0YXQuY29t gg52aXNpdGV2aWFuLmNvbYIPdmlzaXRmZWNhbXAuY29tghF2aXNpdGZyaWJvdXJn LmNvbYIMdmlzaXRnYXAuY29tghB2aXNpdGxhYmF1bGUuY29tghN2aXNpdGxhcm9j aGVsbGUuY29tgg92aXNpdGxlbWFucy5jb22CEHZpc2l0bG9yaWVudC5jb22CDnZp c2l0bWVhdXguY29tgg92aXNpdG1ldWRvbi5jb22CEnZpc2l0bmV1Y2hhdGVsLmNv bYIQdmlzaXRuZXVpbGx5LmNvbYIPdmlzaXRuZXZlcnMuY29tggx2aXNpdHBhdS5j b22CEnZpc2l0cGVycGlnbmFuLmNvbYIOdmlzaXRydWVpbC5jb22CE3Zpc2l0c2Fp bnRjbG91ZC5jb22CE3Zpc2l0c2FpbnRkZW5pcy5jb22CFXZpc2l0c2FpbnRlbWls aW9uLmNvbYIVdmlzaXRzYWludGV0aWVubmUuY29tghd2aXNpdHNhaW50amVhbmRl bHV6LmNvbYISdmlzaXRzYWludG1hbG8uY29tghJ2aXNpdHN0YXJuYmVyZy5jb22C EXZpc2l0c3VyZXNuZXMuY29tghN2aXNpdHRoaW9udmlsbGUuY29tghJ2aXNpdHRv dXJjb2luZy5jb22CEnZpc2l0dHJvdXZpbGxlLmNvbYIQdmlzaXR2YWxlbmNlLmNv bYIOdmlzaXR2aWNoeS5jb22CEHd3dy52aXNpdGFpeC5jb22CGHd3dy52aXNpdGFp eGxlc2JhaW5zLmNvbYIUd3d3LnZpc2l0YWphY2Npby5jb22CGHd3dy52aXNpdGFs YmVydHZpbGxlLmNvbYIWd3d3LnZpc2l0YW5nb3VsZW1lLmNvbYIVd3d3LnZpc2l0 YXJjYWNob24uY29tghR3d3cudmlzaXRhdXhlcnJlLmNvbYITd3d3LnZpc2l0YmFz dGlhLmNvbYIUd3d3LnZpc2l0YmVsZm9ydC5jb22CEnd3dy52aXNpdGJsYXllLmNv bYISd3d3LnZpc2l0YmxvaXMuY29tgiB3d3cudmlzaXRib3Vsb2duZWJpbGxhbmNv dXJ0LmNvbYIbd3d3LnZpc2l0Ym91bG9nbmVzdXJtZXIuY29tghR3d3cudmlzaXRi b3VyZ2VzLmNvbYISd3d3LnZpc2l0YnJlc3QuY29tghF3d3cudmlzaXRjYWVuLmNv bYITd3d3LnZpc2l0Y2FnbmVzLmNvbYIVd3d3LnZpc2l0Y2hhbWJlcnkuY29tghV3 d3cudmlzaXRjaGFydHJlcy5jb22CFnd3dy52aXNpdGNoZXJib3VyZy5jb22CHHd3 dy52aXNpdGNsZXJtb250ZmVycmFuZC5jb22CEnd3dy52aXNpdGV2aWFuLmNvbYIT d3d3LnZpc2l0ZmVjYW1wLmNvbYIQd3d3LnZpc2l0Z2FwLmNvbYIUd3d3LnZpc2l0 bGFiYXVsZS5jb22CE3d3dy52aXNpdGxlbWFucy5jb22CFHd3dy52aXNpdGxvcmll bnQuY29tghJ3d3cudmlzaXRtZWF1eC5jb22CE3d3dy52aXNpdG1ldWRvbi5jb22C FHd3dy52aXNpdG5ldWlsbHkuY29tghN3d3cudmlzaXRuZXZlcnMuY29tghZ3d3cu dmlzaXRwZXJwaWduYW4uY29tghJ3d3cudmlzaXRydWVpbC5jb22CF3d3dy52aXNp dHNhaW50Y2xvdWQuY29tghd3d3cudmlzaXRzYWludGRlbmlzLmNvbYIZd3d3LnZp c2l0c2FpbnRlbWlsaW9uLmNvbYIZd3d3LnZpc2l0c2FpbnRldGllbm5lLmNvbYIb d3d3LnZpc2l0c2FpbnRqZWFuZGVsdXouY29tghZ3d3cudmlzaXRzYWludG1hbG8u Y29tghZ3d3cudmlzaXRzdGFybmJlcmcuY29tghV3d3cudmlzaXRzdXJlc25lcy5j b22CF3d3dy52aXNpdHRoaW9udmlsbGUuY29tghZ3d3cudmlzaXR0b3VyY29pbmcu Y29tghZ3d3cudmlzaXR0cm91dmlsbGUuY29tghR3d3cudmlzaXR2YWxlbmNlLmNv bYISd3d3LnZpc2l0dmljaHkuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYK KwYBBAHWeQIEAgSB9gSB8wDxAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/ qznYhHMAAAGNCeUSugAABAMASDBGAiEAu0ZdnwPgCh2csjFBOe+7/Sj4b+cYpg5q pCy61ITUtMYCIQCNFtVgd81WTNod+zql3a1QtQaNI7Aplbt8jSA1OMKeLgB2ADtT d3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjQnlEsAAAAQDAEcwRQIh AN4XlZiUpaAZSwWzrvJ2Y+XIL1Q2WjHpr4buz4EU3dq9AiAuzggpgr7xZLj5joxS 3BLk8j9xEW8wkzFztv+fyJLcizANBgkqhkiG9w0BAQsFAAOCAQEAn1Dxr+uMo5dK 7Qc3JyOdIBWC5jcgMkGGsyA/4lPHxSuRH0JlQ6keADLeqM/SKi9aKV0n61KuRbT7 dfVB6sk30iybi3hu73B5SI03oektZr2g9IOm130kfguIwQuZFYg6lOf6l54s1aaZ Jr4wsm4QNSDFEPaeN7lanbbqLuppOpWme18qbLHXzR1GaAAcM7ZRhA2jNUJ3JW6H 2/VOxQFroMcZU3R2onVsXGO4XtHdf6RLL+KeD7jrAZsluUPyz2l3LE77rbogJz70 fR83ycIKTqocRfdgKGUfnA59+SOLwg7nMIIgi0LyESwJCjK42BW/3YtziiYSitI8 Lj0b0DjSTg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygqydDNZDi+6/1u/hfWu rFvILaS/Do9skYQH/PCxAeqFbO08ptHHQdiCcOL6shA22sCdqdRkuYFbY4B2plNA 89FwDr6lw0I+IO212LHl65d4AVvQpegcjg+7vDibHI+5kxz9Ee9OEMAsBc+AkhHE OBzlllSbhkn8xzHgJYPou6ytYswbLAPk8z5fKZApzk+OY2iYcwLfwimU59c36zXS tEE13+AtxRccIdgB88gTSMy5a/IEktQ2uNrAR/aCpzlmz4n+i9Z3Vh5avmpH9UCs AKgUd/iwzCHwFKXtJPnzWH7fejJ+ieid9l//YIsGniPkSA8GWx/94H+XxUQJp3VY 1QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 333692014258949629348549674842941703066772 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-14 20:33:43 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-13 20:33:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'visitstarnberg.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25505412532642705237258526602927139515671268708259116214904388829232936225830033565768334734507984280202972400849096107527090475788063612608563626299891957963470060175306922995581413764649716333234427651920087243424844680352611694093811589142213478414745429443769166230854928043738739158601719559964525125570078768790344214386554718900274171971262873714754636438484688147898872901612961978894544851034979736036178230172056973681892411330426817335727760208982793087067188869420316764191787890321042275795875882838151591094664021239070292176809681360443236023057889090216130524687836394294887847392383944527613930068181 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7b96c2eb3c136f9be7b7b210b066f6930b835eb4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2067 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitaix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitaixlesbains.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitajaccio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitalbertville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitangouleme.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitarcachon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitauxerre.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitbastia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitbelfort.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitblaye.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitblois.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitboulognebillancourt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitboulognesurmer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitbourges.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitbrest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitcaen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitcagnes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitchambery.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitchartres.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitcherbourg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitclermontferrand.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitdinard.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitengadin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitetretat.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitevian.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitfecamp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitfribourg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitgap.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitlabaule.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitlarochelle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitlemans.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitlorient.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitmeaux.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitmeudon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitneuchatel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitneuilly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitnevers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitpau.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitperpignan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitrueil.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintcloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintdenis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintemilion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintetienne.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintjeandeluz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintmalo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitstarnberg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsuresnes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitthionville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visittourcoing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visittrouville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitvalence.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitvichy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitaix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitaixlesbains.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitajaccio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitalbertville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitangouleme.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitarcachon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitauxerre.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitbastia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitbelfort.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitblaye.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitblois.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitboulognebillancourt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitboulognesurmer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitbourges.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitbrest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitcaen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitcagnes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitchambery.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitchartres.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitcherbourg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitclermontferrand.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitevian.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitfecamp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitgap.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitlabaule.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitlemans.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitlorient.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitmeaux.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitmeudon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitneuilly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitnevers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitperpignan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitrueil.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintcloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintdenis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintemilion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintetienne.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintjeandeluz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintmalo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitstarnberg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsuresnes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitthionville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visittourcoing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visittrouville.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitvalence.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitvichy.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d09e512ba0000040300483046022100bb465d9f03e00a1d9cb2314139efbbfd28f86fe718a60e6aa42cbad484d4b4c60221008d16d56077cd564cda1dfb3aa5ddad50b5068d23b02995bb7c8d203538c29e2e0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d09e512c00000040300473045022100de17959894a5a0194b05b3aef27663e5c82f54365a31e9af86eecf8114dddabd02202ece082982bef164b8f98e8c52dc12e4f23f71116f30933173b6ff9fc892dc8b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 009f50f1afeb8ca3974aed073727239d201582e63720324186b3203fe253c7c52b911f426543a91e0032dea8cfd22a2f5a295d27eb52ae45b4fb75f541eac937d22c9b8b786eef7079488d37a1e92d66bda0f483a6d77d247e0b88c10b9915883a94e7fa979e2cd5a69926be30b26e103520c510f69e37b95a9db6ea2eea693a95a67b5f2a6cb1d7cd1d4668001c33b651840da3354277256e87dbf54ec5016ba0c719537476a2756c5c63b85ed1dd7fa44b2fe29e0fb8eb019b25b943f2cf69772c4efbadba20273ef47d1f37c9c20a4eaa1c45f76028651f9c0e7df9238bc20ee73082208b42f2112c090a32b8d815bfdd8b738a26128ad23c2e3d1bd038d24e