busfahplan.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:80:1f:34:f0:1d:98:f2:3d:0f:b1:46:78:67:94:ef:14:28 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=busfahplan.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:80:1f:34:f0:1d:98:f2:3d:0f:b1:46:78:67:94:ef:14:28
Serial Number (int): 304934481698590095625489939237735016371240
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6a:21:1c:ab:ba:b9:1b:ff:9a:68:bf:2b:c1:1d:19:58:31:ff:2b:91
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 97:d4:f6:45:c3:68:57:8d:9b:ca:9a:4a:d3:06:e1:60:44:27:92:fa
Fingerprint (sha256): 1f:4d:8c:4f:28:40:37:a6:e6:6c:b3:4f:9b:94:b9:03:9b:ab:9f:7e:37:47:49:65:e9:20:a6:01:00:8a:3c:a4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate busfahplan.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for busfahplan.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.9v.ca
*.all1download.net
*.basketballsinglets.com.au
*.bedlinens.com.au
*.beyondprobiotics.net
*.bilige-telefoniren.de
*.billigster-kredit.de
*.burenkrieg.de
*.busfahplan.de
*.c-highway.net
*.curses.de
*.deutscharbeiten.de
*.diabetes-gentest.de
*.e-k.de
*.elice-dsl.de
*.fastbike.com.br
*.fleyr.de
*.foodprocessors.com.au
*.geschirrladen.de
*.golflessons.de
*.handmaderug.com.au
*.jobcentre.com.au
*.joo.de
*.kaminbrand.de
*.klaemobil.de
*.klub-kultur.de
*.lojadocacador.com.br
*.naaiatelieraafke.nl
*.neuschwarnstein.de
*.nudeart.com.au
*.oul.com.au
*.porker.icu
*.sarpsborg.de
*.seriew.net
*.stream-c7.net
*.swingsets.com.au
*.tattovorlage.de
*.taufkleider.de
*.technicdirekt.de
*.traktorhaftpflichtversicherung.de
*.trivag.com.br
*.vintageads.com.au
*.vnexress.net
*.whitehouseblackmarket.co
*.xn--engelsprche-0hb.de
*.xn--fllheber-0za.de
*.xn--sammler-mnzen-4ob.de
*.xn--weinfachbcher-4ob.de
*.xn--wimpernwnsche-3ob.de
*.xn--wohnstte-5za.de
9v.ca
all1download.net
basketballsinglets.com.au
bedlinens.com.au
beyondprobiotics.net
bilige-telefoniren.de
billigster-kredit.de
burenkrieg.de
busfahplan.de
c-highway.net
curses.de
deutscharbeiten.de
diabetes-gentest.de
e-k.de
elice-dsl.de
fastbike.com.br
fleyr.de
foodprocessors.com.au
geschirrladen.de
golflessons.de
handmaderug.com.au
jobcentre.com.au
joo.de
kaminbrand.de
klaemobil.de
klub-kultur.de
lojadocacador.com.br
naaiatelieraafke.nl
neuschwarnstein.de
nudeart.com.au
oul.com.au
porker.icu
sarpsborg.de
seriew.net
stream-c7.net
swingsets.com.au
tattovorlage.de
taufkleider.de
technicdirekt.de
traktorhaftpflichtversicherung.de
trivag.com.br
vintageads.com.au
vnexress.net
whitehouseblackmarket.co
xn--engelsprche-0hb.de
xn--fllheber-0za.de
xn--sammler-mnzen-4ob.de
xn--weinfachbcher-4ob.de
xn--wimpernwnsche-3ob.de
xn--wohnstte-5za.de

Other certificates including the domain name busfahplan.de

(limited to 100 certificates)
6019.icu
xn--bohrmaschinenzubehr-76b.de
busfahplan.de
busfahplan.de
busfahplan.de
xn--anhnerkupplung-7hb.de
tarotcards.com.au
busfahplan.de
busfahplan.de
mortgageexplorer.com.au
iplawyers.com.au

Certificate

The complete raw certificate details for busfahplan.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304934481698590095625489939237735016371240
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 12:03:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-25 12:03:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'busfahplan.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 894062495392746272901947049729707115390720427334058435161290201867845673764512344603081879243917126772310908456275057820572900015247335827701689661974607756176685771782160817091446545333382570311619182321852809833114162203431981548404629157751987805071478533536997272468892665902234931575522036289195835331597407844981718709300233886987011960210130530839929826523873702646346839506142621695145773394096092880612460881266073969182541352804628686956083442461481354291197815659299173486402423863306541646728898563279420392635131685278797656141367123548098212778721365774678786602923027763498612029503144851461676995882839702470106809743710777565951945110508316522948419444521291948231120311080969808130525107768525020180274768443818927293132663969566949371670106275562278550883843396924311370987918736070748692253109940084246309552294661182808022202948479832351204220216281459864789686588347412248675266840045260185557493434921239700577668868150886434258937775409685572315928993526376215400334989751699851038204315031320382230151392538590002477794810649700540159884232557719844895711419686418351056392278949308860852010133988498837227838447734135061982065264329549826868704834849979101361925060610564238373377210377012293919235843870611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a211cabbab91bff9a68bf2bc11d195831ff2b91
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1898 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9v.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.all1download.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basketballsinglets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bedlinens.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beyondprobiotics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bilige-telefoniren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billigster-kredit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burenkrieg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.busfahplan.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.c-highway.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.curses.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deutscharbeiten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diabetes-gentest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-k.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elice-dsl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastbike.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fleyr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodprocessors.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geschirrladen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.golflessons.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handmaderug.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jobcentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaminbrand.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klaemobil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klub-kultur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lojadocacador.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naaiatelieraafke.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neuschwarnstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nudeart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oul.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.porker.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sarpsborg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seriew.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stream-c7.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swingsets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tattovorlage.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taufkleider.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.technicdirekt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.traktorhaftpflichtversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trivag.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vintageads.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vnexress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whitehouseblackmarket.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--engelsprche-0hb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fllheber-0za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sammler-mnzen-4ob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--weinfachbcher-4ob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--wimpernwnsche-3ob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--wohnstte-5za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9v.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'all1download.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballsinglets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedlinens.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyondprobiotics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bilige-telefoniren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billigster-kredit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burenkrieg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busfahplan.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c-highway.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curses.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutscharbeiten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diabetes-gentest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-k.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elice-dsl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastbike.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fleyr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodprocessors.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geschirrladen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golflessons.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handmaderug.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobcentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaminbrand.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klaemobil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klub-kultur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lojadocacador.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naaiatelieraafke.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuschwarnstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nudeart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oul.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porker.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarpsborg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seriew.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream-c7.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swingsets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tattovorlage.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taufkleider.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technicdirekt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traktorhaftpflichtversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trivag.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintageads.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vnexress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitehouseblackmarket.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--engelsprche-0hb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fllheber-0za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sammler-mnzen-4ob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--weinfachbcher-4ob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--wimpernwnsche-3ob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--wohnstte-5za.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d6dab3bbc000004030047304502210085f8568b9297a39213cced7912f89afcd73067946b3b9953493cc001f7e4f62802201c2d369b0e6879c3ef4edd000ab8bec75c04e3de7fbe6f665a5fa827189c578d00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d6dab39e50000040300473045022100b42c5bb52cc4b4eb49180b303e76e2bef3215446bb48ff003caad2e5469bb9dc02202867301af610c1fb20bebea3b0e6b7402ff2ccfb9c0c34591c1d384463b29c0b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007376675e077c8fd8d16ea528a94df231548b318ca45e2d8c20dd3cc4bc8beb2cfb047612bd551317cd7472aed21085f799218936c1e5204985c32d8a93abb17e7be23398dc9e28fb8627aef6a8e456e922d970a255d2ca300c07f5ca0dd615e3a85e1a58a23d0a66a63344b7d5b6cdc010044593eafb4b02626f54e8c215eaaeab9a00b1ce9fb7f5671a15e799a61a40d6e7f90e2ddbd9cbb356c1f9a13b36a9b966abb3be5f953a77553df8b9bd8631c36cc7537a7a184cea1858228d44d83e91fa972472c5ebedff4d1eee65e3005e07d36605798c6e2c9fea7f12eb53f61bdd850b377fd3dcbac34ba449c9e9fb1d966cda446c7b3f2e5d4805dae432482f