ftdna.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ba:69:ed:92:61:f5:2a:28:c1:c1:85:7c:33:3a:f4:b9:54 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ftdna.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ba:69:ed:92:61:f5:2a:28:c1:c1:85:7c:33:3a:f4:b9:54
Serial Number (int): 324770180525480991756649238567394143942996
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ab:05:87:b7:fe:fd:fa:66:dd:e8:5e:32:f2:91:a1:e4:7b:27:d0:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a6:f1:07:f3:e8:87:81:f7:c8:44:c5:61:8b:6b:85:70:71:58:08:31
Fingerprint (sha256): 2e:06:fc:2b:25:92:92:ce:9d:c0:95:da:9c:bf:e7:44:e5:cb:ea:d2:5a:e6:52:a6:63:76:71:7b:49:66:a0:9f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ftdna.co.uk

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ftdna.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1420.icu
*.2894.icu
*.3826.icu
*.3creditreportsonline.net
*.4833.icu
*.7298.icu
*.8524.icu
*.8830.icu
*.billigflieget.de
*.billigfliuege.de
*.billigfliwger.de
*.billigflleger.de
*.billigflue.de
*.billoigfluege.de
*.birdosparadiselondon.co.uk
*.blauweplaneet.nl
*.burlaub.de
*.capitaloen.co.uk
*.croissant.com.au
*.dessertoperation.de
*.discountonlinepharmacy.com.au
*.discountrugs.com.au
*.emballage.ca
*.endodontics.com.au
*.enr.us
*.footballfever.org
*.ftdna.co.uk
*.gamerwap.info
*.handy-blog24.de
*.homelife.org
*.movietheaters.com.au
*.mundofesta.net
*.nettolohnd.de
*.poem.com.au
*.propertynews.org
*.questions.mx
*.secretaria.eu
*.spitzentops.de
*.station.com.au
*.stromkostenabrechner.de
*.terraium.tv
*.theauctioneers.com.au
*.tqz.nl
*.turks.com.au
*.welders.com.au
*.wir-in-berlin.de
*.workmen.org
*.youporn.gr
*.zhn.de
*.zinger.com.au
1420.icu
2894.icu
3826.icu
3creditreportsonline.net
4833.icu
7298.icu
8524.icu
8830.icu
billigflieget.de
billigfliuege.de
billigfliwger.de
billigflleger.de
billigflue.de
billoigfluege.de
birdosparadiselondon.co.uk
blauweplaneet.nl
burlaub.de
capitaloen.co.uk
croissant.com.au
dessertoperation.de
discountonlinepharmacy.com.au
discountrugs.com.au
emballage.ca
endodontics.com.au
enr.us
footballfever.org
ftdna.co.uk
gamerwap.info
handy-blog24.de
homelife.org
movietheaters.com.au
mundofesta.net
nettolohnd.de
poem.com.au
propertynews.org
questions.mx
secretaria.eu
spitzentops.de
station.com.au
stromkostenabrechner.de
terraium.tv
theauctioneers.com.au
tqz.nl
turks.com.au
welders.com.au
wir-in-berlin.de
workmen.org
youporn.gr
zhn.de
zinger.com.au

Other certificates including the domain name ftdna.co.uk

(limited to 100 certificates)
radioein.de
pabi.net
ftdna.co.uk
billigfliieger.de
turnershyundai.co.uk

Certificate

The complete raw certificate details for ftdna.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM5zCCC8+gAwIBAgISA7pp7ZJh9SoowcGFfDM69LlUMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MTYyMjI5MzNaFw0x
OTA4MTQyMjI5MzNaMBYxFDASBgNVBAMTC2Z0ZG5hLmNvLnVrMIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEAt5meLqmKwls6B9AmecuOGeSmvQmimQtDW4qe
eOcL+wg+zgaxRoO+1N0eMJRJtMJqMG8hBOP7WdyuVsMkXC8paswNDLb30Id/7HlW
ZXmKK8WUYXM4A9sQw8OPm2JGlBNfxp0/pqFGCfx7SqT/m2lCSmnSl2NeYflGI/XA
kCypCzZ+sBSZ3Y4Li7tsXtjxrfmvPOVhdB7OAhy/RN837qA8fdy28MJkHsF+Oo1J
ZAlrxXohtWn88Hw5U7VRRCEtcJeaw21Wd882FNMHnwzCmSp316jjazyrK0p92Lah
TEZ4bIvfKwao341THB0hh5N/fbV+U9lu1MFEIKopLImCm7u2xc0B5fmmQsBL0CdU
7r7Y7i7SX5CETzq18Yq5jVumc0GR7bVLWOMGoCKsmQSJUxCNAccDAqxQMby3+C86
jdXFaROasRi8e993NgBwgfOVWwH3AdDtEfiYneT/OFR1PffxfgByqyMCW+CBCoZN
/xkIUXMCHJDsOE0wxjA87BVl8IpEy5M24Ut7VTVzTEe+I9rl889ChF8zTeU5jsKN
SXAIVqTd0MEOoPW10n4TsLuaB5yO22p6vYIi22YTMckoqaAV0l/2xyLs9CZHjJVF
wdPeWPyNBWzXNVQxXXP99FYJFa6yPYQ9j6Ryc3rs37JPKNvhkbxnv53AvygdAbkA
viuZgOECAwEAAaOCCPkwggj1MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUqwWHt/79
+mbd6F4y8pGh5Hsn0IAwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzCCBq0GA1UdEQSCBqQwggagggoqLjE0MjAuaWN1ggoq
LjI4OTQuaWN1ggoqLjM4MjYuaWN1ghoqLjNjcmVkaXRyZXBvcnRzb25saW5lLm5l
dIIKKi40ODMzLmljdYIKKi43Mjk4LmljdYIKKi44NTI0LmljdYIKKi44ODMwLmlj
dYISKi5iaWxsaWdmbGllZ2V0LmRlghIqLmJpbGxpZ2ZsaXVlZ2UuZGWCEiouYmls
bGlnZmxpd2dlci5kZYISKi5iaWxsaWdmbGxlZ2VyLmRlgg8qLmJpbGxpZ2ZsdWUu
ZGWCEiouYmlsbG9pZ2ZsdWVnZS5kZYIcKi5iaXJkb3NwYXJhZGlzZWxvbmRvbi5j
by51a4ISKi5ibGF1d2VwbGFuZWV0Lm5sggwqLmJ1cmxhdWIuZGWCEiouY2FwaXRh
bG9lbi5jby51a4ISKi5jcm9pc3NhbnQuY29tLmF1ghUqLmRlc3NlcnRvcGVyYXRp
b24uZGWCHyouZGlzY291bnRvbmxpbmVwaGFybWFjeS5jb20uYXWCFSouZGlzY291
bnRydWdzLmNvbS5hdYIOKi5lbWJhbGxhZ2UuY2GCFCouZW5kb2RvbnRpY3MuY29t
LmF1gggqLmVuci51c4ITKi5mb290YmFsbGZldmVyLm9yZ4INKi5mdGRuYS5jby51
a4IPKi5nYW1lcndhcC5pbmZvghEqLmhhbmR5LWJsb2cyNC5kZYIOKi5ob21lbGlm
ZS5vcmeCFioubW92aWV0aGVhdGVycy5jb20uYXWCECoubXVuZG9mZXN0YS5uZXSC
DyoubmV0dG9sb2huZC5kZYINKi5wb2VtLmNvbS5hdYISKi5wcm9wZXJ0eW5ld3Mu
b3Jngg4qLnF1ZXN0aW9ucy5teIIPKi5zZWNyZXRhcmlhLmV1ghAqLnNwaXR6ZW50
b3BzLmRlghAqLnN0YXRpb24uY29tLmF1ghkqLnN0cm9ta29zdGVuYWJyZWNobmVy
LmRlgg0qLnRlcnJhaXVtLnR2ghcqLnRoZWF1Y3Rpb25lZXJzLmNvbS5hdYIIKi50
cXoubmyCDioudHVya3MuY29tLmF1ghAqLndlbGRlcnMuY29tLmF1ghIqLndpci1p
bi1iZXJsaW4uZGWCDSoud29ya21lbi5vcmeCDCoueW91cG9ybi5ncoIIKi56aG4u
ZGWCDyouemluZ2VyLmNvbS5hdYIIMTQyMC5pY3WCCDI4OTQuaWN1gggzODI2Lmlj
dYIYM2NyZWRpdHJlcG9ydHNvbmxpbmUubmV0ggg0ODMzLmljdYIINzI5OC5pY3WC
CDg1MjQuaWN1ggg4ODMwLmljdYIQYmlsbGlnZmxpZWdldC5kZYIQYmlsbGlnZmxp
dWVnZS5kZYIQYmlsbGlnZmxpd2dlci5kZYIQYmlsbGlnZmxsZWdlci5kZYINYmls
bGlnZmx1ZS5kZYIQYmlsbG9pZ2ZsdWVnZS5kZYIaYmlyZG9zcGFyYWRpc2Vsb25k
b24uY28udWuCEGJsYXV3ZXBsYW5lZXQubmyCCmJ1cmxhdWIuZGWCEGNhcGl0YWxv
ZW4uY28udWuCEGNyb2lzc2FudC5jb20uYXWCE2Rlc3NlcnRvcGVyYXRpb24uZGWC
HWRpc2NvdW50b25saW5lcGhhcm1hY3kuY29tLmF1ghNkaXNjb3VudHJ1Z3MuY29t
LmF1ggxlbWJhbGxhZ2UuY2GCEmVuZG9kb250aWNzLmNvbS5hdYIGZW5yLnVzghFm
b290YmFsbGZldmVyLm9yZ4ILZnRkbmEuY28udWuCDWdhbWVyd2FwLmluZm+CD2hh
bmR5LWJsb2cyNC5kZYIMaG9tZWxpZmUub3JnghRtb3ZpZXRoZWF0ZXJzLmNvbS5h
dYIObXVuZG9mZXN0YS5uZXSCDW5ldHRvbG9obmQuZGWCC3BvZW0uY29tLmF1ghBw
cm9wZXJ0eW5ld3Mub3JnggxxdWVzdGlvbnMubXiCDXNlY3JldGFyaWEuZXWCDnNw
aXR6ZW50b3BzLmRlgg5zdGF0aW9uLmNvbS5hdYIXc3Ryb21rb3N0ZW5hYnJlY2hu
ZXIuZGWCC3RlcnJhaXVtLnR2ghV0aGVhdWN0aW9uZWVycy5jb20uYXWCBnRxei5u
bIIMdHVya3MuY29tLmF1gg53ZWxkZXJzLmNvbS5hdYIQd2lyLWluLWJlcmxpbi5k
ZYILd29ya21lbi5vcmeCCnlvdXBvcm4uZ3KCBnpobi5kZYINemluZ2VyLmNvbS5h
dTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUF
BwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIE
gfUEgfIA8AB1AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABasL6
u8EAAAQDAEYwRAIgUaNeb0z1trxounXM++ogAKc8myAZkzgG8veoig0Yp28CIGCA
UiO0ELFRRXoViUBHB88QsotRFeqZ9rqAdcLO6x0UAHcAY/Lbzeg7zCzPC3KEJ1dr
M6SNYXePvXWmOLHHaFRL2I0AAAFqwvq74QAABAMASDBGAiEA2pBjVwaBDnxyFKOR
9NF5Isqp2KF71VakMu9xU26mYeYCIQCudbsImiDYlJWtr2uUZfne49gCrADLWzPk
E1l79ZSK4TANBgkqhkiG9w0BAQsFAAOCAQEABfCOSVkb6a9UqW0PH75bxiDrkDO9
cXWrIArkH4UYB871bCJA49keaE4S7JXOttlKavo5iG1LS9FLl++ncotM7FveoJnK
CTdU4f21/yBxiab1QSx5F1XxvPo3glgiRsKQkBOaBDbIoYXsyTU/P52ZigvY2DT2
smLDLRhPQyMJzrcy836DjE6wUSlD80VHbvNtUF6nyT9mSmO0DIJ/sPQ09oQuHPr5
LK+DnzxKujsaSg+FuYsAls45uHwG9wTvWNINFFD8Cx34XkWyXSaDbzC+UXVabe1b
bsVfQykCif9KbxzSe9lbF8FnLSM0Wtt87GoteK59fH+x4/Ya872McNErmA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324770180525480991756649238567394143942996
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-16 22:29:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-14 22:29:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ftdna.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 749022936137045829520625179352255248365184356890106931022827084139156190736770040200139436392182033436071235480964279049067775315328290599424605158563842899077869093048368322676827656454363049058070738253790611221276008640108065279503370436145976079985272454791270711903797560980779384240183978734267476020314586857650588187268909949958065076648757906341098268022451870427720598442684013734428964875995850642908913789143300756990419629959007414154000368135634349976483416076438199168027942040634509996658015939022664553855720097475780716341976181312181379764205646660676670732992432079145472332703122757644099477553690094411233873174366138317690251157062108269388030074829911427334079336947293375483077308397950597225006452667269717505275052471367912038939222975849649887181855000356315253219560464611642196046150848923202611015121637097675836995373906949733231005814494299379236006248954207192931912804806324907267902698251117712778355659258002021541159187175342733532547306797475978136196842320221312800851770822187229185603752631596820425274826930766032431674486678817457318002245370244635126532044937949404634783671214757467856361138671006866911811287170406096502989034979857490889793446044896662685778765426654687790323209961697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab0587b7fefdfa66dde85e32f291a1e47b27d080
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1700 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1420.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2894.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3826.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3creditreportsonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4833.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.7298.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.8524.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.8830.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billigflieget.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billigfliuege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billigfliwger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billigflleger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billigflue.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billoigfluege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.birdosparadiselondon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blauweplaneet.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burlaub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitaloen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.croissant.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dessertoperation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discountonlinepharmacy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discountrugs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emballage.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.endodontics.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enr.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footballfever.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ftdna.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gamerwap.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handy-blog24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homelife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movietheaters.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mundofesta.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nettolohnd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poem.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.propertynews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.questions.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secretaria.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spitzentops.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.station.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stromkostenabrechner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.terraium.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theauctioneers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tqz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.welders.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wir-in-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.workmen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youporn.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zhn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zinger.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1420.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2894.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3826.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3creditreportsonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4833.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7298.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8524.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8830.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billigflieget.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billigfliuege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billigfliwger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billigflleger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billigflue.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billoigfluege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birdosparadiselondon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blauweplaneet.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burlaub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitaloen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'croissant.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dessertoperation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discountonlinepharmacy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discountrugs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emballage.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endodontics.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enr.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballfever.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftdna.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamerwap.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handy-blog24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homelife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movietheaters.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mundofesta.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nettolohnd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poem.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propertynews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questions.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secretaria.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spitzentops.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'station.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stromkostenabrechner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terraium.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theauctioneers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tqz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welders.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wir-in-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workmen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youporn.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinger.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ac2fabbc10000040300463044022051a35e6f4cf5b6bc68ba75ccfbea2000a73c9b2019933806f2f7a88a0d18a76f022060805223b410b151457a1589404707cf10b28b5115ea99f6ba8075c2ceeb1d1400770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ac2fabbe10000040300483046022100da90635706810e7c7214a391f4d17922caa9d8a17bd556a432ef71536ea661e6022100ae75bb089a20d89495adaf6b9465f9dee3d802ac00cb5b33e413597bf5948ae1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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