ab-impianti-srl.comovee.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3a:54:d5:01:25:a4:d5:56:ab:46:95:dc:2b:94:4e:28:7a was issued on by Let's Encrypt.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ab-impianti-srl.comovee.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3a:54:d5:01:25:a4:d5:56:ab:46:95:dc:2b:94:4e:28:7a
Serial Number (int): 281185996210836836741128948926443405846650
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 67:1a:5a:3c:a9:d9:d0:a1:4f:43:c9:91:e6:05:38:a6:c9:2d:49:5b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a4:45:d8:ac:72:bc:52:55:59:6a:fd:4a:95:18:2f:68:e2:87:98:55
Fingerprint (sha256): ee:84:01:d3:3b:ea:60:43:7e:66:fd:d3:1d:2d:cc:86:4f:38:2f:58:f6:8d:02:46:26:ab:97:7c:d6:73:5f:9e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate ab-impianti-srl.comovee.it

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ab-impianti-srl.comovee.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ab-impianti-srl.comovee.it
ace.comovee.de
acticall.comovee.fr
ahold.comovee.net
airliquide.comovee.nl
allonshy.hennessy.com
alutronic.comovee.de
amazon-es.comovee.net
arvato-distribution.comovee.net
bank-deutsches-kraftfahrzeuggewerbe.comovee.net
bank-leumi.comovee.net
blechwaren-limburg.comovee.net
bnp-paritest.comovee.net
carpool.summerfest.com
cho.comovee.net
cofely.comovee.net
colgate-palmolive.comovee.net
comparteauto.liverpool.com.mx
ctco.comovee.net
dachser.comovee.net
dormagen.comovee.de
drive.cargobull.com
drive.hilti.com
drive.nagel-group.com
drive.redblue.de
drive.sysware.de
drivemx.comovee.net
eisenmann.comovee.net
emc2.comovee.fr
emerson-electric.comovee.net
enterprise-france.comovee.net
eph.comovee.mx
ey-de.comovee.net
fantasy.comovee.net
fasterminds.comovee.net
ge-brazil.comovee.net
gens.comovee.fr
go.tetonscience.org
gonvarri.comovee.net
groupecarso.comovee.fr
lendlease.comovee.net
lessebo.samakning.se
liazon.comovee.net
linde.comovee.de
lw.comovee.net
mcdonalds-canada.comovee.net
mdc-power.comovee.net
mfz.lok-leipzig.com
mitfahren.bornheim.de
mitfahren.rockinleuben.de
mitfahrportal.bornheim.de
neiu.comovee.net
novagile.comovee.net
orkelljunga.samakning.se
pays-pyrenees-mediterranee.comovee.fr
pepsico.comovee.mx
pg.comovee.net
ponant.comovee.fr
rnv.comovee.net
ruag.comovee.net
rxante.comovee.net
schueco.comovee.net
schwarzgruppe.comovee.net
skitaos.comovee.net
sms-group.comovee.net
stadtwerke-pfaffenhofen-adilm.comovee.net
suez.comovee.es
suez.comovee.net
sumitomo.comovee.net
tally.comovee.net
tecnico---lisbon.comovee.net
unitedpercussion.comovee.net
vaude.comovee.net
volaris.comovee.net
vw-otlg.comovee.net
wfp.comovee.net
www.fahr-mit.currenta.de
yaskawa.comovee.net

Other certificates including the domain name comovee.it

(limited to 100 certificates)
www.comovee.com
*.comovee.it
ace.dev.comovee.it
ab-impianti-srl.comovee.it
comovee.com
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
*.comovee.it
2u.comovee.net
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
comovee.com
comovee.com
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
comovee.com
8ktd.comovee.nl
www.comovee.com
www.comovee.com
comovee.com
www.comovee.com
ab-impianti-srl.comovee.it
www.comovee.com
ab-impianti-srl.comovee.it
www.comovee.com
www.comovee.com
comovee.com
comovee.com
www.comovee.com
www.comovee.com
www.comovee.com
ab-impianti-srl.dev.comovee.it
comovee.com
comovee.com
2u.comovee.net
ab-impianti-srl.comovee.it
www.comovee.com
adialon.comovee.net
ab-impianti-srl.comovee.it
comovee.com
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
ab-impianti-srl.dev.comovee.it
2u.comovee.net
www.comovee.com
ab-impianti-srl.comovee.it
www.comovee.com
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
2u.comovee.net
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it
ab-impianti-srl.comovee.it

Certificate

The complete raw certificate details for ab-impianti-srl.comovee.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281185996210836836741128948926443405846650
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-21 12:44:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-21 12:44:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ab-impianti-srl.comovee.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 721603741918974473714054544698396693745424104092191540322342916371573761070538622381821325601164665869015842127711702502838244394256714816291804776777246271885105589742981985474395386446877534171159223889147173765321840730068538363122842848915326897800090641042806124162613900571036827872341113287265531264147496390461385286498718713819735841343762168168424763888439943490959622471768791103236943793842252846715569350036173643789356879159768438521846833565205040907927733919676590436934671519283018540931419672474891781532907006158426067940270097304872944524950963714720506454924195193717637141646937324201907035881554042935970421488862791819039906838751958523002112104665107913703838178301024287994027750813106904770425558181130623470769508032752104267770732752228202144659816369043308159582362667948075136088323810511046040913060609094352343803623826358730005501674089941747036054269329346767964172377253180408926369858305060064781549495301381232583517326524528141755445477058605216651449843720481873842735556440591874358287921927067017476771251588357272196247349376225816473709292703974998158360875504250062620733298734668502304484800050264508362817526020474569940091119358661587041627077742799704120812087887399364130843754626521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							671a5a3ca9d9d0a14f43c991e60538a6c92d495b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1794 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ab-impianti-srl.comovee.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ace.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acticall.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahold.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airliquide.comovee.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allonshy.hennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alutronic.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazon-es.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvato-distribution.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bank-deutsches-kraftfahrzeuggewerbe.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bank-leumi.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blechwaren-limburg.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp-paritest.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carpool.summerfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cho.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cofely.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colgate-palmolive.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comparteauto.liverpool.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctco.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dachser.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dormagen.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.cargobull.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.hilti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.nagel-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.redblue.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.sysware.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drivemx.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eisenmann.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emc2.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emerson-electric.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterprise-france.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eph.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ey-de.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasy.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fasterminds.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge-brazil.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gens.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.tetonscience.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gonvarri.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupecarso.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lendlease.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lessebo.samakning.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liazon.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linde.comovee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lw.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdonalds-canada.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdc-power.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfz.lok-leipzig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitfahren.bornheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitfahren.rockinleuben.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitfahrportal.bornheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neiu.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novagile.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orkelljunga.samakning.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pays-pyrenees-mediterranee.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pepsico.comovee.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponant.comovee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rnv.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruag.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxante.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schueco.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwarzgruppe.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skitaos.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms-group.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadtwerke-pfaffenhofen-adilm.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suez.comovee.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suez.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumitomo.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tally.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnico---lisbon.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedpercussion.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaude.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volaris.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vw-otlg.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfp.comovee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fahr-mit.currenta.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaskawa.comovee.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0018136567d1f251f0f3b5da989537555cc33dd3fcf9f12b872a0b76b21f5bd0529a644cb7bf645d598a650c96e33459afc1edf4a8cdf420066ac2e70dc6f093260382f42dab65f00919abe193dec77641a0b623fb376e5f022aba2875c9bff18f2e5d0e6e5a59845c3207d4cdc47d70ceace432efda3af679f3f86cf48664938a5d39ca61225f159e66c0480e9471cd6028dd75d4c26e12b09989c09fce648f4466b684365617b5a6253177cefea6c1fb54efb1fb6e12f331c3a3b4c7b955030e43889e7a7c93db183c40bf2af9dd967d9b7996500f38c135b7e069838a07185b7fd5cf22d1a6b1dfe26057f48a0879a3a9268033c65d26bd64a0dbce58fd596b