visitstarnberg.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d0:c7:1f:48:93:d8:3f:c0:97:d3:69:d0:98:e9:57:d0:fd was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=visitstarnberg.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d0:c7:1f:48:93:d8:3f:c0:97:d3:69:d0:98:e9:57:d0:fd
Serial Number (int): 419492554851006957011702089815927792587005
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9e:4b:bb:d0:ae:ef:f2:55:b2:b0:c1:91:c0:27:4b:37:f9:26:6d:b9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ee:3d:77:ac:2d:96:7c:23:a7:ce:6f:91:7f:ba:80:ff:5e:46:5e:94
Fingerprint (sha256): e2:fb:42:07:fc:a4:89:ac:05:93:58:e9:c7:c3:b2:03:74:48:ff:96:b2:3d:f8:8d:7e:93:43:3e:42:3a:e3:da

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate visitstarnberg.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for visitstarnberg.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

visitaix.com
visitaixlesbains.com
visitajaccio.com
visitalbertville.com
visitangouleme.com
visitarcachon.com
visitauxerre.com
visitbastia.com
visitbelfort.com
visitblaye.com
visitblois.com
visitboulognebillancourt.com
visitbourges.com
visitbrest.com
visitcaen.com
visitcagnes.com
visitchambery.com
visitchartres.com
visitcherbourg.com
visitclermontferrand.com
visitdinard.com
visitengadin.com
visitetretat.com
visitevian.com
visitfecamp.com
visitfribourg.com
visitgap.com
visitlabaule.com
visitlarochelle.com
visitlemans.com
visitlorient.com
visitmeaux.com
visitmeudon.com
visitnanterre.com
visitneuchatel.com
visitneuilly.com
visitnevers.com
visitpau.com
visitrueil.com
visitsaintcloud.com
visitsaintdenis.com
visitsaintemilion.com
visitsaintetienne.com
visitsaintjeandeluz.com
visitsaintmalo.com
visitstarnberg.com
visitsuresnes.com
visitthionville.com
visittourcoing.com
visittrouville.com
visitvalence.com
visitvalenciennes.com
visitvichy.com
www.visitaix.com
www.visitaixlesbains.com
www.visitajaccio.com
www.visitalbertville.com
www.visitangouleme.com
www.visitarcachon.com
www.visitauxerre.com
www.visitbastia.com
www.visitbelfort.com
www.visitblaye.com
www.visitblois.com
www.visitboulognebillancourt.com
www.visitbourges.com
www.visitbrest.com
www.visitcaen.com
www.visitcagnes.com
www.visitchambery.com
www.visitchartres.com
www.visitcherbourg.com
www.visitclermontferrand.com
www.visitevian.com
www.visitfecamp.com
www.visitgap.com
www.visitlabaule.com
www.visitlemans.com
www.visitlorient.com
www.visitmeaux.com
www.visitmeudon.com
www.visitnanterre.com
www.visitneuilly.com
www.visitnevers.com
www.visitrueil.com
www.visitsaintcloud.com
www.visitsaintdenis.com
www.visitsaintemilion.com
www.visitsaintetienne.com
www.visitsaintjeandeluz.com
www.visitsaintmalo.com
www.visitstarnberg.com
www.visitsuresnes.com
www.visitthionville.com
www.visittourcoing.com
www.visittrouville.com
www.visitvalence.com
www.visitvalenciennes.com
www.visitvichy.com

Other certificates including the domain name visitstarnberg.com

(limited to 100 certificates)
visitstarnberg.com
visitstarnberg.com
visitstarnberg.com
visitstarnberg.com
visitstarnberg.com
visitstarnberg.com
visitstarnberg.com
visitstarnberg.com
visitstarnberg.com
visitstarnberg.com
visitstarnberg.com

Certificate

The complete raw certificate details for visitstarnberg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aQ3k8V2mGEt2SXH9UmX
6uwr7nuHFhel92rK2kZNt3/zHKcosJvznu/UnZGInxRdZyjfCUhPaLKRuI/+dsqq
bE+t8jxy02I77kOrcp/E8lF2w82b3Ehxohh2YE4PMnvbB18byv7t5gmonSPtwurX
De9LPZwklXQ2WtNxixHuMNIGXm7NjKxi/FoEV2oeeUcIIp9TuMDqG2cIHReqdqhT
7F4FNdCfOUOOEQNgdj6CXkOtXOY82DsYAWTyU67UMAZsaWWYArHRjF9SPrMpcHJl
y00ityHUtxFTCtabGC8T2bLsbFFNECnla8hrMPg6SWBv3wqJWPAieP/JAvuVLrxE
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 419492554851006957011702089815927792587005
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-22 09:12:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-21 09:12:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'visitstarnberg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27474690647044391705923321664149533594905565560421028821515351601583311418061027811680794711882569221247437274554869279873478330924600934692503771861746085149829052833793452677989340762621453398713666495472904959335058382310020945898585370375321794871781656846117171698356815335584553318322149869326318452876272590295549234211182070230508896746439690251580580528415946940416847879311569827283770772895823483907523365634792196174399964600775573073548767157903337759864071272165169239009140695822156081021864863756748220204322365239105896794241130735746099080849375689574661044237761707230202941405676683071025823106103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e4bbbd0aeeff255b2b0c191c0274b37f9266db9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2061 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitaix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitaixlesbains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitajaccio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitalbertville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitangouleme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitarcachon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitauxerre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitbastia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitbelfort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitblaye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitblois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitboulognebillancourt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitbourges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitbrest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitcaen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitcagnes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitchambery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitchartres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitcherbourg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitclermontferrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitdinard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitengadin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitetretat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitevian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitfecamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitfribourg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitgap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitlabaule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitlarochelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitlemans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitlorient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitmeaux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitmeudon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitnanterre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitneuchatel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitneuilly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitnevers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitpau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitrueil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintdenis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintemilion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintetienne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintjeandeluz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsaintmalo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitstarnberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitsuresnes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitthionville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visittourcoing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visittrouville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitvalence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitvalenciennes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitvichy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitaix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitaixlesbains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitajaccio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitalbertville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitangouleme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitarcachon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitauxerre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitbastia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitbelfort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitblaye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitblois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitboulognebillancourt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitbourges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitbrest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitcaen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitcagnes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitchambery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitchartres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitcherbourg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitclermontferrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitevian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitfecamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitgap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitlabaule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitlemans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitlorient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitmeaux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitmeudon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitnanterre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitneuilly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitnevers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitrueil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintdenis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintemilion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintetienne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintjeandeluz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsaintmalo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitstarnberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitsuresnes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitthionville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visittourcoing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visittrouville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitvalence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitvalenciennes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitvichy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d30a7db8e000004030047304502210092f1cc9bf9dfe22d5ae430671093bf744d84985103c9599fe0718145186a6f6702205bae98889b8cf9d95133b39d3c8b60b1b821d4ddd98ed53f383e9817eff4d862007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d30a7db8e000004030047304502206a815f773cd7a84613626c36ad62f856e7170ae43937acdb2e641ba8177250af022100f4de360c291ec7c2494075c86a251aeb6f4309d160d4d04851aa48540a3ae310
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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