anj.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:97:9b:dd:f6:f6:d7:7f:52:c8:a2:d3:b7:fb:74:cf:91:37 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=anj.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:9b:dd:f6:f6:d7:7f:52:c8:a2:d3:b7:fb:74:cf:91:37
Serial Number (int): 312926678046324429758493024484341513687351
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 53:13:6e:1b:da:9d:43:41:af:e2:10:38:28:52:fb:a4:e4:2b:43:5b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 35:b3:d7:0c:bd:f5:b3:79:bb:34:10:e1:bd:c9:40:3b:9a:42:e8:d4
Fingerprint (sha256): 02:99:51:de:d8:6a:b0:61:ec:8a:a4:ae:d9:c8:50:af:aa:b3:43:ca:45:31:25:39:d1:e1:67:18:7b:82:16:68

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate anj.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for anj.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.anj.de
*.bfa-fleisch.de
*.catcarrier.com.au
*.caviar.com.au
*.certifcadodigital.com.br
*.cheizoo.nl
*.columbian.org
*.comunidadedeemprego.com.br
*.crocheting.com.au
*.deantibiotika.de
*.dgicht.de
*.drivingschoolsbrisbane.com.au
*.easyway.com.br
*.excavating.de
*.filmshd.ru
*.gesundheitsinformationh.de
*.holister.com.br
*.huu.tw
*.immobilielen.de
*.imobilienen.de
*.insurancecar.com.au
*.insuranceclaims.com.au
*.londontour.com.au
*.lowellgeneralhospital.org
*.malvoragen.de
*.nataionalrail.co.uk
*.nationaltail.co.uk
*.onetravel.co
*.pennysironingservice.co.uk
*.savemefrom.net
*.setupgrid.net
*.skateboardshoes.com.au
*.socialstore.com.br
*.stewartmed.org
*.streckenrechner.de
*.uebergangsjacken.de
*.ugy.com.au
*.vallenato.net
*.vegi.ca
*.visitscottland.de
*.www-directline.it
*.xn--aplastische-anmie-3qb.de
*.xn--filmgerteverleih-1nb.de
*.xn--flgelmutter-uhb.de
*.xn--getrnkekarten-efb.de
*.xn--haarstrubend-mcb.de
*.xn--pefferkrner-xfb.de
*.xn--pflegerollsthle-bwb.de
*.xn--portaldeconstruccin-i5b.es
*.xn--zeltimprgnierung-2nb.de
anj.de
bfa-fleisch.de
catcarrier.com.au
caviar.com.au
certifcadodigital.com.br
cheizoo.nl
columbian.org
comunidadedeemprego.com.br
crocheting.com.au
deantibiotika.de
dgicht.de
drivingschoolsbrisbane.com.au
easyway.com.br
excavating.de
filmshd.ru
gesundheitsinformationh.de
holister.com.br
huu.tw
immobilielen.de
imobilienen.de
insurancecar.com.au
insuranceclaims.com.au
londontour.com.au
lowellgeneralhospital.org
malvoragen.de
nataionalrail.co.uk
nationaltail.co.uk
onetravel.co
pennysironingservice.co.uk
savemefrom.net
setupgrid.net
skateboardshoes.com.au
socialstore.com.br
stewartmed.org
streckenrechner.de
uebergangsjacken.de
ugy.com.au
vallenato.net
vegi.ca
visitscottland.de
www-directline.it
xn--aplastische-anmie-3qb.de
xn--filmgerteverleih-1nb.de
xn--flgelmutter-uhb.de
xn--getrnkekarten-efb.de
xn--haarstrubend-mcb.de
xn--pefferkrner-xfb.de
xn--pflegerollsthle-bwb.de
xn--portaldeconstruccin-i5b.es
xn--zeltimprgnierung-2nb.de

Other certificates including the domain name anj.de

(limited to 100 certificates)
anj.de
imagination.icu
luxuryjewelrys.co
kindergroessen.de
fastidlemobileservice.com
hotelbewertngen.de
kindergroessen.de
tubemeister.us
xn--nhladen-5wa.de
fastidlemobileservice.com
*.2townsharvestparty.com
moved.com.au
anj.de
renaisa.fr
fastidlemobileservice.com

Certificate

The complete raw certificate details for anj.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312926678046324429758493024484341513687351
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-22 13:51:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-21 13:51:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'anj.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 753487074436691474780408479222527923315692009418128004678526797064970521521524965173733657674027399547002073676447076948448325390830776979300041144137299571206769147974504984363568889692042199357639572569591655654616220573057014335400423939706122547471653311689176727722907419951692617853789048555751931454862372804702572668168700881536095912365843848684375473541810722470827567170777700204514987921041752260286490998776603195499347364512806366631967493813821379504081916034822272956789274817558149559688808409675794532318683772463599788439416949860577732475944820032968967082522949403701101719001166824720595490964063730214725082453359561237945684078260529350390087316309879015604302282743001601961725737730729508020543049374757759300868543820614716806537136397591556527522120409355213095343241730018261926814754265756767575425136266969038374347059577344467425681764646035658490609088196091664821536039557992689583808112929271430856844197544842182706234742535852973584162427719618614314038000615493430723926734367421776967168122518233332545825154511421161519149831979423082216464347415723943425239896937496296907035289036065285620915229196441895228811092669541183824673216004541866705624884050565194215359318296741726413589873311271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							53136e1bda9d4341afe210382852fba4e42b435b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2082 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bfa-fleisch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catcarrier.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caviar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.certifcadodigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheizoo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comunidadedeemprego.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crocheting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deantibiotika.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dgicht.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drivingschoolsbrisbane.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easyway.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.excavating.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filmshd.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gesundheitsinformationh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.holister.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huu.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.immobilielen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imobilienen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insurancecar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insuranceclaims.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.londontour.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lowellgeneralhospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.malvoragen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nataionalrail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nationaltail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onetravel.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pennysironingservice.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.savemefrom.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.setupgrid.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skateboardshoes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.socialstore.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stewartmed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streckenrechner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uebergangsjacken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ugy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vallenato.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vegi.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visitscottland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www-directline.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--aplastische-anmie-3qb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--filmgerteverleih-1nb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--flgelmutter-uhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--getrnkekarten-efb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--haarstrubend-mcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--pefferkrner-xfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--pflegerollsthle-bwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--portaldeconstruccin-i5b.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--zeltimprgnierung-2nb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfa-fleisch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catcarrier.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caviar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certifcadodigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheizoo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunidadedeemprego.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crocheting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deantibiotika.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dgicht.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drivingschoolsbrisbane.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyway.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excavating.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmshd.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesundheitsinformationh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holister.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huu.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immobilielen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imobilienen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insurancecar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insuranceclaims.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'londontour.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowellgeneralhospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malvoragen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nataionalrail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaltail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onetravel.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennysironingservice.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savemefrom.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setupgrid.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skateboardshoes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialstore.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stewartmed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streckenrechner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uebergangsjacken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vallenato.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vegi.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitscottland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-directline.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--aplastische-anmie-3qb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--filmgerteverleih-1nb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--flgelmutter-uhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--getrnkekarten-efb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--haarstrubend-mcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--pefferkrner-xfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--pflegerollsthle-bwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--portaldeconstruccin-i5b.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--zeltimprgnierung-2nb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d597468840000040300473045022016188d2fc425ccc93d808fa9751158706f4dda1ff69a00906665b4adfa3b21a4022100c37b0daff4b7aad43e815c4b0d3d0e338d1b6f48c1b815342fcd43aefc0f23e200750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d59746a950000040300463044022064de4a799bd1c3c4d5134df76942200848d57187aa3a29300ef8212a368888c0022049a766826a35d74990201ea57c35911aca9e37c9539991370bab09db3c634238
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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