roofvents.com.au

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:27:86:e1:26:b5:11:e1:62:b1:8d:21:2f:de:03:c4:73:21 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=roofvents.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:27:86:e1:26:b5:11:e1:62:b1:8d:21:2f:de:03:c4:73:21
Serial Number (int): 274787155708503085151517693561684214706977
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 41:03:74:20:9f:5d:54:70:97:1a:4f:24:8b:e4:e6:c8:58:01:04:69
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 80:7f:1e:33:2b:81:86:2c:d9:da:4c:bd:d0:1b:de:e7:66:96:19:3e
Fingerprint (sha256): 15:72:43:b9:8a:b5:f8:15:8a:39:2c:ba:2f:ea:a3:c7:ed:95:57:f4:de:17:0a:35:05:7d:7c:e4:78:fd:c2:c1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate roofvents.com.au

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for roofvents.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aarpmedicaresupplemeent.com
*.amateurvideos.com.au
*.antennarange.com
*.avastfreedownload.com
*.avidbase.com
*.babybasar-berlin.de
*.bigbrithercasting.tv
*.bikinity.com
*.billigfluegeg.de
*.blocktheory.co.uk
*.broadwaymusicals.com.au
*.calnationalbank.com
*.contabilista.eu
*.daejong.com
*.degicht.de
*.droze.eu
*.ductus-thoracicus.de
*.dunitymedia.de
*.edgepart.com
*.getbuckes.me
*.hotelch.net
*.hotelflorist.com.au
*.inexpensive.com.au
*.kaikei20.net
*.kaubuy-dearcustom.com
*.kusenzo.nl
*.leistenbruckh.de
*.metrobyt-mobiel.com
*.netdoctro.de
*.neurodrmitis.de
*.newjewelrytoday.co.uk
*.nfa.com.au
*.pastlocalfootballteams.co.uk
*.pelis24.tv
*.pilatdes.de
*.reefs4les.com
*.rheinlandpur.de
*.roofvents.com.au
*.siumfinity.de
*.skelettdysplasie.de
*.smzubehoer.de
*.strptokokken.de
*.sundaytimeswinecluc.co.uk
*.tokyo-customs.net
*.toriyosegourmet.com
*.urtikaia.de
*.welders.ca
*.workmins.com
*.woyag.com
*.xn--heilkriter-v5a.de
aarpmedicaresupplemeent.com
amateurvideos.com.au
antennarange.com
avastfreedownload.com
avidbase.com
babybasar-berlin.de
bigbrithercasting.tv
bikinity.com
billigfluegeg.de
blocktheory.co.uk
broadwaymusicals.com.au
calnationalbank.com
contabilista.eu
daejong.com
degicht.de
droze.eu
ductus-thoracicus.de
dunitymedia.de
edgepart.com
getbuckes.me
hotelch.net
hotelflorist.com.au
inexpensive.com.au
kaikei20.net
kaubuy-dearcustom.com
kusenzo.nl
leistenbruckh.de
metrobyt-mobiel.com
netdoctro.de
neurodrmitis.de
newjewelrytoday.co.uk
nfa.com.au
pastlocalfootballteams.co.uk
pelis24.tv
pilatdes.de
reefs4les.com
rheinlandpur.de
roofvents.com.au
siumfinity.de
skelettdysplasie.de
smzubehoer.de
strptokokken.de
sundaytimeswinecluc.co.uk
tokyo-customs.net
toriyosegourmet.com
urtikaia.de
welders.ca
workmins.com
woyag.com
xn--heilkriter-v5a.de

Other certificates including the domain name roofvents.com.au

(limited to 100 certificates)

Certificate

The complete raw certificate details for roofvents.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274787155708503085151517693561684214706977
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-19 00:37:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-18 00:37:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'roofvents.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 713317251335268310678000710553591959492416104960515853080772732387795930777261658440612240750665527396132762804748168527878916081515144929367953125412279592912506742912428233204347750306546541537963246110174420805060512433982118372936013107498002739885580574985527250310554226197280348845489374466908820849000971820118688642699325957406939421957037835510707284535951927590549173844533347154491803874048516384099162985031375002434330245372147498989145006913784276408959637570145116641551823724249113904680640616210266042982813839890831443603363287422478483715370809375090254816029990508027311354093884714037047721802771874847683413295547264520711493993065383329570640925335356168880436989155446589157429332860316278615512040942713996935559456635165398341729713530924221562108790237033147006332503381271940915654940270543483542146935138855717500422227629139541180198380167994317705969944490578318123255554861737302044577597304317941929424498439085957826820317465748594584649621172719039026583535680083738769528064709446100922222542197572296925959055274564146124949485129709163067760420498595466751865412554751326318501876464036672005112027417529518158950529644939984391440810860969536372830408083474978396008216568304897376751211051629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							410374209f5d5470971a4f248be4e6c858010469
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1874 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aarpmedicaresupplemeent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amateurvideos.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antennarange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avastfreedownload.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avidbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.babybasar-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bigbrithercasting.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bikinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billigfluegeg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blocktheory.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broadwaymusicals.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contabilista.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daejong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.degicht.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.droze.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ductus-thoracicus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dunitymedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edgepart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getbuckes.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelflorist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inexpensive.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaikei20.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaubuy-dearcustom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kusenzo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leistenbruckh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrobyt-mobiel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netdoctro.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neurodrmitis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newjewelrytoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nfa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pastlocalfootballteams.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pelis24.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pilatdes.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reefs4les.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rheinlandpur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roofvents.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siumfinity.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skelettdysplasie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smzubehoer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strptokokken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sundaytimeswinecluc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tokyo-customs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toriyosegourmet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urtikaia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.welders.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.workmins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woyag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--heilkriter-v5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aarpmedicaresupplemeent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amateurvideos.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antennarange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avastfreedownload.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avidbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babybasar-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigbrithercasting.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billigfluegeg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blocktheory.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadwaymusicals.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contabilista.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daejong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'degicht.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'droze.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ductus-thoracicus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunitymedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edgepart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getbuckes.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelflorist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inexpensive.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaikei20.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaubuy-dearcustom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kusenzo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leistenbruckh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrobyt-mobiel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netdoctro.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neurodrmitis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newjewelrytoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pastlocalfootballteams.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pelis24.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilatdes.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reefs4les.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheinlandpur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roofvents.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siumfinity.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skelettdysplasie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smzubehoer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strptokokken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sundaytimeswinecluc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokyo-customs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toriyosegourmet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urtikaia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welders.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workmins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woyag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--heilkriter-v5a.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f1bcd775e0000040300473045022040354a8d132e6b5e42f0e2fe09ea213a67cb9ad93e4cdfd1c99b718ffbc4d84e022100a700ee6388db5e1b094e69dfe9c9b99251cb7df12ff06bbb54e97446ce83843a007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f1bcd774d0000040300473045022100dc9b86dc7e47ae45a42fec3e772b2e36914cf64d903d839c4cae357ce1f5f9a7022030f8e03ea95aced5f061a37395ed501e3a88b60255401593577a54fe48acfe8d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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