modelling.co.za

Issued by R3

About this certificate

This digital certificate with serial number 03:75:a3:e7:ee:a7:b8:fd:04:87:49:04:f6:49:5a:50:a9:d4 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=modelling.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:75:a3:e7:ee:a7:b8:fd:04:87:49:04:f6:49:5a:50:a9:d4
Serial Number (int): 301367763149419642927956271926475773487572
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 52:db:4c:7b:cd:3e:30:dd:e9:2b:40:81:ae:4a:aa:d0:f5:1d:54:9f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 62:b2:ad:67:84:d2:d0:05:88:1c:8b:50:5f:1a:93:77:20:13:97:45
Fingerprint (sha256): 33:2a:ee:a7:3a:12:2f:8b:a2:35:13:95:80:fe:4d:f5:84:30:ba:e7:41:e9:7e:b1:ef:cb:84:9e:e5:af:b4:a6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate modelling.co.za

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for modelling.co.za

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.24trax.net
*.91pomhub.com
*.bancopostaimpreseonline.it
*.cari.es
*.cashoutts.com
*.chezzkid.com
*.chicabonitas.xyz
*.cinfin.cm
*.clinicxpresswebster.com
*.coachmasonwaters.com
*.cookingpans.com.au
*.desatis.de
*.diyprojects.org
*.easyblowes.com
*.editoraguiacomercial.com
*.enable2learn.com
*.haender.de
*.hotelspubs.com.au
*.ifshopamazing.com
*.kitchencurtains.de
*.kompressionsstrumpfhose.de
*.konstitutionsmittel.de
*.kripula.org
*.larvae.de
*.libraria.net
*.modelling.co.za
*.oscarshangout.com.au
*.partsgeek.cm
*.pc-controller.de
*.pittsburghcomhaltas.com
*.popeoverlandexpedition.com
*.preisverglecih.de
*.rattankoerbe.de
*.rideshareindustrynews.com
*.samyukthav.com
*.sb401ks.com
*.singlsleipzig.de
*.sonntagsanzeiger.de
*.streamego.vip
*.strowoche.de
*.suppermarkt.de
*.szsnxyz.com
*.ultraleichtflugschein.de
*.weelop.com
*.windowcurtains.de
*.xn--frderplanung-4ib.de
*.xn--kostenloser-bersetzer-kic.de
*.xn--piratensbel-s8a.de
*.xn--trekking-ausrstung-y6b.de
*.zmarathinews.com
24trax.net
91pomhub.com
bancopostaimpreseonline.it
cari.es
cashoutts.com
chezzkid.com
chicabonitas.xyz
cinfin.cm
clinicxpresswebster.com
coachmasonwaters.com
cookingpans.com.au
desatis.de
diyprojects.org
easyblowes.com
editoraguiacomercial.com
enable2learn.com
haender.de
hotelspubs.com.au
ifshopamazing.com
kitchencurtains.de
kompressionsstrumpfhose.de
konstitutionsmittel.de
kripula.org
larvae.de
libraria.net
modelling.co.za
oscarshangout.com.au
partsgeek.cm
pc-controller.de
pittsburghcomhaltas.com
popeoverlandexpedition.com
preisverglecih.de
rattankoerbe.de
rideshareindustrynews.com
samyukthav.com
sb401ks.com
singlsleipzig.de
sonntagsanzeiger.de
streamego.vip
strowoche.de
suppermarkt.de
szsnxyz.com
ultraleichtflugschein.de
weelop.com
windowcurtains.de
xn--frderplanung-4ib.de
xn--kostenloser-bersetzer-kic.de
xn--piratensbel-s8a.de
xn--trekking-ausrstung-y6b.de
zmarathinews.com

Other certificates including the domain name modelling.co.za

(limited to 100 certificates)
adebapery.com
modelling.co.za
1107.icu
modelling.co.za
modelling.co.za
modelling.co.za
sptras.com.br
modelling.co.za
modelling.co.za
fmu.de
sptras.com.br
oneofvn.site
modelling.co.za
fmu.de
fmu.de

Certificate

The complete raw certificate details for modelling.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301367763149419642927956271926475773487572
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-03 07:07:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-01 07:07:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'modelling.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 882844571417907547330881153584502197574412204929461082846139711321844768266849597174198274690752480858486245884853571496219824730569721443895920430514305647471277585295127189655425078381718524998557800984239634009185127627347459376777684831555742413203849573843618655153983020732820869433693644016546044089607682839104397285858285140465096459742188211049840575125904471314828832874946283401361798887159394243383378867654136527649875457632660927934559242082763389392076795233227652885755994727075758821325436444136005056987457042574485402618751330671026091688288038918264477871570539367460014147051795325062615966693960262092710010152972694368950014822864010227194963068768566892356738946159213270999766119198320686100683211794550252208618830914982877865553948713241409810911908495887423487417239822447892095896632700885566822720646820893993816967444714732650789422216688675737652149934756510663930781933849790496463821351924155659368446584425040555279080475112353451335910144029361051171430263486398289080170915526083394972733734887428498136103777464120805252287960531498416925426086235914203963155932911840045392245461407579522760200999242825857090276807076259832008048220468113975166166208077735004463481324722656808192551783727831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52db4c7bcd3e30dde92b4081ae4aaad0f51d549f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1982 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.24trax.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.91pomhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bancopostaimpreseonline.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cari.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cashoutts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chezzkid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chicabonitas.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cinfin.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clinicxpresswebster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coachmasonwaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cookingpans.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desatis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diyprojects.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easyblowes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.editoraguiacomercial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enable2learn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haender.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelspubs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifshopamazing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kitchencurtains.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kompressionsstrumpfhose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.konstitutionsmittel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kripula.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.larvae.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.libraria.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modelling.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oscarshangout.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partsgeek.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pc-controller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pittsburghcomhaltas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.popeoverlandexpedition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preisverglecih.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rattankoerbe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rideshareindustrynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samyukthav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sb401ks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.singlsleipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonntagsanzeiger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streamego.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strowoche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suppermarkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.szsnxyz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ultraleichtflugschein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weelop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.windowcurtains.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--frderplanung-4ib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kostenloser-bersetzer-kic.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--piratensbel-s8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--trekking-ausrstung-y6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zmarathinews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '24trax.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '91pomhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bancopostaimpreseonline.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cari.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashoutts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chezzkid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicabonitas.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinfin.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinicxpresswebster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coachmasonwaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookingpans.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desatis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diyprojects.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyblowes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editoraguiacomercial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enable2learn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haender.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelspubs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifshopamazing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchencurtains.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kompressionsstrumpfhose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konstitutionsmittel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kripula.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larvae.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libraria.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modelling.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oscarshangout.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partsgeek.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pc-controller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pittsburghcomhaltas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popeoverlandexpedition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preisverglecih.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rattankoerbe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rideshareindustrynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samyukthav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sb401ks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singlsleipzig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonntagsanzeiger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streamego.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strowoche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suppermarkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'szsnxyz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultraleichtflugschein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weelop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windowcurtains.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--frderplanung-4ib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kostenloser-bersetzer-kic.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--piratensbel-s8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--trekking-ausrstung-y6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zmarathinews.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fdd2365a40000040300483046022100c36958d70c988a1c2fb7a5b70eadc4234d91b27a2854ae8886642a5a1961d168022100c98d7cbb618b4298d573896ee997853872e616d0147637f79b9e35c82509f2b00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fdd2365ab0000040300473045022100984a7c441b0433c3da713c8bbb76f9a85198479cc26f91aaa2d6483040218e7a02200092f8631809eb9b9d649ff40b4b41949887ba54df92b20b2ede3f618bed01d6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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