staffs-athletics.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c9:5a:70:97:2e:5e:3c:93:66:40:99:a8:0e:d4:81:30:5f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=staffs-athletics.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c9:5a:70:97:2e:5e:3c:93:66:40:99:a8:0e:d4:81:30:5f
Serial Number (int): 329853828669575679874870605325773811298399
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b9:22:62:5f:6d:34:70:5f:f1:f4:08:f4:ae:ff:81:f4:80:59:fb:1c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0c:d6:d3:2a:cf:22:90:95:50:59:cf:43:80:21:48:a5:76:e5:7b:c9
Fingerprint (sha256): 2d:db:df:0f:01:0d:13:af:30:ba:a3:21:0f:89:82:f5:43:2a:9e:7e:a5:f2:ba:1f:fb:d7:28:c6:a4:57:24:e0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate staffs-athletics.co.uk

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for staffs-athletics.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.andetons.co.uk
*.anetdoctor.de
*.angeleno.us
*.arthrogryposis-multiplex-congenita.de
*.austins.net
*.beforward.co.za
*.binnenspeeltuinen.be
*.bronchiti.de
*.c-q.nl
*.ceyhan.nl
*.cushing-reflex.de
*.durbanapartments.co.za
*.ektrodaktylie.de
*.englischer-lebenslauf.de
*.europsku.eu
*.exclusiveagency.com.au
*.fepbluedental.co
*.guiadepozuelo.es
*.guidedwalks.com.au
*.hairwax.com.au
*.hautatmung.de
*.heiljraeuter.de
*.hotstock.com.au
*.hparkinson.de
*.hyunda.nl
*.insomniac.pw
*.interkalation.de
*.kraetzed.de
*.kraetzef.de
*.krupp.es
*.mangovideos.pw
*.muskeldysmorphie.de
*.nextonly.co.uk
*.osazea.de
*.pdaa.net.au
*.portlander.us
*.psychotherapief.de
*.siemfinity.de
*.staffs-athletics.co.uk
*.steererklaerung.de
*.steu4ererklaerung.de
*.thecuttingroomcolchester.co.uk
*.transarterielle-chemoembolisation.de
*.ustravel.ca
*.vidtamin-d-mangel.de
*.vitaneet.de
*.wasserstoffferoxid.de
*.xn--einkommensteuererklrung-e8b.de
*.xn--posttraumatische-verbitterungsstrung-xud.de
*.yulieth.tv
andetons.co.uk
anetdoctor.de
angeleno.us
arthrogryposis-multiplex-congenita.de
austins.net
beforward.co.za
binnenspeeltuinen.be
bronchiti.de
c-q.nl
ceyhan.nl
cushing-reflex.de
durbanapartments.co.za
ektrodaktylie.de
englischer-lebenslauf.de
europsku.eu
exclusiveagency.com.au
fepbluedental.co
guiadepozuelo.es
guidedwalks.com.au
hairwax.com.au
hautatmung.de
heiljraeuter.de
hotstock.com.au
hparkinson.de
hyunda.nl
insomniac.pw
interkalation.de
kraetzed.de
kraetzef.de
krupp.es
mangovideos.pw
muskeldysmorphie.de
nextonly.co.uk
osazea.de
pdaa.net.au
portlander.us
psychotherapief.de
siemfinity.de
staffs-athletics.co.uk
steererklaerung.de
steu4ererklaerung.de
thecuttingroomcolchester.co.uk
transarterielle-chemoembolisation.de
ustravel.ca
vidtamin-d-mangel.de
vitaneet.de
wasserstoffferoxid.de
xn--einkommensteuererklrung-e8b.de
xn--posttraumatische-verbitterungsstrung-xud.de
yulieth.tv

Other certificates including the domain name staffs-athletics.co.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for staffs-athletics.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329853828669575679874870605325773811298399
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 23:33:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 23:33:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staffs-athletics.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 892002142419256455014850135830189738691899008102106730256537911936662120451624594336086001257794510817796890008142741292240609367709060384146810848860417038902489688595975622550106677818904492699870811345125354508611479086740436980495981777719374349776856616725778630694721461726514127482636315176908094227990226336613682675079234949302980819373176918578365724454190070290809031469158939657278037487932125614701539778072086811124156692688838561406350140036569819968562526854545338554973601114670545778784425325600466082768023695922409015356353757378574738374832425199485781622245042405147831876965641474514322629809341904261839124107537165135080408464259503629424440644925674775161870489299010020684219838340629517264693153703422717173858325845730932962386280054604395194127985361500279077221814466808401934999707340299688785626456041667487509278587244722222076596243320827304740535699626629228679330624561143831120004733944094867688476647232758658100223302214192727394018664693995536431469742882506748618540987501199256322754846951069798121286980087258129950454744808989577294134788331127520144230432835709899740696464637108034487998372452236743677176904477112987789925804435135766978025040638459955208519988609988174013356306452581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b922625f6d34705ff1f408f4aeff81f48059fb1c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1980 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.andetons.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anetdoctor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angeleno.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arthrogryposis-multiplex-congenita.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.austins.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beforward.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.binnenspeeltuinen.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bronchiti.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.c-q.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ceyhan.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cushing-reflex.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.durbanapartments.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ektrodaktylie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.englischer-lebenslauf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.europsku.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exclusiveagency.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fepbluedental.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guiadepozuelo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guidedwalks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hairwax.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hautatmung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heiljraeuter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotstock.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hparkinson.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hyunda.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insomniac.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.interkalation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kraetzed.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kraetzef.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krupp.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mangovideos.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muskeldysmorphie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nextonly.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.osazea.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pdaa.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portlander.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psychotherapief.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siemfinity.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staffs-athletics.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steererklaerung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steu4ererklaerung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecuttingroomcolchester.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transarterielle-chemoembolisation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ustravel.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vidtamin-d-mangel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vitaneet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wasserstoffferoxid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--einkommensteuererklrung-e8b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--posttraumatische-verbitterungsstrung-xud.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yulieth.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andetons.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anetdoctor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angeleno.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arthrogryposis-multiplex-congenita.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austins.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beforward.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binnenspeeltuinen.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bronchiti.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c-q.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceyhan.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cushing-reflex.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durbanapartments.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ektrodaktylie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'englischer-lebenslauf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europsku.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exclusiveagency.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fepbluedental.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guiadepozuelo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guidedwalks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hairwax.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hautatmung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heiljraeuter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotstock.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hparkinson.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyunda.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insomniac.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interkalation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kraetzed.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kraetzef.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krupp.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangovideos.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muskeldysmorphie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextonly.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osazea.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdaa.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portlander.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psychotherapief.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siemfinity.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staffs-athletics.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steererklaerung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steu4ererklaerung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecuttingroomcolchester.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transarterielle-chemoembolisation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ustravel.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidtamin-d-mangel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitaneet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wasserstoffferoxid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--einkommensteuererklrung-e8b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--posttraumatische-verbitterungsstrung-xud.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yulieth.tv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f1b930f7000000403004730450220395ffd3b37a842605f2d0b778ad6b8f1487bc70330f42d4350097ea76b6b74b90221009c6567444553dfccc6d5e90ba6f0c020db229403cd4937e30a43126587848727007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f1b930f7900000403004630440220060cabf71a1af98b3b9164872685dce4d940b1b81f16a5ef510f81402209b7190220152d9264c29eec297c582f67c56770737befa7cfad0bfc71cf78bd6c1ab60b4b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00189cc712201baedd8dc595e8b86ae8f97bc6dec6419d12825e11e4e15217169912e89171f46c5aceb744931535b5ab57c045b436fc12e4da77a093d109715781fb4a80899950fde1d52c794431b52358ddca1830d39a2e10e540fedbf1e5e98de0f11b45a374cbf1c3f851fff6b1a9a6e1fc5bdbf81e8505d08546f6ef758482a876b810eb9f708803ed5ddfa213104831f3536501032c288afc9ab5b21c0245ac16ea007c6b699e61792b608ebf08ae367fdbbc70cefb8dae052c7c5f45d774e9093ab2f1d10d91352037c96c347425e69a84e6e0e35c88103b003ccfb51e3609258e776f091b319518b73fd483a562b490355e7115fb6365e03cddd90ed420