sleepersofa.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:80:83:ee:38:b0:10:79:4c:47:7f:3e:50:9c:83:d4:95:56 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sleepersofa.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:80:83:ee:38:b0:10:79:4c:47:7f:3e:50:9c:83:d4:95:56
Serial Number (int): 305068366545025211338913759672477884388694
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5d:4a:e4:8f:ff:32:60:b4:0c:fe:28:98:8e:50:ce:16:47:07:27:e9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 83:74:22:e2:74:d7:5f:4d:ca:d2:00:d7:a2:c6:1f:96:57:da:3e:bb
Fingerprint (sha256): 1d:b9:19:f0:b8:f8:47:1f:af:4e:35:38:e4:0f:c1:c9:da:db:e8:f5:9c:8f:50:07:dd:a3:6b:92:07:a8:33:0f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sleepersofa.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sleepersofa.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.agenciamendioambienteyagua.es
*.autoskolatesty.cz
*.bisnis.org
*.bugei.net
*.businessadvertising.com.au
*.cabinethardware.com.au
*.canadiancoupon.net
*.dangerousdecibles.org
*.dgd.us
*.flairfashion.co.uk
*.flowerboutique.com.au
*.flowlife.us
*.footballjersey.de
*.freebookez.org
*.gasbbqs.com.au
*.getnoticed.us
*.greenking-pubs.co.uk
*.gwgifs.info
*.hammam.org
*.handmaderugs.com.au
*.hardmoneyflips.org
*.hedging.us
*.highways.com.au
*.hotdrunkchick.net
*.infantcenter.org
*.kaieturenews.com
*.kdkf.info
*.leakdata.net
*.liveevents.us
*.luwthansa.de
*.pleurisy.com.au
*.projected.us
*.quantitysurveyorperth.com.au
*.realestatechampions.com.au
*.reiterkappen.de
*.renin-angiotensin-aldosteron-system.de
*.rsbpshop.co.uk
*.sciology.org
*.sex0sky.sk
*.sleepersofa.de
*.stratfordcitybusiness.co.uk
*.tehhouse.us
*.waschanleitungen.de
*.wassermarken.de
*.wwwbibliotheek.nl
*.wwwcommenity.net
*.xbizjobs.net
*.xn--einkommenssteuererklrung-9bc.de
*.xn--tiefkhlgerte-pcb44a.de
*.xxxphonesexlines.co.uk
agenciamendioambienteyagua.es
autoskolatesty.cz
bisnis.org
bugei.net
businessadvertising.com.au
cabinethardware.com.au
canadiancoupon.net
dangerousdecibles.org
dgd.us
flairfashion.co.uk
flowerboutique.com.au
flowlife.us
footballjersey.de
freebookez.org
gasbbqs.com.au
getnoticed.us
greenking-pubs.co.uk
gwgifs.info
hammam.org
handmaderugs.com.au
hardmoneyflips.org
hedging.us
highways.com.au
hotdrunkchick.net
infantcenter.org
kaieturenews.com
kdkf.info
leakdata.net
liveevents.us
luwthansa.de
pleurisy.com.au
projected.us
quantitysurveyorperth.com.au
realestatechampions.com.au
reiterkappen.de
renin-angiotensin-aldosteron-system.de
rsbpshop.co.uk
sciology.org
sex0sky.sk
sleepersofa.de
stratfordcitybusiness.co.uk
tehhouse.us
waschanleitungen.de
wassermarken.de
wwwbibliotheek.nl
wwwcommenity.net
xbizjobs.net
xn--einkommenssteuererklrung-9bc.de
xn--tiefkhlgerte-pcb44a.de
xxxphonesexlines.co.uk

Other certificates including the domain name sleepersofa.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for sleepersofa.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOFTCCDP2gAwIBAgISA4CD7jiwEHlMR38+UJyD1JVWMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMDgyMDI0NDhaFw0x
OTA2MDYyMDI0NDhaMBkxFzAVBgNVBAMTDnNsZWVwZXJzb2ZhLmRlMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3pS6JDRfnkYtReXhtaI2A9Sz1G+tEPu8
RwV5VZod4zk47Bue6h3kFXjDBKlhLV0jayftLdlEssyp8/gf5TNkQXXqRoQyQ/a3
OKoIj7YcMFhWtzqGCzdPRjXy6mcYMLeZNyYl0tDCLlX3+6f0sbwbTV/htnmzpLhT
S7u35AT4nMi9Z3bAmpOartDJo8AqFyDlhlz/ZO39DPchneBEJyrpb2LY0/8MI4tv
DgHezqbybfpd66WBLFwruPHc/O984SHItPJphyZf58lcukseFkWNHrVO/bSzPJDS
FnSsYd/aGE84fHLvg4E9Zpz1MCcPWCaj2Vvt+QyXgRWFZ9zdx5apJQ6SB2L82ePM
H62RgmhimdADF3tCLiiM5LzKXLJxnCdWeMXqcCoQnIpQNVOvbgUgePINUJnOPw13
28gnBjmLMVyamEgslFvpEGjLuxpJPamQZhujkNG7P/Ypv3M6VyA5amJedlZBcP0F
/dYc6e7QKrdp9pUWS9LEleaRI/RuNLZuqWMwfMI8bgv3XtbOoTy9Mwm5zFFMna3w
xYL4BZXPTTLVV8lqsFcfCcr6cg+YPwpnQsZjThhIoaJG0TNQVVY6KgBtLbRT/m0F
kekC2AkcvhPM9xkfKJrUJqFlYEk2RKobVRH64hr0WHDdTTXUQGpOVRhkC+bpcxX0
ZyJQQjZofFcCAwEAAaOCCiQwggogMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUXUrk
j/8yYLQM/iiYjlDOFkcHJ+kwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzCCB9kGA1UdEQSCB9AwggfMgh8qLmFnZW5jaWFt
ZW5kaW9hbWJpZW50ZXlhZ3VhLmVzghMqLmF1dG9za29sYXRlc3R5LmN6ggwqLmJp
c25pcy5vcmeCCyouYnVnZWkubmV0ghwqLmJ1c2luZXNzYWR2ZXJ0aXNpbmcuY29t
LmF1ghgqLmNhYmluZXRoYXJkd2FyZS5jb20uYXWCFCouY2FuYWRpYW5jb3Vwb24u
bmV0ghcqLmRhbmdlcm91c2RlY2libGVzLm9yZ4IIKi5kZ2QudXOCFCouZmxhaXJm
YXNoaW9uLmNvLnVrghcqLmZsb3dlcmJvdXRpcXVlLmNvbS5hdYINKi5mbG93bGlm
ZS51c4ITKi5mb290YmFsbGplcnNleS5kZYIQKi5mcmVlYm9va2V6Lm9yZ4IQKi5n
YXNiYnFzLmNvbS5hdYIPKi5nZXRub3RpY2VkLnVzghYqLmdyZWVua2luZy1wdWJz
LmNvLnVrgg0qLmd3Z2lmcy5pbmZvggwqLmhhbW1hbS5vcmeCFSouaGFuZG1hZGVy
dWdzLmNvbS5hdYIUKi5oYXJkbW9uZXlmbGlwcy5vcmeCDCouaGVkZ2luZy51c4IR
Ki5oaWdod2F5cy5jb20uYXWCEyouaG90ZHJ1bmtjaGljay5uZXSCEiouaW5mYW50
Y2VudGVyLm9yZ4ISKi5rYWlldHVyZW5ld3MuY29tggsqLmtka2YuaW5mb4IOKi5s
ZWFrZGF0YS5uZXSCDyoubGl2ZWV2ZW50cy51c4IOKi5sdXd0aGFuc2EuZGWCESou
cGxldXJpc3kuY29tLmF1gg4qLnByb2plY3RlZC51c4IeKi5xdWFudGl0eXN1cnZl
eW9ycGVydGguY29tLmF1ghwqLnJlYWxlc3RhdGVjaGFtcGlvbnMuY29tLmF1ghEq
LnJlaXRlcmthcHBlbi5kZYIoKi5yZW5pbi1hbmdpb3RlbnNpbi1hbGRvc3Rlcm9u
LXN5c3RlbS5kZYIQKi5yc2Jwc2hvcC5jby51a4IOKi5zY2lvbG9neS5vcmeCDCou
c2V4MHNreS5za4IQKi5zbGVlcGVyc29mYS5kZYIdKi5zdHJhdGZvcmRjaXR5YnVz
aW5lc3MuY28udWuCDSoudGVoaG91c2UudXOCFSoud2FzY2hhbmxlaXR1bmdlbi5k
ZYIRKi53YXNzZXJtYXJrZW4uZGWCEyoud3d3YmlibGlvdGhlZWsubmyCEioud3d3
Y29tbWVuaXR5Lm5ldIIOKi54Yml6am9icy5uZXSCJSoueG4tLWVpbmtvbW1lbnNz
dGV1ZXJlcmtscnVuZy05YmMuZGWCHCoueG4tLXRpZWZraGxnZXJ0ZS1wY2I0NGEu
ZGWCGCoueHh4cGhvbmVzZXhsaW5lcy5jby51a4IdYWdlbmNpYW1lbmRpb2FtYmll
bnRleWFndWEuZXOCEWF1dG9za29sYXRlc3R5LmN6ggpiaXNuaXMub3JngglidWdl
aS5uZXSCGmJ1c2luZXNzYWR2ZXJ0aXNpbmcuY29tLmF1ghZjYWJpbmV0aGFyZHdh
cmUuY29tLmF1ghJjYW5hZGlhbmNvdXBvbi5uZXSCFWRhbmdlcm91c2RlY2libGVz
Lm9yZ4IGZGdkLnVzghJmbGFpcmZhc2hpb24uY28udWuCFWZsb3dlcmJvdXRpcXVl
LmNvbS5hdYILZmxvd2xpZmUudXOCEWZvb3RiYWxsamVyc2V5LmRlgg5mcmVlYm9v
a2V6Lm9yZ4IOZ2FzYmJxcy5jb20uYXWCDWdldG5vdGljZWQudXOCFGdyZWVua2lu
Zy1wdWJzLmNvLnVrggtnd2dpZnMuaW5mb4IKaGFtbWFtLm9yZ4ITaGFuZG1hZGVy
dWdzLmNvbS5hdYISaGFyZG1vbmV5ZmxpcHMub3JnggpoZWRnaW5nLnVzgg9oaWdo
d2F5cy5jb20uYXWCEWhvdGRydW5rY2hpY2submV0ghBpbmZhbnRjZW50ZXIub3Jn
ghBrYWlldHVyZW5ld3MuY29tgglrZGtmLmluZm+CDGxlYWtkYXRhLm5ldIINbGl2
ZWV2ZW50cy51c4IMbHV3dGhhbnNhLmRlgg9wbGV1cmlzeS5jb20uYXWCDHByb2pl
Y3RlZC51c4IccXVhbnRpdHlzdXJ2ZXlvcnBlcnRoLmNvbS5hdYIacmVhbGVzdGF0
ZWNoYW1waW9ucy5jb20uYXWCD3JlaXRlcmthcHBlbi5kZYImcmVuaW4tYW5naW90
ZW5zaW4tYWxkb3N0ZXJvbi1zeXN0ZW0uZGWCDnJzYnBzaG9wLmNvLnVrggxzY2lv
bG9neS5vcmeCCnNleDBza3kuc2uCDnNsZWVwZXJzb2ZhLmRlghtzdHJhdGZvcmRj
aXR5YnVzaW5lc3MuY28udWuCC3RlaGhvdXNlLnVzghN3YXNjaGFubGVpdHVuZ2Vu
LmRlgg93YXNzZXJtYXJrZW4uZGWCEXd3d2JpYmxpb3RoZWVrLm5sghB3d3djb21t
ZW5pdHkubmV0ggx4Yml6am9icy5uZXSCI3huLS1laW5rb21tZW5zc3RldWVyZXJr
bHJ1bmctOWJjLmRlghp4bi0tdGllZmtobGdlcnRlLXBjYjQ0YS5kZYIWeHh4cGhv
bmVzZXhsaW5lcy5jby51azBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf
EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCC
AQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAI
xjc1eeYQe8xWAAABaV8xvB8AAAQDAEYwRAIgDSmmDTmBxBFgZV4Nt6Hq+Mb4VY21
zFESME11idYwadACIEE16qAWzs3P5hcclJCXVxyO5F6QDmFrNsWY9ghl3ws4AHYA
Y/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFpXzG6fQAABAMARzBF
AiEAgMDR6jdZho+fgP4xtiMDuP9rp0ay4K0g0ivQjKpX+/wCIF8G6t1cJUwc8vwT
iNNvOpzKSFOlJYboG0O2lsXuN4ciMA0GCSqGSIb3DQEBCwUAA4IBAQBATe7dohne
c2XhLePg+17NEC72ev1HDXU0qWiVXVLyI0aib/hF/7sHj6a2ICHaMiwewqCK7Ygo
mobUkye/NR0Rgdcz0dQJAY7M+neGoEqx1r4rUWgQTufsVGdpS1ADQwk4qGUFOYOQ
vK058ObG0lTXOlOgGWHTjzWvTQ4HC7TBg49BswubkPhNj2513ySw9ZfkrmQJrkFf
SXc4kDlxJrOrR6vtD4ULz2zT4DQ3Y/mNCxro/PUG4R6C7Ux917Cj2rGmxPlygrJu
0vxlHL4WCcHDDYVZGC2o5kP/v56UhefC85DPJAvl0HM85tJYvm/hfVUCIzplhDU9
ORC3IJa/xwHI
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3pS6JDRfnkYtReXhtaI2
A9Sz1G+tEPu8RwV5VZod4zk47Bue6h3kFXjDBKlhLV0jayftLdlEssyp8/gf5TNk
QXXqRoQyQ/a3OKoIj7YcMFhWtzqGCzdPRjXy6mcYMLeZNyYl0tDCLlX3+6f0sbwb
TV/htnmzpLhTS7u35AT4nMi9Z3bAmpOartDJo8AqFyDlhlz/ZO39DPchneBEJyrp
b2LY0/8MI4tvDgHezqbybfpd66WBLFwruPHc/O984SHItPJphyZf58lcukseFkWN
HrVO/bSzPJDSFnSsYd/aGE84fHLvg4E9Zpz1MCcPWCaj2Vvt+QyXgRWFZ9zdx5ap
JQ6SB2L82ePMH62RgmhimdADF3tCLiiM5LzKXLJxnCdWeMXqcCoQnIpQNVOvbgUg
ePINUJnOPw1328gnBjmLMVyamEgslFvpEGjLuxpJPamQZhujkNG7P/Ypv3M6VyA5
amJedlZBcP0F/dYc6e7QKrdp9pUWS9LEleaRI/RuNLZuqWMwfMI8bgv3XtbOoTy9
Mwm5zFFMna3wxYL4BZXPTTLVV8lqsFcfCcr6cg+YPwpnQsZjThhIoaJG0TNQVVY6
KgBtLbRT/m0FkekC2AkcvhPM9xkfKJrUJqFlYEk2RKobVRH64hr0WHDdTTXUQGpO
VRhkC+bpcxX0ZyJQQjZofFcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305068366545025211338913759672477884388694
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-08 20:24:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-06 20:24:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sleepersofa.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 908051114710667449876725490510750668393475704311950687378716978966595308654955964436063657418153587566014622257541912521806288040488604171140655675476654856037953153333630028871414032191128119103906077333907730023370341916784128384338717399921792674150220707814777493503075172710788518013638072618427204114959071236814413195502615938668603638504776525464217746371244222677801660459004497564609514511571092578511602144302374130706445310516106440375848538947532874781631514039958954696983657963580499584551009412299689772305360294230192373404706208514881748526096859507320922753445716173901235793901766938641245830348545452178305199924180984461538913474953098604686794340957126550516892941752159855227620167771113620009134782412396058970959685758232460441343566352450183689406847272609098042840060392465978747902509597912745810932908441721606534995707405466764583143753636912309824074791876404651229719157410611380760404548663585383091056347614902032715666817233405404802901086407370686399708816036071477925987636551972624640596607420060855150248300029059360714722962588628548241560852762198650262791113356310100671639242945533499940774266317647133157546278668005787748732960287870682007728632378949418528896024136615680731089482579031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d4ae48fff3260b40cfe28988e50ce16470727e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2000 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agenciamendioambienteyagua.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoskolatesty.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bisnis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bugei.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessadvertising.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cabinethardware.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canadiancoupon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dangerousdecibles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dgd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flairfashion.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flowerboutique.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flowlife.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footballjersey.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freebookez.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gasbbqs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getnoticed.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenking-pubs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gwgifs.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hammam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handmaderugs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hardmoneyflips.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hedging.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.highways.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotdrunkchick.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infantcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaieturenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kdkf.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leakdata.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveevents.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luwthansa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pleurisy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projected.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quantitysurveyorperth.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realestatechampions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reiterkappen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renin-angiotensin-aldosteron-system.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rsbpshop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sciology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sex0sky.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sleepersofa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stratfordcitybusiness.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tehhouse.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waschanleitungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wassermarken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwbibliotheek.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwcommenity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xbizjobs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--einkommenssteuererklrung-9bc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--tiefkhlgerte-pcb44a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xxxphonesexlines.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agenciamendioambienteyagua.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoskolatesty.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bisnis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugei.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessadvertising.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabinethardware.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadiancoupon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dangerousdecibles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dgd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flairfashion.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flowerboutique.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flowlife.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballjersey.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freebookez.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gasbbqs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getnoticed.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenking-pubs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwgifs.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hammam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handmaderugs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hardmoneyflips.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hedging.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highways.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotdrunkchick.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infantcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaieturenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kdkf.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leakdata.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveevents.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luwthansa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pleurisy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projected.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quantitysurveyorperth.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestatechampions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reiterkappen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renin-angiotensin-aldosteron-system.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsbpshop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sex0sky.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sleepersofa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stratfordcitybusiness.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tehhouse.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waschanleitungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wassermarken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwbibliotheek.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwcommenity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbizjobs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--einkommenssteuererklrung-9bc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--tiefkhlgerte-pcb44a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xxxphonesexlines.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001695f31bc1f000004030046304402200d29a60d3981c41160655e0db7a1eaf8c6f8558db5cc5112304d7589d63069d002204135eaa016cecdcfe6171c949097571c8ee45e900e616b36c598f60865df0b3800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001695f31ba7d000004030047304502210080c0d1ea3759868f9f80fe31b62303b8ff6ba746b2e0ad20d22bd08caa57fbfc02205f06eadd5c254c1cf2fc1388d36f3a9cca4853a52586e81b43b696c5ee378722
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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