modelling.co.za

Issued by R3

About this certificate

This digital certificate with serial number 03:0c:7c:cb:f7:97:90:92:b4:6c:9a:a6:f4:b9:f2:64:7a:5a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=modelling.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0c:7c:cb:f7:97:90:92:b4:6c:9a:a6:f4:b9:f2:64:7a:5a
Serial Number (int): 265586129527834981477910663820265096772186
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f5:3e:5b:6d:a3:36:d4:7a:8d:4f:11:ad:1a:5b:70:00:3e:32:1c:f9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7e:9c:a3:17:f8:50:ce:ab:23:3b:d8:8c:7c:79:f2:9f:6a:be:8f:a1
Fingerprint (sha256): 12:db:20:99:22:79:bd:ca:e7:e3:cf:84:ef:da:25:d1:13:c0:c9:24:fd:ed:67:d6:4e:d0:13:df:85:d3:98:4b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate modelling.co.za

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for modelling.co.za

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.0661166.com
*.amazingcarpetclean.com.au
*.americanthiner.com
*.bancopostaimpreseonline.it
*.cari.es
*.cinfin.cm
*.clinicxpresswebster.com
*.coachmasonwaters.com
*.desatis.de
*.diyprojects.org
*.e99.club
*.exsecutive.com
*.gamu.site
*.gibdd02.ru
*.godseyes.net
*.haender.de
*.hotelspubs.com.au
*.hyundauusa.com
*.justapprovednow.com
*.kitchencurtains.de
*.kompressionsstrumpfhose.de
*.konstitutionsmittel.de
*.kripula.org
*.larvae.de
*.libraria.net
*.modelling.co.za
*.newsesnations.com
*.obstaclelooking.com
*.oscarshangout.com.au
*.partsgeek.cm
*.pc-controller.de
*.pics30.com
*.playgtaearly.com
*.preisverglecih.de
*.ps-voice.com
*.rattankoerbe.de
*.sb401ks.com
*.singlsleipzig.de
*.sonntagsanzeiger.de
*.strowoche.de
*.suppermarkt.de
*.tokybook.us
*.ufos666.com
*.ultraleichtflugschein.de
*.utsabkarki.com
*.windowcurtains.de
*.xn--frderplanung-4ib.de
*.xn--kostenloser-bersetzer-kic.de
*.xn--piratensbel-s8a.de
*.xn--trekking-ausrstung-y6b.de
0661166.com
amazingcarpetclean.com.au
americanthiner.com
bancopostaimpreseonline.it
cari.es
cinfin.cm
clinicxpresswebster.com
coachmasonwaters.com
desatis.de
diyprojects.org
e99.club
exsecutive.com
gamu.site
gibdd02.ru
godseyes.net
haender.de
hotelspubs.com.au
hyundauusa.com
justapprovednow.com
kitchencurtains.de
kompressionsstrumpfhose.de
konstitutionsmittel.de
kripula.org
larvae.de
libraria.net
modelling.co.za
newsesnations.com
obstaclelooking.com
oscarshangout.com.au
partsgeek.cm
pc-controller.de
pics30.com
playgtaearly.com
preisverglecih.de
ps-voice.com
rattankoerbe.de
sb401ks.com
singlsleipzig.de
sonntagsanzeiger.de
strowoche.de
suppermarkt.de
tokybook.us
ufos666.com
ultraleichtflugschein.de
utsabkarki.com
windowcurtains.de
xn--frderplanung-4ib.de
xn--kostenloser-bersetzer-kic.de
xn--piratensbel-s8a.de
xn--trekking-ausrstung-y6b.de

Other certificates including the domain name modelling.co.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for modelling.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265586129527834981477910663820265096772186
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 06:06:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 06:06:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'modelling.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 769296084902014688920599860872786379561678022544755851672535965586709434071291697465183021710041475333666133868721004025135866712697295717552136400330218441686826338261514307731941789622781795468665742909938106735066419584685765782595174300933801326378656841277131860128540950187338795363053081036673764737847139622946039286011992396392338881868594446883336854316675164993362592942731325859105776527254323051609033575261098584673934755267365219244528699940935174431264080313920568944134566962986763958167679318488223483699662195840428086175253610080691443893398578833987092935071660137754654932592678020895815617722992988774671189414358770085475590263505845938587952050609430208719947966586585276076095505020010560740394090872987585669486701081960585694044992441990188120323982340910041121380721620832955772936419051748365937481240907933304924007604111209465931560889997215724154280143097756666617780136871121765009495135715353460992689237528852787096166116558961204768857344045992909259022694132663453721924913420041647360414586422296388067801306161040054943286616577543524011546610966483383726847241102509484641256569801552148014679156881175829434385862557121509901186444437528314859042148096646639627293052118045457117876981706799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f53e5b6da336d47a8d4f11ad1a5b70003e321cf9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1902 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.0661166.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amazingcarpetclean.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americanthiner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bancopostaimpreseonline.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cari.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cinfin.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clinicxpresswebster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coachmasonwaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desatis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diyprojects.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e99.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exsecutive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gamu.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gibdd02.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.godseyes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haender.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelspubs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hyundauusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.justapprovednow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kitchencurtains.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kompressionsstrumpfhose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.konstitutionsmittel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kripula.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.larvae.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.libraria.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modelling.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newsesnations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obstaclelooking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oscarshangout.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partsgeek.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pc-controller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pics30.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playgtaearly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preisverglecih.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ps-voice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rattankoerbe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sb401ks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.singlsleipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonntagsanzeiger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strowoche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suppermarkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tokybook.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ufos666.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ultraleichtflugschein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.utsabkarki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.windowcurtains.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--frderplanung-4ib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kostenloser-bersetzer-kic.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--piratensbel-s8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--trekking-ausrstung-y6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0661166.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazingcarpetclean.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanthiner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bancopostaimpreseonline.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cari.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinfin.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinicxpresswebster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coachmasonwaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desatis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diyprojects.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e99.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exsecutive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamu.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gibdd02.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'godseyes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haender.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelspubs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyundauusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justapprovednow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchencurtains.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kompressionsstrumpfhose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konstitutionsmittel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kripula.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larvae.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libraria.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modelling.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsesnations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obstaclelooking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oscarshangout.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partsgeek.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pc-controller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pics30.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playgtaearly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preisverglecih.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-voice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rattankoerbe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sb401ks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singlsleipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonntagsanzeiger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strowoche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suppermarkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokybook.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufos666.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultraleichtflugschein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utsabkarki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windowcurtains.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--frderplanung-4ib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kostenloser-bersetzer-kic.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--piratensbel-s8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--trekking-ausrstung-y6b.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005c6a7891fdcf2b70c7bba30543a8e0bda7f3ba64776c38df4f192b5ae847dc847bf99e10bdbddc3bb9a49ab59e79b75aaa7cca1f0bb9a1a81658c54d7a58d2274b612455f821d5b189fda9a52f61cce59fff15e84c93418ecde302fc5dfc3fddc454674733124beb39ac1f2c3304a5ef2b667d4eea555639f3df182c0f0b3acfcd8ed4a2391e725d6c44741d3f62060bd55269c12787e91697c4465a556a48cb4e4cee9cabb19f34f0738cc5caf733c3e62790f5793ebb80461051f86e52a415093c5afb8176a1a772f13a8fb6f1738881163276204a7837cbfe62f64cc0ffef85f6c87a0d0704f9c9baca5d396894c0b6a957068d1f754ce6654df9ed6358ec