decisions.co.za

Issued by R3

About this certificate

This digital certificate with serial number 04:44:08:c5:8f:46:17:f6:04:8d:76:11:33:7f:4f:63:36:40 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=decisions.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:44:08:c5:8f:46:17:f6:04:8d:76:11:33:7f:4f:63:36:40
Serial Number (int): 371600004290050173060694977154777237108288
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5c:0f:0d:ac:6d:15:09:a7:77:d4:bb:5a:90:10:3c:8d:62:fc:83:8a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7a:88:a3:b2:5b:3d:c0:13:9c:8a:ee:24:80:cd:0a:70:16:b3:60:4a
Fingerprint (sha256): 2c:63:23:5d:c0:99:81:52:b4:61:45:6e:9c:6e:f4:00:4b:8a:a8:1b:fe:f0:2b:df:bf:f2:67:5b:fa:c0:94:76

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate decisions.co.za

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for decisions.co.za

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ager4nc.com
*.ankadevreproje.com
*.bco.de
*.cardiology.co.za
*.conservenergy.org
*.cvtreeservice.net
*.dastiplasti.com
*.decisions.co.za
*.divisenkurse.de
*.dlj.de
*.eroticpicturesworld.com
*.erotikfilmer.de
*.erotikshops24.de
*.erziehungsbeauftragung.de
*.faclals4k.com
*.filmkesitleri.com
*.footballers.com.au
*.fundandcompany.au
*.gedaechtnisluecken.de
*.immigration-solution.com
*.indianarestaurant.co.uk
*.iyd.de
*.kenelma.com
*.lokerbaiman.com
*.lpgvitrakchayan.in
*.lucyrigby.com
*.lufthahnsa.de
*.lufthansad.de
*.lufthansade.de
*.ojanse.com
*.outlet.co.za
*.peacockwood.com
*.qhmsgl.com
*.rooftop519.com
*.rtln.de
*.rxi.de
*.schweden.co
*.sr.co.za
*.staedl.de
*.stephan.eu
*.sw40hx.com
*.tarifvergeich.de
*.testbreichte.de
*.theambassador.com.au
*.votewarsame.com
*.xn--fremdwrte-57a.de
*.xn--glckwunschschreiben-69b.de
*.xn--radunterwsche-jfb.de
*.xn--rehbrcke-b6a.de
*.xn--sinnessprche-llb.de
ager4nc.com
ankadevreproje.com
bco.de
cardiology.co.za
conservenergy.org
cvtreeservice.net
dastiplasti.com
decisions.co.za
divisenkurse.de
dlj.de
eroticpicturesworld.com
erotikfilmer.de
erotikshops24.de
erziehungsbeauftragung.de
faclals4k.com
filmkesitleri.com
footballers.com.au
fundandcompany.au
gedaechtnisluecken.de
immigration-solution.com
indianarestaurant.co.uk
iyd.de
kenelma.com
lokerbaiman.com
lpgvitrakchayan.in
lucyrigby.com
lufthahnsa.de
lufthansad.de
lufthansade.de
ojanse.com
outlet.co.za
peacockwood.com
qhmsgl.com
rooftop519.com
rtln.de
rxi.de
schweden.co
sr.co.za
staedl.de
stephan.eu
sw40hx.com
tarifvergeich.de
testbreichte.de
theambassador.com.au
votewarsame.com
xn--fremdwrte-57a.de
xn--glckwunschschreiben-69b.de
xn--radunterwsche-jfb.de
xn--rehbrcke-b6a.de
xn--sinnessprche-llb.de

Other certificates including the domain name decisions.co.za

(limited to 100 certificates)
decisions.co.za
xn--fremdwrte-57a.de
decisions.co.za
decisions.co.za
decisions.co.za
decisions.co.za
iyd.de
biokop45.club
sr.co.za
decisions.co.za
decisions.co.za
one4allgidtcard.co.uk
decisions.co.za

Certificate

The complete raw certificate details for decisions.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371600004290050173060694977154777237108288
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-06 22:25:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-04 22:25:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'decisions.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 633710970954924149584124188929920093970050958452891233091710945114543630864566385250616743134886261349014483517933195379598727522330020692345172373193300320869551814727062140421368268286170787130703540320879362321667403328497339182001396011489773327323747116922959622051854677274462852225734300829347514354997454275305995990755861424984156839018241857680561809477176097203690636780823857202440342472449641458644035454769388314788722908037052850817092475960730658302955746273133934362452606206651097640328036971720811799975508818656915608807507864342939651820072221017696595686156037331787226494884428359682570065644098658145798513697220455034001659077953303326786562704789788000413364113305491267933263867190748134978919099301953588700870886958351154498108664325000027569666388634795972420585811626351815762753933856660075231924100623459771549378466554479990380193449794349033536511479455127802159488982227155885000886611871354817607975758234338698564593945070450896789668686577185003229890350393699559776089680259675983916651170822082496349967367302786137582432153695468051355406335121704716694103977395767741893759697609243609163576220894243991503007355386484024529075067212347449419488186026343379479615696640139330912960318945879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c0f0dac6d1509a777d4bb5a90103c8d62fc838a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1814 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ager4nc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ankadevreproje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bco.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardiology.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conservenergy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cvtreeservice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dastiplasti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decisions.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divisenkurse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dlj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eroticpicturesworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erotikfilmer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erotikshops24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erziehungsbeauftragung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faclals4k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filmkesitleri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footballers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fundandcompany.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gedaechtnisluecken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.immigration-solution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indianarestaurant.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iyd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kenelma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lokerbaiman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lpgvitrakchayan.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lucyrigby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lufthahnsa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lufthansad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lufthansade.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ojanse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outlet.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peacockwood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qhmsgl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rooftop519.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rtln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rxi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schweden.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sr.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staedl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stephan.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sw40hx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tarifvergeich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testbreichte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theambassador.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.votewarsame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fremdwrte-57a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--glckwunschschreiben-69b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--radunterwsche-jfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rehbrcke-b6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sinnessprche-llb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ager4nc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ankadevreproje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bco.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardiology.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conservenergy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvtreeservice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dastiplasti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divisenkurse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eroticpicturesworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erotikfilmer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erotikshops24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erziehungsbeauftragung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faclals4k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmkesitleri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundandcompany.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gedaechtnisluecken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immigration-solution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianarestaurant.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iyd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenelma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lokerbaiman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpgvitrakchayan.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucyrigby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lufthahnsa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lufthansad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lufthansade.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ojanse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlet.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peacockwood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qhmsgl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rooftop519.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schweden.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sr.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staedl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stephan.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sw40hx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarifvergeich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testbreichte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theambassador.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'votewarsame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fremdwrte-57a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--glckwunschschreiben-69b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--radunterwsche-jfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rehbrcke-b6a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sinnessprche-llb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189cd2b5ba00000040300483046022100e0022102ab7fc67edb2a74e44fe1565dbfbf2b047f20be425407a43c69189a8a02210092b944f97729b51ce8ffbadb0681d1d8d7cbded51f2da150f7000f6418023f68007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189cd2b5d7a0000040300483046022100fb3a2da94d882005dd1fce3a6d72a5b101bff69926b93b5aacf781ae4d9447c6022100a31962ed67613ffae2f2251845a0d778590c3221779032b96593680e57d71e4b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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