shoptime.au

Issued by R3

About this certificate

This digital certificate with serial number 03:52:d0:9d:9d:9d:28:74:40:89:6d:37:27:27:4f:16:6a:bd was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=shoptime.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:52:d0:9d:9d:9d:28:74:40:89:6d:37:27:27:4f:16:6a:bd
Serial Number (int): 289517309693317395641976302778782227786429
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:c8:7f:f5:01:4f:4d:59:bf:53:e2:2c:04:74:24:e5:4c:f5:f3:4a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8f:2e:09:62:1c:1f:e4:eb:9d:3a:9e:4b:8a:50:a0:ce:6f:25:8d:9f
Fingerprint (sha256): 1b:fd:47:37:03:38:0f:e2:59:c3:14:c3:59:cd:c9:07:cd:7e:7e:d9:1d:56:d7:e7:53:74:aa:ce:06:3f:c9:96

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate shoptime.au

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shoptime.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.3a4z5.us
*.alusedparts.com
*.amonguspet.com
*.anti-snurkshop.nl
*.armmonia.com
*.best-masters.com.au
*.beurrettevideos.com
*.bizz.net.au
*.blv.au
*.cij.au
*.deber.es
*.djufqqkwkixaassi.me
*.doctoralia.au
*.e-u.de
*.globalportfoliomanagement.be
*.gsn.au
*.hints.au
*.hvacelevate.net
*.jimmytatenc.com
*.jungensandalen.de
*.kommionskleider.de
*.lifeseledtor.com
*.luftkissenmaeher.de
*.mcginleys.co.uk
*.mistralsiberians.com
*.modexcomputer.com
*.o-pay.eu
*.oophoritis.de
*.packagetracker.nl
*.photofacy.de
*.piccolaitaliarotterdamnoord.nl
*.pimsolutions.nl
*.pinayfle.com
*.pornhosting.org
*.reuniefioretticollege.nl
*.reziprok.de
*.seelenblindheit.de
*.shoptime.au
*.strotarife.de
*.telefonauskunpft.de
*.telonauskunft.de
*.txconvergent.com
*.umv.au
*.ungod.org
*.wwwindianporn.com
*.xn--existensgrndung-8vb.de
*.xn--ftus-5qa.de
*.xn--geschftsbesorgungsvertrag-pec.de
*.xn--hundzchter-eeb.de
*.xn--sclerjobs-r9a.de
3a4z5.us
alusedparts.com
amonguspet.com
anti-snurkshop.nl
armmonia.com
best-masters.com.au
beurrettevideos.com
bizz.net.au
blv.au
cij.au
deber.es
djufqqkwkixaassi.me
doctoralia.au
e-u.de
globalportfoliomanagement.be
gsn.au
hints.au
hvacelevate.net
jimmytatenc.com
jungensandalen.de
kommionskleider.de
lifeseledtor.com
luftkissenmaeher.de
mcginleys.co.uk
mistralsiberians.com
modexcomputer.com
o-pay.eu
oophoritis.de
packagetracker.nl
photofacy.de
piccolaitaliarotterdamnoord.nl
pimsolutions.nl
pinayfle.com
pornhosting.org
reuniefioretticollege.nl
reziprok.de
seelenblindheit.de
shoptime.au
strotarife.de
telefonauskunpft.de
telonauskunft.de
txconvergent.com
umv.au
ungod.org
wwwindianporn.com
xn--existensgrndung-8vb.de
xn--ftus-5qa.de
xn--geschftsbesorgungsvertrag-pec.de
xn--hundzchter-eeb.de
xn--sclerjobs-r9a.de

Other certificates including the domain name shoptime.au

(limited to 100 certificates)
shoptime.au
shoptime.au
shoptime.au
shoptime.au
shoptime.au
shoptime.au
cij.au
shoptime.au
shoptime.au

Certificate

The complete raw certificate details for shoptime.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289517309693317395641976302778782227786429
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 04:36:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 04:36:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shoptime.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764947559290969553557181521199285274639762446901344675961795732041732853557163963865052701015722591589371290574520696091830953731768405524961184453290150435889453685001931922188522716227391385378650833947418038709824060169035924458904435074618241045571030350900241320327639271314615139655640719508511796310777139207262090669012823188284539588952186733464318096265558858155660528818326441317343731336254164993223639966483438766379097094435855650644596492501272520692056847682670418789761170472568962863463606388223593031700008142324942626735717968171983632305851118645685209686102404880075465723462300890303031472521874239418271765732647866798183928536862544462617835024164046167245199821747524504516342068856817875900143838279173961303565968746309147721950018273344813518332573149962155596353566036686156223242857794975625382734136569752684874360011711591783498441400917740239482696304144211558160820027456384958211420216222369007587058468451334261741320073616734084769248060866884898414416056289738495613109081451892269764671562164259211501042056576687787935122750054133327437101960395951178606868590755733074384472225135887391346132708943549924007424080587224538624402756663047490771092628167741568743319451714997842246249108207687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3fc87ff5014f4d59bf53e22c047424e54cf5f34a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1838 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3a4z5.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alusedparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amonguspet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anti-snurkshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.armmonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.best-masters.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beurrettevideos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bizz.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blv.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cij.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deber.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.djufqqkwkixaassi.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doctoralia.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-u.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalportfoliomanagement.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gsn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hints.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hvacelevate.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jimmytatenc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jungensandalen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kommionskleider.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifeseledtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luftkissenmaeher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcginleys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mistralsiberians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modexcomputer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.o-pay.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oophoritis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.packagetracker.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.photofacy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piccolaitaliarotterdamnoord.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pimsolutions.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinayfle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pornhosting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reuniefioretticollege.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reziprok.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seelenblindheit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoptime.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strotarife.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telefonauskunpft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telonauskunft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.txconvergent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.umv.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ungod.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwindianporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--existensgrndung-8vb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ftus-5qa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--geschftsbesorgungsvertrag-pec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hundzchter-eeb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sclerjobs-r9a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3a4z5.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alusedparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amonguspet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anti-snurkshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armmonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'best-masters.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beurrettevideos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizz.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blv.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cij.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deber.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djufqqkwkixaassi.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctoralia.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-u.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalportfoliomanagement.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hints.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvacelevate.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jimmytatenc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jungensandalen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kommionskleider.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeseledtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luftkissenmaeher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcginleys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mistralsiberians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modexcomputer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o-pay.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oophoritis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'packagetracker.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photofacy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piccolaitaliarotterdamnoord.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pimsolutions.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinayfle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pornhosting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reuniefioretticollege.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reziprok.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seelenblindheit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoptime.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strotarife.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telefonauskunpft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telonauskunft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'txconvergent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umv.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ungod.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwindianporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--existensgrndung-8vb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ftus-5qa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--geschftsbesorgungsvertrag-pec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hundzchter-eeb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sclerjobs-r9a.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c5c86e40f00000403004730450221008628aca1752b5bdc04ea3f46fb31adc7d83a6485fae00fbaa66e94721d542981022050acc5e073a9c77c1740fedd3fa9210a727ef0f1dd49a5a913291b617364c74f00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c5c86e4620000040300473045022100c9b0633232beb9e5f7107bdcbd540141df3a5ed8d88fc11a4b777ba437d8fe3b02202946dd117a83a7fe714bda13fecb1e78e292b499fd48c15f4e043a24d4c186f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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