fia.co.za

Issued by R3

About this certificate

This digital certificate with serial number 03:18:2e:ad:29:b0:47:8a:92:13:2e:54:0c:21:3b:14:f1:df was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fia.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:18:2e:ad:29:b0:47:8a:92:13:2e:54:0c:21:3b:14:f1:df
Serial Number (int): 269565678202090987027834766046534217036255
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d6:e2:5e:11:29:c6:c5:dc:70:9a:ab:6f:4c:e4:bd:44:12:15:d2:15
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ab:e4:74:aa:52:00:ce:8a:a3:63:27:7e:3e:6b:2c:0d:be:93:54:fd
Fingerprint (sha256): 08:b7:73:eb:57:a5:29:fd:1a:88:13:19:b2:56:84:10:3e:63:a6:48:b3:3c:7b:72:6b:86:13:a5:00:f6:93:d8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fia.co.za

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fia.co.za

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.4738.au
*.50picksdaily.com
*.borelioseforum.de
*.boscobear.au
*.burkholderwd.com
*.capialone.ca
*.cinima.club
*.dealhand.com
*.domainsource.com.au
*.downloadmienphi.mobi
*.drems.de
*.erlebnisschwimmbad.de
*.fia.co.za
*.freemasil.de
*.goodxstore.com
*.halkirkmanconstruction.com
*.hentaipornvid.com
*.hudforcloused.com
*.insolvenzbekanntmachuingen.de
*.josephcohen.org
*.kleinkalibermunition.de
*.liverpoolmanwithvan.co.uk
*.lozapck.com
*.matespiele.de
*.mfacmchicago.org
*.mjs.in
*.modellbausprit.de
*.onebloodreward.org
*.pretext.com.au
*.prostta.de
*.qhv.au
*.rntenversicherung.de
*.salarisadmin.nl
*.scf.de
*.shannonarcher.xyz
*.stolas.de
*.strategicsupplements.com
*.tickchak.co
*.toilettenordnung.de
*.typingspace.com.au
*.v9k2.space
*.vehiclerentalinsurance.com
*.vvf.de
*.vvm.au
*.woolworthscareers.com.au
*.xn--bschungssteine-vpb.de
*.xn--kaffeelikr-mcb.de
*.xn--kartoffelrsti-rmb.de
*.xn--wwwdruckerzubehr-0wb.de
*.xsm.de
4738.au
50picksdaily.com
borelioseforum.de
boscobear.au
burkholderwd.com
capialone.ca
cinima.club
dealhand.com
domainsource.com.au
downloadmienphi.mobi
drems.de
erlebnisschwimmbad.de
fia.co.za
freemasil.de
goodxstore.com
halkirkmanconstruction.com
hentaipornvid.com
hudforcloused.com
insolvenzbekanntmachuingen.de
josephcohen.org
kleinkalibermunition.de
liverpoolmanwithvan.co.uk
lozapck.com
matespiele.de
mfacmchicago.org
mjs.in
modellbausprit.de
onebloodreward.org
pretext.com.au
prostta.de
qhv.au
rntenversicherung.de
salarisadmin.nl
scf.de
shannonarcher.xyz
stolas.de
strategicsupplements.com
tickchak.co
toilettenordnung.de
typingspace.com.au
v9k2.space
vehiclerentalinsurance.com
vvf.de
vvm.au
woolworthscareers.com.au
xn--bschungssteine-vpb.de
xn--kaffeelikr-mcb.de
xn--kartoffelrsti-rmb.de
xn--wwwdruckerzubehr-0wb.de
xsm.de

Other certificates including the domain name fia.co.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for fia.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269565678202090987027834766046534217036255
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 09:48:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 09:48:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fia.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 881343422186179590501229787963834497725442382223778543469390964983666280756977652578684174803774788080712636659461455677434517802615427051867885860016199042068406267182548457760452570057976054052464603853406158540656894376828071649268760843542980493638018278531465349706680183482500849075530934264023960012427737075127134683095242194558909833153871353072722754686893685226513297470825216157351656671655503667833394907906966425788132492998982191846505166990771374143503971743017525031398156336042661285325414064209567088349735121098349394902029786405880099424053111317858139179253633345151982814053522168648264962342645244917371979587717504526466446594266960152614183713442512458407478611453820421685136459845221988734934495124583116466646745438248013160223521175498185428670682785269897547643107790566464177279599956754130521993300630828085816746412832087070335130745566433504598513285583476721556903687352982552858217891008284664303604694703278688638869166506390994601354178904755344469810484689654458345884787707403500318640660140391587548724378863546834016628658637384463406073380263836662739228483029324552053322236667017695602331849122067302038045548013691004127857844547381007003176316687040975134229832145551417991764251418951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6e25e1129c6c5dc709aab6f4ce4bd441215d215
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1870 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4738.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.50picksdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.borelioseforum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boscobear.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burkholderwd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capialone.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cinima.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dealhand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domainsource.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downloadmienphi.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drems.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erlebnisschwimmbad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fia.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freemasil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodxstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.halkirkmanconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hentaipornvid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hudforcloused.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insolvenzbekanntmachuingen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.josephcohen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kleinkalibermunition.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liverpoolmanwithvan.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lozapck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matespiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mfacmchicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mjs.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modellbausprit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onebloodreward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pretext.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prostta.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qhv.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rntenversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salarisadmin.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shannonarcher.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stolas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strategicsupplements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tickchak.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toilettenordnung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.typingspace.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v9k2.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vehiclerentalinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vvf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vvm.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woolworthscareers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--bschungssteine-vpb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kaffeelikr-mcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kartoffelrsti-rmb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--wwwdruckerzubehr-0wb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xsm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4738.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '50picksdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borelioseforum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boscobear.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burkholderwd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capialone.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinima.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealhand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainsource.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadmienphi.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drems.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erlebnisschwimmbad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fia.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freemasil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodxstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halkirkmanconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hentaipornvid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hudforcloused.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insolvenzbekanntmachuingen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'josephcohen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kleinkalibermunition.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liverpoolmanwithvan.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lozapck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matespiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfacmchicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mjs.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modellbausprit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onebloodreward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pretext.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prostta.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qhv.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rntenversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salarisadmin.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shannonarcher.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stolas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strategicsupplements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickchak.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toilettenordnung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'typingspace.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v9k2.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vehiclerentalinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vvf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vvm.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woolworthscareers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bschungssteine-vpb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kaffeelikr-mcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kartoffelrsti-rmb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--wwwdruckerzubehr-0wb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xsm.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c3ebe68d000000403004630440220376d502b498344f093454ae3570f9b74c60f8bf76104225752e84cd722893fd3022040ef58829dd5748b786d6113f189808fb5e3f965cee6b19353416eb4d2f8524100750029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c3ebe6a0b0000040300463044022072d0b29328fd04712b840f8bded3892f8640add7c885c68de38fbe76e8766aec022007beae5713ec43fed41edea3ddab7b89a0d7569d61e76114f354bf5b39bbaecd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00254e7c9bfbae65cd00d0bdf07172fb6c0ae59e6c7d786f70d0b700420659c3b5337acf89d0ea6ea7337fd4073b07d48e582e5e4133b6920ab80e27a80ed7a3757a2b250bc2d8a8c69227bf1e495603e6f16d0d528a512e96c92972e4c5648573b3fd912fbc9303896d6db0d2c198ed36b5a661cb34bb33337891c2b6bbb8934dafb49acb50a4835bc96fbff59e20e52e3bafce5962a402f5aa4bb07a1b32f1524a320ec80f535aca440de2f134be2cec49f3557f979ea83e1732271e77df8340883ded4aa4efd64ed3eb9c5314964b63ce20b3739df4ca0580b0f21cb4fe640ea9b46ac4cd9b623c2e1cee71a7cd972e76a43959d6c23c9630c82fe313f0b387