livingafterfaith.com

Issued by R3

About this certificate

This digital certificate with serial number 04:7d:9d:36:3a:f7:4f:d9:ec:27:7e:d6:0f:ef:a6:64:86:2e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=livingafterfaith.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7d:9d:36:3a:f7:4f:d9:ec:27:7e:d6:0f:ef:a6:64:86:2e
Serial Number (int): 391193409967500713112861233390000267363886
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e5:c1:bc:a3:08:79:22:eb:b5:3a:56:c1:61:3b:79:e5:9b:f4:db:f9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 62:5a:ac:01:66:98:b1:02:ed:5d:c1:e5:12:05:9e:54:ad:e1:fe:b2
Fingerprint (sha256): 3e:95:0b:e8:93:7f:fe:a1:79:63:7c:5c:16:db:f6:56:e4:90:82:90:f4:4e:0d:c1:0c:f5:d3:14:6e:20:1c:36

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate livingafterfaith.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for livingafterfaith.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.8396.in
*.accelerators.com.au
*.baddiehb.com
*.baseweight.org
*.bddysf.net
*.biziq.com.au
*.cuttingboard.com.au
*.edugameshub.com
*.fliegenschutzrollo.de
*.gigtickets.com.au
*.impulsantrieb.de
*.kombiwannen.de
*.kumocolab.org
*.latexhemden.de
*.livingafterfaith.com
*.manning.net.au
*.myprepaidecnter.com
*.palisadenzaun.de
*.peoplewarerh.com
*.perianalthrombose.de
*.qaru.site
*.refurbish.com.au
*.rmietwagen.de
*.spreadschirt.de
*.teecup.com
*.threading.com.au
*.tinnius.de
*.topmpdel.de
*.ukrjournal.com
*.viralheat.in
*.vokuhilakleider.de
*.vorzeltteppiche.de
*.waldaxt.de
*.weartesters.co
*.winvape.net
*.wrongs.org
*.xn--augenhhlenentzndung-v6b8k.de
*.xn--dartgeschfte-ocb.de
*.xn--entzndungshemmend-52b.de
*.xn--erdbeerlikr-0fb.de
*.xn--friesenbnke-s8a.de
*.xn--gebrauchte-autoanhnger-i5b.de
*.xn--glasinnentren-5ob.de
*.xn--glasstnder-v5a.de
*.xn--hechtkder-57a.de
*.xn--jagdbgen-r4a.de
*.xn--motorhcksler-lcb.de
*.xn--pantherschildkrte-e0b.de
*.xn--papiergrssen-cjb.de
*.zahlenbild.de
8396.in
accelerators.com.au
baddiehb.com
baseweight.org
bddysf.net
biziq.com.au
cuttingboard.com.au
edugameshub.com
fliegenschutzrollo.de
gigtickets.com.au
impulsantrieb.de
kombiwannen.de
kumocolab.org
latexhemden.de
livingafterfaith.com
manning.net.au
myprepaidecnter.com
palisadenzaun.de
peoplewarerh.com
perianalthrombose.de
qaru.site
refurbish.com.au
rmietwagen.de
spreadschirt.de
teecup.com
threading.com.au
tinnius.de
topmpdel.de
ukrjournal.com
viralheat.in
vokuhilakleider.de
vorzeltteppiche.de
waldaxt.de
weartesters.co
winvape.net
wrongs.org
xn--augenhhlenentzndung-v6b8k.de
xn--dartgeschfte-ocb.de
xn--entzndungshemmend-52b.de
xn--erdbeerlikr-0fb.de
xn--friesenbnke-s8a.de
xn--gebrauchte-autoanhnger-i5b.de
xn--glasinnentren-5ob.de
xn--glasstnder-v5a.de
xn--hechtkder-57a.de
xn--jagdbgen-r4a.de
xn--motorhcksler-lcb.de
xn--pantherschildkrte-e0b.de
xn--papiergrssen-cjb.de
zahlenbild.de

Other certificates including the domain name livingafterfaith.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for livingafterfaith.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 391193409967500713112861233390000267363886
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 18:43:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 18:43:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'livingafterfaith.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1001837386433922635556562560324632666257238544622495024886077144811300949029525483101676387934746552822083380002395021554834915430665900050776810774382656263926472720141821270159932973439087031265025064605607727428591972357845201610704751030990206468964433796474440222044444312809087779402417963600382028534561873492483761559271199094092904415982184706856630998592977816446992178841548582182279072211695117185649626063181335349203464538795391052110350373585160086211205473557196954158868160078750432580254327211859121549766195320526431622354512949124811414148398062377594845208069130406204852616357874601503473172947764333763823570324025545150642168006548634728752464100628639045444988270107845572166740338979951492548868006699800683283679385744063420799489825109770846248412100074254754739027044300134215574466406268564426950500875325637859647749870852142696949262550303589278829713604153559219307146347184718816460565625655068782442088006256506969183938069708924316288095052883777084987293427337795355621671231635390255916916277861714808665558772648718661041215671491620811049628294349535902163608064068286431214022982663995624858667378240044342285516218478044101469658180413441873220614472308262957147518982190021587979927813700427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5c1bca3087922ebb53a56c1613b79e59bf4dbf9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1996 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.8396.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accelerators.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baddiehb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baseweight.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bddysf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biziq.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuttingboard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edugameshub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fliegenschutzrollo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gigtickets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.impulsantrieb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kombiwannen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kumocolab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.latexhemden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livingafterfaith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manning.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myprepaidecnter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.palisadenzaun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peoplewarerh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perianalthrombose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qaru.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.refurbish.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rmietwagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spreadschirt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teecup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.threading.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tinnius.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topmpdel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ukrjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viralheat.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vokuhilakleider.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vorzeltteppiche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waldaxt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weartesters.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.winvape.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wrongs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--augenhhlenentzndung-v6b8k.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--dartgeschfte-ocb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--entzndungshemmend-52b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--erdbeerlikr-0fb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--friesenbnke-s8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--gebrauchte-autoanhnger-i5b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--glasinnentren-5ob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--glasstnder-v5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hechtkder-57a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--jagdbgen-r4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--motorhcksler-lcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--pantherschildkrte-e0b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--papiergrssen-cjb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zahlenbild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8396.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accelerators.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baddiehb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseweight.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bddysf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biziq.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuttingboard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edugameshub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fliegenschutzrollo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigtickets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impulsantrieb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kombiwannen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kumocolab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latexhemden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingafterfaith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manning.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myprepaidecnter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palisadenzaun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplewarerh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perianalthrombose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qaru.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refurbish.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmietwagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spreadschirt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teecup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'threading.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tinnius.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topmpdel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukrjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viralheat.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vokuhilakleider.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vorzeltteppiche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waldaxt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weartesters.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winvape.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrongs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--augenhhlenentzndung-v6b8k.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--dartgeschfte-ocb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--entzndungshemmend-52b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--erdbeerlikr-0fb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--friesenbnke-s8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gebrauchte-autoanhnger-i5b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--glasinnentren-5ob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--glasstnder-v5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hechtkder-57a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--jagdbgen-r4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--motorhcksler-lcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--pantherschildkrte-e0b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--papiergrssen-cjb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zahlenbild.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e2f0b06410000040300483046022100ea812570dafa3490dee5d3a6ba36db3fc138d26c24f8dabd9f204d698cb933c7022100da187edc836eb882e90c3dec5507e2b71831f4ca38fda122b84bf1c48d4338e600760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e2f0b0688000004030047304502201e14f7532bcbe1cd5affb0974e21018d3f9863032ecb4f8d53a44e9375373291022100808db2af826335e406e729b45c460300ce9f845096585f340e4cf85b3ce748f1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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