decisions.co.za

Issued by R3

About this certificate

This digital certificate with serial number 03:f2:e7:2a:bb:cd:ca:4d:c3:68:4f:38:4c:c0:6a:64:b4:ae was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=decisions.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f2:e7:2a:bb:cd:ca:4d:c3:68:4f:38:4c:c0:6a:64:b4:ae
Serial Number (int): 343992464142757201307753745673161443423406
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0e:35:dc:22:09:8b:9b:70:ec:31:9c:2e:29:e2:c9:7d:41:e2:9a:ba
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): be:70:d7:33:0b:a1:63:a3:f8:56:71:8e:8b:8e:56:8d:9d:31:d1:f0
Fingerprint (sha256): 06:a1:86:07:ae:36:f7:67:5c:13:4f:a2:93:58:68:f4:6d:cc:e7:de:a9:4a:64:09:87:3a:05:1e:47:f3:18:83

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate decisions.co.za

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for decisions.co.za

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adultdiapers.com.au
*.ager4nc.com
*.ankadevreproje.com
*.arschlochbilder.de
*.boldest.net
*.conservenergy.org
*.cvtreeservice.net
*.dastiplasti.com
*.decisions.co.za
*.divisenkurse.de
*.dlj.de
*.eroticpicturesworld.com
*.erotikfilmer.de
*.erotikshops24.de
*.erziehungsbeauftragung.de
*.faclals4k.com
*.filmkesitleri.com
*.footballers.com.au
*.fundandcompany.au
*.gedaechtnisluecken.de
*.immigration-solution.com
*.iyd.de
*.kenelma.com
*.lokerbaiman.com
*.lpgvitrakchayan.in
*.lucyrigby.com
*.lufthahnsa.de
*.lufthansad.de
*.lufthansade.de
*.ojanse.com
*.outlet.co.za
*.peacockwood.com
*.qhmsgl.com
*.rains.com.au
*.rooftop519.com
*.rossma.de
*.rtln.de
*.schweden.co
*.senile-demenz.de
*.sr.co.za
*.sw40hx.com
*.tarifvergeich.de
*.testbreichte.de
*.theambassador.com.au
*.votewarsame.com
*.xn--fremdwrte-57a.de
*.xn--glckwunschschreiben-69b.de
*.xn--radunterwsche-jfb.de
*.xn--rehbrcke-b6a.de
*.xn--sinnessprche-llb.de
adultdiapers.com.au
ager4nc.com
ankadevreproje.com
arschlochbilder.de
boldest.net
conservenergy.org
cvtreeservice.net
dastiplasti.com
decisions.co.za
divisenkurse.de
dlj.de
eroticpicturesworld.com
erotikfilmer.de
erotikshops24.de
erziehungsbeauftragung.de
faclals4k.com
filmkesitleri.com
footballers.com.au
fundandcompany.au
gedaechtnisluecken.de
immigration-solution.com
iyd.de
kenelma.com
lokerbaiman.com
lpgvitrakchayan.in
lucyrigby.com
lufthahnsa.de
lufthansad.de
lufthansade.de
ojanse.com
outlet.co.za
peacockwood.com
qhmsgl.com
rains.com.au
rooftop519.com
rossma.de
rtln.de
schweden.co
senile-demenz.de
sr.co.za
sw40hx.com
tarifvergeich.de
testbreichte.de
theambassador.com.au
votewarsame.com
xn--fremdwrte-57a.de
xn--glckwunschschreiben-69b.de
xn--radunterwsche-jfb.de
xn--rehbrcke-b6a.de
xn--sinnessprche-llb.de

Other certificates including the domain name decisions.co.za

(limited to 100 certificates)
decisions.co.za
xn--fremdwrte-57a.de
decisions.co.za
decisions.co.za
decisions.co.za
decisions.co.za
iyd.de
biokop45.club
sr.co.za
decisions.co.za
decisions.co.za
one4allgidtcard.co.uk
decisions.co.za

Certificate

The complete raw certificate details for decisions.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343992464142757201307753745673161443423406
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-05 21:27:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 21:26:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'decisions.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808369127834483300247190774813938170284971558361076865109625480420644418066734712104047638456804502838274304010483411479134588803344793985957507819186662566088577968349020394101051669526242302512852160526216500060760964565181241959421512633523374074238301747455865595418716133527738704586351533185234641432004413163670280242005920777371021107768760161349688026041764242604878909135774297914565935532542940760787185645326963050769699029188906610843171793187648996893941702395668384246148658089442658087623466068081610809247013984764029929912565385642168377228883716351258616814360722065459536835912516464369970161734507076385118244187567289250024844339900998350303937479354240842882654502614840798101912100143109804902677541152216779445841269778040941978980142370370839332398940346134512167807268144548796063033024806049714086705512459149412090143732121704558428712234352448847341229004841439690914190769792803298534258341249334888649396865595622634721227183490198622538819082750318942300056673507706915430161379630728275020325775857011262968814005550893988688888207069598168182480548870274341311974486871061166823647317047708101457756030805301556007197531128435385416357119919677412318571631935297226235288398343230825290835265924721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e35dc22098b9b70ec319c2e29e2c97d41e29aba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1844 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adultdiapers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ager4nc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ankadevreproje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arschlochbilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boldest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conservenergy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cvtreeservice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dastiplasti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decisions.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divisenkurse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dlj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eroticpicturesworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erotikfilmer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erotikshops24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erziehungsbeauftragung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faclals4k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filmkesitleri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footballers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fundandcompany.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gedaechtnisluecken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.immigration-solution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iyd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kenelma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lokerbaiman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lpgvitrakchayan.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lucyrigby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lufthahnsa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lufthansad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lufthansade.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ojanse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outlet.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peacockwood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qhmsgl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rains.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rooftop519.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rossma.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rtln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schweden.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.senile-demenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sr.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sw40hx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tarifvergeich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testbreichte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theambassador.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.votewarsame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fremdwrte-57a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--glckwunschschreiben-69b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--radunterwsche-jfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rehbrcke-b6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sinnessprche-llb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adultdiapers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ager4nc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ankadevreproje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arschlochbilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boldest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conservenergy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvtreeservice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dastiplasti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divisenkurse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eroticpicturesworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erotikfilmer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erotikshops24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erziehungsbeauftragung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faclals4k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmkesitleri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundandcompany.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gedaechtnisluecken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immigration-solution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iyd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenelma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lokerbaiman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpgvitrakchayan.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucyrigby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lufthahnsa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lufthansad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lufthansade.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ojanse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlet.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peacockwood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qhmsgl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rains.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rooftop519.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rossma.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schweden.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'senile-demenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sr.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sw40hx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarifvergeich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testbreichte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theambassador.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'votewarsame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fremdwrte-57a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--glckwunschschreiben-69b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--radunterwsche-jfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rehbrcke-b6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sinnessprche-llb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b01f38f8400000403004730450220239c9a36c6beaf8e1bc84e02ce4f2b43454c82f46b14e3940da2923e6fbbb1d3022100a08bc7b0d0c99e4fbd1dbfeae70358361fdf16c31cc6ad10b92722a653bd9f5c007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b01f38f9400000403004730450221009f64b2534ea871ac5f398ce63ff97f84c08482cb71f83f941f599863993010e702207230f5625f8968f360a58fb8df40d3a1435f5b5465db3d2f54b252068ee512a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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