segurancasocial.pt

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b5:37:57:a4:b6:1b:e8:65:f1:a6:a7:dd:e6:9d:7d:31:5a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=segurancasocial.pt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b5:37:57:a4:b6:1b:e8:65:f1:a6:a7:dd:e6:9d:7d:31:5a
Serial Number (int): 323001528818308802353697968776954534244698
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ab:57:f5:cb:74:d3:7b:4f:f6:9c:a0:a2:af:b2:7d:64:c0:0a:25:82
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 08:b6:98:93:92:fb:b9:f9:e1:ac:f6:94:fe:36:cb:9f:9d:f7:0c:f5
Fingerprint (sha256): 35:86:d4:22:1e:8f:5c:c2:da:4f:b4:a3:f7:37:77:b9:ea:0e:b7:31:94:d3:73:23:aa:d4:8a:b1:bc:27:7b:ac

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate segurancasocial.pt

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for segurancasocial.pt

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.9xrockers.co
*.allmyfavouritethings.co.uk
*.amp-npi.co.uk
*.automobiele24.de
*.autotrading.ca
*.blogcafe.eu
*.cheapchicken.com.au
*.conserving.net
*.dairyqueentortal.net
*.elteren.de
*.environmentalists.org
*.frecell.net
*.hpp.us
*.imperialauctions.co.za
*.intrumente.de
*.involves.org
*.jerseyan.us
*.kostenloseemailadresse.de
*.landscapingpros.us
*.lebensmittelmotte.de
*.patriotpost.top
*.premiersalon.net
*.privatamateurvideo.de
*.radioarchive.cc
*.richmondcafethaicuisine.co.uk
*.segurancasocial.pt
*.stromverbauch.de
*.taobao.bi
*.technikpack.net
*.tesrt.de
*.thrombosis.co.za
*.tvnanet.org
*.woj.com.au
*.xn--hotmai-1xa.de
*.xn--hotmail-f1a.de
*.xn--hotmail-g1a.de
*.xn--htten-kva.de
*.xn--kaaydo-xxa.de
*.xn--kndigungsvorlage-jzb.de
*.xn--kommunionswnsche-tzb.de
*.xn--labsaugpumpe-3ib.de
*.xn--masr-7qa.de
*.xn--mhren-jua.de
*.xn--ratenvertrge-pcb.de
*.xn--rckwrtskipper-efb07a.de
*.xn--schreibbungen-2ob.de
*.xn--sehenswrdigkeiten-online-1sc.de
*.xn--sport1-4ya.de
*.xn--sporta-1xa.de
*.xn--whrungskursrechner-ltb.de
9xrockers.co
allmyfavouritethings.co.uk
amp-npi.co.uk
automobiele24.de
autotrading.ca
blogcafe.eu
cheapchicken.com.au
conserving.net
dairyqueentortal.net
elteren.de
environmentalists.org
frecell.net
hpp.us
imperialauctions.co.za
intrumente.de
involves.org
jerseyan.us
kostenloseemailadresse.de
landscapingpros.us
lebensmittelmotte.de
patriotpost.top
premiersalon.net
privatamateurvideo.de
radioarchive.cc
richmondcafethaicuisine.co.uk
segurancasocial.pt
stromverbauch.de
taobao.bi
technikpack.net
tesrt.de
thrombosis.co.za
tvnanet.org
woj.com.au
xn--hotmai-1xa.de
xn--hotmail-f1a.de
xn--hotmail-g1a.de
xn--htten-kva.de
xn--kaaydo-xxa.de
xn--kndigungsvorlage-jzb.de
xn--kommunionswnsche-tzb.de
xn--labsaugpumpe-3ib.de
xn--masr-7qa.de
xn--mhren-jua.de
xn--ratenvertrge-pcb.de
xn--rckwrtskipper-efb07a.de
xn--schreibbungen-2ob.de
xn--sehenswrdigkeiten-online-1sc.de
xn--sport1-4ya.de
xn--sporta-1xa.de
xn--whrungskursrechner-ltb.de

Other certificates including the domain name segurancasocial.pt

(limited to 100 certificates)

Certificate

The complete raw certificate details for segurancasocial.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323001528818308802353697968776954534244698
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 10:28:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-25 10:28:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'segurancasocial.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 674162545600913488746254650097814185346306685204526090140583564492351427920084988375006873896287596888777692116322456265221521587129312164742405744460473677042903786035625911110798630639136070822747494494199716053774507272486154768743916206257717804154473278052557853521650842754228150284374467553789446339415359836182314810069309313228002509937876743145633431129307075519591283572118466711472759684581508327010991887002077079587172287945645502012948043736105386383478604780653055974952652159614596653923403584954460317062233590173761622990177019558636872313916366401411881827776515410052965287761285635424117997559206473279201755827845867619200293489795675341375538292379877519615913179218042696415069395182802571536129977329883318347215001254013497277741091246730388554523149249878360724526018888200989545379313252760159408201327154621191268066814763910408914634780321592842306619604659425268118047004337216138445860948982099426445970520935017756377191351547027413580167902959196241810218769304654253042818979417549650373816840884007226394261652162430170406338902518565195289811738398008025509134067185176867229704479819290941630346546929638492088004000872322251000410526478442268590968296673695454489635598813883001250298051285991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab57f5cb74d37b4ff69ca0a2afb27d64c00a2582
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2062 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9xrockers.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allmyfavouritethings.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amp-npi.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.automobiele24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autotrading.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blogcafe.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheapchicken.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conserving.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dairyqueentortal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elteren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.environmentalists.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frecell.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hpp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imperialauctions.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intrumente.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.involves.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jerseyan.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kostenloseemailadresse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.landscapingpros.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lebensmittelmotte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patriotpost.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.premiersalon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.privatamateurvideo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radioarchive.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.richmondcafethaicuisine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.segurancasocial.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stromverbauch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taobao.bi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.technikpack.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tesrt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thrombosis.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvnanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woj.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hotmai-1xa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hotmail-f1a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hotmail-g1a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--htten-kva.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kaaydo-xxa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kndigungsvorlage-jzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kommunionswnsche-tzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--labsaugpumpe-3ib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--masr-7qa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mhren-jua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ratenvertrge-pcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rckwrtskipper-efb07a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schreibbungen-2ob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sehenswrdigkeiten-online-1sc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sport1-4ya.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sporta-1xa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--whrungskursrechner-ltb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9xrockers.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allmyfavouritethings.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp-npi.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automobiele24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autotrading.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogcafe.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapchicken.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conserving.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dairyqueentortal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elteren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'environmentalists.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frecell.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperialauctions.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrumente.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'involves.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerseyan.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kostenloseemailadresse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landscapingpros.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lebensmittelmotte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patriotpost.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiersalon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatamateurvideo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radioarchive.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmondcafethaicuisine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurancasocial.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stromverbauch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taobao.bi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technikpack.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesrt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thrombosis.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvnanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woj.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hotmai-1xa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hotmail-f1a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hotmail-g1a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--htten-kva.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kaaydo-xxa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kndigungsvorlage-jzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kommunionswnsche-tzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--labsaugpumpe-3ib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--masr-7qa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mhren-jua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ratenvertrge-pcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rckwrtskipper-efb07a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schreibbungen-2ob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sehenswrdigkeiten-online-1sc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sport1-4ya.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sporta-1xa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--whrungskursrechner-ltb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d6d54cbd0000004030046304402200ca68f7ca229627367c019d444051c674de9defc5df96d606d20544c41a9e0010220210255f071a14a59e7cc1a39abaa131d0d4eef8e99646b4aa517f659b48cade6007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d6d54cbc3000004030046304402202e0fb7ad4886b88750266822e4be0387d18642cacd6a80b4a4fa8dc3ed7f8ba402207931b6675ae0a318e731c4b60795f4569d6fa5a1ac722789c785329df35956b2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00542f085044519ea5464a49f6b4fb99859c3682e3b86bb70bb214a9915ef6b8a406f911eed4ece4a3ffae4081d5556b7235a1d772ab07ef1dc09f0f1765b8d29aa16c64146ba16005c39dd45d8a1981168218e1065c0b878d3f932b5eb5b99d73265b04b8373cbbe8845feba7ff8e88cc24a1675bfa12387aa80512d4a3a7aa5e9acfdfb04dd8d5b5f1f908e141b83fe5cd4e8caf66a0cb497cf6999cde04810c555ef6eabb2ddfa774ac9cd59023bc07a0db00eecffeab5c935657366db6e2e7c8f2374e7390e319efe59e3976eb06f34e1d156359cd8523170c4f4974fa0e207a42543bd57be9670ffa3595f44fb8a6c8eb43d2928c7f6e63dc9de052b40838