zeleno.sk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a2:85:2b:0c:4b:75:29:48:13:b3:dd:60:9c:c5:93:7e:2f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zeleno.sk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a2:85:2b:0c:4b:75:29:48:13:b3:dd:60:9c:c5:93:7e:2f
Serial Number (int): 316639612078044368914494025567167677955631
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e1:7d:69:f1:d3:51:45:4f:66:ca:e3:41:cd:92:36:95:37:79:af:8c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2b:33:33:f6:fb:7b:49:07:69:65:02:86:c1:9d:27:4d:10:e6:98:92
Fingerprint (sha256): 46:c3:ba:45:2b:9a:17:f0:41:b2:f9:29:d7:f3:c1:70:24:31:90:3a:73:88:86:71:fb:45:2e:5d:f5:3d:69:f7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate zeleno.sk

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zeleno.sk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2dm.site
*.affluent.com.au
*.choose.es
*.csgolounge.co
*.dilandeau.fr
*.edelweisses.it
*.elahairandbeauty.org
*.ezo.be
*.firstsport.eu
*.fres.be
*.gni.com.au
*.goigle.cz
*.heerehuys.nl
*.helal.nl
*.hemelaar.nl
*.howtoevenskintone.org
*.indavide.hu
*.ipw.nl
*.kidsdresses.com.au
*.leisurewear.com.au
*.liebessache.de
*.luxurycamping.com.au
*.marktplates.nl
*.mijnpensioeoverzicht.nl
*.muenzenalbum.de
*.ntelegraaf.nl
*.pfapa-syndrom.de
*.portdouglasholidays.com.au
*.possinilighting.net
*.postofffice.co.uk
*.preipiraten.de
*.prescencehealth.org
*.pricelesscomputing.co.uk
*.prick.ca
*.prisy.ca
*.sammenwahl.de
*.screws.com.au
*.suad.net
*.umutcan.com
*.webbing.com.au
*.weddingspecialists.com.au
*.wke.at
*.xn--bandwrmer-u9a.de
*.xn--floristikzubehr-mtb.de
*.xn--hochzeit-glckwnsche-gbcd.de
*.xn--insektenschutztren-06b.de
*.xn--nnberger-65a.de
*.xn--riihimki-5za.de
*.xn--salatlffel-jcb.de
*.zeleno.sk
2dm.site
affluent.com.au
choose.es
csgolounge.co
dilandeau.fr
edelweisses.it
elahairandbeauty.org
ezo.be
firstsport.eu
fres.be
gni.com.au
goigle.cz
heerehuys.nl
helal.nl
hemelaar.nl
howtoevenskintone.org
indavide.hu
ipw.nl
kidsdresses.com.au
leisurewear.com.au
liebessache.de
luxurycamping.com.au
marktplates.nl
mijnpensioeoverzicht.nl
muenzenalbum.de
ntelegraaf.nl
pfapa-syndrom.de
portdouglasholidays.com.au
possinilighting.net
postofffice.co.uk
preipiraten.de
prescencehealth.org
pricelesscomputing.co.uk
prick.ca
prisy.ca
sammenwahl.de
screws.com.au
suad.net
umutcan.com
webbing.com.au
weddingspecialists.com.au
wke.at
xn--bandwrmer-u9a.de
xn--floristikzubehr-mtb.de
xn--hochzeit-glckwnsche-gbcd.de
xn--insektenschutztren-06b.de
xn--nnberger-65a.de
xn--riihimki-5za.de
xn--salatlffel-jcb.de
zeleno.sk

Other certificates including the domain name zeleno.sk

(limited to 100 certificates)

Certificate

The complete raw certificate details for zeleno.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316639612078044368914494025567167677955631
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-17 21:21:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 21:21:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zeleno.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 848204496620198183602440546338707534857009533068142703907054525530002916119091189576295767842051718650444542518955350257630775537745500331664360966081148231726980730832616572518521862135619251124979497345917130430244524095070360186720442290564510887703743317896811898078795878071312707429920985305733352505680317985007143319971838675024953967773317233799130939069824417414162179007396478159219302731719267641132895336582080430252643113866456732766555304361405939059187603293005051169819418466797282269750052734430575997095126575438699730208858440040611176334244134751121253530762474352848269273839644383611771375504117227488522091370232667641782381599123644952780656449391853790171392753512340849904607447166788174750134397442611141986236808652909025271510267672517827093813036901633507935622269858430025699626256941232981605157452412174173769526000058722842292650264908597852103828308499790322278769858964892998274328324284066472207511493628353857175047624714202014765350187092946978257840049733029024793197710090009719860654718543844462347575169050622282246977804103600246492651015768819635014830521976889761113095632240084817835889561342410288635370886279733605793908372437755031206171021263794443737532513354521438582526834005247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e17d69f1d351454f66cae341cd9236953779af8c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1814 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2dm.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.affluent.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.choose.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.csgolounge.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dilandeau.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edelweisses.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elahairandbeauty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ezo.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstsport.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fres.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gni.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goigle.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heerehuys.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helal.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hemelaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.howtoevenskintone.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indavide.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipw.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kidsdresses.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leisurewear.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liebessache.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luxurycamping.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marktplates.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mijnpensioeoverzicht.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muenzenalbum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ntelegraaf.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pfapa-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portdouglasholidays.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.possinilighting.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.postofffice.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preipiraten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prescencehealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pricelesscomputing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prick.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prisy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sammenwahl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.screws.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.umutcan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webbing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weddingspecialists.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wke.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--bandwrmer-u9a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--floristikzubehr-mtb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hochzeit-glckwnsche-gbcd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--insektenschutztren-06b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--nnberger-65a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--riihimki-5za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--salatlffel-jcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zeleno.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2dm.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affluent.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choose.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csgolounge.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dilandeau.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edelweisses.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elahairandbeauty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezo.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstsport.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fres.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gni.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goigle.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heerehuys.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helal.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemelaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtoevenskintone.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indavide.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipw.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidsdresses.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leisurewear.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liebessache.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxurycamping.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marktplates.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijnpensioeoverzicht.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muenzenalbum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntelegraaf.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfapa-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portdouglasholidays.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'possinilighting.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postofffice.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preipiraten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prescencehealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pricelesscomputing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prick.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prisy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sammenwahl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'screws.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umutcan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webbing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weddingspecialists.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wke.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bandwrmer-u9a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--floristikzubehr-mtb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hochzeit-glckwnsche-gbcd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--insektenschutztren-06b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--nnberger-65a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--riihimki-5za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--salatlffel-jcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeleno.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f15f3916500000403004830460221009e48e587c610234e2ca0bb884f5a2f71d521f6213be32e829ebc5e2d73d26989022100ac82ad324349859f4b690cb6624a62c2c8e826e693c5a2ec10205017558f7d17007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f15f391590000040300473045022100904d2a84cb83d39183a5e36fae5a765b235597287b1ddfcca840b618cc9c3b8002205112435ae6fe46a67c918e5763c84e7abcb24ed08639f0adc37b8512d3406480
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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